Skip to content
PluginCanary

ToneDen Shortcode

by Lasso · 2,000+ active installs · Checked 3 Nov 2026
Avoid5 Criticals1 Warning

Avoid: vulnerability published 13 Aug 2026 still has no fix after 14 days.

39/ 100 Canary Score

Capped at 39 while a vulnerability has no patch.

Sub-scores for ToneDen Shortcode
Ownership100
Maintenance0
Security15
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 13 Aug 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.27 Aug 2026Evidence
  • CriticalSEC-2Vulnerability published 13 Aug 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.27 Aug 2026Evidence
  • CriticalSEC-2Vulnerability published 13 Aug 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.27 Aug 2026Evidence
  • CriticalSEC-2Vulnerability published 13 Aug 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.27 Aug 2026Evidence
  • CriticalMNT-1No release in 54 months (last release 18 May 2022). Plan a replacement if the plugin is important to your site.18 May 2023Evidence
  • WarningMNT-2Tested up to WordPress 5.9.20, 12 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
  • InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
elsbree27 Oct 2016 to 17 May 2022, 7 commits
lassoanalytics18 May 2022 to 18 May 2022, 1 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
4 years ago
Releases, 24 months
0
Tested up to
5.9 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter for ToneDen Shortcode
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 18 May 2022. Tested up to 5.9, 12 major versions behind WordPress 7.1.

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
13 Aug 2026Do Lasso <= 358 - Unauthenticated Stored Cross-Site Scripting7.2<= 358No fixn/a
13 Aug 2026Do Lasso <= 358 - Authenticated (Subscriber+) SQL Injection6.5<= 358No fixn/a
13 Aug 2026Do Lasso <= 358 - Authenticated (Subscriber+) Path Traversal6.5<= 358No fixn/a
13 Aug 2026Do Lasso <= 358 - Unauthenticated Insecure Direct Object Reference5.3<= 358No fixn/a

Source: Wordfence Intelligence.

Reputation

Lifetime rating 0.0 from 0 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star0
4 star0
3 star0
2 star0
1 star0

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for ToneDen Shortcode
4 May 202623
11 May 202654
18 May 202669
25 May 202650
1 Jun 202643
8 Jun 202647
15 Jun 202637
22 Jun 202630
29 Jun 202630
6 Jul 202629
13 Jul 202627
20 Jul 202636
27 Jul 202640
3 Aug 202656
10 Aug 202667
17 Aug 202666
24 Aug 202658
31 Aug 202650
7 Sep 202660
14 Sep 202680
21 Sep 202671
28 Sep 202698
5 Oct 202677
12 Oct 202691
19 Oct 2026102
26 Oct 2026108
2 Nov 202618

Weekly downloads over the last 4 weeks are 42% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Post to Google My Business (Google Business Profile)Score 92 · 10,000+AyeCode ConnectScore 92 · 10,000+Automattic For Agencies ClientScore 91 · 20,000+Metorik - Reports & Email Automation for WooCommerceScore 91 · 9,000+Base (formerly BaseLinker) - 300+ marketplaces, 150+ carriers & PIM & OMS & WMS in oneScore 91 · 5,000+

Facts

Version1.0
AuthorLasso
Added27 Oct 2016
Last updated18 May 2022
Active installs2,000+
Requires WordPress3.0.1
Tested up to5.9.20
Requires PHPnot stated
CategoryMarketing & Advertising > Email Marketing & Campaigns
Tagstoneden

Questions

Is ToneDen Shortcode still maintained?

ToneDen Shortcode was last updated on 18 May 2022. Its Canary status is Avoid.

Is ToneDen Shortcode safe?

ToneDen Shortcode has 4 published vulnerabilities with no patched version. Its Canary status is Avoid.

Who owns ToneDen Shortcode?

The wordpress.org author is Lasso. Recent committers: lassoanalytics, elsbree, plugin-master. We have recorded no ownership change.

What can I use instead of ToneDen Shortcode?

Plugins in the same category with a higher Canary Score: Post to Google My Business (Google Business Profile), AyeCode Connect, Automattic For Agencies Client, Metorik - Reports & Email Automation for WooCommerce, Base (formerly BaseLinker) - 300+ marketplaces, 150+ carriers & PIM & OMS & WMS in one.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue