LuckyWP Table of Contents
Watch: tested up to WordPress 6.7.11, 4 major versions behind 7.1.4.
| Ownership | 100 |
|---|---|
| Maintenance | 25 |
| Security | 80 |
| Support | 70 |
| Reputation | 70 |
Quick answers
- Is LuckyWP Table of Contents still maintained?
- No. Last release 16 Apr 2025, over 1 year ago. 16 Apr 2025 · wordpress.org
- Who owns LuckyWP Table of Contents, and has it changed hands?
- No change recorded. Main committer theluckywp since Nov 2018. 3 Nov 2026 · SVN log
- Was LuckyWP Table of Contents removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is LuckyWP Table of Contents safe?
- 5 known vulnerabilities, all fixed (latest in 2.1.11). Not on the exploited list. 2 Apr 2025 · Wordfence Intelligence
- Is the latest LuckyWP Table of Contents update safe to install?
- No ownership change before 2.1.14. No one-star spike after it. 16 Apr 2025 · Release history
Active signals
Facts we detected, with links to the source.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 13 Nov 2018 to 13 Nov 2018, 1 commits |
|---|---|
| theluckywp | 14 Nov 2018 to 16 Apr 2025, 90 commits |
2 committers recorded. No ownership change since 2018.
Maintenance
- Last release
- 19 months ago
- Releases, 24 months
- 6
- Tested up to
- 6.7 vs 7.1
- Requires PHP
- 5.6.20 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 1 |
| Q4 2024 | 4 |
| Q1 2025 | 1 |
| Q2 2025 | 4 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 16 Apr 2025. Tested up to 6.7, 4 major versions behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 4.9.
| Q4 2025 | 4.6 |
|---|---|
| Q1 2026 | 4.9 |
| Q2 2026 | 5.0 |
| Q3 2026 | 5.0 |
Average rating rose from 4.6 to 5.0 between Q4 2025 and Q3 2026.
| 5 star | 835 |
|---|---|
| 4 star | 29 |
| 3 star | 6 |
| 2 star | 4 |
| 1 star | 10 |
- Doesn’t work · 1 star · 24 Nov 2025
Security record
2 vulnerabilities in 24 months (5 on record), all patched (latest fixed in 2.1.11).
Show 5 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 2 Apr 2025 | LuckyWP Table of Contents <= 2.1.10 - Cross-Site Request Forgery to Reflected Cross-Site Scripting | 6.1 | <= 2.1.10 | 2.1.11 | Patched before disclosure |
| 21 Nov 2024 | LuckyWP Table of Contents <= 2.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting | 4.4 | <= 2.1.6 | 2.1.7 | Patched before disclosure |
| 21 May 2024 | LuckyWP Table of Contents <= 2.1.5 - Reflected Cross-Site Scripting | 6.1 | <= 2.1.5 | 2.1.6 | 136 |
| 21 May 2024 | LuckyWP Table of Contents <= 2.1.5 - Authenticated (Administrator+) Cross-Site Scripting | 4.4 | <= 2.1.4 | 2.1.5 | 74 |
| 21 May 2024 | LuckyWP Table of Contents <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting | 5.5 | <= 2.1.4 | 2.1.5 | 74 |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
0% of 1 support threads resolved in the last 2 months.
Momentum
90,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 687 |
|---|---|
| 11 May 2026 | 1,420 |
| 18 May 2026 | 1,299 |
| 25 May 2026 | 1,011 |
| 1 Jun 2026 | 1,088 |
| 8 Jun 2026 | 943 |
| 15 Jun 2026 | 915 |
| 22 Jun 2026 | 858 |
| 29 Jun 2026 | 814 |
| 6 Jul 2026 | 886 |
| 13 Jul 2026 | 820 |
| 20 Jul 2026 | 947 |
| 27 Jul 2026 | 906 |
| 3 Aug 2026 | 915 |
| 10 Aug 2026 | 925 |
| 17 Aug 2026 | 971 |
| 24 Aug 2026 | 899 |
| 31 Aug 2026 | 829 |
| 7 Sep 2026 | 865 |
| 14 Sep 2026 | 923 |
| 21 Sep 2026 | 863 |
| 28 Sep 2026 | 893 |
| 5 Oct 2026 | 1,103 |
| 12 Oct 2026 | 956 |
| 19 Oct 2026 | 1,198 |
| 26 Oct 2026 | 998 |
| 2 Nov 2026 | 197 |
Weekly downloads over the last 4 weeks are 10% below the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 2.1.14 |
|---|---|
| Author | LuckyWP |
| Added | 14 Nov 2018 |
| Last updated | 16 Apr 2025 |
| Active installs | 90,000+ |
| Requires WordPress | 4.7 |
| Tested up to | 6.7.11 |
| Requires PHP | 5.6.20 |
| Category | Content Management > Blog & Article Publishing |
| Tags | seo, toc, links, navigation, table of contents |
Other plugins by this author: LuckyWP ACF Menu Field, LuckyWP Scripts Control
Questions
Is LuckyWP Table of Contents still maintained?
No. Last release 16 Apr 2025, over 1 year ago.
Who owns LuckyWP Table of Contents, and has it changed hands?
No change recorded. Main committer theluckywp since Nov 2018.
Was LuckyWP Table of Contents removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is LuckyWP Table of Contents safe?
5 known vulnerabilities, all fixed (latest in 2.1.11). Not on the exploited list.
Is the latest LuckyWP Table of Contents update safe to install?
No ownership change before 2.1.14. No one-star spike after it.