Skip to content
PluginCanary

Machete

by Nilo Velez · 6,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 5 Aug 2026, 4 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for Machete
Ownership100
Maintenance85
Security95
Support70
Reputation70

How the score works

Quick answers

Is Machete still maintained?
Yes. Last release 5 Aug 2026, 4 releases in the last 24 months. 5 Aug 2026 · wordpress.org
Who owns Machete, and has it changed hands?
No change recorded. Main committer nilovelez since Nov 2016. 3 Nov 2026 · SVN log
Was Machete removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Machete safe?
1 known vulnerability, fixed (latest in 5.3). Not on the exploited list. 23 Jul 2026 · Wordfence Intelligence
Is the latest Machete update safe to install?
No ownership change before 5.3. No one-star spike after it. 10 Jul 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
nilovelez7 Nov 2016 to 5 Aug 2026, 78 commits

1 committer recorded. No ownership change since 2016.

Maintenance

Last release
3 months ago
Releases, 24 months
4
Tested up to
7.0 vs 7.1
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Machete
Q1 20240
Q2 20241
Q3 20241
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20261
Q2 20261
Q3 20262
Q4 20260

Last release 5 Aug 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 5.0.

Rating distribution
5 star52
4 star0
3 star0
2 star0
1 star0

Security record

1 vulnerability in 24 months, patched (latest fixed in 5.3).

Show 1 patched vulnerability
PublishedIssueCVSSAffectedFixed inDays to patch
23 Jul 2026Machete <= 5.2 - Authenticated (Author+) Stored Cross-Site Scripting6.4<= 5.25.3Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

6,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Machete
4 May 202690
11 May 2026122
18 May 20261,081
25 May 20261,557
1 Jun 2026346
8 Jun 2026276
15 Jun 2026208
22 Jun 2026194
29 Jun 2026163
6 Jul 2026360
13 Jul 2026128
20 Jul 2026146
27 Jul 2026174
3 Aug 20262,506
10 Aug 2026435
17 Aug 2026362
24 Aug 2026302
31 Aug 2026276
7 Sep 2026192
14 Sep 2026279
21 Sep 2026234
28 Sep 2026269
5 Oct 2026271
12 Oct 2026199
19 Oct 2026270
26 Oct 2026248
2 Nov 202637

Weekly downloads over the last 4 weeks are 53% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version5.3
AuthorNilo Velez
Added7 Nov 2016
Last updated5 Aug 2026
Active installs6,000+
Requires WordPress5.9
Tested up to7.0.8
Requires PHP7.4
CategorySite Administration & Utilities > Maintenance Mode
Tagsclone, cookies, analytics, maintenance, optimization

Other plugins by this author: Classic Honeypot for CF7, System Fonts, Quevedo, APS-C Crop, Machete Social Share Block

Questions

Is Machete still maintained?

Yes. Last release 5 Aug 2026, 4 releases in the last 24 months.

Who owns Machete, and has it changed hands?

No change recorded. Main committer nilovelez since Nov 2016.

Was Machete removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Machete safe?

1 known vulnerability, fixed (latest in 5.3). Not on the exploited list.

Is the latest Machete update safe to install?

No ownership change before 5.3. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue