Skip to content
PluginCanary

MainWP Child

MainWP Child - Securely Connects to the MainWP Dashboard to Manage Multiple Sites
by mainwp · 700,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 3 Nov 2026, 51 releases in 24 months, no unpatched vulnerabilities.

87/ 100 Canary Score
Sub-scores for MainWP Child
Ownership100
Maintenance100
Security65
SupportNo data
Reputation85

How the score works

Quick answers

Is MainWP Child still maintained?
Yes. Last release 3 Nov 2026, 51 releases in the last 24 months. 3 Nov 2026 · wordpress.org
Who owns MainWP Child, and has it changed hands?
No change recorded. Main committer thanghoang since Jul 2024. 4 Nov 2026 · SVN log
Was MainWP Child removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is MainWP Child safe?
9 known vulnerabilities, all fixed (latest in 6.2.2). Not on the exploited list. 6 Oct 2026 · Wordfence Intelligence
Is the latest MainWP Child update safe to install?
No ownership change before 6.4.1. No one-star spike after it. 3 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
mainwp27 Aug 2013 to 18 Jun 2024, 516 commits
thanghoang9 Jul 2024 to 3 Nov 2026, 133 commits

2 committers recorded. No ownership change since 2013.

Maintenance

Last release
yesterday
Releases, 24 months
51
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for MainWP Child
Q1 20242
Q2 20243
Q3 20242
Q4 20245
Q1 20256
Q2 20257
Q3 20254
Q4 20252
Q1 20267
Q2 20268
Q3 20268
Q4 20264

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (1 review). Lifetime: 5.0.

Average rating per quarter for MainWP Child
Q2 20245.0
Q3 20245.0
Q2 20255.0
Q4 20255.0
Q4 20265.0

Average rating stayed at 5.0 between Q2 2024 and Q4 2026.

Rating distribution
5 star70
4 star0
3 star0
2 star1
1 star0
Latest low reviews

Security record

3 vulnerabilities in 24 months (9 on record), all patched (latest fixed in 6.2.2).

Show 9 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
6 Oct 2026MainWP Child - Securely Connects to the MainWP Dashboard to Manage Multiple Sites <= 6.2.1 - Unauthenticated PHP Object Injection8.1<= 6.2.16.2.2Patched before disclosure
23 Jun 2026MainWP Child - Securely Connects to the MainWP Dashboard to Manage Multiple Sites <= 6.1.1 - Missing Authorization5.3<= 6.1.16.1.2Patched before disclosure
12 Dec 2024MainWP Child <= 5.3.3 - Missing Authorization to Unauthenticated Privilege Escalation8.1<= 5.3.35.3.447
23 Jun 2023MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files5.9<= 4.4.1.14.4.1.2Patched before disclosure
25 Oct 2021MainWP Child <= 4.1.7.1 - SQL Injection via orderby, order Parameters7.2< 4.1.84.1.8Patched before disclosure
18 Feb 2018MainWP Child < 3.4.5 - Authentication Bypass8.3< 3.4.53.4.559
7 Sep 2015MainWP Child <= 2.0.27 - Multiple Cross-Site Scripting6.1<= 2.0.272.0.28280
7 Aug 2015MainWP Dashboard and MainWP Child <= 2.0.22 - Unspecified Vulnerability7.3<= 2.0.222.0.2347
9 Mar 2015MainWP Child - Securely connects sites to the MainWP WordPress Manager Dashboard < 2.0.9.2 - Authentication Bypass9.8< 2.0.9.22.0.9.2198

Changelog mentions of security fixes: 6.1.2 (security); 6.1.8 (security); 6.2 (security, vulnerability); 6.2.1 (security); 6.2.2 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

700,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for MainWP Child
4 May 202661,963
11 May 202680,417
18 May 202661,117
25 May 2026419,719
1 Jun 2026442,661
8 Jun 202690,193
15 Jun 2026401,752
22 Jun 2026104,066
29 Jun 202660,495
6 Jul 2026418,125
13 Jul 202698,121
20 Jul 2026422,915
27 Jul 2026448,799
3 Aug 2026466,379
10 Aug 202691,902
17 Aug 2026452,547
24 Aug 2026452,757
31 Aug 202689,056
7 Sep 2026412,965
14 Sep 2026115,435
21 Sep 202661,271
28 Sep 2026407,174
5 Oct 2026508,420
12 Oct 2026455,302
19 Oct 2026105,886
26 Oct 2026419,444
2 Nov 202640,772

Weekly downloads over the last 4 weeks are 4% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

WP DowngradeScore 100 · 100,000+Cloudways Site ManagerScore 100 · 50,000+WP Updates NotifierScore 100 · 20,000+Disable All WordPress UpdatesScore 100 · 20,000+Disable WordPress Update NotificationsScore 100 · 10,000+

Facts

Version6.4.1
Authormainwp
Added27 Aug 2013
Last updated3 Nov 2026
Active installs700,000+
Requires WordPress6.2
Tested up to7.1.4
Requires PHP7.4
CategorySite Administration & Utilities > Site Migration & Cloning
Tagsupdate, backups, security, monitoring, site management

Other plugins by this author: MainWP Child Reports, MainWP Dashboard: Self-hosted WordPress Management for Agencies, MainWP Key Maker

Questions

Is MainWP Child still maintained?

Yes. Last release 3 Nov 2026, 51 releases in the last 24 months.

Who owns MainWP Child, and has it changed hands?

No change recorded. Main committer thanghoang since Jul 2024.

Was MainWP Child removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is MainWP Child safe?

9 known vulnerabilities, all fixed (latest in 6.2.2). Not on the exploited list.

Is the latest MainWP Child update safe to install?

No ownership change before 6.4.1. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue