Skip to content
PluginCanary

Create

by mischiefmarmot · 6,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 30 Oct 2026, 42 releases in 24 months, no unpatched vulnerabilities.

88/ 100 Canary Score
Sub-scores for Create
Ownership100
Maintenance100
Security70
Support100
Reputation70

How the score works

Quick answers

Is Create still maintained?
Yes. Last release 30 Oct 2026, 42 releases in the last 24 months. 30 Oct 2026 · wordpress.org
Who owns Create, and has it changed hands?
No change recorded. Main committer mediavine since Sep 2018. 3 Nov 2026 · SVN log
Was Create removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Create safe?
10 known vulnerabilities, all fixed (latest in 2.5.4). Not on the exploited list. 18 Sep 2026 · Wordfence Intelligence
Is the latest Create update safe to install?
No ownership change before 3.1.0. No one-star spike after it. 30 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
mediavine26 Sep 2018 to 5 Aug 2025, 130 commits
mischiefmarmot30 Oct 2025 to 30 Oct 2026, 81 commits

2 committers recorded. No ownership change since 2018.

Maintenance

Last release
5 days ago
Releases, 24 months
42
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Create
Q1 20241
Q2 20243
Q3 20242
Q4 20241
Q1 20250
Q2 20250
Q3 20254
Q4 20256
Q1 20267
Q2 202612
Q3 20269
Q4 20264

Last release 30 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.3.

Rating distribution
5 star20
4 star0
3 star1
2 star1
1 star3

Security record

6 vulnerabilities in 24 months (10 on record), all patched (latest fixed in 2.5.4).

Show 10 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
18 Sep 2026Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order' Parameter6.5<= 2.5.32.5.4Patched before disclosure
18 Sep 2026Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order_by' Parameter6.5<= 2.5.32.5.4Patched before disclosure
3 Aug 2026Create by Mediavine <= 2.5.3 - Unauthenticated Information Exposure5.3<= 2.5.32.5.4Patched before disclosure
3 Aug 2026Create by Mediavine <= 2.5.3 - Unauthenticated Information Exposure5.3<= 2.5.32.5.4Patched before disclosure
22 Jul 2026Create <= 2.6.0 - Unauthenticated Sensitive Information Exposure5.3<= 2.6.02.6.115
22 Jul 2026Create <= 2.5.3 - Authenticated (Contributor+) SQL Injection6.5<= 2.5.32.5.48
12 Aug 2024Create by Mediavine <= 1.9.8 - Unauthenticated Sensitive Information Exposure5.3<= 1.9.81.9.910
4 Jul 2024Create by Mediavine <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.9.71.9.8Patched before disclosure
26 Jun 2024Create by Mediavine <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Schema Meta Shortcode6.4<= 1.9.71.9.8Patched before disclosure
19 Mar 2024Create by Mediavine <= 1.9.4 - Unauthenticated SQL Injection via 'id'9.8<= 1.9.41.9.53

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 6 support threads resolved in the last 2 months.

Momentum

6,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Create
4 May 20262,322
11 May 20262,880
18 May 20261,239
25 May 20262,756
1 Jun 20262,600
8 Jun 20261,070
15 Jun 20262,253
22 Jun 20262,898
29 Jun 2026693
6 Jul 20262,900
13 Jul 2026682
20 Jul 2026432
27 Jul 20262,892
3 Aug 20265,279
10 Aug 20263,160
17 Aug 20263,102
24 Aug 20262,820
31 Aug 2026940
7 Sep 2026465
14 Sep 2026627
21 Sep 20262,964
28 Sep 20262,543
5 Oct 20263,384
12 Oct 2026868
19 Oct 20262,557
26 Oct 20263,332
2 Nov 2026318

Weekly downloads over the last 4 weeks are 18% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version3.1.0
Authormischiefmarmot
Added26 Sep 2018
Last updated30 Oct 2026
Active installs6,000+
Requires WordPress6.5
Tested up to7.1.4
Requires PHP7.4
CategoryContent Management > Blog & Article Publishing
Tagshow to, Recipe, schema, nutrition, recipe card

Questions

Is Create still maintained?

Yes. Last release 30 Oct 2026, 42 releases in the last 24 months.

Who owns Create, and has it changed hands?

No change recorded. Main committer mediavine since Sep 2018.

Was Create removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Create safe?

10 known vulnerabilities, all fixed (latest in 2.5.4). Not on the exploited list.

Is the latest Create update safe to install?

No ownership change before 3.1.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue