Skip to content
PluginCanary

Menubar

by Andrea Tarantini · 1,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 28 Aug 2026, 1 release in 24 months, no unpatched vulnerabilities.

91/ 100 Canary Score
Sub-scores for Menubar
Ownership100
Maintenance100
Security100
Support70
Reputation70

How the score works

Quick answers

Is Menubar still maintained?
Yes. Last release 28 Aug 2026, 1 release in the last 24 months. 28 Aug 2026 · wordpress.org
Who owns Menubar, and has it changed hands?
No change recorded. Main committer dontdream since Mar 2009. 3 Nov 2026 · SVN log
Was Menubar removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Menubar safe?
2 known vulnerabilities, all fixed (latest in 5.9). Not on the exploited list. 4 Jul 2023 · Wordfence Intelligence
Is the latest Menubar update safe to install?
No ownership change before 5.9.4. No one-star spike after it. 20 Apr 2025 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
dontdream28 Mar 2009 to 28 Aug 2026, 103 commits

1 committer recorded. No ownership change since 2009.

Maintenance

Last release
2 months ago
Releases, 24 months
1
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Menubar
Q1 20241
Q2 20242
Q3 20240
Q4 20240
Q1 20250
Q2 20251
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 28 Aug 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.7.

Rating distribution
5 star13
4 star1
3 star0
2 star0
1 star1

Security record

2 vulnerabilities on record, all patched (latest fixed in 5.9).

Show 2 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
4 Jul 2023Menubar <= 5.8.2 - Cross-Site Request Forgery in wpm-admin.php5.4<= 5.8.25.99
9 Apr 2022Menubar <= 5.7.2 - Reflected Cross-Site Scripting6.4<= 5.7.25.8Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Menubar
4 May 202628
11 May 202629
18 May 202623
25 May 202670
1 Jun 202642
8 Jun 202654
15 Jun 202619
22 Jun 202625
29 Jun 202628
6 Jul 202626
13 Jul 202635
20 Jul 202631
27 Jul 202649
3 Aug 202651
10 Aug 202655
17 Aug 202655
24 Aug 202696
31 Aug 202662
7 Sep 202649
14 Sep 202661
21 Sep 202657
28 Sep 202665
5 Oct 202666
12 Oct 202666
19 Oct 202696
26 Oct 202698
2 Nov 202619

Weekly downloads over the last 4 weeks are 39% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

User MenusScore 93 · 80,000+Responsive MenuScore 93 · 70,000+Nav Menu RolesScore 93 · 70,000+WPB Accordion MenuScore 93 · 10,000+Menu Icons by ThemeisleScore 92 · 100,000+

Facts

Version5.9.4
AuthorAndrea Tarantini
Added28 Mar 2009
Last updated28 Aug 2026
Active installs1,000+
Requires WordPress6.1
Tested up to7.1.4
Requires PHPnot stated
CategorySite Structure & Navigation > Menu Management & Mega Menus
Tagsmenu, menubar, superfish, navigation, suckerfish

Other plugins by this author: BP Profile Search, BP Distance Search

Questions

Is Menubar still maintained?

Yes. Last release 28 Aug 2026, 1 release in the last 24 months.

Who owns Menubar, and has it changed hands?

No change recorded. Main committer dontdream since Mar 2009.

Was Menubar removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Menubar safe?

2 known vulnerabilities, all fixed (latest in 5.9). Not on the exploited list.

Is the latest Menubar update safe to install?

No ownership change before 5.9.4. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue