Merge + Minify + Refresh
Healthy: maintained, last release 26 Jul 2026, 7 releases in 24 months, no unpatched vulnerabilities.
Tested up to WordPress 6.9.0, 2 major versions behind 7.1.4.
| Ownership | 100 |
|---|---|
| Maintenance | 75 |
| Security | 95 |
| Support | 70 |
| Reputation | 70 |
Quick answers
- Is Merge + Minify + Refresh still maintained?
- Yes. Last release 26 Jul 2026, 7 releases in the last 24 months. 26 Jul 2026 · wordpress.org
- Who owns Merge + Minify + Refresh, and has it changed hands?
- No change recorded. Main committer launchinteractive since Apr 2015. 3 Nov 2026 · SVN log
- Was Merge + Minify + Refresh removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is Merge + Minify + Refresh safe?
- 2 known vulnerabilities, all fixed (latest in 2.15). Not on the exploited list. 10 Jan 2026 · Wordfence Intelligence
- Is the latest Merge + Minify + Refresh update safe to install?
- No ownership change before 2.16. No one-star spike after it. 26 Jul 2026 · Release history
Active signals
Facts we detected, with links to the source.
- WarningMNT-2Tested up to WordPress 6.9.0, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| launchinteractive | 15 Apr 2015 to 26 Jul 2026, 192 commits |
|---|
1 committer recorded. No ownership change since 2015.
Maintenance
- Last release
- 3 months ago
- Releases, 24 months
- 7
- Tested up to
- 6.9 vs 7.1
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 5 |
| Q1 2026 | 1 |
| Q2 2026 | 0 |
| Q3 2026 | 1 |
| Q4 2026 | 0 |
Last release 26 Jul 2026. Tested up to 6.9, 2 major versions behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 4.2.
| 5 star | 50 |
|---|---|
| 4 star | 4 |
| 3 star | 3 |
| 2 star | 1 |
| 1 star | 10 |
Security record
1 vulnerability in 24 months (2 on record), patched (latest fixed in 2.15).
Show 2 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 10 Jan 2026 | Merge + Minify + Refresh <= 2.14 - Cross-Site Request Forgery | 4.3 | <= 2.14 | 2.15 | Patched before disclosure |
| 5 Feb 2020 | Merge + Minify + Refresh <= 1.10.7 - Cross-Site Request Forgery leading to Arbitrary File Deletion and Site Reset | 8.3 | < 1.10.8 | 1.10.8 | 13 |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
0% of 1 support threads resolved in the last 2 months.
Momentum
3,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 77 |
|---|---|
| 11 May 2026 | 108 |
| 18 May 2026 | 123 |
| 25 May 2026 | 162 |
| 1 Jun 2026 | 110 |
| 8 Jun 2026 | 140 |
| 15 Jun 2026 | 132 |
| 22 Jun 2026 | 111 |
| 29 Jun 2026 | 126 |
| 6 Jul 2026 | 135 |
| 13 Jul 2026 | 113 |
| 20 Jul 2026 | 734 |
| 27 Jul 2026 | 1,188 |
| 3 Aug 2026 | 537 |
| 10 Aug 2026 | 297 |
| 17 Aug 2026 | 264 |
| 24 Aug 2026 | 276 |
| 31 Aug 2026 | 261 |
| 7 Sep 2026 | 256 |
| 14 Sep 2026 | 281 |
| 21 Sep 2026 | 284 |
| 28 Sep 2026 | 240 |
| 5 Oct 2026 | 254 |
| 12 Oct 2026 | 228 |
| 19 Oct 2026 | 385 |
| 26 Oct 2026 | 324 |
| 2 Nov 2026 | 52 |
Weekly downloads over the last 4 weeks are 7% below the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 2.16 |
|---|---|
| Author | launchinteractive |
| Added | 15 Apr 2015 |
| Last updated | 26 Jul 2026 |
| Active installs | 3,000+ |
| Requires WordPress | 6.4.0 |
| Tested up to | 6.9.0 |
| Requires PHP | 7.4 |
| Category | Performance & Optimization > Caching Solutions |
| Tags | merge, minify, closure, refresh, concatenate |
Other plugins by this author: Publish View, Merge + Minify + Refresh Check DIVI, Merge + Minify + Refresh Check Beaver Builder, Merge + Minify + Refresh Check Visual Composer
Questions
Is Merge + Minify + Refresh still maintained?
Yes. Last release 26 Jul 2026, 7 releases in the last 24 months.
Who owns Merge + Minify + Refresh, and has it changed hands?
No change recorded. Main committer launchinteractive since Apr 2015.
Was Merge + Minify + Refresh removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is Merge + Minify + Refresh safe?
2 known vulnerabilities, all fixed (latest in 2.15). Not on the exploited list.
Is the latest Merge + Minify + Refresh update safe to install?
No ownership change before 2.16. No one-star spike after it.