Skip to content
PluginCanary

MPG

MPG - Multiple Page Generator, Bulk Landing Pages & Programmatic SEO
by Themeisle · 2,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 13 Oct 2026, 25 releases in 24 months, no unpatched vulnerabilities.

88/ 100 Canary Score
Sub-scores for MPG
Ownership100
Maintenance100
Security65
SupportNo data
ReputationNo data

How the score works

Quick answers

Is MPG still maintained?
Yes. Last release 13 Oct 2026, 25 releases in the last 24 months. 13 Oct 2026 · wordpress.org
Who owns MPG, and has it changed hands?
No change recorded. Main committer themeisle since Oct 2021. 3 Nov 2026 · SVN log
Was MPG removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is MPG safe?
18 known vulnerabilities, all fixed (latest in 4.2.3). Not on the exploited list. 5 Oct 2026 · Wordfence Intelligence
Is the latest MPG update safe to install?
No ownership change before 4.2.5. No one-star spike after it. 13 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master9 Nov 2018 to 9 Nov 2018, 1 commits
p0rthas20 Dec 2018 to 1 Sep 2021, 76 commits
themeisle4 Oct 2021 to 13 Oct 2026, 104 commits

3 committers recorded. No ownership change since 2018.

Maintenance

Last release
22 days ago
Releases, 24 months
25
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter
Releases per quarter for MPG
Q1 20244
Q2 20242
Q3 20243
Q4 20247
Q1 20253
Q2 20252
Q3 20253
Q4 20253
Q1 20261
Q2 20262
Q3 20266
Q4 20261

Last release 13 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 3.9.

Rating distribution
5 star19
4 star0
3 star0
2 star2
1 star6

Security record

7 vulnerabilities in 24 months (18 on record), all patched (latest fixed in 4.2.3).

Show 18 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
5 Oct 2026MPG <= 4.2.2 - Authenticated (Editor+) SQL Injection4.9<= 4.2.24.2.3Patched before disclosure
1 Oct 2026MPG <= 4.2.2 - Authenticated (Editor+) Arbitrary File Read4.9<= 4.2.24.2.3Patched before disclosure
30 Sep 2026MPG - Multiple Page Generator, Bulk Landing Pages & Programmatic SEO <= 4.2.3 - Unauthenticated Information Exposure5.3<= 4.2.34.2.4Patched before disclosure
11 Sep 2026MPG <= 4.2.1 - Unauthenticated SQL Injection via URL Path6.5<= 4.2.14.2.2Patched before disclosure
6 Jul 2026Multiple Page Generator Plugin - MPG <= 4.1.7 - Reflected Cross-Site Scripting6.1<= 4.1.74.1.8Patched before disclosure
25 Jan 2025Multiple Page Generator Plugin - MPG <= 4.0.5 - Authenticated (Editor+) Server-Side Request Forgery via fileUrl5.4<= 4.0.54.0.6Patched before disclosure
11 Nov 2024Multiple Page Generator Plugin - MPG <= 4.0.2 - Authenticated (Editor+) Directory Traversal to Limited File Deletion2.7<= 4.0.24.0.3Patched before disclosure
31 Oct 2024Multiple Page Generator Plugin - MPG <= 4.0.1 - Missing Authorization5.4<= 4.0.14.0.2Patched before disclosure
25 Sep 2024Multiple Page Generator Plugin - MPG <= 3.4.7 - Authenticated (Contributor+) SQL Injection6.5<= 3.4.73.4.8Patched before disclosure
5 Apr 2024Multiple Page Generator Plugin - MPG <= 3.4.0 - Cross-Site Request Forgery4.3<= 3.4.03.4.1Patched before disclosure
26 Mar 2024Multiple Page Generator Plugin - MPG <= 3.4.0 - Missing Authorization via mpg_get_log_by_project_id4.3<= 3.4.03.4.1Patched before disclosure
13 Mar 2024Multiple Page Generator Plugin - MPG <= 3.4.0 - Authenticated (Editor+) Remote Code Execution7.2<= 3.4.03.4.1Patched before disclosure
1 Feb 2024ThemeIsle SDK <= Various Versions - Missing Authorization5.3<= 3.4.03.4.127
18 Jul 2023Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get6.1<= 2.8.123.0.0Patched before disclosure
23 May 2023Multiple Page Generator Plugin - MPG <= 3.3.19 - Authenticated (Administrator+) SQL Injection in projects_list and total_projects7.2<= 3.3.193.3.20Patched before disclosure
16 May 2023Multiple Page Generator Plugin <= 3.3.17 - Authenticated (Administrator+) SQL Injection7.2<= 3.3.173.3.18Patched before disclosure
16 May 2023Multiple Page Generator Plugin <= 3.3.17 - Cross-Site Request Forgery to SQL Injection3.1<= 3.3.173.3.18Patched before disclosure
20 Feb 2023Multiple Page Generator Plugin <= 3.3.9 - Cross-Site Request Forgery6.3<= 3.3.93.3.10Patched before disclosure

Changelog mentions of security fixes: 4.1.8 (security); 4.2.2 (security); 4.2.3 (security); 4.2.4 (security); 4.2.5 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for MPG
4 May 2026320
11 May 2026357
18 May 20261,397
25 May 2026318
1 Jun 2026315
8 Jun 2026248
15 Jun 2026265
22 Jun 2026228
29 Jun 20261,193
6 Jul 2026516
13 Jul 2026291
20 Jul 2026287
27 Jul 2026514
3 Aug 2026372
10 Aug 20261,407
17 Aug 2026425
24 Aug 2026295
31 Aug 20261,282
7 Sep 20261,609
14 Sep 2026561
21 Sep 20261,457
28 Sep 20261,578
5 Oct 2026631
12 Oct 20261,701
19 Oct 2026533
26 Oct 2026587
2 Nov 202674

Weekly downloads over the last 4 weeks are 4% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version4.2.5
AuthorThemeisle
Added20 Dec 2018
Last updated13 Oct 2026
Active installs2,000+
Requires WordPress5.6
Tested up to7.1.4
Requires PHP7.2
CategoryContent Management > Blog & Article Publishing
Tagsbulk pages, CSV Import, landing pages, location pages, programmatic seo

Other plugins by this author: LightStart - Maintenance Mode, Coming Soon and Landing Page Builder, Otter Blocks - Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE, Redirection for Contact Form 7, Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More, Menu Icons by Themeisle - Add Icons to Navigation Menus, Robin Image Optimizer - Unlimited Image Optimization, WebP & AVIF, Starter Sites & Templates by Neve, Disable Admin Notices - Hide Dashboard Notifications, Woody Code Snippets - Insert PHP, CSS, JS, and Header/Footer Scripts, Titan Anti-spam & Security - Brute Force Protection, 2FA & Spam Filter, RSS Aggregator by Feedzy - Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator, Cyrlitera - Transliteration of Links and File Names

Questions

Is MPG still maintained?

Yes. Last release 13 Oct 2026, 25 releases in the last 24 months.

Who owns MPG, and has it changed hands?

No change recorded. Main committer themeisle since Oct 2021.

Was MPG removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is MPG safe?

18 known vulnerabilities, all fixed (latest in 4.2.3). Not on the exploited list.

Is the latest MPG update safe to install?

No ownership change before 4.2.5. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue