Skip to content
PluginCanary

NitroPack

NitroPack - Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization
by NitroPack · 80,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: released 41 days ago, tested with WordPress 7.1, no open vulnerabilities.

90/ 100 Canary Score

Based on 4 of 5 areas

Sub-scores for NitroPack
Ownership100
Maintenance100
Security75
SupportNo data
Reputation85

How the score works

Quick answers

Is NitroPack still maintained?
Yes. Last release 25 Sep 2026, 28 releases in the last 24 months. 25 Sep 2026 · wordpress.org
Who owns NitroPack, and has it changed hands?
No change recorded. Main committer nitropack since Aug 2019. 4 Nov 2026 · SVN log
Was NitroPack removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is NitroPack safe?
7 known vulnerabilities, all fixed (latest in 1.19.4). Not on the exploited list. 18 Feb 2026 · Wordfence Intelligence
Is the latest NitroPack update safe to install?
No ownership change before 1.20.3. No one-star spike after it. 25 Sep 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

History: 7 past vulnerabilities, all patched.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master26 Aug 2019 to 26 Aug 2019, 1 commits
nitropack29 Aug 2019 to 25 Sep 2026, 137 commits

2 committers recorded. No ownership changes recorded since 2019.

Maintenance

Last release
41 days ago
Releases, 24 months
28
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for NitroPack
Q1 20243
Q2 20245
Q3 202410
Q4 20241
Q1 20254
Q2 20251
Q3 20254
Q4 20253
Q1 20265
Q2 20265
Q3 20265
Q4 20260

Last release 25 Sep 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (1 review). Lifetime: 4.3.

Last 90 days vs lifetime average rating for NitroPack
Last 90 days5.0
Lifetime4.3
Average rating per quarter
Average rating per quarter for NitroPack
Q1 20242.0
Q2 20242.3
Q3 20243.0
Q4 20242.6
Q1 20251.0
Q4 20251.0
Q2 20261.0
Q3 20265.0

Average rating rose from 2.0 to 5.0 between Q1 2024 and Q3 2026.

Rating distribution
5 star245
4 star10
3 star5
2 star3
1 star48
Latest low reviews

Security record

4 vulnerabilities in 24 months (7 on record), all patched (latest fixed in 1.19.4).

Show 7 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
18 Feb 2026NitroPack <= 1.19.3 - Missing Authorization5.3<= 1.19.31.19.462
9 Sep 2025NitroPack <= 1.18.4 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update via nitropack_set_compression_ajax Function4.3<= 1.18.41.18.5Before disclosure
14 Jan 2025NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update8.1<= 1.17.01.17.6Before disclosure
14 Jan 2025NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Transient Update4.3<= 1.17.01.17.6Before disclosure
26 Aug 2024NitroPack <= 1.16.7 - Unauthenticated Arbitrary Shortcode Execution7.3<= 1.16.71.16.8Before disclosure
28 Dec 2023NitroPack <= 1.10.2 - Cross-Site Request Forgery4.3<= 1.10.21.10.3Before disclosure
7 Nov 2023NitroPack <= 1.9.2 - Missing Authorization via multiple AJAX functions6.3< 1.10.01.10.01

Changelog mentions of security fixes: 1.19.9 (security); 1.20.3 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

80,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for NitroPack
4 May 20261,838
11 May 20265,829
18 May 202652,047
25 May 20267,684
1 Jun 20265,645
8 Jun 20264,908
15 Jun 202640,977
22 Jun 20268,339
29 Jun 202639,914
6 Jul 202615,559
13 Jul 20265,677
20 Jul 202638,362
27 Jul 20269,966
3 Aug 202612,621
10 Aug 20264,470
17 Aug 20264,036
24 Aug 202640,724
31 Aug 20267,866
7 Sep 20265,311
14 Sep 202641,948
21 Sep 202673,511
28 Sep 202611,269
5 Oct 202612,839
12 Oct 20264,415
19 Oct 20265,155
26 Oct 20264,452
2 Nov 2026603

Weekly downloads over the last 4 weeks are 79% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score. Never sponsored.

SpinupWPScore 100 · 30,000+xSpeed CacheScore 96 · 10,000+Nginx HelperScore 95 · 200,000+

Facts

Version1.20.3
AuthorNitroPack
Added29 Aug 2019
Last updated25 Sep 2026
Active installs80,000+
Requires WordPress4.7
Tested up to7.1.4
Requires PHP7.4
CategoryPerformance & Optimization > Caching Solutions
Tagscache, Page Speed, performance, website speed, core web vitals

Questions

Is NitroPack still maintained?

Yes. Last release 25 Sep 2026, 28 releases in the last 24 months.

Who owns NitroPack, and has it changed hands?

No change recorded. Main committer nitropack since Aug 2019.

Was NitroPack removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is NitroPack safe?

7 known vulnerabilities, all fixed (latest in 1.19.4). Not on the exploited list.

Is the latest NitroPack update safe to install?

No ownership change before 1.20.3. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue