Skip to content
PluginCanary

oik

by bobbingwide · 2,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: vulnerability published 29 Sep 2026, fixed in 4.16.0.

85/ 100 Canary Score
Sub-scores for oik
Ownership100
Maintenance100
Security75
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 29 Sep 2026, fixed in 4.16.0. Update to version 4.16.0 or later.29 Sep 2026Evidence
  • InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
bobbingwide5 Feb 2011 to 5 Sep 2026, 293 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
2 months ago
Releases, 24 months
5
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter for oik
Q1 20241
Q2 20241
Q3 20243
Q4 20241
Q1 20250
Q2 20252
Q3 20251
Q4 20251
Q1 20260
Q2 20260
Q3 20261
Q4 20260

Last release 5 Sep 2026. Tested with WordPress 7.1 (current).

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
29 Sep 2026oik <= 4.15.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 4.15.44.16.00
26 Nov 2025oik <= 4.15.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.15.34.15.40
14 Aug 2025oik <= 4.15.2 - Reflected Cross-Site Scripting6.1<= 4.15.24.15.30
30 Jul 2025oik <= 4.15.2 - Cross-Site Request Forgery4.3<= 4.15.24.15.30
5 Jun 2025oik <= 4.15.1 - Missing Authorization4.3<= 4.15.14.15.20
16 Aug 2024oik <= 4.12.0 - Cross-Site Request Forgery4.3<= 4.12.04.12.10
8 Jul 2024oik <= 4.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via bw_button Shortcode6.4<= 4.10.34.12.00
14 Mar 2024oik <= 4.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 4.10.04.10.20

Source: Wordfence Intelligence.

Reputation

Lifetime rating 3.7 from 3 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star2
4 star0
3 star0
2 star0
1 star1

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for oik
4 May 202662
11 May 202661
18 May 202651
25 May 202674
1 Jun 202654
8 Jun 202651
15 Jun 202656
22 Jun 202636
29 Jun 202653
6 Jul 202644
13 Jul 202662
20 Jul 202659
27 Jul 202665
3 Aug 202671
10 Aug 202685
17 Aug 202691
24 Aug 202664
31 Aug 20261,015
7 Sep 2026314
14 Sep 2026287
21 Sep 2026200
28 Sep 2026211
5 Oct 2026142
12 Oct 2026132
19 Oct 2026221
26 Oct 2026194
2 Nov 202627

Weekly downloads over the last 4 weeks are 2% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version4.16.0
Authorbobbingwide
Added5 Feb 2011
Last updated5 Sep 2026
Active installs2,000+
Requires WordPress5.5
Tested up to7.1.4
Requires PHPnot stated
CategoryContent Management > Blog & Article Publishing
Tagsblocks, advanced, shortcode, shortcodes

Other plugins by this author: cookie-cat, Weight zone shipping for WooCommerce, Weight/Country Shipping for WooCommerce, oik-privacy-policy, SB Children block, SB Chart block, oik-nivo-slider, UK tides - heights and times, oik batchmove, allow-reinstalls, Field block for ACF PRO, oik-css

Questions

Is oik still maintained?

oik was last updated on 5 Sep 2026. Its Canary status is Healthy.

Is oik safe?

oik has no open unpatched vulnerabilities on record. 5 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns oik?

The wordpress.org author is bobbingwide. Recent committers: bobbingwide, plugin-master. We have recorded no ownership change.

What can I use instead of oik?

We have no healthier plugin in the same category on record yet.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue