Skip to content
PluginCanary

OptionTree

Fewer than 10 active installs · Checked 3 Nov 2026
Avoid2 Criticals

Avoid: OptionTree is closed on wordpress.org and no longer gets updates.

10/ 100 Canary Score

Capped at 10 because the plugin is closed.

Sub-scores for OptionTree
Ownership100
Maintenance10
Security35
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalCLS-1Closed on wordpress.org on 3 Sep 2026, reason: security issue. Replace this plugin. It no longer receives updates from wordpress.org.3 Sep 2026Evidence
  • CriticalSEC-2Vulnerability published 18 Aug 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.1 Sep 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
not recorded
Releases, 24 months
0
Tested up to
not stated vs 7.1
Requires PHP
not stated supported 8.2+

Release history builds as we see new versions.

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
18 Aug 2026OptionTree <= 2.7.3 - Authenticated (Editor+) PHP Object Injection6.6<= 2.7.3No fixn/a
16 Aug 2019Option Tree <= 2.5.5 - Cross-Site Scripting6.1<= 2.5.52.6n/a
19 May 2019Option Tree <= 2.7.2 - Object Injection Bypass8.1<= 2.7.22.7.3n/a
19 May 2019Option Tree <= 2.7.2 - Object Injection Bypass8.1<= 2.7.22.7.3n/a
16 Apr 2019Option Tree <= 2.6.0 - PHP Object Injection8.1<= 2.6.02.7.0n/a
22 Apr 2015Option Tree <= 2.5.3 - Cross-Site Scripting6.1<= 2.5.32.5.4n/a

Source: Wordfence Intelligence.

Reputation

No ratings yet.

Momentum

Fewer than 10 active installs. History builds with each weekly snapshot.

Momentum history builds with each snapshot.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

No healthier plugin in the same category yet.

Facts

Versionnot stated
Authornot stated
Addednot stated
Last updatednot stated
Active installsFewer than 10
Requires WordPressnot stated
Tested up tonot stated
Requires PHPnot stated
CategoryDesign & Themes > Themes & Templates
Tagsnot stated

Questions

Is OptionTree still maintained?

No. OptionTree was closed on wordpress.org on 3 Sep 2026 (security issue) and gets no updates there.

Is OptionTree safe?

OptionTree has 1 published vulnerability with no patched version. Its Canary status is Avoid.

Who owns OptionTree?

The wordpress.org author is not listed. We have recorded no ownership change.

What can I use instead of OptionTree?

We have no healthier plugin in the same category on record yet.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue