Skip to content
PluginCanary

Polylang

by Chouby · 900,000+ active installs · Checked 4 Nov 2026
Watch

Watch: held back by a low Support score (24 of 100).

79/ 100 Canary Score

Based on all 5 areas

Sub-scores for Polylang
Ownership100
Maintenance100
Security70
Support24
Reputation85

How the score works

Quick answers

Is Polylang still maintained?
Yes. Last release 21 Oct 2026, 26 releases in the last 24 months. 21 Oct 2026 · wordpress.org
Who owns Polylang, and has it changed hands?
No change recorded. Main committer Chouby since Sep 2011. 4 Nov 2026 · SVN log
Was Polylang removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Polylang safe?
7 known vulnerabilities, all fixed (latest in 3.8.10). Not on the exploited list. 12 Oct 2026 · Wordfence Intelligence
Is the latest Polylang update safe to install?
No ownership change before 3.9.1. No one-star spike after it. 21 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
Chouby22 Sep 2011 to 21 Oct 2026, 717 commits

1 committer recorded. No ownership change since 2011.

Maintenance

Last release
14 days ago
Releases, 24 months
26
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Polylang
Q1 20242
Q2 20243
Q3 20241
Q4 20241
Q1 20252
Q2 20254
Q3 20250
Q4 20252
Q1 20265
Q2 20264
Q3 20265
Q4 20263

Last release 21 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 4.9 (29 reviews). Lifetime: 4.7.

Average rating rose from 4.8 to 5.0 between Q3 2026 and Q4 2026.

Rating distribution
5 star2678
4 star106
3 star43
2 star37
1 star140
Latest low reviews

Security record

5 vulnerabilities in 24 months (7 on record), all patched (latest fixed in 3.8.10).

Show 7 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
12 Oct 2026Polylang <= 3.8.9 - Authenticated (Editor+) PHP Object Injection6.6<= 3.8.93.8.10Patched before disclosure
5 Oct 2026Polylang <= 3.8.7 - Authenticated (Contributor+) Information Exposure4.3<= 3.8.73.8.8Patched before disclosure
30 Sep 2026Polylang <= 3.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.8.93.8.10Patched before disclosure
22 Jul 2026Polylang <= 3.8.5 - Authenticated (Contributor+) Sensitive Information Exposure4.3<= 3.8.53.8.6Patched before disclosure
28 Oct 2025Polylang <= 3.7.3 - Authenticated (Contributor+) PHP Object Injection7.5<= 3.7.33.7.41
16 Jan 2019Polylang <= 2.5 - Cross-Site Request Forgery8.8< 2.5.12.5.1Patched before disclosure
1 Aug 2014Polylang <= 1.5.1 - Cross-Site Scripting7.1< 1.5.21.5.2Patched before disclosure

Changelog mentions of security fixes: 3.8.4 (security, XSS); 3.8.6 (security); 3.8.8 (security); 3.8.10 (security, XSS); 3.8.11 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

24% of 29 support threads resolved in the last 2 months.

Momentum

900,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Polylang
4 May 202613,306
11 May 202638,327
18 May 2026268,353
25 May 202648,226
1 Jun 202638,585
8 Jun 202632,809
15 Jun 2026234,581
22 Jun 202652,588
29 Jun 202641,613
6 Jul 202651,944
13 Jul 202631,919
20 Jul 2026263,712
27 Jul 202662,332
3 Aug 202663,747
10 Aug 202633,700
17 Aug 2026279,230
24 Aug 202653,778
31 Aug 202645,770
7 Sep 2026453,551
14 Sep 202673,037
21 Sep 202657,556
28 Sep 2026281,635
5 Oct 202683,979
12 Oct 2026273,663
19 Oct 2026488,853
26 Oct 2026102,207
2 Nov 202612,579

Weekly downloads over the last 4 weeks are 70% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Cyr to Lat EnhancedScore 100 · 80,000+Performant TranslationsScore 100 · 30,000+AI Translation For TranslatePressScore 100 · 10,000+Toolkit for PolylangScore 100 · 10,000+ووکامرس فارسیScore 97 · 100,000+

Facts

Version3.9.1
AuthorChouby
Added22 Sep 2011
Last updated21 Oct 2026
Active installs900,000+
Requires WordPress6.8
Tested up to7.1.4
Requires PHP7.4
CategoryMultilingual & Accessibility > Translation & Multilingual Management
Tagslanguage, translate, translation, localization, multilingual

Other plugins by this author: WPML to Polylang

Questions

Is Polylang still maintained?

Yes. Last release 21 Oct 2026, 26 releases in the last 24 months.

Who owns Polylang, and has it changed hands?

No change recorded. Main committer Chouby since Sep 2011.

Was Polylang removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Polylang safe?

7 known vulnerabilities, all fixed (latest in 3.8.10). Not on the exploited list.

Is the latest Polylang update safe to install?

No ownership change before 3.9.1. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue