Query Wrangler
Avoid: Query Wrangler is closed on wordpress.org and no longer gets updates.
Capped at 10 because the plugin is closed.
| Ownership | 100 |
|---|---|
| Maintenance | 10 |
| Security | 70 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 19 Aug 2026, fixed in 1.5.58. Update to version 1.5.58 or later.19 Aug 2026Evidence
- WarningCLS-1Closed on wordpress.org on 18 Aug 2026, reason: author request. Replace this plugin. It no longer receives updates from wordpress.org.18 Aug 2026Evidence
- WarningSEC-1Vulnerability published 15 Aug 2026, fixed in 1.5.58. Update to version 1.5.58 or later.15 Aug 2026Evidence
- InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- unknown
- Releases, 24 months
- 0
- Tested up to
- unknown vs 7.1
- Requires PHP
- not stated supported 8.2+
Release history builds as we see new versions.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 19 Aug 2026 | Query Wrangler <= 1.5.57 - Authenticated (Subscriber+) Remote Code Execution | 8.8 | <= 1.5.57 | 1.5.58 | n/a |
| 15 Aug 2026 | Query Wrangler <= 1.5.57 - Authenticated (Subscriber+) Remote Code Execution via 'options' Parameter | 8.8 | <= 1.5.57 | 1.5.58 | n/a |
| 22 Jul 2026 | Query Wrangler <= 1.5.57 - Missing Authorization | 4.3 | <= 1.5.57 | 1.5.58 | n/a |
| 1 Apr 2025 | Query Wrangler <= 1.5.54 - Cross-Site Request Forgery | 4.3 | <= 1.5.54 | 1.5.55 | n/a |
| 19 Apr 2023 | Query Wrangler <= 1.5.51 - Reflected Cross-Site Scripting via page parameter | 6.1 | <= 1.5.51 | 1.5.52 | n/a |
Source: Wordfence Intelligence.
Reputation
No ratings yet.
Momentum
unknown active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | not stated |
|---|---|
| Author | not stated |
| Added | not stated |
| Last updated | not stated |
| Active installs | unknown |
| Requires WordPress | not stated |
| Tested up to | not stated |
| Requires PHP | not stated |
| Category | Site Structure & Navigation > Categories & Taxonomies |
| Tags | not stated |
Questions
Is Query Wrangler still maintained?
No. Query Wrangler was closed on wordpress.org on 18 Aug 2026 (author request) and gets no updates there.
Is Query Wrangler safe?
Query Wrangler has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Avoid.
Who owns Query Wrangler?
The wordpress.org author is not listed. We have recorded no ownership change.
What can I use instead of Query Wrangler?
Plugins in the same category with a higher Canary Score: Category Order and Taxonomy Terms Order, No Category Base (WPML), Custom Taxonomy Order, No Category Parents, List categories.