Skip to content
PluginCanary

Restricted Site Access

by 10up · 10,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 14 Oct 2026, 7 releases in 24 months, no unpatched vulnerabilities.

98/ 100 Canary Score
Sub-scores for Restricted Site Access
Ownership100
Maintenance100
Security95
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Restricted Site Access still maintained?
Yes. Last release 14 Oct 2026, 7 releases in the last 24 months. 14 Oct 2026 · wordpress.org
Who owns Restricted Site Access, and has it changed hands?
No change recorded. Main committer 10up since Feb 2022. 4 Nov 2026 · SVN log
Was Restricted Site Access removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Restricted Site Access safe?
6 known vulnerabilities, all fixed (latest in 7.6.3). Not on the exploited list. 14 Oct 2026 · Wordfence Intelligence
Is the latest Restricted Site Access update safe to install?
No ownership change before 7.6.4. No one-star spike after it. 14 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
helen18 May 2018 to 21 May 2019, 13 commits
10upbot11 Apr 2019 to 13 Jul 2021, 9 commits
10up8 Feb 2022 to 14 Oct 2026, 23 commits

3 committers recorded. No ownership change since 2009.

Maintenance

Last release
21 days ago
Releases, 24 months
7
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Restricted Site Access
Q1 20240
Q2 20240
Q3 20241
Q4 20240
Q1 20251
Q2 20251
Q3 20250
Q4 20252
Q1 20260
Q2 20260
Q3 20262
Q4 20261

Last release 14 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.8.

Average rating per quarter for Restricted Site Access
Q1 20245.0
Q2 20255.0
Q3 20255.0

Average rating stayed at 5.0 between Q1 2024 and Q3 2025.

Rating distribution
5 star57
4 star2
3 star0
2 star1
1 star2
Latest low reviews

Security record

1 vulnerability in 24 months (6 on record), patched (latest fixed in 7.6.3).

Show 6 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
14 Oct 2026Restricted Site Access <= 7.6.2 - Missing Authorization5.3<= 7.6.27.6.3Patched before disclosure
27 Nov 2023Restricted Site Access <= 7.4.1 - IP Spoofing to Protection Mechanism Bypass5.3<= 7.4.17.5.018
11 Apr 2023webpack JS package <= 5.75.0 - Sandbox Bypass8.3<= 7.3.57.4.07
11 Oct 2022loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service3.7<= 7.3.47.3.565
11 Oct 2022loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service3.7<= 7.3.47.3.565
31 Aug 2022Restricted Site Access <= 7.3.1 - Access Bypass via IP Spoofing6.5< 7.3.27.3.2Patched before disclosure

Changelog mentions of security fixes: 7.6.3 (security); 7.6.4 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Restricted Site Access
4 May 20261,081
11 May 20264,190
18 May 20264,784
25 May 20263,690
1 Jun 20264,829
8 Jun 20264,516
15 Jun 20263,920
22 Jun 20263,580
29 Jun 20263,572
6 Jul 20262,915
13 Jul 20264,003
20 Jul 20263,373
27 Jul 20263,432
3 Aug 20263,296
10 Aug 20262,814
17 Aug 20262,261
24 Aug 20268,791
31 Aug 20264,994
7 Sep 20263,712
14 Sep 20264,512
21 Sep 20264,193
28 Sep 202610,596
5 Oct 20265,699
12 Oct 202610,436
19 Oct 20265,739
26 Oct 20266,005
2 Nov 2026965

Weekly downloads over the last 4 weeks are 28% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version7.6.4
Author10up
Added17 Aug 2009
Last updated14 Oct 2026
Active installs10,000+
Requires WordPress6.9
Tested up to7.1.4
Requires PHP7.4
CategorySecurity & Privacy
Tagslimited, privacy, restrict, security, permissions

Other plugins by this author: Safe SVG, Simple Page Ordering, Ads.txt Manager, Simple Local Avatars, Safe Redirect Manager, ElasticPress, Autopost for X (formerly Autoshare for Twitter), Insert Special Characters, Microsoft Azure Storage for WordPress, Convert to Blocks, Block for Apple Maps, ElasticPress Debugging Add-On

Questions

Is Restricted Site Access still maintained?

Yes. Last release 14 Oct 2026, 7 releases in the last 24 months.

Who owns Restricted Site Access, and has it changed hands?

No change recorded. Main committer 10up since Feb 2022.

Was Restricted Site Access removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Restricted Site Access safe?

6 known vulnerabilities, all fixed (latest in 7.6.3). Not on the exploited list.

Is the latest Restricted Site Access update safe to install?

No ownership change before 7.6.4. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue