Skip to content
PluginCanary

Shapely Companion

by colorlibplugins · 10,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 12 Aug 2026, 5 releases in 24 months, no unpatched vulnerabilities.

100/ 100 Canary Score
Sub-scores for Shapely Companion
Ownership100
Maintenance100
Security100
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Shapely Companion still maintained?
Yes. Last release 12 Aug 2026, 5 releases in the last 24 months. 12 Aug 2026 · wordpress.org
Who owns Shapely Companion, and has it changed hands?
No change recorded. Main committer silkalns since Feb 2017. 4 Nov 2026 · SVN log
Was Shapely Companion removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Shapely Companion safe?
1 known vulnerability, fixed (latest in 1.2.7). Not on the exploited list. 24 May 2022 · Wordfence Intelligence
Is the latest Shapely Companion update safe to install?
No ownership change before 1.2.13. No one-star spike after it. 12 Aug 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
colorlibplugins28 Sep 2016 to 10 Aug 2022, 18 commits
silkalns6 Feb 2017 to 12 Aug 2026, 17 commits
machothemes21 Dec 2018 to 15 Feb 2019, 3 commits
giucu9127 May 2020 to 28 Jul 2021, 5 commits
raldea8910 Jun 2022 to 10 Jun 2022, 1 commits

5 committers recorded. No ownership change since 2016.

Maintenance

Last release
3 months ago
Releases, 24 months
5
Tested up to
7.0 vs 7.1
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Shapely Companion
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20252
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20263
Q4 20260

Last release 12 Aug 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 2.0.

Rating distribution
5 star0
4 star0
3 star1
2 star0
1 star1
Latest low reviews

Security record

1 vulnerability on record, patched (latest fixed in 1.2.7).

Show 1 patched vulnerability
PublishedIssueCVSSAffectedFixed inDays to patch
24 May 2022Shapely Companion <= 1.2.6 - Unprotected AJAX Action to Content Import6.3<= 1.2.61.2.718

Changelog mentions of security fixes: 1.2.11 (security, nonce).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Shapely Companion
4 May 202686
11 May 2026207
18 May 2026205
25 May 2026212
1 Jun 2026242
8 Jun 2026238
15 Jun 2026207
22 Jun 2026202
29 Jun 2026194
6 Jul 2026210
13 Jul 2026187
20 Jul 2026212
27 Jul 2026233
3 Aug 20265,636
10 Aug 202610,454
17 Aug 2026809
24 Aug 2026750
31 Aug 2026562
7 Sep 2026483
14 Sep 2026494
21 Sep 2026527
28 Sep 2026492
5 Oct 2026458
12 Oct 2026445
19 Oct 2026682
26 Oct 2026484
2 Nov 202681

Weekly downloads over the last 4 weeks are 54% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version1.2.13
Authorcolorlibplugins
Added28 Sep 2016
Last updated12 Aug 2026
Active installs10,000+
Requires WordPress6.4
Tested up to7.0.8
Requires PHP7.4
CategoryDesign & Themes > Themes & Templates
Tagsdemo, widgets, one-page, companion, woocommerce

Other plugins by this author: Simple Custom Post Order, Custom Login Page Customizer, FancyBox for WordPress, Illdy Companion, Coming Soon & Maintenance Mode by Colorlib, Colorlib 404 Customizer, Bonkers Addons, Blesk Companion, Mosh Companion, Fashe Companion

Questions

Is Shapely Companion still maintained?

Yes. Last release 12 Aug 2026, 5 releases in the last 24 months.

Who owns Shapely Companion, and has it changed hands?

No change recorded. Main committer silkalns since Feb 2017.

Was Shapely Companion removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Shapely Companion safe?

1 known vulnerability, fixed (latest in 1.2.7). Not on the exploited list.

Is the latest Shapely Companion update safe to install?

No ownership change before 1.2.13. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue