Skip to content
PluginCanary

Shibboleth

by michaelryanmcneill · 3,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: Shibboleth is maintained, has no open risk signals and no unpatched vulnerabilities.

85/ 100 Canary Score
Sub-scores for Shibboleth
Ownership100
Maintenance85
Security90
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
michaelryanmcneill23 Aug 2017 to 17 Aug 2020, 23 commits
jrchamp27 Aug 2021 to 22 Jun 2026, 14 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
5 months ago
Releases, 24 months
5
Tested up to
7.0 vs 7.1
Requires PHP
5.6 supported 8.2+
Releases per quarter for Shibboleth
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20253
Q4 20250
Q1 20261
Q2 20261
Q3 20260
Q4 20260

Last release 22 Jun 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
24 Jun 2026Shibboleth <= 2.5.3 - Unauthenticated Administrator Account Creation9.8<= 2.5.32.5.40
2 Mar 2016Shibboleth <= 1.6 - Reflected Cross-Site Scripting6.1<= 1.61.719

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.3 from 7 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star5
4 star1
3 star0
2 star0
1 star1

Momentum

3,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Shibboleth
4 May 202654
11 May 202678
18 May 202687
25 May 202690
1 Jun 202684
8 Jun 2026114
15 Jun 202696
22 Jun 20262,771
29 Jun 2026688
6 Jul 2026203
13 Jul 2026165
20 Jul 2026306
27 Jul 2026202
3 Aug 2026194
10 Aug 2026142
17 Aug 2026141
24 Aug 2026130
31 Aug 2026121
7 Sep 2026110
14 Sep 2026152
21 Sep 2026155
28 Sep 2026153
5 Oct 2026135
12 Oct 2026164
19 Oct 2026212
26 Oct 2026210
2 Nov 202633

Weekly downloads over the last 4 weeks are 40% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

LoginizerScore 93 · 1,000,000+FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social LoginScore 93 · 10,000+All In One LoginScore 92 · 60,000+WPS Hide LoginScore 91 · 2,000,000+Temporary Login Without PasswordScore 91 · 90,000+

Facts

Version2.5.4
Authormichaelryanmcneill
Added1 Nov 2008
Last updated22 Jun 2026
Active installs3,000+
Requires WordPress4.3
Tested up to7.0.8
Requires PHP5.6
CategoryUser Management & Authentication > User Registration & Login
TagsSAML, login, shibboleth, authentication

Other plugins by this author: Qualtrics Survey Embeds

Questions

Is Shibboleth still maintained?

Shibboleth was last updated on 22 Jun 2026. Its Canary status is Healthy.

Is Shibboleth safe?

Shibboleth has no open unpatched vulnerabilities on record. 1 vulnerability was published in the last 24 months. Its Canary status is Healthy.

Who owns Shibboleth?

The wordpress.org author is michaelryanmcneill. Recent committers: jrchamp, michaelryanmcneill, mitchoyoshitaka, willnorris, wnorris. We have recorded no ownership change.

What can I use instead of Shibboleth?

Plugins in the same category with a higher Canary Score: Loginizer, FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social Login, All In One Login, WPS Hide Login, Temporary Login Without Password.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue