ShiftController Employee Shift
Healthy: maintained, last release 4 Sep 2026, 16 releases in 24 months, no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 100 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is ShiftController Employee Shift still maintained?
- Yes. Last release 4 Sep 2026, 16 releases in the last 24 months. 4 Sep 2026 · wordpress.org
- Who owns ShiftController Employee Shift, and has it changed hands?
- No change recorded. Main committer plainware since Apr 2020. 3 Nov 2026 · SVN log
- Was ShiftController Employee Shift removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is ShiftController Employee Shift safe?
- 6 known vulnerabilities, all fixed (latest in 4.9.67). Not on the exploited list. 3 Oct 2024 · Wordfence Intelligence
- Is the latest ShiftController Employee Shift update safe to install?
- No ownership change before 4.9.97. No one-star spike after it. 4 Sep 2026 · Release history
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| hitcode | 19 Nov 2013 to 18 Apr 2020, 184 commits |
|---|---|
| plainware | 30 Apr 2020 to 4 Sep 2026, 168 commits |
2 committers recorded. No ownership change since 2013.
Maintenance
- Last release
- 2 months ago
- Releases, 24 months
- 16
- Tested up to
- 7.1 current
- Requires PHP
- 5.6 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 2 |
| Q3 2024 | 3 |
| Q4 2024 | 8 |
| Q1 2025 | 3 |
| Q2 2025 | 2 |
| Q3 2025 | 1 |
| Q4 2025 | 0 |
| Q1 2026 | 2 |
| Q2 2026 | 0 |
| Q3 2026 | 3 |
| Q4 2026 | 0 |
Last release 4 Sep 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: no reviews. Lifetime: 4.4.
| 5 star | 17 |
|---|---|
| 4 star | 0 |
| 3 star | 3 |
| 2 star | 0 |
| 1 star | 2 |
Security record
6 vulnerabilities on record, all patched (latest fixed in 4.9.67).
Show 6 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 3 Oct 2024 | ShiftController Employee Shift Scheduling <= 4.9.66 - Reflected Cross-Site Scripting | 6.1 | <= 4.9.66 | 4.9.67 | n/a |
| 23 Sep 2024 | ShiftController Employee Shift Scheduling <= 4.9.64 - Authenticated (Administrator+) Stored Cross-Site Scripting | 4.4 | <= 4.9.64 | 4.9.65 | n/a |
| 16 May 2024 | ShiftController Employee Shift Scheduling <= 4.9.57 - Authenticated (Contributor+) PHP Object Injection | 7.5 | <= 4.9.57 | 4.9.58 | n/a |
| 13 Apr 2023 | ShiftController Employee Shift Scheduling <= 4.9.25 - Reflected Cross-Site Scripting via Query String | 6.1 | <= 4.9.25 | 4.9.26 | n/a |
| 6 Apr 2023 | ShiftController Employee Shift Scheduling <= 4.9.23 - Unauthenticated Stored Cross-Site Scripting via 'hc-title' | 7.2 | <= 4.9.23 | 4.9.24 | n/a |
| 6 Apr 2023 | ShiftController Employee Shift Scheduling <= 4.9.23 - Cross-Site Request Forgery via get | 5.4 | <= 4.9.23 | 4.9.24 | n/a |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
0% of 1 support threads resolved in the last 2 months.
Momentum
600+ active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 4.9.97 |
|---|---|
| Author | plainware |
| Added | 19 Nov 2013 |
| Last updated | 4 Sep 2026 |
| Active installs | 600+ |
| Requires WordPress | 4.1 |
| Tested up to | 7.1.4 |
| Requires PHP | 5.6 |
| Category | Bookings & Scheduling > Appointment Scheduling |
| Tags | rota, shift, staff, roster, employee |
Other plugins by this author: Locatoraid Store Locator, Zintory - Inventory Manager, Plain Tracker, Signteer, Resplease - event calendar with RSVP
Questions
Is ShiftController Employee Shift still maintained?
Yes. Last release 4 Sep 2026, 16 releases in the last 24 months.
Who owns ShiftController Employee Shift, and has it changed hands?
No change recorded. Main committer plainware since Apr 2020.
Was ShiftController Employee Shift removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is ShiftController Employee Shift safe?
6 known vulnerabilities, all fixed (latest in 4.9.67). Not on the exploited list.
Is the latest ShiftController Employee Shift update safe to install?
No ownership change before 4.9.97. No one-star spike after it.