Skip to content
PluginCanary

Simple Ajax Chat

Simple Ajax Chat - Add a Fast, Secure Chat Box
by Jeff Starr · 2,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 27 Aug 2026, 11 releases in 24 months, no unpatched vulnerabilities.

89/ 100 Canary Score
Sub-scores for Simple Ajax Chat
Ownership100
Maintenance100
Security70
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Simple Ajax Chat still maintained?
Yes. Last release 27 Aug 2026, 11 releases in the last 24 months. 27 Aug 2026 · wordpress.org
Who owns Simple Ajax Chat, and has it changed hands?
No change recorded. Main committer specialk since Nov 2012. 3 Nov 2026 · SVN log
Was Simple Ajax Chat removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Simple Ajax Chat safe?
10 known vulnerabilities, all fixed (latest in 20260827). Not on the exploited list. 10 Sep 2026 · Wordfence Intelligence
Is the latest Simple Ajax Chat update safe to install?
No ownership change before 20260827. No one-star spike after it. 27 Aug 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
specialk15 Nov 2012 to 27 Aug 2026, 104 commits

1 committer recorded. No ownership change since 2012.

Maintenance

Last release
2 months ago
Releases, 24 months
11
Tested up to
7.1 current
Requires PHP
5.6.20 supported 8.2+
Releases per quarter
Releases per quarter for Simple Ajax Chat
Q1 20243
Q2 20241
Q3 20241
Q4 20242
Q1 20251
Q2 20250
Q3 20250
Q4 20251
Q1 20264
Q2 20261
Q3 20264
Q4 20260

Last release 27 Aug 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.9.

Rating distribution
5 star201
4 star6
3 star3
2 star2
1 star3

Security record

4 vulnerabilities in 24 months (10 on record), all patched (latest fixed in 20260827).

Show 10 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
10 Sep 2026Simple Ajax Chat <= 20260811 - Unauthenticated Stored Cross-Site Scripting7.2<= 2026081120260827Patched before disclosure
3 Sep 2026Simple Ajax Chat - Add a Fast, Secure Chat Box < 20260827 - Unauthenticated Stored Cross-Site Scripting7.2< 2026082720260827Patched before disclosure
12 Mar 2026Simple Ajax Chat <= 20260217 - Unauthenticated Stored Cross-Site Scripting via 'c'6.1<= 2026021720260301Patched before disclosure
17 Feb 2026Simple Ajax Chat <= 20251121 - Unauthenticated Information Exposure5.3<= 20251121202602171
14 May 2024Simple Ajax Chat - Add a Fast, Secure Chat Box <= 20240318 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 2024031820240412Patched before disclosure
26 Mar 2024Simple Ajax Chat <= 20231101 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 2023110120240216Patched before disclosure
26 Mar 2024Simple Ajax Chat <= 20240216 - Unauthenticated Stored Cross-Site Scripting7.2<= 2024021620240223Patched before disclosure
15 Apr 2022Simple Ajax Chat <= 20220115 - Cross-Site Request Forgery5.4<= 2022011520220216Patched before disclosure
15 Apr 2022Simple Ajax Chat Plugin <= 20220115 - Sensitive Information Disclosure5.3<= 2022011520220216Patched before disclosure
16 Feb 2022Simple Ajax Chat <= 20220115 - Unauthenticated Stored Cross-Site Scripting5.4<= 20220115202202169

Changelog mentions of security fixes: 20260717 (sanitize); 20260827 (sanitize).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Simple Ajax Chat
4 May 202659
11 May 2026133
18 May 2026205
25 May 2026191
1 Jun 2026122
8 Jun 2026129
15 Jun 2026104
22 Jun 2026101
29 Jun 202684
6 Jul 202692
13 Jul 20261,205
20 Jul 2026315
27 Jul 2026203
3 Aug 2026208
10 Aug 20261,413
17 Aug 2026258
24 Aug 20261,257
31 Aug 2026461
7 Sep 2026274
14 Sep 2026268
21 Sep 2026250
28 Sep 2026231
5 Oct 2026219
12 Oct 2026209
19 Oct 2026283
26 Oct 2026260
2 Nov 202645

Weekly downloads over the last 4 weeks are 37% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Simple Chat ButtonScore 100 · 40,000+ButtonizerScore 100 · 40,000+Chat Button & Custom ChatGPT-Powered BotScore 100 · 20,000+GoftinoScore 100 · 10,000+CrispScore 100 · 10,000+

Facts

Version20260827
AuthorJeff Starr
Added15 Nov 2012
Last updated27 Aug 2026
Active installs2,000+
Requires WordPress4.7
Tested up to7.1.4
Requires PHP5.6.20
CategoryCommunication & Messaging > Live Chat & Instant Messaging
Tagsajax, chat, forum, chat box, instant message

Other plugins by this author: Disable Gutenberg, GA Google Analytics - Connect Google Analytics to WordPress, BBQ Firewall - Fast & Powerful Firewall Security, Blackhole for Bad Bots, Disable WP REST API, User Submitted Posts - Enable Users to Submit Posts from the Front End, Disable Media Sizes, Head Meta Data, Disable WP Sitemaps, Disable Lazy Load, Theme Switcha - Easily Switch Themes for Development and Testing, Simple Blog Stats

Questions

Is Simple Ajax Chat still maintained?

Yes. Last release 27 Aug 2026, 11 releases in the last 24 months.

Who owns Simple Ajax Chat, and has it changed hands?

No change recorded. Main committer specialk since Nov 2012.

Was Simple Ajax Chat removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Simple Ajax Chat safe?

10 known vulnerabilities, all fixed (latest in 20260827). Not on the exploited list.

Is the latest Simple Ajax Chat update safe to install?

No ownership change before 20260827. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue