SiteOrigin CSS
Healthy: vulnerability published 15 Oct 2026, fixed in 1.6.8.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 80 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| gpriday | 2 Jun 2015 to 21 Oct 2020, 61 commits |
|---|---|
| SiteOrigin | 12 Dec 2020 to 9 Oct 2026, 63 commits |
2 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 26 days ago
- Releases, 24 months
- 9
- Tested up to
- 7.1 current
- Requires PHP
- 7.0.0 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 1 |
| Q3 2024 | 1 |
| Q4 2024 | 2 |
| Q1 2025 | 2 |
| Q2 2025 | 1 |
| Q3 2025 | 0 |
| Q4 2025 | 1 |
| Q1 2026 | 0 |
| Q2 2026 | 1 |
| Q3 2026 | 0 |
| Q4 2026 | 2 |
Last release 9 Oct 2026. Tested with WordPress 7.1 (current).
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 15 Oct 2026 | SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Anchor href via Visual Inspector | 7.2 | <= 1.6.7 | 1.6.8 | 0 |
| 15 Oct 2026 | SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Author URL via Inspector href Sink | 7.2 | <= 1.6.7 | 1.6.8 | 0 |
Source: Wordfence Intelligence.
Reputation
| Q4 2023 | 5.0 |
|---|---|
| Q3 2024 | 5.0 |
| Q4 2024 | 5.0 |
| Q3 2025 | 5.0 |
| Q2 2026 | 5.0 |
Average rating stayed at 5.0 between Q4 2023 and Q2 2026.
| 5 star | 145 |
|---|---|
| 4 star | 4 |
| 3 star | 1 |
| 2 star | 0 |
| 1 star | 3 |
- It doesn’t work · 1 star · 7 Dec 2019
Momentum
100,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 1,494 |
|---|---|
| 11 May 2026 | 2,760 |
| 18 May 2026 | 67,786 |
| 25 May 2026 | 11,964 |
| 1 Jun 2026 | 7,507 |
| 8 Jun 2026 | 5,986 |
| 15 Jun 2026 | 5,391 |
| 22 Jun 2026 | 4,676 |
| 29 Jun 2026 | 4,378 |
| 6 Jul 2026 | 4,232 |
| 13 Jul 2026 | 4,256 |
| 20 Jul 2026 | 4,684 |
| 27 Jul 2026 | 4,142 |
| 3 Aug 2026 | 3,829 |
| 10 Aug 2026 | 3,367 |
| 17 Aug 2026 | 3,359 |
| 24 Aug 2026 | 3,251 |
| 31 Aug 2026 | 3,293 |
| 7 Sep 2026 | 2,772 |
| 14 Sep 2026 | 2,869 |
| 21 Sep 2026 | 2,948 |
| 28 Sep 2026 | 2,732 |
| 5 Oct 2026 | 121,588 |
| 12 Oct 2026 | 15,949 |
| 19 Oct 2026 | 11,659 |
| 26 Oct 2026 | 10,931 |
| 2 Nov 2026 | 931 |
Weekly downloads over the last 4 weeks are 16% below the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.6.8 |
|---|---|
| Author | Greg - SiteOrigin |
| Added | 2 Jun 2015 |
| Last updated | 9 Oct 2026 |
| Active installs | 100,000+ |
| Requires WordPress | 3.9 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.0.0 |
| Category | Design & Themes > Page Builders & Visual Editors |
| Tags | css editor, visual css, live editing, theme editor, website styling |
Other plugins by this author: SiteOrigin Widgets Bundle, Page Builder by SiteOrigin, Masonry Widget, Focus Videos, Simple Options, Secure Image Resizer, Exercise Images by Everkinetic, Theme Checklist, Easy Reader
Questions
Is SiteOrigin CSS still maintained?
SiteOrigin CSS was last updated on 9 Oct 2026. Its Canary status is Healthy.
Is SiteOrigin CSS safe?
SiteOrigin CSS has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns SiteOrigin CSS?
The wordpress.org author is Greg - SiteOrigin. Recent committers: SiteOrigin, gpriday, plugin-master. We have recorded no ownership change.
What can I use instead of SiteOrigin CSS?
Plugins in the same category with a higher Canary Score: Shortcoder - Create Shortcodes for Anything, FluentSnippets - High-Performance Code Snippets, Header & Footer Code, Custom CSS & PHP Code Manager, Simple Custom CSS and JS, Insert Headers And Footers, Visual CSS Style Editor.