Skip to content
PluginCanary

Hubbub Lite

by NerdPress · 30,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: released 51 days ago, tested with WordPress 7.1, no open vulnerabilities.

93/ 100Healthy
Canary Score

Based on 3 of 5 areas

Sub-scores for Hubbub Lite
Ownership100
Maintenance100
Security80
SupportNo data
ReputationNo data

How the score works

Active signals

Open issues right now, with links to the source.

  • InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

History: 10 past vulnerabilities, all patched. Patched issues are listed in the Security record, not here.

Quick answers

Is Hubbub Lite still maintained?
Yes. Last release 14 Sep 2026, 8 releases in the last 24 months. 14 Sep 2026 · wordpress.org
Who owns Hubbub Lite, and has it changed hands?
Changed. New committer jchristopher made a first commit on 23 Jul 2026. 23 Jul 2026 · SVN log
Was Hubbub Lite removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Hubbub Lite safe?
10 known vulnerabilities, all fixed (latest in 1.36.3.1). Not on the exploited list. 22 Jul 2026 · Wordfence Intelligence
Is the latest Hubbub Lite update safe to install?
Caution. Ownership change before 1.36.3.1: new committer jchristopher made a first commit on 23 Jul 2026. No one-star spike after it. 23 Jul 2026 · Release history

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
iova.mihai7 Jan 2016 to 30 Sep 2019, 104 commits
mediavine7 Nov 2019 to 8 Mar 2023, 18 commits
cdevroe6 Dec 2023 to 14 Sep 2026, 39 commits
jchristopher23 Jul 2026 to 24 Jul 2026, 2 commits

New committer jchristopher made a first commit on 23 Jul 2026.

Maintenance

Last release
51 days ago
Releases, 24 months
8
Tested up to
7.1 current
Requires PHP
7.2.24 supported 8.2+
Releases per quarter
Releases per quarter for Hubbub Lite
Q1 20244
Q2 20242
Q3 20241
Q4 20244
Q1 20250
Q2 20251
Q3 20252
Q4 20254
Q1 20260
Q2 20260
Q3 20261
Q4 20260

Last release 14 Sep 2026. Tested with WordPress 7.1 (current).

Support

Resolved, last 2 months
100%
Threads, last 2 months
1

Trend appears after 8 weekly snapshots.

Security record

4 vulnerabilities in 24 months (10 on record), all patched (latest fixed in 1.36.3.1).

Show 10 patched vulnerabilities
DateIssueCVSSAffectedFixed inDays to patch
22 Jul 2026Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.36.31.36.3.12
5 Nov 2025Reflected Cross-Site Scripting6.1<= 1.36.01.36.1Before disclosure
22 Sep 2025Authenticated (Subscriber+) Sensitive Information Exposure4.3<= 1.35.11.36.015
2 Mar 2025Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 1.34.31.34.4Before disclosure
27 Mar 2024PHP Object Injection7.5<= 1.33.11.33.21
11 Mar 2024Unauthenticated Information Exposure5.3<= 1.33.01.33.1Before disclosure
11 Jan 2024Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 1.31.11.32.0Before disclosure
1 Dec 2023Missing Authorization via multiple admin_init actions5.3<= 1.30.01.30.111
8 Jul 2021Reflected Cross-Site Scripting6.1<= 1.18.21.19.0Same day
9 Dec 2016Reflected Cross-Site Scripting6.1<= 1.2.51.2.6n/a

Changelog mentions of security fixes: 1.36.3.1 (security, vulnerability).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Reputation

Last 90 days: no reviews. Lifetime: 4.7.

Last 90 days vs lifetime average rating for Hubbub Lite
Last 90 daysNo reviews
Lifetime4.7
Average rating per quarter
Average rating per quarter for Hubbub Lite
Q2 20245.0
Q4 20245.0
Q3 20255.0
Q3 20265.0

Average rating stayed at 5.0 between Q2 2024 and Q3 2026.

Rating distribution
5 star153
4 star7
3 star4
2 star4
1 star5
Latest low reviews

Momentum

Active installs
30,000+
Downloads, last full week
832
Weekly downloads, last 26 complete weeks
Weekly downloads for Hubbub Lite
4 May 2026278
11 May 2026737
18 May 2026667
25 May 2026675
1 Jun 2026572
8 Jun 2026480
15 Jun 2026475
22 Jun 2026450
29 Jun 2026461
6 Jul 2026474
13 Jul 2026444
20 Jul 202610,182
27 Jul 20262,904
3 Aug 20263,096
10 Aug 20261,185
17 Aug 2026982
24 Aug 20261,140
31 Aug 2026981
7 Sep 2026866
14 Sep 2026986
21 Sep 2026922
28 Sep 2026832
5 Oct 2026838
12 Oct 2026764
19 Oct 20261,136
26 Oct 2026832

Weekly downloads over the last 4 weeks are 30% below the 26-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score. Never sponsored.

Simple Social IconsScore 95 · 100,000+WPZOOM ConnectScore 95 · 90,000+Ocean Social SharingScore 95 · 60,000+

Facts

Full name
Hubbub Lite - Fast, free social sharing and follow buttons
Version
1.36.3.1
Author
NerdPress
Added
7 Jan 2016
Last updated
14 Sep 2026
Active installs
30,000+
Requires WordPress
5.3
Tested up to
7.1.4
Requires PHP
7.2.24
Category
E-commerce & Shopping
Tags
social media, social share, social buttons, social network, social sharing

Other plugins by this author: Smart Custom 404 Error Page, Optimize Database after Deleting, Alt Text Tools

Questions about Hubbub Lite

Is Hubbub Lite still maintained?

Yes. Last release 14 Sep 2026, 8 releases in the last 24 months.

Who owns Hubbub Lite, and has it changed hands?

Changed. New committer jchristopher made a first commit on 23 Jul 2026.

Was Hubbub Lite removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Hubbub Lite safe?

10 known vulnerabilities, all fixed (latest in 1.36.3.1). Not on the exploited list.

Is the latest Hubbub Lite update safe to install?

Caution. Ownership change before 1.36.3.1: new committer jchristopher made a first commit on 23 Jul 2026. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue