Skip to content
PluginCanary

SpiceBox

by spicethemes · 20,000+ active installs · Checked 4 Nov 2026
Healthy1 Warning

Healthy: released 4 months ago, no open vulnerabilities. One warning: not tested with recent WordPress versions.

91/ 100 Canary Score

Based on 3 of 5 areas

Sub-scores for SpiceBox
Ownership100
Maintenance75
Security100
SupportNo data
ReputationNo data

How the score works

Quick answers

Is SpiceBox still maintained?
Yes. Last release 30 Jun 2026, 7 releases in the last 24 months. 30 Jun 2026 · wordpress.org
Who owns SpiceBox, and has it changed hands?
No change recorded. Main committer spicethemes since Feb 2018. 4 Nov 2026 · SVN log
Was SpiceBox removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is SpiceBox safe?
1 known vulnerability, fixed (latest in 2.2). Not on the exploited list. 18 Jul 2023 · Wordfence Intelligence
Is the latest SpiceBox update safe to install?
No ownership change before 2.4.6. No one-star spike after it. 30 Jun 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

History: 1 past vulnerability, patched.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
spicethemes16 Feb 2018 to 30 Jun 2026, 128 commits

1 committer recorded. No ownership changes recorded since 2018.

Maintenance

Last release
4 months ago
Releases, 24 months
7
Tested up to
6.9 vs 7.1
Requires PHP
5.2 supported 8.2+
Releases per quarter
Releases per quarter for SpiceBox
Q1 20241
Q2 20241
Q3 20240
Q4 20241
Q1 20251
Q2 20251
Q3 20251
Q4 20251
Q1 20260
Q2 20262
Q3 20260
Q4 20260

Last release 30 Jun 2026. Tested up to 6.9, 2 major versions behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 3.8.

Last 90 days vs lifetime average rating for SpiceBox
Last 90 daysNo reviews
Lifetime3.8
Rating distribution
5 star2
4 star1
3 star0
2 star0
1 star1
Latest low reviews

Security record

1 vulnerability on record, patched (latest fixed in 2.2).

Show 1 patched vulnerability
PublishedIssueCVSSAffectedFixed inDays to patch
18 Jul 2023Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get6.12.1.2 to 2.1.52.2Before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

20,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for SpiceBox
4 May 2026258
11 May 2026619
18 May 2026763
25 May 2026604
1 Jun 2026519
8 Jun 2026509
15 Jun 2026478
22 Jun 2026469
29 Jun 20268,588
6 Jul 20261,347
13 Jul 2026859
20 Jul 2026805
27 Jul 2026705
3 Aug 2026655
10 Aug 2026582
17 Aug 2026580
24 Aug 2026635
31 Aug 2026547
7 Sep 2026540
14 Sep 2026545
21 Sep 2026568
28 Sep 2026559
5 Oct 2026559
12 Oct 2026471
19 Oct 2026855
26 Oct 2026626
2 Nov 202695

Weekly downloads over the last 4 weeks are 43% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score. Never sponsored.

Starter Sites & Templates by NeveScore 100 · 100,000+Sydney ToolboxScore 100 · 50,000+Astra Customizer ResetScore 100 · 20,000+

Facts

Version2.4.6
Authorspicethemes
Added16 Feb 2018
Last updated30 Jun 2026
Active installs20,000+
Requires WordPress3.3
Tested up to6.9.11
Requires PHP5.2
CategoryDesign & Themes > Themes & Templates
Tagsadmin, widget, widgets

Other plugins by this author: Carousel, Recent Post Slider and Banner Slider, Spice Social Share, Spice Blocks, OliveWP Companion

Questions

Is SpiceBox still maintained?

Yes. Last release 30 Jun 2026, 7 releases in the last 24 months.

Who owns SpiceBox, and has it changed hands?

No change recorded. Main committer spicethemes since Feb 2018.

Was SpiceBox removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is SpiceBox safe?

1 known vulnerability, fixed (latest in 2.2). Not on the exploited list.

Is the latest SpiceBox update safe to install?

No ownership change before 2.4.6. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue