Sprout Clients - CRM and Lead Management
Limited data: Sprout Clients - CRM and Lead Management has under 1,000 active installs and less than 12 weeks of history, so we do not rate it yet.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 65 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 3 months ago
- Releases, 24 months
- 1
- Tested up to
- 7.1 current
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 1 |
| Q4 2026 | 0 |
Last release 18 Aug 2026. Tested with WordPress 7.1 (current).
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 16 Jul 2026 | Sprout Clients – CRM and Lead Management <= 3.2.3 - Unauthenticated Stored Cross-Site Scripting | 7.2 | <= 3.2.3 | 3.2.4 | 34 |
| 27 Feb 2026 | Sprout Clients <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 3.2.2 | 3.2.3 | n/a |
| 23 Oct 2025 | Sprout Clients <= 3.2.1 - Reflected Cross-Site Scripting | 6.1 | <= 3.2.1 | 3.2.2 | n/a |
| 1 Apr 2025 | Sprout Clients <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 3.2 | 3.2.1 | n/a |
| 18 Jul 2023 | Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get | 6.1 | 3.1 | 3.2 | n/a |
| 25 Feb 2019 | Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update | 8.8 | <= 3.1 | 3.2 | n/a |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 5.0 from 7 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 7 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Momentum
30+ active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 3.2.4 |
|---|---|
| Author | BoldGrid |
| Added | 29 Apr 2016 |
| Last updated | 18 Aug 2026 |
| Active installs | 30+ |
| Requires WordPress | 5.5 |
| Tested up to | 7.1.4 |
| Requires PHP | not stated |
| Category | not stated |
| Tags | crm, leads, Emailing, invoicing, client management |
Other plugins by this author: W3 Total Cache, Post and Page Builder by BoldGrid - Visual Drag and Drop Editor, BoldGrid Easy SEO - Simple and Effective SEO, Total Upkeep - WordPress Backup Plugin plus Restore & Migrate by BoldGrid, weForms - Easy Drag & Drop Contact Form Builder For WordPress, Map Block, Sprout Invoices - Client Invoicing & Estimates, WP Forms + Sprout Invoices - Easy Invoice & Quote Submissions, Help Scout, Formidable Forms + Sprout Invoices - Easy Invoice & Estimate Submissions, Gravity Forms + Sprout Invoices - Easy Invoice & Estimate Submissions, Ninja Forms + Sprout Invoices - Easy Invoice & Estimate Submissions
Questions
Is Sprout Clients - CRM and Lead Management still maintained?
Sprout Clients - CRM and Lead Management was last updated on 18 Aug 2026. Its Canary status is Limited data.
Is Sprout Clients - CRM and Lead Management safe?
Sprout Clients - CRM and Lead Management has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Limited data.
Who owns Sprout Clients - CRM and Lead Management?
The wordpress.org author is BoldGrid. We have recorded no ownership change.
What can I use instead of Sprout Clients - CRM and Lead Management?
We have no healthier plugin in the same category on record yet.