Sugar Calendar
Healthy: maintained, last release 4 Nov 2026, 25 releases in 24 months, no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 90 |
| Support | No data |
| Reputation | 85 |
Quick answers
- Is Sugar Calendar still maintained?
- Yes. Last release 4 Nov 2026, 25 releases in the last 24 months. 4 Nov 2026 · wordpress.org
- Who owns Sugar Calendar, and has it changed hands?
- Changed. New committer land0r made a first commit on 15 Oct 2026. 15 Oct 2026 · SVN log
- Was Sugar Calendar removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is Sugar Calendar safe?
- 2 known vulnerabilities, all fixed (latest in 3.10.0). Not on the exploited list. 5 Jan 2026 · Wordfence Intelligence
- Is the latest Sugar Calendar update safe to install?
- Caution. Ownership change before 3.17.0: new committer land0r made a first commit on 15 Oct 2026. No one-star spike after it. 4 Nov 2026 · Release history
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| mordauk | 5 Oct 2012 to 10 Jan 2020, 16 commits |
|---|---|
| johnjamesjacoby | 14 Feb 2019 to 31 Aug 2021, 61 commits |
| BrashRebel | 27 Feb 2020 to 7 Apr 2020, 18 commits |
| capuderg | 30 May 2024 to 3 Oct 2025, 11 commits |
| donmhico | 4 Jul 2024 to 8 Oct 2026, 25 commits |
| spiettojo | 30 Sep 2025 to 30 Sep 2025, 2 commits |
| land0r | 15 Oct 2026 to 4 Nov 2026, 2 commits |
New committer land0r made a first commit on 15 Oct 2026.
Maintenance
- Last release
- today
- Releases, 24 months
- 25
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 1 |
| Q3 2024 | 5 |
| Q4 2024 | 2 |
| Q1 2025 | 3 |
| Q2 2025 | 5 |
| Q3 2025 | 4 |
| Q4 2025 | 3 |
| Q1 2026 | 0 |
| Q2 2026 | 2 |
| Q3 2026 | 4 |
| Q4 2026 | 3 |
Last release 4 Nov 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: 5.0 (1 review). Lifetime: 4.5.
| Q3 2024 | 5.0 |
|---|---|
| Q4 2024 | 5.0 |
| Q1 2025 | 5.0 |
| Q2 2025 | 5.0 |
| Q3 2025 | 5.0 |
| Q1 2026 | 2.5 |
| Q2 2026 | 5.0 |
| Q3 2026 | 5.0 |
Average rating stayed at 5.0 between Q3 2024 and Q3 2026.
| 5 star | 20 |
|---|---|
| 4 star | 1 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 3 |
- Crap · 1 star · 3 Jan 2026
- unter WP 4.2 geht es nicht · 1 star · 1 May 2015
- Plugin lacks very basic features! and ask for pro paid version · 1 star · 10 Oct 2014
Security record
2 vulnerabilities in 24 months, all patched (latest fixed in 3.10.0).
Show 2 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 5 Jan 2026 | Sugar Calendar (Lite) <= 3.9.1 - Missing Authorization | 4.3 | <= 3.9.1 | 3.10.0 | Patched before disclosure |
| 19 Nov 2024 | Sugar Calendar (Lite) <= 3.3.0 - Reflected Cross-Site Scripting | 6.1 | <= 3.3.0 | 3.4.0 | Patched before disclosure |
Changelog mentions of security fixes: 3.11.1 (security); 3.12.0 (security); 3.13.0 (security); 3.14.0 (security).
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
100% of 2 support threads resolved in the last 2 months.
Momentum
10,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 542 |
|---|---|
| 11 May 2026 | 1,133 |
| 18 May 2026 | 5,895 |
| 25 May 2026 | 1,896 |
| 1 Jun 2026 | 1,407 |
| 8 Jun 2026 | 1,379 |
| 15 Jun 2026 | 1,180 |
| 22 Jun 2026 | 1,102 |
| 29 Jun 2026 | 1,329 |
| 6 Jul 2026 | 1,183 |
| 13 Jul 2026 | 10,507 |
| 20 Jul 2026 | 2,495 |
| 27 Jul 2026 | 1,471 |
| 3 Aug 2026 | 1,533 |
| 10 Aug 2026 | 1,164 |
| 17 Aug 2026 | 7,909 |
| 24 Aug 2026 | 1,911 |
| 31 Aug 2026 | 1,580 |
| 7 Sep 2026 | 1,466 |
| 14 Sep 2026 | 7,964 |
| 21 Sep 2026 | 2,271 |
| 28 Sep 2026 | 2,102 |
| 5 Oct 2026 | 8,667 |
| 12 Oct 2026 | 9,592 |
| 19 Oct 2026 | 3,060 |
| 26 Oct 2026 | 2,787 |
| 2 Nov 2026 | 321 |
Weekly downloads over the last 4 weeks are 27% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 3.17.0 |
|---|---|
| Author | Syed Balkhi |
| Added | 5 Oct 2012 |
| Last updated | 4 Nov 2026 |
| Active installs | 10,000+ |
| Requires WordPress | 6.2 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | Bookings & Scheduling > Event Management & Ticketing |
| Tags | events, calendar, Event Tickets, event calendar, event management |
Other plugins by this author: WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More, WP Mail SMTP by WPForms - SMTP for Reliable Email Delivery with Gmail, Outlook, Amazon SES, Brevo, Other SMTP & More, WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager, All in One SEO - AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights), Smash Balloon Social Photo Feed - Easy Social Feeds Plugin, Duplicator - Backups & Migration Plugin - Cloud Backups, Scheduled Backups, & More, One Click Demo Import, Popup Builder & Popup Maker for WordPress - OptinMonster Email Marketing and Lead Generation, Easy WP SMTP - WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more, Photo Gallery, Sliders, Proofing and Themes - NextGEN Gallery, WP Mail Logging, WP Crontrol
Questions
Is Sugar Calendar still maintained?
Yes. Last release 4 Nov 2026, 25 releases in the last 24 months.
Who owns Sugar Calendar, and has it changed hands?
Changed. New committer land0r made a first commit on 15 Oct 2026.
Was Sugar Calendar removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is Sugar Calendar safe?
2 known vulnerabilities, all fixed (latest in 3.10.0). Not on the exploited list.
Is the latest Sugar Calendar update safe to install?
Caution. Ownership change before 3.17.0: new committer land0r made a first commit on 15 Oct 2026. No one-star spike after it.