Skip to content
PluginCanary
Limited data: this plugin has under 1,000 active installs and less than 12 weeks of history with us, so we show signals but no status band yet.

SULly

by Greg Ross · 30+ active installs · Checked 4 Nov 2026
Limited data1 Critical1 Warning

Limited data: SULly has under 1,000 active installs and less than 12 weeks of history, so we do not rate it yet.

59/ 100Limited data
Canary Score

Based on 3 of 5 areas

Capped at 59: a Critical signal is open.

Sub-scores for SULly
Ownership100
Maintenance0
Security100
SupportNo data
ReputationNo data

How the score works

Active signals

Open issues right now, with links to the source.

  • CriticalMNT-1No release in 29 months (last release 1 Jun 2024). Plan a replacement if the plugin is important to your site.1 Jun 2025Evidence
  • WarningMNT-2Tested up to WordPress 6.5.14, 6 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

History: 4 past vulnerabilities, all patched. Patched issues are listed in the Security record, not here.

Quick answers

Is SULly still maintained?
No. Last release 1 Jun 2024, over 2 years ago. 1 Jun 2024 · wordpress.org
Who owns SULly, and has it changed hands?
No change recorded. 4 Nov 2026 · SVN log
Was SULly removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is SULly safe?
4 known vulnerabilities, all fixed (latest in 4.3.1). Not on the exploited list. 22 Jun 2024 · Wordfence Intelligence
Is the latest SULly update safe to install?
No ownership change before 4.4. No one-star spike after it. 1 Jun 2024 · Release history

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
GregRoss7 Nov 2013 to 1 Jun 2024, 121 commits

1 committer recorded. No ownership changes recorded since 2013.

Maintenance

Last release
2 years ago
Releases, 24 months
0
Tested up to
6.5 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for SULly
Q1 20240
Q2 20243
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 1 Jun 2024. Tested up to 6.5, 6 major versions behind WordPress 7.1.

Support

Resolved, last 2 months
n/a
Threads, last 2 months
0

Trend appears after 8 weekly snapshots.

Security record

4 vulnerabilities on record, all patched (latest fixed in 4.3.1).

Show 4 patched vulnerabilities
DateIssueCVSSAffectedFixed inDays to patch
22 Jun 2024Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 4.34.3.1n/a
22 Jun 2024Reflected Cross-Site Scripting6.1<= 4.34.3.1n/a
22 Jun 2024Cross-Site Request Forgery to Plugin Reset4.3<= 4.34.3.1n/a
22 Jun 2024Cross-Site Request Forgery to Stored Cross-Site Scripting6.1<= 4.34.3.1n/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Reputation

Last 90 days: no reviews. Lifetime: 5.0.

Last 90 days vs lifetime average rating for SULly
Last 90 daysNo reviews
Lifetime5.0
Rating distribution
5 star1
4 star0
3 star0
2 star0
1 star0

Momentum

Active installs
30+

Trend appears after 8 weekly snapshots.

Facts

Version
4.4
Author
Greg Ross
Added
7 Nov 2013
Last updated
1 Jun 2024
Active installs
30+
Requires WordPress
3.7.0
Tested up to
6.5.14
Requires PHP
not stated
Category
not stated
Tags
admin updates log

Other plugins by this author: Auto iFrame, Just Writing Statistics, Schedule Posts Calendar, Grey Admin Color Schemes, CYAN Backup, Just Writing, Default Post Date and Time, OS Integration, GP Remove Powered By, Admin Posts List Tag Filter, Posts by Type Access, GP Machine Translate

Questions about SULly

Is SULly still maintained?

No. Last release 1 Jun 2024, over 2 years ago.

Who owns SULly, and has it changed hands?

No change recorded.

Was SULly removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is SULly safe?

4 known vulnerabilities, all fixed (latest in 4.3.1). Not on the exploited list.

Is the latest SULly update safe to install?

No ownership change before 4.4. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue