User Verification by PickPlugins
Avoid: User Verification by PickPlugins is closed on wordpress.org and no longer gets updates.
Capped at 10 because the plugin is closed.
| Ownership | 100 |
|---|---|
| Maintenance | 10 |
| Security | 10 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 17 Aug 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.31 Aug 2026Evidence
- CriticalCLS-1Closed on wordpress.org on 6 Aug 2026, reason: security issue. Replace this plugin. It no longer receives updates from wordpress.org.6 Aug 2026Evidence
- InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- not recorded
- Releases, 24 months
- 0
- Tested up to
- not stated vs 7.1
- Requires PHP
- not stated supported 8.2+
Release history builds as we see new versions.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 17 Aug 2026 | User Verification <= 2.0.47 - Unauthenticated Insecure Direct Object Reference | 5.3 | <= 2.0.47 | No fix | n/a |
| 1 May 2026 | User Verification by PickPlugins <= 2.0.46 - Unauthenticated Authentication Bypass via OTP Verification REST API Endpoint | 9.8 | <= 2.0.46 | 2.0.47 | n/a |
| 23 Mar 2026 | User Verification by PickPlugins <= 2.0.45 - Missing Authorization | 5.3 | <= 2.0.45 | 2.0.46 | n/a |
| 4 Dec 2025 | Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification <= 2.0.44 - Authentication Bypass to Account Takeover | 9.8 | <= 2.0.44 | 2.0.45 | n/a |
| 28 Dec 2022 | User Verification <= 1.0.93 - Privilege Escalation | 9.8 | <= 1.0.93 | 1.0.94 | n/a |
Source: Wordfence Intelligence.
Reputation
No ratings yet.
Momentum
Fewer than 10 active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | not stated |
|---|---|
| Author | not stated |
| Added | not stated |
| Last updated | not stated |
| Active installs | Fewer than 10 |
| Requires WordPress | not stated |
| Tested up to | not stated |
| Requires PHP | not stated |
| Category | User Management & Authentication > User Registration & Login |
| Tags | not stated |
Questions
Is User Verification by PickPlugins still maintained?
No. User Verification by PickPlugins was closed on wordpress.org on 6 Aug 2026 (security issue) and gets no updates there.
Is User Verification by PickPlugins safe?
User Verification by PickPlugins has 1 published vulnerability with no patched version. Its Canary status is Avoid.
Who owns User Verification by PickPlugins?
The wordpress.org author is not listed. We have recorded no ownership change.
What can I use instead of User Verification by PickPlugins?
We have no healthier plugin in the same category on record yet.