Skip to content
PluginCanary

Videopack

by Kyle Gilman · 10,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 12 Oct 2026, 5 releases in 24 months, no unpatched vulnerabilities.

98/ 100 Canary Score
Sub-scores for Videopack
Ownership100
Maintenance100
Security95
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Videopack still maintained?
Yes. Last release 12 Oct 2026, 5 releases in the last 24 months. 12 Oct 2026 · wordpress.org
Who owns Videopack, and has it changed hands?
No change recorded. Main committer kylegilman since Oct 2011. 4 Nov 2026 · SVN log
Was Videopack removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Videopack safe?
5 known vulnerabilities, all fixed (latest in 4.10.4). Not on the exploited list. 16 Jul 2025 · Wordfence Intelligence
Is the latest Videopack update safe to install?
No ownership change before 4.10.7. No one-star spike after it. 12 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
kylegilman9 Oct 2011 to 12 Oct 2026, 334 commits

1 committer recorded. No ownership change since 2011.

Maintenance

Last release
23 days ago
Releases, 24 months
5
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter
Releases per quarter for Videopack
Q1 20246
Q2 20242
Q3 20240
Q4 20240
Q1 20251
Q2 20250
Q3 20251
Q4 20250
Q1 20261
Q2 20260
Q3 20261
Q4 20261

Last release 12 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.8.

Average rating stayed at 5.0 between Q2 2025 and Q1 2026.

Rating distribution
5 star59
4 star1
3 star0
2 star0
1 star3

Security record

1 vulnerability in 24 months (5 on record), patched (latest fixed in 4.10.4).

Show 5 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
16 Jul 2025Videopack <= 4.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.10.34.10.4Patched before disclosure
4 Mar 2022Freemius SDK <= 2.4.2 - Missing Authorization Checks6.3< 4.7.44.7.4Patched before disclosure
14 May 2015VideoJS (Various Versions) - Cross-Site Scripting6.1< 4.14.1Patched before disclosure
20 Feb 2012Videopack (formerly Video Embed & Thumbnail Generator) < 2.0 - Remote Code Execution7.2< 2.02.01
20 Feb 2012Videopack (formerly Video Embed & Thumbnail Generator) <= 1.1 - Full Path Disclosure5.3<= 1.12.01

Changelog mentions of security fixes: 4.10.6 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Videopack
4 May 2026209
11 May 2026359
18 May 2026334
25 May 2026497
1 Jun 2026319
8 Jun 2026733
15 Jun 2026323
22 Jun 2026322
29 Jun 2026356
6 Jul 2026294
13 Jul 2026277
20 Jul 2026332
27 Jul 2026343
3 Aug 2026353
10 Aug 2026337
17 Aug 2026319
24 Aug 20265,846
31 Aug 20261,042
7 Sep 2026736
14 Sep 2026904
21 Sep 2026717
28 Sep 2026609
5 Oct 2026615
12 Oct 20265,345
19 Oct 20261,482
26 Oct 20261,270
2 Nov 2026135

Weekly downloads over the last 4 weeks are 128% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Easy Video PlayerScore 100 · 20,000+Video GalleryScore 100 · 10,000+Video PopupScore 100 · 10,000+

Facts

Version4.10.7
AuthorKyle Gilman
Added9 Oct 2011
Last updated12 Oct 2026
Active installs10,000+
Requires WordPress5.9
Tested up to7.1.4
Requires PHP7.2
CategoryContent Management > Video & Podcast Management
Tagsvideo, thumbnail, resolutions, video player, video gallery

Other plugins by this author: Noindex Password-Protected Posts

Questions

Is Videopack still maintained?

Yes. Last release 12 Oct 2026, 5 releases in the last 24 months.

Who owns Videopack, and has it changed hands?

No change recorded. Main committer kylegilman since Oct 2011.

Was Videopack removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Videopack safe?

5 known vulnerabilities, all fixed (latest in 4.10.4). Not on the exploited list.

Is the latest Videopack update safe to install?

No ownership change before 4.10.7. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue