Skip to content
PluginCanary

Vigilant

Vigilant - 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner…
by Fernando Tellado · 3,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 1 Nov 2026, 97 releases in 24 months, no unpatched vulnerabilities.

93/ 100 Canary Score
Sub-scores for Vigilant
Ownership100
Maintenance100
Security90
Support100
Reputation70

How the score works

Quick answers

Is Vigilant still maintained?
Yes. Last release 1 Nov 2026, 97 releases in the last 24 months. 1 Nov 2026 · wordpress.org
Who owns Vigilant, and has it changed hands?
No change recorded. Main committer fernandot since Feb 2026. 3 Nov 2026 · SVN log
Was Vigilant removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Vigilant safe?
1 known vulnerability, fixed (latest in 2.10.3). Not on the exploited list. 10 Sep 2026 · Wordfence Intelligence
Is the latest Vigilant update safe to install?
No ownership change before 3.0.10. No one-star spike after it. 1 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master11 Feb 2026 to 11 Feb 2026, 1 commits
fernandot11 Feb 2026 to 1 Nov 2026, 126 commits

2 committers recorded. No ownership change since 2026.

Maintenance

Last release
3 days ago
Releases, 24 months
97
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Vigilant
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 202630
Q2 202628
Q3 202630
Q4 20269

Last release 1 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 5.0.

Rating distribution
5 star24
4 star0
3 star0
2 star0
1 star0

Security record

1 vulnerability in 24 months, patched (latest fixed in 2.10.3).

Show 1 patched vulnerability
PublishedIssueCVSSAffectedFixed inDays to patch
10 Sep 2026Vigilant <= 2.10.2 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.10.22.10.3Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 25 support threads resolved in the last 2 months.

Momentum

3,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Vigilant
4 May 2026806
11 May 2026905
18 May 2026839
25 May 20261,526
1 Jun 2026393
8 Jun 2026320
15 Jun 20261,414
22 Jun 20261,087
29 Jun 20262,159
6 Jul 2026525
13 Jul 2026968
20 Jul 2026565
27 Jul 2026380
3 Aug 20261,297
10 Aug 20261,324
17 Aug 20262,986
24 Aug 20263,761
31 Aug 20261,804
7 Sep 20265,079
14 Sep 20263,997
21 Sep 20262,568
28 Sep 20262,227
5 Oct 20264,436
12 Oct 20263,460
19 Oct 20262,905
26 Oct 20263,121
2 Nov 20261,318

Weekly downloads over the last 4 weeks are 40% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

IP Location BlockScore 96 · 10,000+Wordfence SecurityScore 94 · 5,000,000+

Facts

Version3.0.10
AuthorFernando Tellado
Added11 Feb 2026
Last updated1 Nov 2026
Active installs3,000+
Requires WordPress6.2
Tested up to7.1.4
Requires PHP7.4
Categorynot stated
Tags2FA, malware, scanner, firewall, security

Other plugins by this author: No Gutenberg? - Choose Where to Use the Block Editor or the Classic Editor, Show only lowest prices in variable products for WooCommerce, Lightbox Images for Divi Enhanced, VigIA - AI Visibility, Analytics & Control, DietPress, EU Withdrawal and Legal Guarantee Compliance, Share Buttons & AI-powered Summaries, Easy Actions Scheduler Cleaner, AI Content Signals, Visibility - Lightweight SEO, AEO and GEO for Search and AI, Widget Visibility Control, Cookies, Terms & Conditions Consent Log

Questions

Is Vigilant still maintained?

Yes. Last release 1 Nov 2026, 97 releases in the last 24 months.

Who owns Vigilant, and has it changed hands?

No change recorded. Main committer fernandot since Feb 2026.

Was Vigilant removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Vigilant safe?

1 known vulnerability, fixed (latest in 2.10.3). Not on the exploited list.

Is the latest Vigilant update safe to install?

No ownership change before 3.0.10. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue