Skip to content
PluginCanary

Visualizer

Visualizer - Tables & Charts Manager with Built-in AI Generator
by Themeisle · 20,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 26 Oct 2026, 20 releases in 24 months, no unpatched vulnerabilities.

81/ 100 Canary Score
Sub-scores for Visualizer
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Quick answers

Is Visualizer still maintained?
Yes. Last release 26 Oct 2026, 20 releases in the last 24 months. 26 Oct 2026 · wordpress.org
Who owns Visualizer, and has it changed hands?
No change recorded. Main committer themeisle since Jun 2015. 3 Nov 2026 · SVN log
Was Visualizer removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Visualizer safe?
24 known vulnerabilities, all fixed (latest in 4.0.8). Not on the exploited list. 14 Sep 2026 · Wordfence Intelligence
Is the latest Visualizer update safe to install?
No ownership change before 4.0.10. No one-star spike after it. 26 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
themeisle2 Jun 2015 to 26 Oct 2026, 122 commits
codeinwp31 May 2016 to 17 Feb 2021, 73 commits

2 committers recorded. No ownership change since 2013.

Maintenance

Last release
9 days ago
Releases, 24 months
20
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Visualizer
Q1 20245
Q2 20249
Q3 20243
Q4 20242
Q1 20251
Q2 20252
Q3 20251
Q4 20252
Q1 20263
Q2 20263
Q3 20265
Q4 20261

Last release 26 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.4.

Average rating per quarter for Visualizer
Q2 20241.0
Q3 20243.0
Q2 20255.0
Q1 20261.0

Average rating stayed at 1.0 between Q2 2024 and Q1 2026.

Rating distribution
5 star171
4 star18
3 star8
2 star6
1 star22
Latest low reviews

Security record

12 vulnerabilities in 24 months (24 on record), all patched (latest fixed in 4.0.8).

Show 24 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
14 Sep 2026Visualizer <= 4.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.0.74.0.8Patched before disclosure
11 Sep 2026Visualizer – Tables & Charts Manager with Built-in AI Generator 4.0.0 - 4.0.5 - Authenticated (Contributor+) Insecure Direct Object Reference4.34.0.0 to 4.0.54.0.6Patched before disclosure
9 Sep 2026Visualizer – Tables & Charts Manager with Built-in AI Generator < 4.0.6 - Authenticated (Contributor+) Arbitrary File Deletion8.1< 4.0.64.0.6Patched before disclosure
20 Aug 2026Visualizer – Tables & Charts Manager with Built-in AI Generator < 4.0.7 - Missing Authorization4.3< 4.0.74.0.7Patched before disclosure
27 Jul 2026Visualizer: Tables and Charts Manager <= 4.0.5 - Authenticated (Contributor+) Server-Side Request Forgery6.4<= 4.0.54.0.6Patched before disclosure
23 Jul 2026Visualizer <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'backend-title' Parameter6.4<= 4.0.54.0.6Patched before disclosure
23 Jul 2026Visualizer – Tables & Charts Manager with Built-in AI Generator <= 4.0.1 - Authenticated (Contributor+) SQL Injection6.5<= 4.0.14.0.2Patched before disclosure
30 Jun 2026Visualizer <= 4.0.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via /visualizer/v1/action/{chart}/{type}/ REST Endpoint7.5<= 4.0.34.0.4Patched before disclosure
27 May 2026Visualizer: Tables and Charts Manager for WordPress <= 3.11.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Chart Creation and Modification via renderChartPages() and uploadData() Functions4.3<= 3.11.143.11.15Patched before disclosure
20 May 2026Visualizer: Tables and Charts Manager for WordPress < 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4< 4.0.04.0.0Patched before disclosure
1 Dec 2025Visualizer: Tables and Charts Manager for WordPress <= 3.11.12 - Authenticated (Contributor+) SQL Injection6.5<= 3.11.123.11.13Patched before disclosure
18 Feb 2025Visualizer: Tables and Charts Manager for WordPress <= 3.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Import Data From File6.4<= 3.11.83.11.9Patched before disclosure
7 Oct 2024PHPSpreadsheet Library < 2.3.0 - XXE Injection7.5<= 3.11.63.11.732
6 Jun 2024Visualizer <= 3.11.1 - Authenticated (Subscriber+) SQL Injection9.9<= 3.11.13.11.2Patched before disclosure
15 May 2024Visualizer: Tables and Charts Manager for WordPress <= 3.10.15 - Missing Authorization to Arbitrary SQL Execution8.8<= 3.10.153.11.0Patched before disclosure
13 Mar 2024Visualizer <= 3.10.5 - Reflected Cross-Site Scripting6.1<= 3.10.53.10.6Patched before disclosure
1 Feb 2024ThemeIsle SDK <= Various Versions - Missing Authorization5.3<= 3.10.63.10.75
20 Feb 2023Visualizer <= 3.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes6.4<= 3.9.43.9.5Patched before disclosure
6 Feb 2023Visualizer <= 3.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting6.4<= 3.9.13.9.2Patched before disclosure
5 Jul 2022Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization8.8<= 3.7.93.7.10Patched before disclosure
5 Jul 2022Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization8.8<= 3.7.93.7.10Patched before disclosure
31 May 2022Visualizer <= 3.7.6 - Reflected Cross-Site Scripting6.1<= 3.7.63.7.7Patched before disclosure
28 Sep 2019Visualizer: Tables and Charts Manager for WordPress <= 3.3.0 - Stored Cross-Site Scripting6.1<= 3.3.03.3.1Patched before disclosure
28 Sep 2019Visualizer: Tables and Charts Manager for WordPress <= 3.3.0 - Server-Side Request Forgery9.3<= 3.3.03.3.1Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 2 support threads resolved in the last 2 months.

Momentum

20,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Visualizer
4 May 2026592
11 May 20261,127
18 May 202610,818
25 May 20262,221
1 Jun 20261,519
8 Jun 20269,130
15 Jun 20261,892
22 Jun 20261,403
29 Jun 202610,091
6 Jul 20269,781
13 Jul 20263,444
20 Jul 20269,528
27 Jul 202610,099
3 Aug 20263,183
10 Aug 20261,574
17 Aug 20261,401
24 Aug 20261,463
31 Aug 20261,184
7 Sep 20268,032
14 Sep 20264,101
21 Sep 20262,386
28 Sep 20269,377
5 Oct 20263,428
12 Oct 20261,884
19 Oct 20262,134
26 Oct 202610,993
2 Nov 2026527

Weekly downloads over the last 4 weeks are 15% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Pricing Table by SupsysticScore 91 · 10,000+TablePressScore 90 · 600,000+Flexible Table BlockScore 90 · 40,000+Data Tables Generator by SupsysticScore 88 · 10,000+Pricing Table WordPress PluginScore 87 · 10,000+

Facts

Version4.0.10
AuthorThemeisle
Added21 Jul 2013
Last updated26 Oct 2026
Active installs20,000+
Requires WordPress5.2
Tested up to7.1.4
Requires PHP7.4
CategoryContent Management > Blog & Article Publishing
Tagscharts, tables, ai-charts, datatable, data visualization

Other plugins by this author: LightStart - Maintenance Mode, Coming Soon and Landing Page Builder, Otter Blocks - Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE, Redirection for Contact Form 7, Robin Image Optimizer - Unlimited Image Optimization, WebP & AVIF, Menu Icons by Themeisle - Add Icons to Navigation Menus, Disable Admin Notices - Hide Dashboard Notifications, Starter Sites & Templates by Neve, Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More, Woody Code Snippets - Insert PHP, CSS, JS, and Header/Footer Scripts, Titan Anti-spam & Security - Brute Force Protection, 2FA & Spam Filter, Cyrlitera - Transliteration of Links and File Names, Remove Category URL - Remove ‘category’ base from category permalinks

Questions

Is Visualizer still maintained?

Yes. Last release 26 Oct 2026, 20 releases in the last 24 months.

Who owns Visualizer, and has it changed hands?

No change recorded. Main committer themeisle since Jun 2015.

Was Visualizer removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Visualizer safe?

24 known vulnerabilities, all fixed (latest in 4.0.8). Not on the exploited list.

Is the latest Visualizer update safe to install?

No ownership change before 4.0.10. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue