Skip to content
PluginCanary

WebFinger

by Matthias Pfefferle · 1,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 26 Aug 2026, 4 releases in 24 months, no unpatched vulnerabilities.

100/ 100 Canary Score
Sub-scores for WebFinger
Ownership100
Maintenance100
Security100
SupportNo data
ReputationNo data

How the score works

Quick answers

Is WebFinger still maintained?
Yes. Last release 26 Aug 2026, 4 releases in the last 24 months. 26 Aug 2026 · wordpress.org
Who owns WebFinger, and has it changed hands?
No change recorded. Main committer pfefferle since Apr 2010. 3 Nov 2026 · SVN log
Was WebFinger removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is WebFinger safe?
No known vulnerabilities on record. 3 Nov 2026 · Wordfence Intelligence
Is the latest WebFinger update safe to install?
No ownership change before 4.1.0. No one-star spike after it. 26 Aug 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
pfefferle20 Apr 2010 to 26 Aug 2026, 90 commits

1 committer recorded. No ownership change since 2010.

Maintenance

Last release
2 months ago
Releases, 24 months
4
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for WebFinger
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20253
Q1 20260
Q2 20260
Q3 20261
Q4 20260

Last release 26 Aug 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 3.7.

Rating distribution
5 star2
4 star0
3 star0
2 star0
1 star1

Security record

No published vulnerabilities on record for this plugin.

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WebFinger
4 May 202624
11 May 202660
18 May 202660
25 May 202693
1 Jun 202660
8 Jun 202665
15 Jun 202679
22 Jun 202663
29 Jun 202650
6 Jul 202651
13 Jul 202662
20 Jul 202677
27 Jul 202673
3 Aug 202684
10 Aug 202687
17 Aug 2026142
24 Aug 20261,245
31 Aug 2026221
7 Sep 2026149
14 Sep 2026170
21 Sep 2026127
28 Sep 2026132
5 Oct 2026105
12 Oct 202696
19 Oct 2026164
26 Oct 2026144
2 Nov 202623

Weekly downloads over the last 4 weeks are 22% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version4.1.0
AuthorMatthias Pfefferle
Added20 Apr 2010
Last updated26 Aug 2026
Active installs1,000+
Requires WordPress6.4
Tested up to7.1.4
Requires PHP7.4
CategoryCommunication & Messaging > SMTP & Email Delivery Services
Tagsjrd, ostatus, discovery, Webfinger, activitypub

Other plugins by this author: Webmention, NodeInfo(2), Open Search Document, host-meta, Blogroll & Podroll Block, ActivityStream extension, MF2 Feeds, OpenWeb Icons

Questions

Is WebFinger still maintained?

Yes. Last release 26 Aug 2026, 4 releases in the last 24 months.

Who owns WebFinger, and has it changed hands?

No change recorded. Main committer pfefferle since Apr 2010.

Was WebFinger removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is WebFinger safe?

No known vulnerabilities on record.

Is the latest WebFinger update safe to install?

No ownership change before 4.1.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue