WebP Express
Healthy: tested up to WordPress 6.9.11, 2 major versions behind 7.1.4.
| Ownership | 100 |
|---|---|
| Maintenance | 90 |
| Security | 85 |
| Support | 70 |
| Reputation | 85 |
Active signals
Facts we detected, with links to the source.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| rosell.dk | 1 Aug 2018 to 18 Oct 2026, 274 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 17 days ago
- Releases, 24 months
- 7
- Tested up to
- 6.9 vs 7.1
- Requires PHP
- 5.6 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 1 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 4 |
| Q1 2026 | 1 |
| Q2 2026 | 1 |
| Q3 2026 | 0 |
| Q4 2026 | 1 |
Last release 18 Oct 2026. Tested up to 6.9, 2 major versions behind WordPress 7.1.
Support
0% of 4 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 20 Oct 2026 | WebP Express <= 0.25.15 - Unauthenticated Stored Cross-Site Scripting | 7.2 | <= 0.25.15 | 0.25.16 | 0 |
| 3 Dec 2025 | WebP Express <= 0.25.9 - Unauthenticated Information Exposure | 5.3 | <= 0.25.9 | 0.25.11 | 19 |
| 26 Jun 2019 | WebP Express <= 0.14.10 - Authenticated Stored Cross-Site Scripting | 5.4 | < 0.14.11 | 0.14.11 | 0 |
| 11 Dec 2018 | WebP Express < 0.14.11 - Arbitrary File Read | 7.5 | < 0.14.11 | 0.14.11 | 196 |
Source: Wordfence Intelligence.
Reputation
| Q1 2024 | 5.0 |
|---|---|
| Q2 2024 | 5.0 |
| Q3 2024 | 5.0 |
| Q4 2024 | 5.0 |
| Q2 2025 | 5.0 |
| Q4 2025 | 5.0 |
| Q2 2026 | 2.0 |
| Q3 2026 | 5.0 |
Average rating stayed at 5.0 between Q1 2024 and Q3 2026.
| 5 star | 131 |
|---|---|
| 4 star | 6 |
| 3 star | 2 |
| 2 star | 7 |
| 1 star | 16 |
- causes conflicts · 2 stars · 19 Apr 2026
- Useless waste of time · 1 star · 31 Oct 2023
- Falha na instalação · 1 star · 31 Oct 2023
Momentum
300,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 3,098 |
|---|---|
| 11 May 2026 | 6,484 |
| 18 May 2026 | 6,718 |
| 25 May 2026 | 6,492 |
| 1 Jun 2026 | 5,755 |
| 8 Jun 2026 | 6,123 |
| 15 Jun 2026 | 82,824 |
| 22 Jun 2026 | 32,432 |
| 29 Jun 2026 | 18,995 |
| 6 Jul 2026 | 18,486 |
| 13 Jul 2026 | 12,972 |
| 20 Jul 2026 | 13,925 |
| 27 Jul 2026 | 11,401 |
| 3 Aug 2026 | 11,553 |
| 10 Aug 2026 | 9,635 |
| 17 Aug 2026 | 9,421 |
| 24 Aug 2026 | 9,340 |
| 31 Aug 2026 | 8,388 |
| 7 Sep 2026 | 7,240 |
| 14 Sep 2026 | 7,245 |
| 21 Sep 2026 | 7,362 |
| 28 Sep 2026 | 7,599 |
| 5 Oct 2026 | 6,915 |
| 12 Oct 2026 | 33,701 |
| 19 Oct 2026 | 81,740 |
| 26 Oct 2026 | 27,567 |
| 2 Nov 2026 | 3,351 |
Weekly downloads over the last 4 weeks are 116% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 0.25.16 |
|---|---|
| Author | rosell.dk |
| Added | 1 Aug 2018 |
| Last updated | 18 Oct 2026 |
| Active installs | 300,000+ |
| Requires WordPress | 4.0 |
| Tested up to | 6.9.11 |
| Requires PHP | 5.6 |
| Category | Performance & Optimization > Image Optimization & Compression |
| Tags | webp, images, performance |
Questions
Is WebP Express still maintained?
WebP Express was last updated on 18 Oct 2026. Its Canary status is Healthy.
Is WebP Express safe?
WebP Express has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns WebP Express?
The wordpress.org author is rosell.dk. Recent committers: rosell.dk, plugin-master. We have recorded no ownership change.
What can I use instead of WebP Express?
Plugins in the same category with a higher Canary Score: Modern Image Formats, CompressX - AVIF & WebP Converter, Media Replacement, Cimo - Free Instant Image Optimizer & WebP Converter, Imagify Image Optimization: Optimize Images | Compress & Convert to WebP/AVIF, reSmush.it : The original free image compressor and optimizer plugin.