Wise Chat
Healthy: released 11 days ago, tested with WordPress 7.1, no open vulnerabilities.
Based on 3 of 5 areas
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 60 |
| Support | No data |
| Reputation | No data |
Active signals
Open issues right now, with links to the source.
- InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
History: 8 past vulnerabilities, all patched. Patched issues are listed in the Security record, not here.
Quick answers
- Is Wise Chat still maintained?
- Yes. Last release 25 Oct 2026, 10 releases in the last 24 months. 25 Oct 2026 · wordpress.org
- Who owns Wise Chat, and has it changed hands?
- No change recorded. Main committer marcin.lawrowski since Dec 2014. 3 Nov 2026 · SVN log
- Was Wise Chat removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is Wise Chat safe?
- 8 known vulnerabilities, all fixed (latest in 3.4.4). Not on the exploited list. 5 Oct 2026 · Wordfence Intelligence
- Is the latest Wise Chat update safe to install?
- No ownership change before 3.4.5. No one-star spike after it. 25 Oct 2026 · Release history
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| marcin.lawrowski | 6 Dec 2014 to 25 Oct 2026, 121 commits |
|---|
1 committer recorded. No ownership changes recorded since 2014.
Maintenance
- Last release
- 11 days ago
- Releases, 24 months
- 10
- Tested up to
- 7.2 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 2 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 1 |
| Q2 2025 | 3 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 1 |
| Q2 2026 | 0 |
| Q3 2026 | 1 |
| Q4 2026 | 4 |
Last release 25 Oct 2026. Tested with WordPress 7.1 (current).
Support
- Resolved, last 2 months
- 0%
- Threads, last 2 months
- 1
Trend appears after 8 weekly snapshots.
Security record
5 vulnerabilities in 24 months (8 on record), all patched (latest fixed in 3.4.4).
Show 8 patched vulnerabilities
| Date | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 5 Oct 2026 | Missing Authorization | 4.3 | <= 3.4.3 | 3.4.4 | 7 |
| 8 Sep 2026 | Unauthenticated PHP Object Injection | 8.1 | <= 3.4.2 | 3.4.3 | 29 |
| 18 Aug 2026 | Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 3.4.1 | 3.4.2 | 49 |
| 16 Jun 2025 | Unauthenticated Stored Cross-Site Scripting via X-Forwarded-For Header | 7.2 | <= 3.3.4 | 3.3.5 | Before disclosure |
| 16 May 2025 | Unauthenticated Sensitive Information Exposure Through Unprotected Directory | 7.5 | <= 3.3.2 | 3.3.4 | Before disclosure |
| 9 May 2023 | Cross-Site Request Forgery | 4.3 | <= 3.1.3 | 3.1.4 | Before disclosure |
| 9 Jul 2020 | CSV Injection | 5.5 | <= 2.8.3 | 2.8.4 | Before disclosure |
| 25 Jan 2019 | Reverse Tabnabbing | 6.1 | < 2.7 | 2.7 | Before disclosure |
Changelog mentions of security fixes: 3.4.1 (XSS); 3.4.2 (XSS); 3.4.3 (security); 3.4.5 (security).
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Reputation
Last 90 days: no reviews. Lifetime: 4.4.
| Last 90 days | No reviews |
|---|---|
| Lifetime | 4.4 |
| 5 star | 81 |
|---|---|
| 4 star | 9 |
| 3 star | 2 |
| 2 star | 5 |
| 1 star | 8 |
Momentum
- Active installs
- 4,000+
- Downloads, last full week
- 2,297
| 4 May 2026 | 100 |
|---|---|
| 11 May 2026 | 254 |
| 18 May 2026 | 246 |
| 25 May 2026 | 276 |
| 1 Jun 2026 | 222 |
| 8 Jun 2026 | 239 |
| 15 Jun 2026 | 206 |
| 22 Jun 2026 | 185 |
| 29 Jun 2026 | 172 |
| 6 Jul 2026 | 181 |
| 13 Jul 2026 | 175 |
| 20 Jul 2026 | 217 |
| 27 Jul 2026 | 315 |
| 3 Aug 2026 | 325 |
| 10 Aug 2026 | 263 |
| 17 Aug 2026 | 289 |
| 24 Aug 2026 | 267 |
| 31 Aug 2026 | 278 |
| 7 Sep 2026 | 464 |
| 14 Sep 2026 | 2,256 |
| 21 Sep 2026 | 860 |
| 28 Sep 2026 | 626 |
| 5 Oct 2026 | 4,276 |
| 12 Oct 2026 | 2,463 |
| 19 Oct 2026 | 1,160 |
| 26 Oct 2026 | 2,297 |
Weekly downloads over the last 4 weeks are 256% above the 26-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score. Never sponsored.
Facts
- Version
- 3.4.5
- Author
- Marcin
- Added
- 6 Dec 2014
- Last updated
- 25 Oct 2026
- Active installs
- 4,000+
- Requires WordPress
- 6.2
- Tested up to
- 7.2
- Requires PHP
- 7.4
- Category
- Communication & Messaging > SMTP & Email Delivery Services
- Tags
- chat, social, AI chat, webchat, gpt chat
Other plugins by this author: Wise Analytics
Questions about Wise Chat
Is Wise Chat still maintained?
Yes. Last release 25 Oct 2026, 10 releases in the last 24 months.
Who owns Wise Chat, and has it changed hands?
No change recorded. Main committer marcin.lawrowski since Dec 2014.
Was Wise Chat removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is Wise Chat safe?
8 known vulnerabilities, all fixed (latest in 3.4.4). Not on the exploited list.
Is the latest Wise Chat update safe to install?
No ownership change before 3.4.5. No one-star spike after it.