Skip to content
PluginCanary

Asset CleanUp

Asset CleanUp: Page Speed Booster
by Gabe Livan · 100,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 16 Sep 2026, 9 releases in 24 months, no unpatched vulnerabilities.

87/ 100 Canary Score
Sub-scores for Asset CleanUp
Ownership100
Maintenance100
Security70
SupportNo data
Reputation75

How the score works

Quick answers

Is Asset CleanUp still maintained?
Yes. Last release 16 Sep 2026, 9 releases in the last 24 months. 16 Sep 2026 · wordpress.org
Who owns Asset CleanUp, and has it changed hands?
No change recorded. Main committer gabelivan since Dec 2015. 4 Nov 2026 · SVN log
Was Asset CleanUp removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Asset CleanUp safe?
11 known vulnerabilities, all fixed (latest in 1.4.0.6). Not on the exploited list. 24 Sep 2026 · Wordfence Intelligence
Is the latest Asset CleanUp update safe to install?
No ownership change before 1.4.0.6. No one-star spike after it. 16 Sep 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
gabelivan3 Dec 2015 to 16 Sep 2026, 906 commits

1 committer recorded. No ownership change since 2015.

Maintenance

Last release
49 days ago
Releases, 24 months
9
Tested up to
7.1 current
Requires PHP
5.6 supported 8.2+
Releases per quarter
Releases per quarter for Asset CleanUp
Q1 20240
Q2 20240
Q3 20244
Q4 20243
Q1 20253
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20261
Q3 20262
Q4 20260

Last release 16 Sep 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (5 reviews). Lifetime: 4.9.

Average rating per quarter for Asset CleanUp
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20265.0
Q3 20264.9

Average rating fell from 5.0 to 4.9 between Q3 2025 and Q3 2026.

Rating distribution
5 star1515
4 star22
3 star6
2 star11
1 star10

Security record

5 vulnerabilities in 24 months (11 on record), all patched (latest fixed in 1.4.0.6).

Show 11 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
24 Sep 2026Asset CleanUp: Page Speed Booster <= 1.4.0.5 - Authenticated (Administrator+) Server-Side Request Forgery via 'page_url' Parameter5.5<= 1.4.0.51.4.0.6Patched before disclosure
18 Sep 2026Asset CleanUp: Page Speed Booster <= 1.4.0.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content7.2<= 1.4.0.51.4.0.6Patched before disclosure
17 Sep 2026Asset CleanUp: Page Speed Booster <= 1.4.0.5 - Cross-Site Request Forgery4.3<= 1.4.0.51.4.0.6Patched before disclosure
7 Mar 2026Asset CleanUp: Page Speed Booster <= 1.4.0.3 - Missing Authorization5.3<= 1.4.0.31.4.0.458
27 Nov 2024Asset CleanUp: Page Speed Booster <= 1.3.9.8 - Authenticated (Admin+) Server-Side Request Forgery5.5<= 1.3.9.81.3.9.96
16 Aug 2024Asset CleanUp: Page Speed Booster <= 1.3.9.3 - Missing Authorization4.3<= 1.3.9.31.3.9.4Patched before disclosure
18 Jul 2023Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get6.1<= 1.3.5.41.3.5.5Patched before disclosure
28 Sep 2022Asset CleanUp: Page Speed Booster <= 1.3.8.4 - Reflected Cross-Site Scripting6.1<= 1.3.8.41.3.8.5Patched before disclosure
3 Jan 2022Asset CleanUp <= 1.3.8.4 - Reflected Cross-Site Scripting via AJAX Action6.1< 1.3.8.51.3.8.5Patched before disclosure
3 Jan 2022Asset CleanUp <= 1.3.8.4 - Reflected Cross-Site Scripting6.1<= 1.3.8.41.3.8.5Patched before disclosure
20 Apr 2015Asset CleanUp: Page Speed Booster <= 1.3.6.6 - Reflected Cross-Site Scripting6.1< 1.3.6.71.3.6.71927

Changelog mentions of security fixes: 1.4.0.5 (security, authorization, nonce).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

100,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Asset CleanUp
4 May 202632,381
11 May 202614,274
18 May 202612,580
25 May 20266,631
1 Jun 20265,505
8 Jun 20265,642
15 Jun 20264,254
22 Jun 20263,748
29 Jun 20263,675
6 Jul 20264,345
13 Jul 20264,865
20 Jul 20263,848
27 Jul 20263,221
3 Aug 20262,956
10 Aug 20262,563
17 Aug 202635,943
24 Aug 202619,077
31 Aug 20269,095
7 Sep 20266,054
14 Sep 202652,417
21 Sep 202613,520
28 Sep 20266,864
5 Oct 20265,924
12 Oct 20264,570
19 Oct 20266,056
26 Oct 20264,427
2 Nov 2026634

Weekly downloads over the last 4 weeks are 62% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Page OptimizeScore 100 · 200,000+Performance LabScore 100 · 100,000+Speculative LoadingScore 100 · 70,000+Optimization DetectiveScore 100 · 60,000+Embed OptimizerScore 100 · 50,000+

Facts

Version1.4.0.6
AuthorGabe Livan
Added3 Dec 2015
Last updated16 Sep 2026
Active installs100,000+
Requires WordPress4.7
Tested up to7.1.4
Requires PHP5.6
CategoryPerformance & Optimization > Caching Solutions
Tagsminify css, Page Speed, unused css, Critical CSS, minify javascript

Questions

Is Asset CleanUp still maintained?

Yes. Last release 16 Sep 2026, 9 releases in the last 24 months.

Who owns Asset CleanUp, and has it changed hands?

No change recorded. Main committer gabelivan since Dec 2015.

Was Asset CleanUp removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Asset CleanUp safe?

11 known vulnerabilities, all fixed (latest in 1.4.0.6). Not on the exploited list.

Is the latest Asset CleanUp update safe to install?

No ownership change before 1.4.0.6. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue