Skip to content
PluginCanary

WP Docs

by Fahad Mahmood · 1,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: vulnerability published 9 Sep 2026, fixed in 2.3.4.

84/ 100 Canary Score
Sub-scores for WP Docs
Ownership100
Maintenance100
Security70
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 9 Sep 2026, fixed in 2.3.4. Update to version 2.3.4 or later.9 Sep 2026Evidence
  • InfoSEC-36 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
fahadmahmood9 Feb 2016 to 2 Nov 2026, 159 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
yesterday
Releases, 24 months
36
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for WP Docs
Q1 20240
Q2 202421
Q3 20240
Q4 202413
Q1 202515
Q2 20250
Q3 20250
Q4 20250
Q1 20262
Q2 20261
Q3 20263
Q4 20262

Last release 2 Nov 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
9 Sep 2026WP Docs <= 2.3.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 2.3.32.3.47
15 Apr 2026WP Docs <= 2.2.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpdocs_options[icon_size]'6.4<= 2.2.92.3.00
21 Jan 2026WP Docs <= 2.2.8 - Missing Authorization4.3<= 2.2.82.2.90
29 Mar 2025WP Docs <= 2.2.6 - Missing Authorization4.3<= 2.2.62.2.70
3 Jan 2025WP Docs <= 2.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 2.2.12.2.20
20 Dec 2024WP Docs <= 2.2.0 - Authenticated (Subscriber+) Time-Based SQL Injection via 'dir_id'6.5<= 2.2.02.2.10
6 Jun 2024WP Docs <= 2.1.3 - Reflected Cross-Site Scripting6.1<= 2.1.32.1.4294
6 Jun 2024WP Docs <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.1.32.1.4294
2 May 2023WP Docs <= 1.9.9 - Reflected Cross-Site Scripting6.1< 2.0.02.0.0351
19 Apr 2023WP Docs <= 1.9.8 - Missing Authorization via multiple AJAX actions6.3<= 1.9.81.9.9364
18 Apr 2023WP Docs <= 1.9.8 - Cross-Site Request Forgery to folder management4.3<= 1.9.81.9.9365

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.8 from 18 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star16
4 star1
3 star0
2 star1
1 star0

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP Docs
4 May 202641
11 May 202692
18 May 202691
25 May 202695
1 Jun 2026669
8 Jun 2026197
15 Jun 2026106
22 Jun 202687
29 Jun 202693
6 Jul 2026119
13 Jul 202670
20 Jul 202669
27 Jul 202673
3 Aug 202694
10 Aug 202681
17 Aug 202696
24 Aug 202681
31 Aug 202695
7 Sep 20261,074
14 Sep 2026863
21 Sep 2026239
28 Sep 2026201
5 Oct 2026139
12 Oct 2026141
19 Oct 2026197
26 Oct 2026811
2 Nov 2026207

Weekly downloads over the last 4 weeks are 50% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Echo Knowledge Base - Documentation, FAQs, Chat & Smart SearchScore 88 · 10,000+Knowledge Base documentation & wiki plugin - BasePress DocsScore 87 · 2,000+

Facts

Version2.3.6
AuthorFahad Mahmood
Added9 Feb 2016
Last updated2 Nov 2026
Active installs1,000+
Requires WordPress5.8
Tested up to7.1.4
Requires PHP7.4
CategoryContent Management > Document Management & Downloads
Tagswp docs, directory, documents, library folders, memphis-documents-library

Other plugins by this author: WP Sort Order, WP Datepicker, WP Header Images, RSS Feed Widget, External Store for Shopify, Injection Guard, Stock Locations for WooCommerce, Products Coming Soon for WooCommerce, Easy Upload Files During Checkout, Export Customers Data, Export Variable Products, Alphabetic Pagination

Questions

Is WP Docs still maintained?

WP Docs was last updated on 2 Nov 2026. Its Canary status is Healthy.

Is WP Docs safe?

WP Docs has no open unpatched vulnerabilities on record. 6 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns WP Docs?

The wordpress.org author is Fahad Mahmood. Recent committers: fahadmahmood, plugin-master. We have recorded no ownership change.

What can I use instead of WP Docs?

Plugins in the same category with a higher Canary Score: Echo Knowledge Base - Documentation, FAQs, Chat & Smart Search, Knowledge Base documentation & wiki plugin - BasePress Docs.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue