Skip to content
PluginCanary

WP-dTree

by ulfben · 2,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 29 Oct 2026, 6 releases in 24 months, no unpatched vulnerabilities.

96/ 100 Canary Score
Sub-scores for WP-dTree
Ownership100
Maintenance100
Security90
SupportNo data
ReputationNo data

How the score works

Quick answers

Is WP-dTree still maintained?
Yes. Last release 29 Oct 2026, 6 releases in the last 24 months. 29 Oct 2026 · wordpress.org
Who owns WP-dTree, and has it changed hands?
No change recorded. Main committer ulfben since Oct 2010. 3 Nov 2026 · SVN log
Was WP-dTree removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is WP-dTree safe?
3 known vulnerabilities, all fixed (latest in 4.5.0). Not on the exploited list. 4 Sep 2023 · Wordfence Intelligence
Is the latest WP-dTree update safe to install?
No ownership change before 4.5.5. No one-star spike after it. 29 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
ulfben29 Oct 2010 to 29 Oct 2026, 69 commits

1 committer recorded. No ownership change since 2007.

Maintenance

Last release
6 days ago
Releases, 24 months
6
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for WP-dTree
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20266

Last release 29 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.8.

Rating distribution
5 star24
4 star0
3 star0
2 star0
1 star1

Security record

3 vulnerabilities on record, all patched (latest fixed in 4.5.0).

Show 3 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
4 Sep 2023WP-dTree <= 4.4.5 - Cross-Site Request Forgery4.3<= 4.4.54.5.01136
1 Sep 2023WP-dTree <= 4.4.5 - Reflected Cross-Site Scripting6.1<= 4.4.54.5.01139
19 Apr 2023WP-dTree <= 4.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings4.4<= 4.4.54.5.01274

Changelog mentions of security fixes: 4.5.0 (CSRF); 4.5.5 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP-dTree
4 May 202613
11 May 20264
18 May 20266
25 May 20261
1 Jun 20266
8 Jun 202657
15 Jun 20265
22 Jun 20262
29 Jun 202612
6 Jul 20265
13 Jul 20267
20 Jul 20266
27 Jul 20265
3 Aug 20268
10 Aug 20268
17 Aug 20262
24 Aug 20265
31 Aug 20267
7 Sep 20262
14 Sep 20267
21 Sep 20263
28 Sep 202611
5 Oct 20269
12 Oct 2026569
19 Oct 20261,277
26 Oct 2026747
2 Nov 2026103

Weekly downloads over the last 4 weeks are 530% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

WP Responsive MenuScore 100 · 30,000+WP Bottom MenuScore 100 · 20,000+WPS Menu ExporterScore 100 · 10,000+Menu DuplicatorScore 100 · 10,000+Simple Floating MenuScore 100 · 10,000+

Facts

Version4.5.5
Authorulfben
Added8 Sep 2007
Last updated29 Oct 2026
Active installs2,000+
Requires WordPress6.0.1
Tested up to7.1.4
Requires PHP7.4
Categorynot stated
Tagstree, archive, sidebar, category, navigation

Other plugins by this author: Custom Upload Dir, Flash Gallery, Bulk-Select Featured Image, Upload Unzipper, WP-HideRefer, Only Self Pings, Exhibit to WP Gallery, Daily Upload Dir, Content Trees

Questions

Is WP-dTree still maintained?

Yes. Last release 29 Oct 2026, 6 releases in the last 24 months.

Who owns WP-dTree, and has it changed hands?

No change recorded. Main committer ulfben since Oct 2010.

Was WP-dTree removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is WP-dTree safe?

3 known vulnerabilities, all fixed (latest in 4.5.0). Not on the exploited list.

Is the latest WP-dTree update safe to install?

No ownership change before 4.5.5. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue