WP Edit
Avoid: vulnerability published 27 Jun 2025 still has no fix after 14 days.
Capped at 39 while a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 35 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 27 Jun 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.11 Jul 2025Evidence
- CriticalMNT-1No release in 98 months (last release 15 Oct 2018). Plan a replacement if the plugin is important to your site.15 Oct 2019Evidence
- WarningMNT-2Tested up to WordPress 4.9.35, 22 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 8 years ago
- Releases, 24 months
- 0
- Tested up to
- 4.9 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 15 Oct 2018. Tested up to 4.9, 22 major versions behind WordPress 7.1.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 27 Jun 2025 | WP Edit <= 4.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting | 4.4 | <= 4.0.4 | No fix | n/a |
Source: Wordfence Intelligence.
Reputation
Average rating 5.0 in Q2 2024.
| 5 star | 107 |
|---|---|
| 4 star | 10 |
| 3 star | 5 |
| 2 star | 11 |
| 1 star | 26 |
- Cant activate transaction ID · 1 star · 7 Oct 2021
- Semi-Brilliant WP Edit · 2 stars · 2 Oct 2020
- No longer has updates for over a year! · 1 star · 19 Dec 2019
Momentum
40,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 67 |
|---|---|
| 11 May 2026 | 195 |
| 18 May 2026 | 123 |
| 25 May 2026 | 119 |
| 1 Jun 2026 | 136 |
| 8 Jun 2026 | 129 |
| 15 Jun 2026 | 117 |
| 22 Jun 2026 | 102 |
| 29 Jun 2026 | 144 |
| 6 Jul 2026 | 144 |
| 13 Jul 2026 | 107 |
| 20 Jul 2026 | 159 |
| 27 Jul 2026 | 138 |
| 3 Aug 2026 | 170 |
| 10 Aug 2026 | 153 |
| 17 Aug 2026 | 166 |
| 24 Aug 2026 | 150 |
| 31 Aug 2026 | 197 |
| 7 Sep 2026 | 174 |
| 14 Sep 2026 | 211 |
| 21 Sep 2026 | 256 |
| 28 Sep 2026 | 225 |
| 5 Oct 2026 | 233 |
| 12 Oct 2026 | 180 |
| 19 Oct 2026 | 331 |
| 26 Oct 2026 | 268 |
| 2 Nov 2026 | 50 |
Weekly downloads over the last 4 weeks are 26% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 4.0.4 |
|---|---|
| Author | Josh |
| Added | 23 Mar 2014 |
| Last updated | 15 Oct 2018 |
| Active installs | 40,000+ |
| Requires WordPress | 3.9 |
| Tested up to | 4.9.35 |
| Requires PHP | not stated |
| Category | Content Management > Blog & Article Publishing |
| Tags | button, editor, wpedit, buttons, wp edit |
Other plugins by this author: Supreme Google Webfonts, Moods Addon for Ultimate TinyMCE, Custom Welcome Messages, WP Post Status Notifications
Questions
Is WP Edit still maintained?
WP Edit was last updated on 15 Oct 2018. Its Canary status is Avoid.
Is WP Edit safe?
WP Edit has 1 published vulnerability with no patched version. Its Canary status is Avoid.
Who owns WP Edit?
The wordpress.org author is Josh. Recent committers: josh401, plugin-master. We have recorded no ownership change.
What can I use instead of WP Edit?
Plugins in the same category with a higher Canary Score: Black Studio TinyMCE Widget, AddQuicktag, Classic Editor +, Classic Editor and Classic Widgets, Re-Add Text Justify Button.