wp-Monalisa
Healthy: maintained, last release 6 Dec 2025, 1 release in 24 months, no unpatched vulnerabilities.
Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4.
| Ownership | 100 |
|---|---|
| Maintenance | 50 |
| Security | 100 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is wp-Monalisa still maintained?
- Yes. Last release 6 Dec 2025, 1 release in the last 24 months. 6 Dec 2025 · wordpress.org
- Who owns wp-Monalisa, and has it changed hands?
- No change recorded. Main committer tuxlog since May 2009. 3 Nov 2026 · SVN log
- Was wp-Monalisa removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is wp-Monalisa safe?
- 2 known vulnerabilities, all fixed (latest in 6.5). Not on the exploited list. 9 Oct 2024 · Wordfence Intelligence
- Is the latest wp-Monalisa update safe to install?
- No ownership change before 6.6. No one-star spike after it. 18 Oct 2025 · Release history
Active signals
Facts we detected, with links to the source.
- WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| tuxlog | 20 May 2009 to 17 Aug 2026, 167 commits |
|---|
1 committer recorded. No ownership change since 2009.
Maintenance
- Last release
- 11 months ago
- Releases, 24 months
- 1
- Tested up to
- 6.9 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 1 |
| Q3 2024 | 1 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 1 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 6 Dec 2025. Tested up to 6.9, 2 major versions behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 4.8.
| 5 star | 24 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 1 |
Security record
2 vulnerabilities on record, all patched (latest fixed in 6.5).
Show 2 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 9 Oct 2024 | wp-Monalisa <= 6.4 - Cross-Site Request Forgery | 4.3 | <= 6.4 | 6.5 | n/a |
| 28 Sep 2022 | wp-Monalisa <= 6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting | 5.5 | <= 6.1 | 6.2 | n/a |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
0% of 1 support threads resolved in the last 2 months.
Momentum
600+ active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 6.6 |
|---|---|
| Author | tuxlog |
| Added | 20 May 2009 |
| Last updated | 6 Dec 2025 |
| Active installs | 600+ |
| Requires WordPress | 4.0 |
| Tested up to | 6.9.11 |
| Requires PHP | not stated |
| Category | Communication & Messaging > Transactional Email |
| Tags | emoji, editor, smiley, comments, emoticon |
Other plugins by this author: wp-forecast, wp-greet, wp-championship, LazyCaptcha
Questions
Is wp-Monalisa still maintained?
Yes. Last release 6 Dec 2025, 1 release in the last 24 months.
Who owns wp-Monalisa, and has it changed hands?
No change recorded. Main committer tuxlog since May 2009.
Was wp-Monalisa removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is wp-Monalisa safe?
2 known vulnerabilities, all fixed (latest in 6.5). Not on the exploited list.
Is the latest wp-Monalisa update safe to install?
No ownership change before 6.6. No one-star spike after it.