Skip to content
PluginCanary

Nested Pages

by Hook & Filter · 90,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: vulnerability published 30 Sep 2026, fixed in 3.3.3.

85/ 100 Canary Score
Sub-scores for Nested Pages
Ownership100
Maintenance100
Security75
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 30 Sep 2026, fixed in 3.3.3. Update to version 3.3.3 or later.30 Sep 2026Evidence
  • InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
kylephillips23 Oct 2014 to 25 Sep 2026, 395 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
39 days ago
Releases, 24 months
9
Tested up to
7.1 current
Requires PHP
8.0 supported 8.2+
Releases per quarter for Nested Pages
Q1 20241
Q2 20240
Q3 20241
Q4 20242
Q1 20253
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20265
Q4 20260

Last release 25 Sep 2026. Tested with WordPress 7.1 (current).

Support

0% of 2 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
30 Sep 2026Nested Pages <= 3.3.2 - Authenticated (Contributor+) PHP Object Injection7.5<= 3.3.23.3.30
27 Jul 2026Nested Pages <= 3.2.14 - Authenticated (Editor+) Stored Cross-Site Scripting4.4<= 3.2.143.2.150
2 Mar 2025Nested Pages <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting4.4<= 3.2.123.2.130
24 Jan 2025Nested Pages <= 3.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 3.2.93.2.100
9 Oct 2024Nested Pages <= 3.2.8 - Authenticated (Editor+) Stored Cross-Site Scripting4.4<= 3.2.83.2.90
3 Jul 2024Nested Pages <= 3.2.7 - Cross-Site Request Forgery to Local File Inclusion8.8<= 3.2.73.2.80
1 Dec 2023Nested Pages <= 3.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 3.2.63.2.735
30 May 2023Nested Pages <= 3.2.3 - Missing Authorization to Authenticated (Editor+) Plugin Settings Reset3.8<= 3.2.33.2.41
6 Jun 2022Nested Pages <= 3.1.20 - Stored Cross-Site Scripting4.8< 3.1.213.1.210
25 Aug 2021Nested Pages <= 3.1.15 - Cross-Site Request Forgery to Arbitrary Post Deletion and Modification8.1<= 3.1.153.1.160
25 Aug 2021Nested Pages <= 3.1.15 - Open Redirect4.7<= 3.1.153.1.160
26 Mar 2019Nested Pages <= 3.0.7 - Missing Authorization6.4<= 3.0.73.0.81

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Nested Pages
Q1 20242.0
Q2 20245.0
Q3 20245.0
Q1 20255.0
Q2 20252.0
Q4 20251.0
Q2 20264.0

Average rating rose from 2.0 to 4.0 between Q1 2024 and Q2 2026.

Rating distribution
5 star109
4 star3
3 star6
2 star7
1 star1
Latest low reviews

Momentum

90,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Nested Pages
4 May 20261,046
11 May 20262,105
18 May 20261,665
25 May 20261,563
1 Jun 20261,629
8 Jun 20261,643
15 Jun 20261,530
22 Jun 20262,069
29 Jun 20261,659
6 Jul 20261,679
13 Jul 20261,688
20 Jul 202663,281
27 Jul 202611,894
3 Aug 20269,614
10 Aug 20265,701
17 Aug 202636,218
24 Aug 202613,764
31 Aug 202635,645
7 Sep 202611,183
14 Sep 20269,124
21 Sep 202633,608
28 Sep 202615,382
5 Oct 202610,849
12 Oct 20265,167
19 Oct 20267,497
26 Oct 20265,952
2 Nov 2026863

Weekly downloads over the last 4 weeks are 55% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

BrikPanel: WooCommerce Dashboard & Analytics, Abandoned Cart Recovery, Order Export, Inventory Management & Bulk EditorScore 95 · 1,000+Custom Login Page CustomizerScore 93 · 50,000+Block Visibility - Conditional Visibility Control for the Block EditorScore 93 · 40,000+Hide Admin Bar Based on User Roles - Disable the WordPress Toolbar by Role or CapabilityScore 93 · 20,000+CMS Tree Page View - Reorder Pages with a Drag-and-Drop TreeScore 92 · 50,000+

Facts

Version3.3.3
AuthorHook & Filter
Added23 Oct 2014
Last updated25 Sep 2026
Active installs90,000+
Requires WordPress3.8
Tested up to7.1.4
Requires PHP8.0
CategorySite Administration & Utilities > Site Migration & Cloning
Tagsadmin, pages, nested, page tree, tree view

Other plugins by this author: Favorites

Questions

Is Nested Pages still maintained?

Nested Pages was last updated on 25 Sep 2026. Its Canary status is Healthy.

Is Nested Pages safe?

Nested Pages has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Nested Pages?

The wordpress.org author is Hook & Filter. Recent committers: kylephillips, plugin-master. We have recorded no ownership change.

What can I use instead of Nested Pages?

Plugins in the same category with a higher Canary Score: BrikPanel: WooCommerce Dashboard & Analytics, Abandoned Cart Recovery, Order Export, Inventory Management & Bulk Editor, Custom Login Page Customizer, Block Visibility - Conditional Visibility Control for the Block Editor, Hide Admin Bar Based on User Roles - Disable the WordPress Toolbar by Role or Capability, CMS Tree Page View - Reorder Pages with a Drag-and-Drop Tree.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue