WP Super Edit
Avoid: vulnerability published 15 May 2026 still has no fix after 14 days.
Based on 3 of 5 areas
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 25 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is WP Super Edit still maintained?
- No. Last release 7 Mar 2020, over 6 years ago. 7 Mar 2020 · wordpress.org
- Who owns WP Super Edit, and has it changed hands?
- No change recorded. 3 Nov 2026 · SVN log
- Was WP Super Edit removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is WP Super Edit safe?
- No. 2 known vulnerabilities have no fix in the current version. 15 May 2026 · Wordfence Intelligence
- Is the latest WP Super Edit update safe to install?
- No ownership change before 2.5.4. No one-star spike after it. 7 Mar 2020 · Release history
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 15 May 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.29 May 2026Evidence
- CriticalSEC-2Vulnerability published 9 Jul 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.23 Jul 2025Evidence
- CriticalMNT-1No release in 81 months (last release 7 Mar 2020). Plan a replacement if the plugin is important to your site.7 Mar 2021Evidence
- WarningMNT-2Tested up to WordPress 5.4.0, 17 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
History: 2 past vulnerabilities, 2 still unpatched in the current version.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| mrahmadawais | 10 Jan 2017 to 7 Mar 2020, 5 commits |
|---|
1 committer recorded. No ownership changes recorded since 2007.
Maintenance
- Last release
- 7 years ago
- Releases, 24 months
- 0
- Tested up to
- 5.4 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 7 Mar 2020. Tested up to 5.4, 17 major versions behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 3.7.
| Last 90 days | No reviews |
|---|---|
| Lifetime | 3.7 |
| 5 star | 12 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 6 |
Security record
2 vulnerabilities in 24 months, 2 with no fix in the current version.
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 15 May 2026 | WP Super Edit <= 2.5.4 - Unauthenticated Arbitrary File Upload | 8.8 | <= 2.5.4 | No fix | n/a |
| 9 Jul 2025 | Super Edit <= 2.5.4 - Reflected Cross-Site Scripting | 6.1 | <= 2.5.4 | No fix | n/a |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
2,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 22 |
|---|---|
| 11 May 2026 | 33 |
| 18 May 2026 | 36 |
| 25 May 2026 | 52 |
| 1 Jun 2026 | 33 |
| 8 Jun 2026 | 42 |
| 15 Jun 2026 | 51 |
| 22 Jun 2026 | 25 |
| 29 Jun 2026 | 18 |
| 6 Jul 2026 | 28 |
| 13 Jul 2026 | 33 |
| 20 Jul 2026 | 31 |
| 27 Jul 2026 | 46 |
| 3 Aug 2026 | 51 |
| 10 Aug 2026 | 47 |
| 17 Aug 2026 | 47 |
| 24 Aug 2026 | 45 |
| 31 Aug 2026 | 31 |
| 7 Sep 2026 | 44 |
| 14 Sep 2026 | 69 |
| 21 Sep 2026 | 84 |
| 28 Sep 2026 | 57 |
| 5 Oct 2026 | 57 |
| 12 Oct 2026 | 50 |
| 19 Oct 2026 | 113 |
| 26 Oct 2026 | 101 |
| 2 Nov 2026 | 13 |
Weekly downloads over the last 4 weeks are 49% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score. Never sponsored.
Facts
| Version | 2.5.4 |
|---|---|
| Author | Ahmad Awais |
| Added | 15 Jul 2007 |
| Last updated | 7 Mar 2020 |
| Active installs | 2,000+ |
| Requires WordPress | 4.2 |
| Tested up to | 5.4.0 |
| Requires PHP | not stated |
| Category | Content Management > Blog & Article Publishing |
| Tags | admin, editor, tinyMCE, wysiwyg, formatting |
Other plugins by this author: Remove WP Dashboard Extra Widgets, Debug Meta Data, Vacation Rentals, eCommerce Keep The Change, WP Login Logo Changer
Questions
Is WP Super Edit still maintained?
No. Last release 7 Mar 2020, over 6 years ago.
Who owns WP Super Edit, and has it changed hands?
No change recorded.
Was WP Super Edit removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is WP Super Edit safe?
No. 2 known vulnerabilities have no fix in the current version.
Is the latest WP Super Edit update safe to install?
No ownership change before 2.5.4. No one-star spike after it.