Skip to content
PluginCanary

WPCasa

WPCasa - Real Estate for WordPress
by WPSight · 1,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 8 Sep 2026, 24 releases in 24 months, no unpatched vulnerabilities.

85/ 100 Canary Score
Sub-scores for WPCasa
Ownership100
Maintenance100
Security75
Support70
Reputation70

How the score works

Quick answers

Is WPCasa still maintained?
Yes. Last release 8 Sep 2026, 24 releases in the last 24 months. 8 Sep 2026 · wordpress.org
Who owns WPCasa, and has it changed hands?
No change recorded. Main committer wpSight since Dec 2015. 3 Nov 2026 · SVN log
Was WPCasa removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is WPCasa safe?
4 known vulnerabilities, all fixed (latest in 1.4.2). Not on the exploited list. 16 Oct 2025 · Wordfence Intelligence
Is the latest WPCasa update safe to install?
No ownership change before 1.5.5. No one-star spike after it. 8 Sep 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
wpSight10 Dec 2015 to 8 Sep 2026, 85 commits

1 committer recorded. No ownership change since 2015.

Maintenance

Last release
57 days ago
Releases, 24 months
24
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter
Releases per quarter for WPCasa
Q1 20245
Q2 20241
Q3 20241
Q4 20242
Q1 20250
Q2 202514
Q3 20251
Q4 20251
Q1 20260
Q2 20264
Q3 20263
Q4 20260

Last release 8 Sep 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.2.

Rating distribution
5 star27
4 star2
3 star0
2 star0
1 star7

Security record

4 vulnerabilities in 24 months, all patched (latest fixed in 1.4.2).

Show 4 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
16 Oct 2025WPCasa <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.4.11.4.2Patched before disclosure
22 Sep 2025WPCasa <= 1.4.1 - Unauthenticated Code Injection9.8<= 1.4.11.4.2Patched before disclosure
16 Apr 2025WPCasa <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.3.21.4.0Patched before disclosure
2 Dec 2024WPCasa <= 1.2.13 - Insecure Direct Object Reference5.3<= 1.2.131.3.0Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WPCasa
4 May 202655
11 May 2026104
18 May 2026115
25 May 2026108
1 Jun 202685
8 Jun 2026102
15 Jun 2026551
22 Jun 2026118
29 Jun 2026104
6 Jul 2026117
13 Jul 202698
20 Jul 2026479
27 Jul 2026381
3 Aug 2026326
10 Aug 2026136
17 Aug 2026133
24 Aug 2026113
31 Aug 202689
7 Sep 2026534
14 Sep 2026203
21 Sep 2026171
28 Sep 2026154
5 Oct 2026210
12 Oct 2026178
19 Oct 2026188
26 Oct 2026189
2 Nov 202633

Weekly downloads over the last 4 weeks are 22% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Simple Job BoardScore 92 · 10,000+HireZootScore 91 · 30,000+WP Job ManagerScore 90 · 70,000+Business Directory PluginScore 88 · 10,000+GeoDirectoryScore 86 · 10,000+

Facts

Version1.5.5
AuthorWPSight
Added10 Dec 2015
Last updated8 Sep 2026
Active installs1,000+
Requires WordPress6.2
Tested up to7.1.4
Requires PHP7.2
CategoryE-commerce & Shopping
TagsRental, realtor, listings, property, real-estate

Other plugins by this author: WPCasa Advanced Search, WPCasa Contact Form 7, WPCasa Pricing Tables, WPCasa List Agents, WPCasa Polylang, WPCasa All Import, WPCasa Ninja Forms, WPCasa Gravity Forms, WPCasa Migration Tool

Questions

Is WPCasa still maintained?

Yes. Last release 8 Sep 2026, 24 releases in the last 24 months.

Who owns WPCasa, and has it changed hands?

No change recorded. Main committer wpSight since Dec 2015.

Was WPCasa removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is WPCasa safe?

4 known vulnerabilities, all fixed (latest in 1.4.2). Not on the exploited list.

Is the latest WPCasa update safe to install?

No ownership change before 1.5.5. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue