Skip to content
PluginCanary

WPMasterToolKit (WPMTK)

WPMasterToolKit (WPMTK) - All in one plugin
by Ludwig You · 5,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 24 Sep 2026, 41 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for WPMasterToolKit (WPMTK)
Ownership100
Maintenance100
Security60
SupportNo data
ReputationNo data

How the score works

Quick answers

Is WPMasterToolKit (WPMTK) still maintained?
Yes. Last release 24 Sep 2026, 41 releases in the last 24 months. 24 Sep 2026 · wordpress.org
Who owns WPMasterToolKit (WPMTK), and has it changed hands?
No change recorded. Main committer ludwigyou since Feb 2024. 3 Nov 2026 · SVN log
Was WPMasterToolKit (WPMTK) removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is WPMasterToolKit (WPMTK) safe?
6 known vulnerabilities, all fixed (latest in 2.23.1). Not on the exploited list. 17 Sep 2026 · Wordfence Intelligence
Is the latest WPMasterToolKit (WPMTK) update safe to install?
No ownership change before 2.25.0. No one-star spike after it. 24 Sep 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master19 Feb 2024 to 19 Feb 2024, 1 commits
ludwigyou23 Feb 2024 to 24 Sep 2026, 119 commits

2 committers recorded. No ownership change since 2024.

Maintenance

Last release
41 days ago
Releases, 24 months
41
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for WPMasterToolKit (WPMTK)
Q1 20244
Q2 20242
Q3 202411
Q4 202410
Q1 20257
Q2 20256
Q3 20252
Q4 20256
Q1 20267
Q2 20263
Q3 20265
Q4 20260

Last release 24 Sep 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 5.0.

Rating distribution
5 star28
4 star0
3 star0
2 star0
1 star0

Security record

6 vulnerabilities in 24 months, all patched (latest fixed in 2.23.1).

Show 6 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
17 Sep 2026WPMasterToolKit (WPMTK) - All in one plugin <= 2.22.0 - Authenticated (Administrator+) SQL Injection4.9<= 2.22.02.23.1Patched before disclosure
15 Jan 2026WPMasterToolKit <= 2.14.0 - Missing Authorization4.3<= 2.14.02.14.1Patched before disclosure
11 Dec 2025WPMasterToolKit (WPMTK) <= 2.13.0 - Authenticated (Contributor+) Code Injection5.3<= 2.13.02.13.1Patched before disclosure
23 Apr 2025WPMasterToolKit (WPMTK) - All in one plugin <= 2.5.2 - Authenticated (Administrator+) to Arbitrary File Read and Write7.2<= 1.15.02.6.01
30 Dec 2024WPMasterToolKit <= 1.13.1 - Authenticated (Admin+) Arbitrary File Upload7.2<= 1.13.11.14.0Patched before disclosure
30 Dec 2024WPMasterToolKit <= 1.13.1 - Authenticated (Admin+) Arbitrary File Download4.9<= 1.13.11.14.0Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

5,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WPMasterToolKit (WPMTK)
4 May 20261,584
11 May 2026595
18 May 2026492
25 May 2026359
1 Jun 2026239
8 Jun 2026252
15 Jun 2026230
22 Jun 2026196
29 Jun 2026161
6 Jul 20261,704
13 Jul 2026651
20 Jul 2026499
27 Jul 2026415
3 Aug 2026374
10 Aug 2026330
17 Aug 2026262
24 Aug 2026290
31 Aug 2026267
7 Sep 2026334
14 Sep 20265,058
21 Sep 20262,614
28 Sep 20261,081
5 Oct 2026614
12 Oct 2026575
19 Oct 2026593
26 Oct 2026428
2 Nov 202660

Weekly downloads over the last 4 weeks are 45% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Catch Web ToolsScore 93 · 10,000+Nexter ExtensionScore 91 · 10,000+

Facts

Version2.25.0
AuthorLudwig You
Added23 Feb 2024
Last updated24 Sep 2026
Active installs5,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.4
CategorySite Administration & Utilities > Site Migration & Cloning
Tagsadmin, security, Easy to use, disable features, all in one plugin

Other plugins by this author: QuickWebP - WebP & AVIF Image Optimizer, Compression & SEO for WordPress, Universal Honey Pot, Cookie Dough Compliance and Consent for GDPR, Mentions Legales Par Webdeclic, Clean My WP, Lexilink

Questions

Is WPMasterToolKit (WPMTK) still maintained?

Yes. Last release 24 Sep 2026, 41 releases in the last 24 months.

Who owns WPMasterToolKit (WPMTK), and has it changed hands?

No change recorded. Main committer ludwigyou since Feb 2024.

Was WPMasterToolKit (WPMTK) removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is WPMasterToolKit (WPMTK) safe?

6 known vulnerabilities, all fixed (latest in 2.23.1). Not on the exploited list.

Is the latest WPMasterToolKit (WPMTK) update safe to install?

No ownership change before 2.25.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue