Skip to content
PluginCanary

WPVulnerability

by ROBOTSTXT.es · 10,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 23 Aug 2026, 14 releases in 24 months, no unpatched vulnerabilities.

84/ 100 Canary Score
Sub-scores for WPVulnerability
Ownership100
Maintenance100
Security95
Support40
Reputation60

How the score works

Quick answers

Is WPVulnerability still maintained?
Yes. Last release 23 Aug 2026, 14 releases in the last 24 months. 23 Aug 2026 · wordpress.org
Who owns WPVulnerability, and has it changed hands?
No change recorded. Main committer JavierCasares since Dec 2022. 4 Nov 2026 · SVN log
Was WPVulnerability removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is WPVulnerability safe?
1 known vulnerability, fixed (latest in 4.2.1.1). Not on the exploited list. 18 Mar 2026 · Wordfence Intelligence
Is the latest WPVulnerability update safe to install?
No ownership change before 5.1.6. No one-star spike after it. 23 Aug 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master6 May 2022 to 6 May 2022, 1 commits
closetechnology6 May 2022 to 7 Dec 2022, 12 commits
JavierCasares15 Dec 2022 to 23 Aug 2026, 57 commits

3 committers recorded. No ownership change since 2022.

Maintenance

Last release
2 months ago
Releases, 24 months
14
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter
Releases per quarter for WPVulnerability
Q1 20243
Q2 20242
Q3 20249
Q4 20244
Q1 20250
Q2 20251
Q3 20252
Q4 20252
Q1 20263
Q2 20263
Q3 20263
Q4 20260

Last release 23 Aug 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 5.0.

Average rating per quarter for WPVulnerability
Q4 20235.0
Q1 20245.0
Q2 20245.0
Q1 20255.0

Average rating stayed at 5.0 between Q4 2023 and Q1 2025.

Rating distribution
5 star20
4 star0
3 star0
2 star0
1 star0

Security record

1 vulnerability in 24 months, patched (latest fixed in 4.2.1.1).

Show 1 patched vulnerability
PublishedIssueCVSSAffectedFixed inDays to patch
18 Mar 2026WPVulnerability <= 4.2.1 - Missing Authorization4.3<= 4.2.14.2.1.1Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

40% of 5 support threads resolved in the last 2 months.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WPVulnerability
4 May 2026950
11 May 20262,427
18 May 202620,382
25 May 202619,535
1 Jun 202620,035
8 Jun 20262,975
15 Jun 20262,691
22 Jun 20262,835
29 Jun 20262,473
6 Jul 202618,769
13 Jul 20263,518
20 Jul 20263,320
27 Jul 20263,187
3 Aug 202619,185
10 Aug 20264,024
17 Aug 202610,789
24 Aug 202612,989
31 Aug 20263,406
7 Sep 20262,802
14 Sep 20262,815
21 Sep 20262,631
28 Sep 20262,438
5 Oct 20263,007
12 Oct 20262,273
19 Oct 20262,704
26 Oct 20262,459
2 Nov 2026333

Weekly downloads over the last 4 weeks are 70% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Disable WP REST APIScore 100 · 30,000+AntiVirusScore 100 · 30,000+Protect UploadsScore 100 · 30,000+CloudSecure WP SecurityScore 98 · 100,000+WP fail2banScore 98 · 60,000+

Facts

Version5.1.6
AuthorROBOTSTXT.es
Added6 May 2022
Last updated23 Aug 2026
Active installs10,000+
Requires WordPress4.7
Tested up to7.1.4
Requires PHP7.0
CategorySecurity & Privacy > Security Scanning & Malware Protection
Tagssecurity, site health, vulnerability

Other plugins by this author: noindex SEO, Reply-To for WP_Mail

Questions

Is WPVulnerability still maintained?

Yes. Last release 23 Aug 2026, 14 releases in the last 24 months.

Who owns WPVulnerability, and has it changed hands?

No change recorded. Main committer JavierCasares since Dec 2022.

Was WPVulnerability removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is WPVulnerability safe?

1 known vulnerability, fixed (latest in 4.2.1.1). Not on the exploited list.

Is the latest WPVulnerability update safe to install?

No ownership change before 5.1.6. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue