Skip to content
PluginCanary
Limited data: this plugin has under 1,000 active installs and less than 12 weeks of history with us, so we show signals but no status band yet.

xili-dictionary

by Michel - xiligroup dev · 100+ active installs · Checked 4 Nov 2026
Limited data1 Critical2 Warnings

Limited data: xili-dictionary has under 1,000 active installs and less than 12 weeks of history, so we do not rate it yet.

39/ 100Limited data
Canary Score

Based on 3 of 5 areas

Capped at 39: a vulnerability has no patch.

Sub-scores for xili-dictionary
Ownership100
Maintenance20
Security30
SupportNo data
ReputationNo data

How the score works

Active signals

Open issues right now, with links to the source.

  • CriticalSEC-2Vulnerability published 23 Jun 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.7 Jul 2025Evidence
  • WarningMNT-2Tested up to WordPress 4.9.35, 22 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
  • WarningMNT-1No release in 17 months (last release 1 Jun 2025). Plan a replacement if the plugin is important to your site.1 Jun 2026Evidence

History: 2 past vulnerabilities, 1 still unpatched in the current version. Patched issues are listed in the Security record, not here.

Quick answers

Is xili-dictionary still maintained?
No. Last release 1 Jun 2025, over 1 year ago. 1 Jun 2025 · wordpress.org
Who owns xili-dictionary, and has it changed hands?
No change recorded. Main committer michelwppi since Apr 2009. 4 Nov 2026 · SVN log
Was xili-dictionary removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is xili-dictionary safe?
No. 1 known vulnerability has no fix in the current version. 23 Jun 2025 · Wordfence Intelligence
Is the latest xili-dictionary update safe to install?
No ownership change before 2.12.5.2. No one-star spike after it. 1 Jun 2025 · Release history

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
michelwppi28 Apr 2009 to 1 Jun 2025, 189 commits

1 committer recorded. No ownership changes recorded since 2009.

Maintenance

Last release
17 months ago
Releases, 24 months
3
Tested up to
4.9 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for xili-dictionary
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20251
Q2 20252
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 1 Jun 2025. Tested up to 4.9, 22 major versions behind WordPress 7.1.

Support

Resolved, last 2 months
n/a
Threads, last 2 months
0

Trend appears after 8 weekly snapshots.

Security record

2 vulnerabilities in 24 months, 1 with no fix in the current version.

DateIssueCVSSAffectedFixed inDays to patch
23 Jun 2025Reflected Cross-Site Scripting6.1<= 2.12.5.2No fixn/a
Show 1 patched vulnerability
DateIssueCVSSAffectedFixed inDays to patch
27 Mar 2025Reflected Cross-Site Scripting6.1<= 2.12.52.12.5.1n/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Reputation

Last 90 days: no reviews. Lifetime: 3.3.

Last 90 days vs lifetime average rating for xili-dictionary
Last 90 daysNo reviews
Lifetime3.3
Rating distribution
5 star1
4 star0
3 star1
2 star1
1 star0

Momentum

Active installs
100+

Trend appears after 8 weekly snapshots.

Facts

Version
2.12.5.2
Author
Michel - xiligroup dev
Added
28 Apr 2009
Last updated
1 Jun 2025
Active installs
100+
Requires WordPress
3.6.1
Tested up to
4.9.35
Requires PHP
not stated
Category
not stated
Tags
pomo, admin, taxonomy, dictionary, multilingual

Other plugins by this author: xili-tidy-tags, xili-language, xili Post in Post

Questions about xili-dictionary

Is xili-dictionary still maintained?

No. Last release 1 Jun 2025, over 1 year ago.

Who owns xili-dictionary, and has it changed hands?

No change recorded. Main committer michelwppi since Apr 2009.

Was xili-dictionary removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is xili-dictionary safe?

No. 1 known vulnerability has no fix in the current version.

Is the latest xili-dictionary update safe to install?

No ownership change before 2.12.5.2. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue