XO Security
Healthy: XO Security is maintained, has no open risk signals and no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 90 |
| Security | 100 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| ishitaka | 18 Jan 2016 to 19 Jul 2026, 216 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 4 months ago
- Releases, 24 months
- 6
- Tested up to
- 7.0 vs 7.1
- Requires PHP
- 7.2 supported 8.2+
| Q1 2024 | 6 |
|---|---|
| Q2 2024 | 3 |
| Q3 2024 | 1 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 4 |
| Q1 2026 | 0 |
| Q2 2026 | 1 |
| Q3 2026 | 1 |
| Q4 2026 | 0 |
Last release 19 Jul 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 7 Feb 2017 | XO Security < 1.5.3 - Cross-Site Scripting | 6.1 | < 1.5.3 | 1.5.3 | 1 |
Source: Wordfence Intelligence.
Reputation
| Q4 2023 | 5.0 |
|---|---|
| Q4 2025 | 5.0 |
| Q1 2026 | 5.0 |
Average rating stayed at 5.0 between Q4 2023 and Q1 2026.
| 5 star | 11 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Momentum
30,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 536 |
|---|---|
| 11 May 2026 | 916 |
| 18 May 2026 | 875 |
| 25 May 2026 | 855 |
| 1 Jun 2026 | 739 |
| 8 Jun 2026 | 648 |
| 15 Jun 2026 | 634 |
| 22 Jun 2026 | 640 |
| 29 Jun 2026 | 620 |
| 6 Jul 2026 | 597 |
| 13 Jul 2026 | 6,564 |
| 20 Jul 2026 | 10,907 |
| 27 Jul 2026 | 1,902 |
| 3 Aug 2026 | 1,283 |
| 10 Aug 2026 | 948 |
| 17 Aug 2026 | 953 |
| 24 Aug 2026 | 853 |
| 31 Aug 2026 | 914 |
| 7 Sep 2026 | 809 |
| 14 Sep 2026 | 631 |
| 21 Sep 2026 | 829 |
| 28 Sep 2026 | 876 |
| 5 Oct 2026 | 792 |
| 12 Oct 2026 | 632 |
| 19 Oct 2026 | 2,228 |
| 26 Oct 2026 | 1,223 |
| 2 Nov 2026 | 153 |
Weekly downloads over the last 4 weeks are 28% below the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 3.11.0 |
|---|---|
| Author | ishitaka |
| Added | 18 Jan 2016 |
| Last updated | 19 Jul 2026 |
| Active installs | 30,000+ |
| Requires WordPress | 6.0 |
| Tested up to | 7.0.8 |
| Requires PHP | 7.2 |
| Category | Security & Privacy > Security Scanning & Malware Protection |
| Tags | login, security, two factor, Brute Force, maintenance |
Other plugins by this author: XO Featured Image Tools, XO Post Background, Full-Text Search, Associate Attachment
Questions
Is XO Security still maintained?
XO Security was last updated on 19 Jul 2026. Its Canary status is Healthy.
Is XO Security safe?
XO Security has no open unpatched vulnerabilities on record. 0 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns XO Security?
The wordpress.org author is ishitaka. Recent committers: ishitaka, plugin-master. We have recorded no ownership change.
What can I use instead of XO Security?
Plugins in the same category with a higher Canary Score: IP Location Block, Wordfence Security - Firewall, Malware Scan, and Login Security, Sucuri Security - Auditing, Malware Scanner and Security Hardening, WP Content Copy Protection & No Right Click, NinjaFirewall (WP Edition) - Advanced Security Plugin and Firewall.