Skip to content
PluginCanary

Zero Spam for WordPress

by Highfivery Studio · 20,000+ active installs · Checked 5 Nov 2026
Healthy

Healthy: released today, tested with WordPress 7.1, no open vulnerabilities.

95/ 100Healthy
Canary Score

Based on 3 of 5 areas

Capped at 95: not enough support or review data for a full score.

Sub-scores for Zero Spam for WordPress
Ownership100
Maintenance100
Security85
SupportNo data
ReputationNo data

How the score works

Active signals

Open issues right now, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

History: 7 past vulnerabilities, all patched. Patched issues are listed in the Security record, not here.

Quick answers

Is Zero Spam for WordPress still maintained?
Yes. Last release 4 Nov 2026, 20 releases in the last 24 months. 4 Nov 2026 · wordpress.org
Who owns Zero Spam for WordPress, and has it changed hands?
No change recorded. Main committer bmarshall511 since Jul 2014. 5 Nov 2026 · SVN log
Was Zero Spam for WordPress removed from wordpress.org?
No. Listed on wordpress.org as of 5 Nov 2026. 5 Nov 2026 · wordpress.org
Is Zero Spam for WordPress safe?
7 known vulnerabilities, all fixed (latest in 5.7.12). Not on the exploited list. 5 Oct 2026 · Wordfence Intelligence
Is the latest Zero Spam for WordPress update safe to install?
No ownership change before 6.0.0. No one-star spike after it. 4 Nov 2026 · Release history

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
bmarshall51121 Jul 2014 to 4 Nov 2026, 371 commits

1 committer recorded. No ownership changes recorded since 2014.

Maintenance

Last release
today
Releases, 24 months
20
Tested up to
7.1 current
Requires PHP
8.2 supported 8.2+
Releases per quarter
Releases per quarter for Zero Spam for WordPress
Q1 20243
Q2 20243
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 202613
Q2 20260
Q3 20263
Q4 20264

Last release 4 Nov 2026. Tested with WordPress 7.1 (current).

Support

Resolved, last 2 months
100%
Threads, last 2 months
1

Trend appears after 8 weekly snapshots.

Security record

2 vulnerabilities in 24 months (7 on record), all patched (latest fixed in 5.7.12).

Show 7 patched vulnerabilities
DateIssueCVSSAffectedFixed inDays to patch
5 Oct 2026Unauthenticated Spam Protection Bypass on Login5.3<= 5.7.115.7.12Same day
24 Sep 2026Unauthenticated Stored Cross-Site Scripting via Nested POST Array Keys via Contact Form 7 Integration7.2<= 5.7.105.7.11Before disclosure
15 Apr 2024Spam Protection Bypass5.3<= 5.5.65.5.723
9 May 2023Authenticated (Administrator+) SQL Injection7.2<= 5.4.45.4.5Same day
8 May 2023Authenticated(Administrator+) SQL Injection7.2< 5.4.55.4.51
18 Feb 2022Admin+ SQL Injection7.2<= 5.2.105.2.11Same day
24 Aug 2016SQL Injection9.8<= 2.1.12.2.088

Changelog mentions of security fixes: 6.0.0 (security); 5.7.9 (security, nonce); 5.7.10 (security); 5.7.11 (security, vulnerability, escaping, sanitize); 5.7.12 (security, nonce).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Reputation

Last 90 days: no reviews. Lifetime: 4.1.

Last 90 days vs lifetime average rating for Zero Spam for WordPress
Last 90 daysNo reviews
Lifetime4.1
Average rating per quarter
Average rating per quarter for Zero Spam for WordPress
Q1 20245.0
Q1 20255.0
Q1 20264.0
Q2 20261.0

Average rating fell from 5.0 to 1.0 between Q1 2024 and Q2 2026.

Rating distribution
5 star108
4 star1
3 star2
2 star7
1 star25
Latest low reviews

Momentum

Active installs
20,000+
Downloads, last full week
3,470
Weekly downloads, last 26 complete weeks
Weekly downloads for Zero Spam for WordPress
4 May 2026156
11 May 2026565
18 May 2026523
25 May 2026719
1 Jun 2026392
8 Jun 2026429
15 Jun 2026356
22 Jun 2026421
29 Jun 2026388
6 Jul 2026382
13 Jul 2026411
20 Jul 2026484
27 Jul 2026455
3 Aug 2026617
10 Aug 2026420
17 Aug 2026419
24 Aug 2026440
31 Aug 2026430
7 Sep 2026511
14 Sep 2026560
21 Sep 202617,036
28 Sep 20262,039
5 Oct 202610,374
12 Oct 20261,515
19 Oct 20269,059
26 Oct 20263,470

Weekly downloads over the last 4 weeks are 202% above the 26-week average.

Facts

Version
6.0.0
Author
Highfivery Studio
Added
21 Jul 2014
Last updated
4 Nov 2026
Active installs
20,000+
Requires WordPress
6.9
Tested up to
7.1.4
Requires PHP
8.2
Category
Security & Privacy > Security Scanning & Malware Protection
Tags
spam, firewall, security, anti-spam, spam blocker

Questions about Zero Spam for WordPress

Is Zero Spam for WordPress still maintained?

Yes. Last release 4 Nov 2026, 20 releases in the last 24 months.

Who owns Zero Spam for WordPress, and has it changed hands?

No change recorded. Main committer bmarshall511 since Jul 2014.

Was Zero Spam for WordPress removed from wordpress.org?

No. Listed on wordpress.org as of 5 Nov 2026.

Is Zero Spam for WordPress safe?

7 known vulnerabilities, all fixed (latest in 5.7.12). Not on the exploited list.

Is the latest Zero Spam for WordPress update safe to install?

No ownership change before 6.0.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 5 Nov 2026.Report a data issue