Plugin profile · observed daily since 02 Aug 2026
Exploit Scanner
PluginPedia reports published data and observable changes. It does not rate plugin quality or safety, infer intent, or make recommendations. These are observations rather than a verdict. How this works
Ownership
Held by Donncha O Caoimh (a11n) throughout, with no change of ownership observed since daily tracking began on 02 Aug 2026.
Full observed history, including every field transition
Committing accounts
Read from the plugin’s public release log, so these predate this registry. A committing account is not an owner. Thirty accounts commit to WooCommerce and it has never changed hands.
| Account | Releases | First | Last |
|---|---|---|---|
| donncha | 9 | 26 Jun 2008 | 05 Jun 2017 |
| ryan | 3 | 20 Oct 2009 | 18 Dec 2009 |
| tott | 4 | 14 Dec 2009 | 14 Dec 2009 |
| duck_ | 20 | 13 Jul 2010 | 30 Jan 2013 |
| pento | 1 | 17 Dec 2014 | 17 Dec 2014 |
| philipjohn | 14 | 22 Apr 2015 | 09 Dec 2016 |
This registry did not observe a transfer; it read these names off a public log. Whether that reflects a change of ownership is not something the directory publishes.
Adoption
How widely the plugin is installed, and what the people running it think of it. WordPress.org rounds install figures to one significant digit, so they describe an order of magnitude rather than a headcount.
Moderately adopted: 8,000+ active installs. A real user base, well short of the ecosystem’s larger plugins.
9 downloads a day over the last 7 days, rising 20% against the 7 days before. Downloads are counted exactly and without a ceiling, so they show movement the rounded install figure cannot.
Daily record
Every field we record, one column per observation. Fields that never moved are named once rather than repeated across every column. A row of identical numbers would be padding.
| Field | 26 Aug | 27 Aug | 28 Aug | 29 Aug | 30 Aug | 31 Aug | 01 Sep | 02 Sep | 03 Sep | 04 Sep | 05 Sep | 06 Sep | 07 Sep | 08 Sep |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Downloads that day | — | 11 | 11 | 11 | 11 | 0 | 11 | 11 | 11 | 11 | 11 | 0 | 11 | 11 |
Unchanged throughout: ratings total (40) · active installs (8,000+) · version (1.5.2) · support threads (0) · threads resolved (0)
38 days of observation, most recent 14 shown.
Maintenance
When it was last released, and how far its declared compatibility has drifted from current WordPress.
Is anyone still maintaining this?
- No release in 3,206 days (8.8 years). The last was 28 Nov 2017.
- Declares compatibility only up to WordPress 4.7.35, while 7.1 is current. The author has not confirmed it runs on the last 24 releases.
- The same account maintains 12 other plugins, 1 of which was updated in the last 90 days. the account is active.
A plugin that does one thing correctly may need no changes for years; a long gap is not, by itself, evidence of neglect.
History
Everything dated that this registry holds about the plugin, most recent first. Releases carry the author’s own release date; everything else is dated to when it was observed.
Entries marked from the release log predate this registry, and daily observation began 02 Aug 2026. They were read from the plugin’s public SVN history after the fact, not watched as they happened. Everything else was observed directly.
- 02 Aug 20261 month agoFirst observed by PluginPediaDaily snapshots of this plugin’s directory record begin here. Everything above this line is observed; anything before it comes from fields the API itself reports.
- 22 May 20197 years agoDormancy threshold crossed540 days since the last release (2017-11-28). Dormancy is a maintenance observation, not a judgement about the owner.
- 28 Nov 20178.5 years agoVersion 1.5.2 released
- 09 Dec 20169.5 years agoVersion 1.5.1 releasedfrom the release logCommitted by philipjohn.
- 22 Jun 201610 years agoVersion 1.5 releasedfrom the release logCommitted by philipjohn.
- 25 May 201610 years agoVersion 1.4.12 releasedfrom the release logCommitted by philipjohn.
- 27 Apr 201610 years agoVersion 1.4.11 releasedfrom the release logCommitted by philipjohn.
- 07 Jan 201610 years agoVersion 1.4.10 releasedfrom the release logCommitted by philipjohn.
- 09 Dec 201510 years agoVersion 1.4.9 releasedfrom the release logCommitted by philipjohn.
- 15 Sep 201510 years agoVersion 1.4.8 releasedfrom the release logCommitted by philipjohn.
- 18 Aug 201511 years agoVersion 1.4.7 releasedfrom the release logCommitted by philipjohn.
- 04 Aug 201511 years agoVersion 1.4.6 releasedfrom the release logCommitted by philipjohn.
- 27 May 201511 years agoVersion 1.4.5 releasedfrom the release logCommitted by philipjohn.
- 27 Apr 201511 years agoVersion 1.4.4 releasedfrom the release logCommitted by philipjohn.
- 25 Apr 201511 years agoVersion 1.4.3 releasedfrom the release logCommitted by philipjohn.
- 26 Jun 200818 years ago38 earlier releasesfrom the release logBetween 26 Jun 2008 and 24 Apr 2015. Listed individually in the public release log rather than here.
- 26 Jun 200818 years agoAdded to the WordPress.org directoryReported by the plugin API as the date this plugin was added.
What we know, and what we don’t
Everything on this page in one place, including the gaps, so that nothing here is mistaken for a clean bill of health.
What we know
- It has been held by Donncha O Caoimh (a11n) for all 38 days we have observed it.
- It was last released 8.5 years ago (28 Nov 2017).
- Its author declares it tested up to WordPress 4.7.35; WordPress is now on 7.1.
- WordPress.org reports 8,000+ active installs.
- It carries 40 ratings, averaging 3.2 out of 5.
What we don’t know yet
- No forum threads were open in the two months we measure, so how responsive its support is cannot be said. One new thread starts answering that.
What can’t be known
- Whether the quiet is neglect or a finished plugin. That is the author’s intent, which no dataset records, and a stable plugin can need no changes for years.
Every record on this site, this one included, works under the same limits. We read what WordPress.org publishes about a plugin, never the plugin’s own code, so nothing here says whether a plugin is well built or safe. Install counts reach us already rounded; a change smaller than a band step doesn’t show. We don’t track security advisories yet. For anything older than our first observation we rely on the plugin’s public release log, where one exists. What this registry can and cannot see
Similar plugins
This plugin has not been updated in a long time. These carry the same tags and describe themselves in the same terms, so they are a starting point for a replacement, not a recommendation. Check them yourself.
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.
This Anti-Malware scanner searches for Malware, Viruses, and other security threats and vulnerabilities on your server and it helps you fix them.
The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening.
WPScan WordPress Security Scanner - Scans your system for security vulnerabilities listed in the WPScan Vulnerability Database.
Premium WordPress Security - 100% FREE: Firewall, 2FA, Security Headers, Login and Malware Protection, File Monitor, Security Audit & more
Security plugin to protect your blog or website against exploits and spam injections.
Grouped from the tags each author chose for their own plugin, so the grouping is only as good as those tags.
Reach out about this record
Corrections, missing context, or anything else about Exploit Scanner: a person reads every submission, and corrections get a reply within 5 business days.