Vulnerable Plugin Checker

Active-install and ratings figures are the last values WP Beacon captured before wordpress.org closed this plugin — wp.org no longer publishes them. Daily downloads are still updated.

No open alerts.

{
    "slug": "vulnerable-plugin-checker",
    "closed_reason": "author-request",
    "closed_date": "2026-06-25 00:00:00",
    "active_installs": 200
}

Accounts with actual commit access to vulnerable-plugin-checker on plugins.svn.wordpress.org, reconstructed from svn log. This is the list that matters for ownership changes — not the readme contributors.

Names the plugin's readme declares as contributors. A soft signal — anyone can be listed. The SVN access column is the ground-truth cross-reference: does this contributor actually commit code?