{
 "schema": 1,
 "source": "StaleWP Risk Radar",
 "source_url": "https://stalewp.com/risk-radar/",
 "edition": {
  "number": 1,
  "name": "Edition 1",
  "url": "https://stalewp.com/risk-radar/edition-1/",
  "checked": "2026-10-31",
  "published": "2026-11-02",
  "next": "2027-02-02"
 },
 "updated": "2026-11-05",
 "license": "CC0-1.0",
 "license_url": "https://creativecommons.org/publicdomain/zero/1.0/",
 "suggested_credit": "StaleWP Risk Radar, Edition 1 (2026-11-02), https://stalewp.com/risk-radar/",
 "notes": [
  "A verdict means the plugin is worth reviewing on your site. It does not mean the plugin is unsafe.",
  "Verdicts are judgement calls made on the date in edition.checked. Show that date with the verdict.",
  "Security data comes from wpvulnerability.net. Directory data comes from WordPress.org."
 ],
 "verdicts": {
  "replace_now": "10,000+ installs, no update for 2+ years and a second warning sign.",
  "plan_a_move": "No update for 2+ years, with 50,000+ installs or a job the site depends on. Or a public advisory with no fix listed.",
  "watch": "100,000+ installs and no update for 1-2 years."
 },
 "counts": {
  "replace_now": 43,
  "plan_a_move": 49,
  "watch": 8
 },
 "plugins": [
  {
   "slug": "limit-login-attempts",
   "name": "Limit Login Attempts",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It guards the login page, and it has had no update for over three years. A separate plugin, Limit Login Attempts Security, has a nearly identical name, so check which one you actually run.",
   "action": "Try one of the alternatives below, then remove this plugin.",
   "job": "Limits repeated login attempts from the same IP address.",
   "second_sign": "Guards the login page",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2023-04-04. That was 3 yr 7 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.2.15. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2023-04-04",
   "tested_up_to": "6.2.15",
   "version": "1.7.2",
   "installs": "300k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Limit Login Attempts Security",
     "note": "The closest match, with the same core job.",
     "url": "https://wordpress.org/plugins/limit-login-attempts-reloaded/",
     "slug": "limit-login-attempts-reloaded"
    },
    {
     "type": "plugin",
     "name": "Loginizer",
     "note": "Brute-force login protection.",
     "url": "https://wordpress.org/plugins/loginizer/",
     "slug": "loginizer"
    },
    {
     "type": "plugin",
     "name": "Wordfence Security",
     "note": "A wider security plugin that includes login protection.",
     "url": "https://wordpress.org/plugins/wordfence/",
     "slug": "wordfence"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/limit-login-attempts/",
   "source": "edition"
  },
  {
   "slug": "search-and-replace",
   "name": "Search & Replace",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "This tool rewrites the site database, so it needs active upkeep. It has had no update for over two years. A critical issue was fixed in its last release.",
   "action": "Try one of the alternatives below, and take a backup before every run.",
   "job": "Finds and replaces text in the site database, such as old URLs.",
   "second_sign": "Rewrites the database",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-08-26. That was 2 yr 2 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.5.14. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2024-08-26",
   "tested_up_to": "6.5.14",
   "version": "3.2.3",
   "installs": "100k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Better Search Replace",
     "note": "A direct option for database search and replace.",
     "url": "https://wordpress.org/plugins/better-search-replace/",
     "slug": "better-search-replace"
    },
    {
     "type": "plugin",
     "name": "Search Regex",
     "note": "Search and replace with regular expressions.",
     "url": "https://wordpress.org/plugins/search-regex/",
     "slug": "search-regex"
    },
    {
     "type": "plugin",
     "name": "WP Migrate Lite",
     "note": "Find and replace as part of a database migration.",
     "url": "https://wordpress.org/plugins/wp-migrate-db/",
     "slug": "wp-migrate-db"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/search-and-replace/",
   "source": "edition"
  },
  {
   "slug": "backupwordpress",
   "name": "BackUpWordPress",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "Backups have to work on the day you need them. This plugin has had no update for two and a half years and is tested only up to WordPress 6.5.",
   "action": "Try one of the alternatives below. Test a restore before you remove this plugin.",
   "job": "Runs automatic backups of a WordPress site.",
   "second_sign": "Handles backups",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-04-24. That was 2 yr 6 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.5.14. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2024-04-24",
   "tested_up_to": "6.5.14",
   "version": "3.14",
   "installs": "80k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "UpdraftPlus",
     "note": "Scheduled backups with remote storage.",
     "url": "https://wordpress.org/plugins/updraftplus/",
     "slug": "updraftplus"
    },
    {
     "type": "plugin",
     "name": "WPvivid",
     "note": "Backup, migration and staging.",
     "url": "https://wordpress.org/plugins/wpvivid-backuprestore/",
     "slug": "wpvivid-backuprestore"
    },
    {
     "type": "plugin",
     "name": "Duplicator",
     "note": "Backups and full-site copies.",
     "url": "https://wordpress.org/plugins/duplicator/",
     "slug": "duplicator"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/backupwordpress/",
   "source": "edition",
   "changes": [
    {
     "slug": "backupwordpress",
     "date": "2026-11-05",
     "change": "updated",
     "detail": "Version 3.15 was released on 5 November 2026, the first update since April 2024. Its changelog lists security fixes, including one that stopped logged-in users with low-level accounts from deleting files in the backups folder. No public advisory had been listed for that issue when we published Edition 1. The plugin is now tested with WordPress 7.1. If you keep it, update to 3.15."
    }
   ]
  },
  {
   "slug": "disable-json-api",
   "name": "Disable REST API",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It controls who can reach the WordPress REST API, and it has had no update for over three years. It is tested only up to WordPress 6.3.",
   "action": "Check which REST routes you need to restrict, then try one of the alternatives below.",
   "job": "Restricts who can use the WordPress REST API, by user role.",
   "second_sign": "Controls API access",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2023-09-14. That was 3 yr 2 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.3.14. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2023-09-14",
   "tested_up_to": "6.3.14",
   "version": "1.8",
   "installs": "80k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Disable WP REST API",
     "note": "Restrict REST API access.",
     "url": "https://wordpress.org/plugins/disable-wp-rest-api/",
     "slug": "disable-wp-rest-api"
    },
    {
     "type": "plugin",
     "name": "JWT Authentication for WP REST APIs",
     "note": "Require authentication for API access.",
     "url": "https://wordpress.org/plugins/wp-rest-api-authentication/",
     "slug": "wp-rest-api-authentication"
    },
    {
     "type": "plugin",
     "name": "Admin and Site Enhancements",
     "note": "A toolkit with REST API settings.",
     "url": "https://wordpress.org/plugins/admin-site-enhancements/",
     "slug": "admin-site-enhancements"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/disable-json-api/",
   "source": "edition"
  },
  {
   "slug": "php-code-widget",
   "name": "PHP Code Widget",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It runs PHP entered into a widget, which is a powerful job for a plugin last updated in 2022. Any hidden fault here affects code running on your site.",
   "action": "Move your code to one of the alternatives below, then remove this plugin.",
   "job": "A text widget that also runs PHP code.",
   "second_sign": "Runs site code",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2022-03-30. That was 4 yr 7 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.9.20. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2022-03-30",
   "tested_up_to": "5.9.20",
   "version": "2.4",
   "installs": "70k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "WPCode",
     "note": "Manage code snippets from one screen.",
     "url": "https://wordpress.org/plugins/insert-headers-and-footers/",
     "slug": "insert-headers-and-footers"
    },
    {
     "type": "plugin",
     "name": "Code Snippets",
     "note": "Run PHP snippets without editing theme files.",
     "url": "https://wordpress.org/plugins/code-snippets/",
     "slug": "code-snippets"
    },
    {
     "type": "builtin",
     "name": "Child theme",
     "note": "Keep custom code in version-controlled theme files.",
     "url": "https://developer.wordpress.org/themes/advanced-topics/child-themes/"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/php-code-widget/",
   "source": "edition"
  },
  {
   "slug": "add-from-server",
   "name": "Add From Server",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It reads files on your server, and it was last updated in 2020. It is tested only up to WordPress 5.5.",
   "action": "Try one of the alternatives below, then remove this plugin.",
   "job": "Imports files already on the server into the media library, such as FTP uploads.",
   "second_sign": "Reads server files",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2020-12-11. That was 5 yr 11 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.5.24. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2020-12-11",
   "tested_up_to": "5.5.24",
   "version": "3.4.5",
   "installs": "60k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "WP-CLI media import",
     "note": "Use wp media import where your host provides WP-CLI.",
     "url": "https://developer.wordpress.org/cli/commands/media/import/"
    },
    {
     "type": "plugin",
     "name": "Media Sync",
     "note": "Add files already on the server to the media library.",
     "url": "https://wordpress.org/plugins/media-sync/",
     "slug": "media-sync"
    },
    {
     "type": "plugin",
     "name": "Bulk Media Register",
     "note": "Register server files in the media library in bulk.",
     "url": "https://wordpress.org/plugins/bulk-media-register/",
     "slug": "bulk-media-register"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/add-from-server/",
   "source": "edition"
  },
  {
   "slug": "contact-form-7-add-confirm",
   "name": "Contact Form 7 add confirm",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It sits in the path of visitor form submissions, and it was last updated in 2018. Its top rating comes from four reviews, so that score says very little.",
   "action": "Check whether you still need a confirmation step. We have not confirmed a direct replacement.",
   "job": "Adds a confirmation step to Contact Form 7 forms.",
   "second_sign": "Handles form submissions",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2018-02-27. That was 8 yr 8 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.9.35. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2018-02-27",
   "tested_up_to": "4.9.35",
   "version": "5.1",
   "installs": "50k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Confirm Plus Contact Form 7",
     "note": "Built for Contact Form 7 confirmation steps, but it has only one review.",
     "url": "https://wordpress.org/plugins/confirm-plus-contact-form-7/",
     "slug": "confirm-plus-contact-form-7"
    },
    {
     "type": "plugin",
     "name": "Webheadcoder Multi-Step Forms for Contact Form 7",
     "note": "Split a form into steps.",
     "url": "https://wordpress.org/plugins/contact-form-7-multi-step-module/",
     "slug": "contact-form-7-multi-step-module"
    },
    {
     "type": "plugin",
     "name": "Multi Step for Contact Form 7",
     "note": "Add multiple steps to Contact Form 7.",
     "url": "https://wordpress.org/plugins/cf7-multi-step/",
     "slug": "cf7-multi-step"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/contact-form-7-add-confirm/",
   "source": "edition"
  },
  {
   "slug": "wp-extra-file-types",
   "name": "WP Extra File Types",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It lets a site accept more kinds of uploaded file, so its settings affect what reaches your server. It has had no update for three years.",
   "action": "Review which file types you allow, then try one of the alternatives below.",
   "job": "Adds file types to the list the media library accepts.",
   "second_sign": "Controls file uploads",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2023-10-28. That was 3 yr before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.3.14. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2023-10-28",
   "tested_up_to": "6.3.14",
   "version": "0.5.2",
   "installs": "40k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "File Upload Types by WPForms",
     "note": "Choose which file types the site accepts.",
     "url": "https://wordpress.org/plugins/file-upload-types/",
     "slug": "file-upload-types"
    },
    {
     "type": "plugin",
     "name": "Add MIME Types",
     "note": "Add MIME types from a settings screen.",
     "url": "https://wordpress.org/plugins/wp-add-mime-types/",
     "slug": "wp-add-mime-types"
    },
    {
     "type": "builtin",
     "name": "WordPress defaults",
     "note": "Keep the default allowed list unless you have a clear need.",
     "url": "https://developer.wordpress.org/reference/functions/get_allowed_mime_types/"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/wp-extra-file-types/",
   "source": "edition"
  },
  {
   "slug": "wp-edit",
   "name": "WP Edit",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "A public advisory covers the current version, and no fix is listed. It was last updated in 2018 and is tested only up to WordPress 4.9.",
   "action": "Check whether your authors still need it. If they do, try one of the alternatives below, and test old posts before you remove this plugin.",
   "job": "Adds extra buttons and options to the classic content editor.",
   "second_sign": "Public advisory with no fix listed",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2018-10-15. That was 8 yr 1 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.9.35. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "security",
     "detail": "1 public advisory on record, and 1 has no fix listed. Details are below.",
     "source": "wpvulnerability.net"
    }
   ],
   "open_advisories": [
    {
     "cve": "CVE-2025-53253",
     "title": "Cross-site scripting",
     "severity": "Medium (5.9)",
     "fix": "No fix listed"
    }
   ],
   "last_updated": "2018-10-15",
   "tested_up_to": "4.9.35",
   "version": "4.0.4",
   "installs": "40k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Advanced Editor Tools",
     "note": "Extra buttons for the classic and block editors.",
     "url": "https://wordpress.org/plugins/tinymce-advanced/",
     "slug": "tinymce-advanced"
    },
    {
     "type": "plugin",
     "name": "Classic Editor",
     "note": "Keeps the classic editor, without the extra buttons.",
     "url": "https://wordpress.org/plugins/classic-editor/",
     "slug": "classic-editor"
    },
    {
     "type": "builtin",
     "name": "Block editor",
     "note": "Built into WordPress.",
     "url": "https://wordpress.org/documentation/article/wordpress-block-editor/"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/wp-edit/",
   "source": "edition"
  },
  {
   "slug": "scripts-n-styles",
   "name": "Scripts n Styles",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It adds custom code to posts and pages, and a public advisory covers the current version with no fix listed. It was last updated in 2023.",
   "action": "Move any code you still need to one of the alternatives below, then remove this plugin.",
   "job": "Adds custom CSS, JavaScript and HTML to individual posts and pages.",
   "second_sign": "Public advisory with no fix listed",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2023-06-06. That was 3 yr 5 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.2.15. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "security",
     "detail": "2 public advisories on record, and 1 has no fix listed. Details are below.",
     "source": "wpvulnerability.net"
    }
   ],
   "open_advisories": [
    {
     "cve": "CVE-2026-62042",
     "title": "Access control",
     "severity": "Medium (5.3)",
     "fix": "No fix listed"
    }
   ],
   "last_updated": "2023-06-06",
   "tested_up_to": "6.2.15",
   "version": "3.5.8",
   "installs": "30k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Simple Custom CSS and JS",
     "note": "Manage CSS and JavaScript snippets.",
     "url": "https://wordpress.org/plugins/custom-css-js/",
     "slug": "custom-css-js"
    },
    {
     "type": "plugin",
     "name": "WPCode",
     "note": "Manage code snippets from one screen.",
     "url": "https://wordpress.org/plugins/insert-headers-and-footers/",
     "slug": "insert-headers-and-footers"
    },
    {
     "type": "plugin",
     "name": "Code Snippets",
     "note": "Run PHP snippets without editing theme files.",
     "url": "https://wordpress.org/plugins/code-snippets/",
     "slug": "code-snippets"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/scripts-n-styles/",
   "source": "edition"
  },
  {
   "slug": "enhanced-text-widget",
   "name": "Enhanced Text Widget",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It can run PHP from a widget, and it has seven public advisories on record. It was last updated in 2024.",
   "action": "Move your code to one of the alternatives below, then remove this plugin.",
   "job": "A text widget that also accepts HTML, CSS, JavaScript, shortcodes and PHP.",
   "second_sign": "Runs site code",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-07-17. That was 2 yr 3 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.6.11. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2024-07-17",
   "tested_up_to": "6.6.11",
   "version": "1.6.7",
   "installs": "30k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Custom HTML block",
     "note": "Built-in HTML, without running PHP.",
     "url": "https://wordpress.org/documentation/article/custom-html/"
    },
    {
     "type": "plugin",
     "name": "Code Snippets",
     "note": "Run PHP snippets without editing theme files.",
     "url": "https://wordpress.org/plugins/code-snippets/",
     "slug": "code-snippets"
    },
    {
     "type": "plugin",
     "name": "WPCode",
     "note": "Manage code snippets from one screen.",
     "url": "https://wordpress.org/plugins/insert-headers-and-footers/",
     "slug": "insert-headers-and-footers"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/enhanced-text-widget/",
   "source": "edition"
  },
  {
   "slug": "recaptcha-for-mw-wp-form",
   "name": "reCAPTCHA for MW WP Form",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It protects forms from spam, and it was last updated in 2024. It is tested only up to WordPress 6.5.",
   "action": "Test whether your forms still block spam. We have not confirmed a direct replacement for MW WP Form.",
   "job": "Adds reCAPTCHA v3 to MW WP Form.",
   "second_sign": "Guards forms from spam",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-05-09. That was 2 yr 6 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.5.14. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2024-05-09",
   "tested_up_to": "6.5.14",
   "version": "1.1.7",
   "installs": "30k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Advanced Google reCAPTCHA",
     "note": "reCAPTCHA for WordPress forms. Check support for MW WP Form first.",
     "url": "https://wordpress.org/plugins/advanced-google-recaptcha/",
     "slug": "advanced-google-recaptcha"
    },
    {
     "type": "plugin",
     "name": "Simple CAPTCHA with Cloudflare Turnstile",
     "note": "Cloudflare Turnstile for forms. Check support for MW WP Form first.",
     "url": "https://wordpress.org/plugins/simple-cloudflare-turnstile/",
     "slug": "simple-cloudflare-turnstile"
    },
    {
     "type": "plugin",
     "name": "Snow Monkey Forms",
     "note": "A separate form plugin, if you are open to moving forms.",
     "url": "https://wordpress.org/plugins/snow-monkey-forms/",
     "slug": "snow-monkey-forms"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/recaptcha-for-mw-wp-form/",
   "source": "edition"
  },
  {
   "slug": "my-plugins",
   "name": "My-Plugins",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It shows a public list of the plugins a site runs. It was last updated in 2013 and is tested only up to WordPress 3.5.",
   "action": "Remove it, and any page that uses its shortcode.",
   "job": "Shows a table of a site’s plugins through a shortcode.",
   "second_sign": "Shows the plugins a site runs",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2013-07-02. That was 13 yr 4 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 3.5.2. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2013-07-02",
   "tested_up_to": "3.5.2",
   "version": "0.3",
   "installs": "30k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Plugins screen",
     "note": "See your plugins in wp-admin, where only you can.",
     "url": "https://wordpress.org/documentation/article/manage-plugins/"
    },
    {
     "type": "builtin",
     "name": "Site Health Info",
     "note": "Lists plugins and versions privately, and can copy the list.",
     "url": "https://wordpress.org/documentation/article/site-health-screen/"
    },
    {
     "type": "builtin",
     "name": "WP-CLI plugin list",
     "note": "Use wp plugin list where your host provides WP-CLI.",
     "url": "https://developer.wordpress.org/cli/commands/plugin/list/"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/my-plugins/",
   "source": "edition"
  },
  {
   "slug": "automatic-updater",
   "name": "Advanced Automatic Updates",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It controls how a site updates itself, and it was last updated in 2021. WordPress now includes automatic updates for core, plugins and themes.",
   "action": "Try one of the alternatives below, then remove this plugin.",
   "job": "Adds extra options to WordPress automatic updates.",
   "second_sign": "Controls updates",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2021-06-04. That was 5 yr 5 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.0.31. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2021-06-04",
   "tested_up_to": "5.0.31",
   "version": "1.0.2",
   "installs": "20k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "WordPress automatic updates",
     "note": "Turn on updates per plugin and theme from wp-admin.",
     "url": "https://wordpress.org/documentation/article/plugins-themes-auto-updates/"
    },
    {
     "type": "plugin",
     "name": "Easy Updates Manager",
     "note": "More detailed control over what updates.",
     "url": "https://wordpress.org/plugins/stops-core-theme-and-plugin-updates/",
     "slug": "stops-core-theme-and-plugin-updates"
    },
    {
     "type": "plugin",
     "name": "WP Rollback",
     "note": "Return to an earlier plugin version if an update fails.",
     "url": "https://wordpress.org/plugins/wp-rollback/",
     "slug": "wp-rollback"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/automatic-updater/",
   "source": "edition"
  },
  {
   "slug": "audit-trail",
   "name": "Audit Trail",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "An activity log needs to be reliable when you investigate a problem. This one has not changed since 2016 and is tested only up to WordPress 4.7.",
   "action": "Try one of the alternatives below, then remove this plugin.",
   "job": "Keeps a log of actions taken in the WordPress admin.",
   "second_sign": "Keeps the activity log",
   "based_on": [
    {
     "signal": "updates",
     "detail": "WordPress.org shows 2017-11-28, but the plugin’s readme last changed on 2016-12-11.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.7.39. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2017-11-28",
   "tested_up_to": "4.7.39",
   "version": "1.3",
   "installs": "20k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "WP Activity Log",
     "note": "A detailed WordPress activity log.",
     "url": "https://wordpress.org/plugins/wp-security-audit-log/",
     "slug": "wp-security-audit-log"
    },
    {
     "type": "plugin",
     "name": "Simple History",
     "note": "An easy-to-read history of site changes.",
     "url": "https://wordpress.org/plugins/simple-history/",
     "slug": "simple-history"
    },
    {
     "type": "plugin",
     "name": "Activity Log",
     "note": "Monitor user activity.",
     "url": "https://wordpress.org/plugins/aryo-activity-log/",
     "slug": "aryo-activity-log"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/audit-trail/",
   "source": "edition"
  },
  {
   "slug": "wp-test-email",
   "name": "WP Test Email",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "Three public advisories cover the version on WordPress.org, and one has no fix listed. The plugin was last updated in 2024.",
   "action": "Remove it. When you need to test email, try one of the alternatives below.",
   "job": "Sends a test email to check that a site can send mail.",
   "second_sign": "Public advisory with no fix listed",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-07-31. That was 2 yr 3 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.6.11. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "security",
     "detail": "3 public advisories on record, and 1 has no fix listed. Details are below.",
     "source": "wpvulnerability.net"
    }
   ],
   "open_advisories": [
    {
     "cve": "CVE-2025-69102",
     "title": "Cross-site scripting",
     "severity": "High (7.1)",
     "fix": "No fix listed"
    }
   ],
   "last_updated": "2024-07-31",
   "tested_up_to": "6.6.11",
   "version": "1.1.7",
   "installs": "20k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Check & Log Email",
     "note": "Send test emails and keep a log.",
     "url": "https://wordpress.org/plugins/check-email/",
     "slug": "check-email"
    },
    {
     "type": "plugin",
     "name": "WP Mail Logging",
     "note": "Log what your site sends.",
     "url": "https://wordpress.org/plugins/wp-mail-logging/",
     "slug": "wp-mail-logging"
    },
    {
     "type": "plugin",
     "name": "FluentSMTP",
     "note": "Send site email through a mail service, with a test screen.",
     "url": "https://wordpress.org/plugins/fluent-smtp/",
     "slug": "fluent-smtp"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/wp-test-email/",
   "source": "edition"
  },
  {
   "slug": "site-offline",
   "name": "Site Offline",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It decides who can see your site, and a public advisory covers the current version with no fix listed. It was last updated in 2024.",
   "action": "Try one of the alternatives below, then remove this plugin.",
   "job": "Shows a coming soon or maintenance page instead of the site.",
   "second_sign": "Public advisory with no fix listed",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-03-20. That was 2 yr 7 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.4.14. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "security",
     "detail": "4 public advisories on record, and 1 has no fix listed. Details are below.",
     "source": "wpvulnerability.net"
    }
   ],
   "open_advisories": [
    {
     "cve": "CVE-2025-48348",
     "title": "Access control",
     "severity": "Not scored",
     "fix": "No fix listed"
    }
   ],
   "last_updated": "2024-03-20",
   "tested_up_to": "6.4.14",
   "version": "1.5.7",
   "installs": "20k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "LightStart",
     "note": "Maintenance and coming soon pages.",
     "url": "https://wordpress.org/plugins/wp-maintenance-mode/",
     "slug": "wp-maintenance-mode"
    },
    {
     "type": "plugin",
     "name": "Maintenance",
     "note": "A simple maintenance page.",
     "url": "https://wordpress.org/plugins/maintenance/",
     "slug": "maintenance"
    },
    {
     "type": "plugin",
     "name": "Website Builder by SeedProd",
     "note": "Coming soon pages inside a larger site builder.",
     "url": "https://wordpress.org/plugins/coming-soon/",
     "slug": "coming-soon"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/site-offline/",
   "source": "edition"
  },
  {
   "slug": "cf7-phone-mask-field",
   "name": "Contact Form 7 Phone mask field",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It sits in the path of visitor form submissions, and it was last updated in 2021.",
   "action": "Test your forms, then try one of the alternatives below.",
   "job": "Adds a phone field with an input mask to Contact Form 7.",
   "second_sign": "Handles form submissions",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2021-01-07. That was 5 yr 10 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.6.23. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2021-01-07",
   "tested_up_to": "5.6.23",
   "version": "1.4.2",
   "installs": "20k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Masks Form Fields",
     "note": "Input masks for form fields.",
     "url": "https://wordpress.org/plugins/masks-form-fields/",
     "slug": "masks-form-fields"
    },
    {
     "type": "plugin",
     "name": "Input Masks for Contact Form 7",
     "note": "Input masks for Contact Form 7. It has no reviews yet.",
     "url": "https://wordpress.org/plugins/input-masks-for-contact-form-7/",
     "slug": "input-masks-for-contact-form-7"
    },
    {
     "type": "builtin",
     "name": "Contact Form 7 tel field",
     "note": "A standard phone field, without a mask.",
     "url": "https://contactform7.com/text-fields/"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/cf7-phone-mask-field/",
   "source": "edition"
  },
  {
   "slug": "wp-security-hardening",
   "name": "WP Hardening",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "Its own WordPress.org page says it is discontinued and advises deleting it as soon as possible. It still reports 10,000 active installs.",
   "action": "Follow the author’s advice: deactivate and delete it. If you need a security plugin, try one of the alternatives below.",
   "job": "Applies common WordPress security settings in one click.",
   "second_sign": "Discontinued by its author",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-09-13. That was 2 yr 2 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.0.18. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "reviews",
     "detail": "The latest 10 reviews average 3.1 stars, against 4.0 overall. 4 of them gave 1 or 2 stars. Newest activity: 2026-02-15. These reviews are clearly lower than the overall score.",
     "source": "WordPress.org reviews"
    }
   ],
   "open_advisories": [],
   "last_updated": "2024-09-13",
   "tested_up_to": "6.0.18",
   "version": "1.2.8",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Wordfence Security",
     "note": "Firewall and malware scanning.",
     "url": "https://wordpress.org/plugins/wordfence/",
     "slug": "wordfence"
    },
    {
     "type": "plugin",
     "name": "All-In-One Security",
     "note": "A broad free security suite.",
     "url": "https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/",
     "slug": "all-in-one-wp-security-and-firewall"
    },
    {
     "type": "plugin",
     "name": "Sucuri Security",
     "note": "Auditing, malware checks and hardening options.",
     "url": "https://wordpress.org/plugins/sucuri-scanner/",
     "slug": "sucuri-scanner"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/wp-security-hardening/",
   "source": "edition"
  },
  {
   "slug": "auth0",
   "name": "Login by Auth0",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It replaces the WordPress login page, so a fault here affects every user. It has had no update for over two years, and WordPress.org warns it has not been tested with the latest three major releases.",
   "action": "Check Auth0’s current WordPress guidance. Plan how users will sign in before you change anything.",
   "job": "Adds Auth0 sign-in, including passwordless, social login and single sign-on.",
   "second_sign": "Replaces the login page",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-07-12. That was 2 yr 4 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.5.14. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "reviews",
     "detail": "The latest 10 reviews average 2.8 stars, against 3.1 overall. 5 of them gave 1 or 2 stars. Newest activity: 2025-03-03. These reviews are clearly lower than the overall score.",
     "source": "WordPress.org reviews"
    }
   ],
   "open_advisories": [],
   "last_updated": "2024-07-12",
   "tested_up_to": "6.5.14",
   "version": "4.6.2",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "SAML Single Sign On",
     "note": "SAML single sign-on.",
     "url": "https://wordpress.org/plugins/miniorange-saml-20-single-sign-on/",
     "slug": "miniorange-saml-20-single-sign-on"
    },
    {
     "type": "plugin",
     "name": "WP SAML Auth",
     "note": "SAML sign-in for WordPress.",
     "url": "https://wordpress.org/plugins/wp-saml-auth/",
     "slug": "wp-saml-auth"
    },
    {
     "type": "plugin",
     "name": "Two Factor",
     "note": "Consider this if you only need stronger logins, not single sign-on.",
     "url": "https://wordpress.org/plugins/two-factor/",
     "slug": "two-factor"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/auth0/",
   "source": "edition"
  },
  {
   "slug": "lockdown-wp-admin",
   "name": "Lockdown WP Admin",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It controls access to the admin area, and it has not changed since 2015. It is tested only up to WordPress 4.3.",
   "action": "Remove it, and use the alternatives below to protect logins.",
   "job": "Hides the WordPress admin and login pages from public view.",
   "second_sign": "Controls admin access",
   "based_on": [
    {
     "signal": "updates",
     "detail": "WordPress.org shows 2017-11-28, but the plugin’s readme last changed on 2015-09-28.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.3.34. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2017-11-28",
   "tested_up_to": "4.3.34",
   "version": "2.3.2",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Limit Login Attempts Security",
     "note": "Limit repeated login attempts.",
     "url": "https://wordpress.org/plugins/limit-login-attempts-reloaded/",
     "slug": "limit-login-attempts-reloaded"
    },
    {
     "type": "plugin",
     "name": "Two Factor",
     "note": "Add a second login step.",
     "url": "https://wordpress.org/plugins/two-factor/",
     "slug": "two-factor"
    },
    {
     "type": "plugin",
     "name": "WPS Hide Login",
     "note": "Change the login page URL.",
     "url": "https://wordpress.org/plugins/wps-hide-login/",
     "slug": "wps-hide-login"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/lockdown-wp-admin/",
   "source": "edition"
  },
  {
   "slug": "wc-password-strength-settings",
   "name": "Password Strength Settings for WooCommerce",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It changes the password rules for customer accounts, and it has had no update for three years. It is tested only up to WordPress 6.3.",
   "action": "Check whether you still need it. If not, remove it and return to the WooCommerce default.",
   "job": "Sets password strength rules for WooCommerce customers.",
   "second_sign": "Sets password rules",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2023-10-11. That was 3 yr 1 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.3.14. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2023-10-11",
   "tested_up_to": "6.3.14",
   "version": "3.0.1",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "WooCommerce default",
     "note": "Remove the plugin and use WooCommerce’s standard password check.",
     "url": "https://wordpress.org/plugins/woocommerce/",
     "slug": "woocommerce"
    },
    {
     "type": "plugin",
     "name": "Melapress Login Security",
     "note": "Password policies and login rules.",
     "url": "https://wordpress.org/plugins/melapress-login-security/",
     "slug": "melapress-login-security"
    },
    {
     "type": "plugin",
     "name": "Two Factor",
     "note": "Add a second login step for accounts.",
     "url": "https://wordpress.org/plugins/two-factor/",
     "slug": "two-factor"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/wc-password-strength-settings/",
   "source": "edition"
  },
  {
   "slug": "woocommerce-pagseguro",
   "name": "PagSeguro for WooCommerce",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "This payment gateway was last updated in 2020 and is tested only up to WordPress 5.5. Its high rating comes from reviews that may be years old.",
   "action": "Check which WooCommerce integration PagSeguro supports today, and test checkout fully before switching.",
   "job": "Adds PagSeguro as a payment option in WooCommerce.",
   "second_sign": "Handles payments",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2020-08-10. That was 6 yr 3 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.5.24. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2020-08-10",
   "tested_up_to": "5.5.24",
   "version": "2.14.0",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "PagBank / PagSeguro e Vindi para WooCommerce",
     "note": "PagBank and PagSeguro payments for WooCommerce.",
     "url": "https://wordpress.org/plugins/pagbank-connect/",
     "slug": "pagbank-connect"
    },
    {
     "type": "plugin",
     "name": "PagBank for WooCommerce",
     "note": "PagBank payments for WooCommerce. It has few reviews.",
     "url": "https://wordpress.org/plugins/pagbank-for-woocommerce/",
     "slug": "pagbank-for-woocommerce"
    },
    {
     "type": "plugin",
     "name": "Virtuaria Payments with PagBank for WooCommerce",
     "note": "PagBank payments for WooCommerce.",
     "url": "https://wordpress.org/plugins/virtuaria-pagseguro/",
     "slug": "virtuaria-pagseguro"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/woocommerce-pagseguro/",
   "source": "edition"
  },
  {
   "slug": "custom-css-and-javascript",
   "name": "Custom CSS and JavaScript",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It adds code to every page, and a public advisory covers the current version with no fix listed. It was last updated in 2024.",
   "action": "Copy your code to one of the alternatives below, check the site, then remove this plugin.",
   "job": "Adds custom CSS and JavaScript to a site.",
   "second_sign": "Public advisory with no fix listed",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-08-12. That was 2 yr 3 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.6.11. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "security",
     "detail": "1 public advisory on record, and 1 has no fix listed. Details are below.",
     "source": "wpvulnerability.net"
    }
   ],
   "open_advisories": [
    {
     "cve": "CVE-2026-66683",
     "title": "Information exposure",
     "severity": "Medium (5.3)",
     "fix": "No fix listed"
    }
   ],
   "last_updated": "2024-08-12",
   "tested_up_to": "6.6.11",
   "version": "2.0.16",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Simple Custom CSS and JS",
     "note": "Manage CSS and JavaScript snippets.",
     "url": "https://wordpress.org/plugins/custom-css-js/",
     "slug": "custom-css-js"
    },
    {
     "type": "plugin",
     "name": "WPCode",
     "note": "Manage code snippets from one screen.",
     "url": "https://wordpress.org/plugins/insert-headers-and-footers/",
     "slug": "insert-headers-and-footers"
    },
    {
     "type": "builtin",
     "name": "Additional CSS",
     "note": "Add CSS in the WordPress Customizer or Site Editor.",
     "url": "https://wordpress.org/documentation/article/customizer/"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/custom-css-and-javascript/",
   "source": "edition"
  },
  {
   "slug": "blog-designer",
   "name": "Blog Designer",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "A public advisory covers the current version, and no fix is listed. It was last updated in 2024.",
   "action": "Rebuild your blog page with one of the alternatives below, check it on staging, then remove this plugin.",
   "job": "Offers ready-made layouts for the blog page.",
   "second_sign": "Public advisory with no fix listed",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-08-12. That was 2 yr 3 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.6.11. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "security",
     "detail": "3 public advisories on record, and 1 has no fix listed. Details are below.",
     "source": "wpvulnerability.net"
    }
   ],
   "open_advisories": [
    {
     "cve": "CVE-2025-57990",
     "title": "Access control",
     "severity": "Not scored",
     "fix": "No fix listed"
    }
   ],
   "last_updated": "2024-08-12",
   "tested_up_to": "6.6.11",
   "version": "3.1.8",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Query Loop block",
     "note": "Built-in post lists and grids.",
     "url": "https://wordpress.org/documentation/article/query-loop-block/"
    },
    {
     "type": "plugin",
     "name": "GenerateBlocks",
     "note": "Layout blocks with post loops.",
     "url": "https://wordpress.org/plugins/generateblocks/",
     "slug": "generateblocks"
    },
    {
     "type": "plugin",
     "name": "Kadence Blocks",
     "note": "Extra layout and post blocks.",
     "url": "https://wordpress.org/plugins/kadence-blocks/",
     "slug": "kadence-blocks"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/blog-designer/",
   "source": "edition"
  },
  {
   "slug": "disable-right-click-for-wp",
   "name": "Disable Right Click For WP",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "A public advisory covers the current version, and no fix is listed. It was last updated in 2023.",
   "action": "Check whether you still need it. If you do, try one of the alternatives below.",
   "job": "Blocks right-click, copy and similar browser actions for visitors.",
   "second_sign": "Public advisory with no fix listed",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2023-11-26. That was 2 yr 11 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.4.14. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "security",
     "detail": "1 public advisory on record, and 1 has no fix listed. Details are below.",
     "source": "wpvulnerability.net"
    }
   ],
   "open_advisories": [
    {
     "cve": "CVE-2022-29427",
     "title": "Cross-site request forgery",
     "severity": "Medium (4.3)",
     "fix": "No fix listed"
    }
   ],
   "last_updated": "2023-11-26",
   "tested_up_to": "6.4.14",
   "version": "1.1.6",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "WP Content Copy Protection & No Right Click",
     "note": "Blocks right-click and copying.",
     "url": "https://wordpress.org/plugins/wp-content-copy-protector/",
     "slug": "wp-content-copy-protector"
    },
    {
     "type": "plugin",
     "name": "Secure Copy Content Protection and Content Locking",
     "note": "Copy protection with more settings.",
     "url": "https://wordpress.org/plugins/secure-copy-content-protection/",
     "slug": "secure-copy-content-protection"
    },
    {
     "type": "builtin",
     "name": "No plugin",
     "note": "Copy blocking is easy to get around, and it can get in the way of keyboard users.",
     "url": "https://www.w3.org/WAI/fundamentals/accessibility-principles/"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/disable-right-click-for-wp/",
   "source": "edition"
  },
  {
   "slug": "animated-typing-effect",
   "name": "Typing Effect",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "A public advisory covers the current version, and no fix is listed. It was last updated in 2023.",
   "action": "Find pages that use the effect, then rebuild them with one of the alternatives below or remove the effect.",
   "job": "Adds an animated typing effect to text on a page.",
   "second_sign": "Public advisory with no fix listed",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2023-10-26. That was 3 yr before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.3.14. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "security",
     "detail": "2 public advisories on record, and 1 has no fix listed. Details are below.",
     "source": "wpvulnerability.net"
    }
   ],
   "open_advisories": [
    {
     "cve": "CVE-2026-66644",
     "title": "Cross-site scripting",
     "severity": "Medium (6.5)",
     "fix": "No fix listed"
    }
   ],
   "last_updated": "2023-10-26",
   "tested_up_to": "6.3.14",
   "version": "1.3.7",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Animated Text Block",
     "note": "A block for typing and looping text.",
     "url": "https://wordpress.org/plugins/animated-text-block/",
     "slug": "animated-text-block"
    },
    {
     "type": "plugin",
     "name": "Gutenberg Essential Blocks",
     "note": "A block collection with animated text.",
     "url": "https://wordpress.org/plugins/essential-blocks/",
     "slug": "essential-blocks"
    },
    {
     "type": "plugin",
     "name": "Premium Addons for Elementor",
     "note": "Elementor widgets, including animated headings.",
     "url": "https://wordpress.org/plugins/premium-addons-for-elementor/",
     "slug": "premium-addons-for-elementor"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/animated-typing-effect/",
   "source": "edition"
  },
  {
   "slug": "wp-tab-widget",
   "name": "WP Tab Widget",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "A public advisory covers the current version, and no fix is listed. It was last updated in 2022 and is tested only up to WordPress 5.9.",
   "action": "Try one of the alternatives below, then remove this plugin.",
   "job": "Adds a tabbed sidebar widget with popular and recent posts.",
   "second_sign": "Public advisory with no fix listed",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2022-01-26. That was 4 yr 9 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.9.20. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "security",
     "detail": "1 public advisory on record, and 1 has no fix listed. Details are below.",
     "source": "wpvulnerability.net"
    },
    {
     "signal": "reviews",
     "detail": "The latest 10 reviews average 3.4 stars, against 4.3 overall. 4 of them gave 1 or 2 stars. Newest activity: 2020-06-23. These reviews are clearly lower than the overall score.",
     "source": "WordPress.org reviews"
    }
   ],
   "open_advisories": [
    {
     "cve": "CVE-2026-66646",
     "title": "Cross-site scripting",
     "severity": "Medium (6.5)",
     "fix": "No fix listed"
    }
   ],
   "last_updated": "2022-01-26",
   "tested_up_to": "5.9.20",
   "version": "1.2.11",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Latest Posts block",
     "note": "Built-in post lists.",
     "url": "https://wordpress.org/documentation/article/latest-posts-block/"
    },
    {
     "type": "plugin",
     "name": "Kadence Blocks",
     "note": "Layout blocks, including tabs.",
     "url": "https://wordpress.org/plugins/kadence-blocks/",
     "slug": "kadence-blocks"
    },
    {
     "type": "plugin",
     "name": "Gutena Tabs",
     "note": "A tabs block.",
     "url": "https://wordpress.org/plugins/gutena-tabs/",
     "slug": "gutena-tabs"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/wp-tab-widget/",
   "source": "edition"
  },
  {
   "slug": "sticky-header-oceanwp",
   "name": "Oceanwp sticky header",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "A public advisory covers the current version, and no fix is listed. It was last updated in 2021 and is tested only up to WordPress 5.8.",
   "action": "Remove it. If you still want a sticky header, try one of the alternatives below.",
   "job": "Keeps the OceanWP theme header in view as visitors scroll.",
   "second_sign": "Public advisory with no fix listed",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2021-10-22. That was 5 yr before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.8.19. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "security",
     "detail": "1 public advisory on record, and 1 has no fix listed. Details are below.",
     "source": "wpvulnerability.net"
    },
    {
     "signal": "reviews",
     "detail": "The latest 10 reviews average 3.3 stars, against 4.1 overall. 4 of them gave 1 or 2 stars. Newest activity: 2022-01-01. These reviews are clearly lower than the overall score.",
     "source": "WordPress.org reviews"
    }
   ],
   "open_advisories": [
    {
     "cve": "CVE-2022-35730",
     "title": "Cross-site request forgery",
     "severity": "Medium (4.3)",
     "fix": "No fix listed"
    }
   ],
   "last_updated": "2021-10-22",
   "tested_up_to": "5.8.19",
   "version": "1.0.8",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Sticky Menu & Sticky Header",
     "note": "Make chosen elements sticky.",
     "url": "https://wordpress.org/plugins/sticky-menu-or-anything-on-scroll/",
     "slug": "sticky-menu-or-anything-on-scroll"
    },
    {
     "type": "plugin",
     "name": "My Sticky Bar",
     "note": "Sticky menus and bars.",
     "url": "https://wordpress.org/plugins/mystickymenu/",
     "slug": "mystickymenu"
    },
    {
     "type": "plugin",
     "name": "Ocean Extra",
     "note": "OceanWP’s own companion plugin. Check what it covers for your setup.",
     "url": "https://wordpress.org/plugins/ocean-extra/",
     "slug": "ocean-extra"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/sticky-header-oceanwp/",
   "source": "edition"
  },
  {
   "slug": "seo-image",
   "name": "SEO Friendly Images",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "A public advisory covers the current version, and no fix is listed. It has not changed since 2015 and is tested only up to WordPress 4.1.",
   "action": "Remove it, and use one of the alternatives below for your image alt text.",
   "job": "Adds alt and title attributes to images automatically.",
   "second_sign": "Public advisory with no fix listed",
   "based_on": [
    {
     "signal": "updates",
     "detail": "WordPress.org shows 2017-11-28, but the plugin’s readme last changed on 2015-01-02.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.1.42. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "security",
     "detail": "2 public advisories on record, and 1 has no fix listed. Details are below.",
     "source": "wpvulnerability.net"
    },
    {
     "signal": "reviews",
     "detail": "The latest 10 reviews average 2.4 stars, against 3.0 overall. 6 of them gave 1 or 2 stars. Newest activity: 2017-08-24. These reviews are clearly lower than the overall score.",
     "source": "WordPress.org reviews"
    }
   ],
   "open_advisories": [
    {
     "cve": "CVE-2026-39665",
     "title": "Cross-site scripting",
     "severity": "Medium (6.5)",
     "fix": "No fix listed"
    }
   ],
   "last_updated": "2017-11-28",
   "tested_up_to": "4.1.42",
   "version": "3.0.5",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Media library alt text",
     "note": "Write alt text for each image in WordPress.",
     "url": "https://wordpress.org/documentation/article/media-library-screen/"
    },
    {
     "type": "plugin",
     "name": "Auto Image Attributes From Filename With Bulk Updater",
     "note": "Fill image attributes in bulk.",
     "url": "https://wordpress.org/plugins/auto-image-attributes-from-filename-with-bulk-updater/",
     "slug": "auto-image-attributes-from-filename-with-bulk-updater"
    },
    {
     "type": "plugin",
     "name": "Equalize Digital Accessibility Checker",
     "note": "Finds images with missing alt text, among other checks.",
     "url": "https://wordpress.org/plugins/accessibility-checker/",
     "slug": "accessibility-checker"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/seo-image/",
   "source": "edition"
  },
  {
   "slug": "dashboard-notepad",
   "name": "Dashboard Notepad",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "A public advisory covers the current version, and no fix is listed. It was last updated in 2017 and is tested only up to WordPress 4.1.",
   "action": "Copy your notes to one of the alternatives below, then remove this plugin.",
   "job": "Adds a notepad to the WordPress dashboard.",
   "second_sign": "Public advisory with no fix listed",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2017-07-30. That was 9 yr 3 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.1.42. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "security",
     "detail": "1 public advisory on record, and 1 has no fix listed. Details are below.",
     "source": "wpvulnerability.net"
    }
   ],
   "open_advisories": [
    {
     "cve": "CVE-2025-57927",
     "title": "Cross-site request forgery",
     "severity": "Not scored",
     "fix": "No fix listed"
    }
   ],
   "last_updated": "2017-07-30",
   "tested_up_to": "4.1.42",
   "version": "1.42",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "WP Dashboard Notes",
     "note": "Notes on the dashboard.",
     "url": "https://wordpress.org/plugins/wp-dashboard-notes/",
     "slug": "wp-dashboard-notes"
    },
    {
     "type": "plugin",
     "name": "Dashboard Widgets Suite",
     "note": "A set of dashboard widgets, including notes.",
     "url": "https://wordpress.org/plugins/dashboard-widgets-suite/",
     "slug": "dashboard-widgets-suite"
    },
    {
     "type": "plugin",
     "name": "Peter's Post Notes",
     "note": "Notes for posts, pages and users.",
     "url": "https://wordpress.org/plugins/peters-post-notes/",
     "slug": "peters-post-notes"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/dashboard-notepad/",
   "source": "edition"
  },
  {
   "slug": "tc-custom-javascript",
   "name": "TC Custom JavaScript",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It adds JavaScript to every page from one screen, and it was last updated in 2023. It is tested only up to WordPress 6.1.",
   "action": "Copy your code to one of the alternatives below, check the site, then remove this plugin.",
   "job": "Adds custom JavaScript to a site from the admin area.",
   "second_sign": "Runs site code",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2023-02-24. That was 3 yr 8 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.1.16. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2023-02-24",
   "tested_up_to": "6.1.16",
   "version": "1.2.3",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Simple Custom CSS and JS",
     "note": "Manage CSS and JavaScript snippets.",
     "url": "https://wordpress.org/plugins/custom-css-js/",
     "slug": "custom-css-js"
    },
    {
     "type": "plugin",
     "name": "WPCode",
     "note": "Manage code snippets from one screen.",
     "url": "https://wordpress.org/plugins/insert-headers-and-footers/",
     "slug": "insert-headers-and-footers"
    },
    {
     "type": "plugin",
     "name": "Header Footer Code Manager",
     "note": "Manage header and footer code.",
     "url": "https://wordpress.org/plugins/header-footer-code-manager/",
     "slug": "header-footer-code-manager"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/tc-custom-javascript/",
   "source": "edition"
  },
  {
   "slug": "gravity-forms-no-captcha-recaptcha",
   "name": "Gravity Forms No CAPTCHA reCAPTCHA",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It protects forms from spam, and it has not changed since 2015. It is tested only up to WordPress 4.0.",
   "action": "Try one of the alternatives below, test a form, then remove this plugin.",
   "job": "Adds a reCAPTCHA field to Gravity Forms.",
   "second_sign": "Guards forms from spam",
   "based_on": [
    {
     "signal": "updates",
     "detail": "WordPress.org shows 2017-11-28, but the plugin’s readme last changed on 2015-01-21.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.0.0. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2017-11-28",
   "tested_up_to": "4.0.0",
   "version": "1.0.7",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Gravity Forms CAPTCHA field",
     "note": "Included in Gravity Forms.",
     "url": "https://docs.gravityforms.com/captcha/"
    },
    {
     "type": "plugin",
     "name": "Simple CAPTCHA with Cloudflare Turnstile",
     "note": "Cloudflare Turnstile for forms. Check support for your form plugin.",
     "url": "https://wordpress.org/plugins/simple-cloudflare-turnstile/",
     "slug": "simple-cloudflare-turnstile"
    },
    {
     "type": "plugin",
     "name": "Advanced Google reCAPTCHA",
     "note": "reCAPTCHA for WordPress forms.",
     "url": "https://wordpress.org/plugins/advanced-google-recaptcha/",
     "slug": "advanced-google-recaptcha"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/gravity-forms-no-captcha-recaptcha/",
   "source": "edition"
  },
  {
   "slug": "zopim-live-chat",
   "name": "Zendesk Chat",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It carries live conversations with your customers, and it was last updated in 2020. It is tested only up to WordPress 5.5.",
   "action": "Check Zendesk’s current install guidance. If you want another chat tool, try one of the alternatives below.",
   "job": "Adds Zendesk Chat so visitors can talk to the site owner.",
   "second_sign": "Handles customer conversations",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2020-08-20. That was 6 yr 2 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.5.24. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2020-08-20",
   "tested_up_to": "5.5.24",
   "version": "1.4.18",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Tidio",
     "note": "Website live chat and chatbots.",
     "url": "https://wordpress.org/plugins/tidio-live-chat/",
     "slug": "tidio-live-chat"
    },
    {
     "type": "plugin",
     "name": "Chatway Live Chat",
     "note": "Live chat with a support inbox.",
     "url": "https://wordpress.org/plugins/chatway-live-chat/",
     "slug": "chatway-live-chat"
    },
    {
     "type": "plugin",
     "name": "Crisp",
     "note": "Live chat and an AI chatbot.",
     "url": "https://wordpress.org/plugins/crisp/",
     "slug": "crisp"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/zopim-live-chat/",
   "source": "edition"
  },
  {
   "slug": "seo-ultimate",
   "name": "SEO Ultimate",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It controls how search engines see the whole site, and it was last updated in 2016. It is tested only up to WordPress 4.6.",
   "action": "Try one of the alternatives below. Check your titles and descriptions carry over before you remove this plugin.",
   "job": "An all-in-one SEO tool for titles, descriptions, links and more.",
   "second_sign": "Controls search listings",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2016-11-03. That was 10 yr before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.6.30. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "reviews",
     "detail": "The latest 10 reviews average 2.4 stars, against 3.8 overall. 6 of them gave 1 or 2 stars. Newest activity: 2026-06-16. These reviews are clearly lower than the overall score.",
     "source": "WordPress.org reviews"
    }
   ],
   "open_advisories": [],
   "last_updated": "2016-11-03",
   "tested_up_to": "4.6.30",
   "version": "7.6.5.9",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Yoast SEO",
     "note": "Titles, descriptions and search settings.",
     "url": "https://wordpress.org/plugins/wordpress-seo/",
     "slug": "wordpress-seo"
    },
    {
     "type": "plugin",
     "name": "Rank Math SEO",
     "note": "Search settings with content checks.",
     "url": "https://wordpress.org/plugins/seo-by-rank-math/",
     "slug": "seo-by-rank-math"
    },
    {
     "type": "plugin",
     "name": "All in One SEO",
     "note": "A broad SEO plugin.",
     "url": "https://wordpress.org/plugins/all-in-one-seo-pack/",
     "slug": "all-in-one-seo-pack"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/seo-ultimate/",
   "source": "edition"
  },
  {
   "slug": "multiple-domain",
   "name": "Multiple Domain",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It decides which domains serve your site, and it was last updated in 2021. Past advisories are on record.",
   "action": "Compare the options below on staging. We have not confirmed that settings carry over.",
   "job": "Serves one WordPress site from several domains.",
   "second_sign": "Controls site domains",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2021-04-11. That was 5 yr 7 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.7.21. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2021-04-11",
   "tested_up_to": "5.7.21",
   "version": "1.0.7",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Multiple Domain Mapping on Single Site",
     "note": "Map extra domains to pages of one site.",
     "url": "https://wordpress.org/plugins/multiple-domain-mapping-on-single-site/",
     "slug": "multiple-domain-mapping-on-single-site"
    },
    {
     "type": "plugin",
     "name": "Domain Mapping System",
     "note": "Map domains to chosen pages.",
     "url": "https://wordpress.org/plugins/domain-mapping-system/",
     "slug": "domain-mapping-system"
    },
    {
     "type": "builtin",
     "name": "WordPress Multisite",
     "note": "Run separate sites on separate domains.",
     "url": "https://developer.wordpress.org/advanced-administration/multisite/create-network/"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/multiple-domain/",
   "source": "edition"
  },
  {
   "slug": "cookies-for-comments",
   "name": "Cookies for Comments",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It protects comments from spam, and it was last updated in 2019. It is tested only up to WordPress 5.2.",
   "action": "Try one of the alternatives below, then remove this plugin.",
   "job": "Uses a cookie check to mark likely spam comments.",
   "second_sign": "Guards comments from spam",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2019-06-04. That was 7 yr 5 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.2.30. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2019-06-04",
   "tested_up_to": "5.2.30",
   "version": "0.5.5",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Antispam Bee",
     "note": "Comment spam protection with no account.",
     "url": "https://wordpress.org/plugins/antispam-bee/",
     "slug": "antispam-bee"
    },
    {
     "type": "plugin",
     "name": "Akismet Anti-spam",
     "note": "Spam filtering through a hosted service.",
     "url": "https://wordpress.org/plugins/akismet/",
     "slug": "akismet"
    },
    {
     "type": "plugin",
     "name": "Simple CAPTCHA with Cloudflare Turnstile",
     "note": "Add a challenge to comment forms.",
     "url": "https://wordpress.org/plugins/simple-cloudflare-turnstile/",
     "slug": "simple-cloudflare-turnstile"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/cookies-for-comments/",
   "source": "edition"
  },
  {
   "slug": "jivochat",
   "name": "JivoChat",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Quiet",
   "reason": "It carries live conversations with your customers, and it has had no update for three years.",
   "action": "Check JivoChat’s current install guidance. The chat code may work without this plugin.",
   "job": "Adds JivoChat live chat to a site.",
   "second_sign": "Handles customer conversations",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2023-10-25. That was 3 yr before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.4.14. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2023-10-25",
   "tested_up_to": "6.4.14",
   "version": "1.3.6.1",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Tidio",
     "note": "Website live chat and chatbots.",
     "url": "https://wordpress.org/plugins/tidio-live-chat/",
     "slug": "tidio-live-chat"
    },
    {
     "type": "plugin",
     "name": "Crisp",
     "note": "Live chat and an AI chatbot.",
     "url": "https://wordpress.org/plugins/crisp/",
     "slug": "crisp"
    },
    {
     "type": "plugin",
     "name": "Chatway Live Chat",
     "note": "Live chat with a support inbox.",
     "url": "https://wordpress.org/plugins/chatway-live-chat/",
     "slug": "chatway-live-chat"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/jivochat/",
   "source": "edition"
  },
  {
   "slug": "facebook-messenger-customer-chat",
   "name": "Facebook Chat Plugin",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Falling behind",
   "reason": "Meta’s developer documentation said this chat service would stop working on 9 May 2024, and the plugin itself was last updated in 2022.",
   "action": "Remove it. If you need chat, try one of the alternatives below.",
   "job": "Adds a Facebook chat box so visitors can message the site.",
   "second_sign": "Service shut down",
   "based_on": [
    {
     "signal": "service",
     "detail": "Meta’s Chat Plugin page said: “On May 9, 2024, you will no longer be able to access any of the functionality of the Chat Plugin.” Its current Messenger documentation no longer lists the plugin.",
     "source": "Meta developer documentation, archived 2024-06-14"
    },
    {
     "signal": "updates",
     "detail": "No release since 2022-07-05. That was 4 yr 4 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.9.20. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2022-07-05",
   "tested_up_to": "5.9.20",
   "version": "2.5",
   "installs": "70k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Tidio",
     "note": "Website live chat and chatbots.",
     "url": "https://wordpress.org/plugins/tidio-live-chat/",
     "slug": "tidio-live-chat"
    },
    {
     "type": "plugin",
     "name": "Chatway Live Chat",
     "note": "Live chat with a support inbox.",
     "url": "https://wordpress.org/plugins/chatway-live-chat/",
     "slug": "chatway-live-chat"
    },
    {
     "type": "plugin",
     "name": "Crisp",
     "note": "Live chat and an AI chatbot.",
     "url": "https://wordpress.org/plugins/crisp/",
     "slug": "crisp"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/facebook-messenger-customer-chat/",
   "source": "edition"
  },
  {
   "slug": "rest-api",
   "name": "WordPress REST API (Version 2)",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Falling behind",
   "reason": "This beta plugin was built before the REST API moved into WordPress core. It has not changed since 2016 and still reports 10,000 active installs.",
   "action": "Check that nothing relies on it, test on staging, then remove it.",
   "job": "An early version of the WordPress REST API, made before it joined core.",
   "second_sign": "Replaced by WordPress",
   "based_on": [
    {
     "signal": "updates",
     "detail": "WordPress.org shows 2017-11-28, but the plugin’s readme last changed on 2016-10-08.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.7.39. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2017-11-28",
   "tested_up_to": "4.7.39",
   "version": "2.0-beta15",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "WordPress REST API",
     "note": "Already built into WordPress.",
     "url": "https://developer.wordpress.org/rest-api/"
    },
    {
     "type": "builtin",
     "name": "Application Passwords",
     "note": "Built-in authentication for REST API access.",
     "url": "https://make.wordpress.org/core/2020/11/05/application-passwords-integration-guide/"
    },
    {
     "type": "plugin",
     "name": "WPGraphQL",
     "note": "A separate GraphQL API, if your project suits it.",
     "url": "https://wordpress.org/plugins/wp-graphql/",
     "slug": "wp-graphql"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/rest-api/",
   "source": "edition"
  },
  {
   "slug": "disable-real-mime-check",
   "name": "Disable Real MIME Check",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Falling behind",
   "reason": "It turns off a WordPress upload check. Its own page calls it a temporary workaround and says to remove it once WordPress 4.7.3 is available.",
   "action": "Remove it. If uploads then fail, fix the file type or server setting instead of turning off the check.",
   "job": "Turns off a file type check so non-image uploads work on WordPress 4.7.1 and 4.7.2.",
   "second_sign": "Turns off an upload check",
   "based_on": [
    {
     "signal": "updates",
     "detail": "WordPress.org shows 2017-11-28, but the plugin’s readme last changed on 2017-01-26.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.7.39. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2017-11-28",
   "tested_up_to": "4.7.39",
   "version": "1.0",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "WordPress upload checks",
     "note": "Keep the built-in check turned on.",
     "url": "https://developer.wordpress.org/reference/functions/wp_check_filetype_and_ext/"
    },
    {
     "type": "plugin",
     "name": "File Upload Types by WPForms",
     "note": "Allow specific file types instead of turning off a check.",
     "url": "https://wordpress.org/plugins/file-upload-types/",
     "slug": "file-upload-types"
    },
    {
     "type": "plugin",
     "name": "Add MIME Types",
     "note": "Add MIME types from a settings screen.",
     "url": "https://wordpress.org/plugins/wp-add-mime-types/",
     "slug": "wp-add-mime-types"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/disable-real-mime-check/",
   "source": "edition"
  },
  {
   "slug": "wd-instagram-feed",
   "name": "10WebSocial",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Falling behind",
   "reason": "Two public advisories cover the current version, with no fix listed. Instagram retired its Basic Display API in December 2024, after this plugin’s last update in 2023.",
   "action": "Check whether the feed still loads. If you still want one, try one of the alternatives below.",
   "job": "Shows Instagram photos on a site.",
   "second_sign": "Public advisory with no fix listed",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2023-02-09. That was 3 yr 9 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.0.31. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "security",
     "detail": "6 public advisories on record, and 2 have no fix listed. Details are below.",
     "source": "wpvulnerability.net"
    },
    {
     "signal": "reviews",
     "detail": "The latest 10 reviews average 2.2 stars, against 4.5 overall. 7 of them gave 1 or 2 stars. Newest activity: 2023-12-06. These reviews are clearly lower than the overall score.",
     "source": "WordPress.org reviews"
    }
   ],
   "open_advisories": [
    {
     "cve": "CVE-2026-118081",
     "title": "Security issue",
     "severity": "High (8.8)",
     "fix": "No fix listed"
    },
    {
     "cve": "CVE-2026-39787",
     "title": "Access control",
     "severity": "Medium (6.5)",
     "fix": "No fix listed"
    }
   ],
   "last_updated": "2023-02-09",
   "tested_up_to": "5.0.31",
   "version": "1.4.35",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Smash Balloon Social Photo Feed",
     "note": "Instagram feeds on a page or in a widget.",
     "url": "https://wordpress.org/plugins/instagram-feed/",
     "slug": "instagram-feed"
    },
    {
     "type": "plugin",
     "name": "Spotlight Social Photo Feed",
     "note": "Instagram feeds with a visual designer.",
     "url": "https://wordpress.org/plugins/spotlight-social-photo-feeds/",
     "slug": "spotlight-social-photo-feeds"
    },
    {
     "type": "plugin",
     "name": "Feed Them Social",
     "note": "Feeds from several social networks.",
     "url": "https://wordpress.org/plugins/feed-them-social/",
     "slug": "feed-them-social"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/wd-instagram-feed/",
   "source": "edition"
  },
  {
   "slug": "g-meta-keywords",
   "name": "G Meta Keywords",
   "verdict": "replace_now",
   "verdict_label": "Replace now",
   "trend": "Falling behind",
   "reason": "A public advisory covers the current version, and no fix is listed. Google has said for years that it does not use the keywords meta tag for ranking.",
   "action": "Remove it. If you want help with search listings, try one of the alternatives below.",
   "job": "Adds a keywords meta tag to posts and pages.",
   "second_sign": "Public advisory with no fix listed",
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2019-06-19. That was 7 yr 4 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.1.28. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "security",
     "detail": "1 public advisory on record, and 1 has no fix listed. Details are below.",
     "source": "wpvulnerability.net"
    }
   ],
   "open_advisories": [
    {
     "cve": "CVE-2024-49301",
     "title": "Cross-site scripting",
     "severity": "Medium (6.5)",
     "fix": "No fix listed"
    }
   ],
   "last_updated": "2019-06-19",
   "tested_up_to": "5.1.28",
   "version": "1.4",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Yoast SEO",
     "note": "Titles, descriptions and search settings.",
     "url": "https://wordpress.org/plugins/wordpress-seo/",
     "slug": "wordpress-seo"
    },
    {
     "type": "plugin",
     "name": "Rank Math SEO",
     "note": "Search settings with content checks.",
     "url": "https://wordpress.org/plugins/seo-by-rank-math/",
     "slug": "seo-by-rank-math"
    },
    {
     "type": "plugin",
     "name": "All in One SEO",
     "note": "A broad SEO plugin.",
     "url": "https://wordpress.org/plugins/all-in-one-seo-pack/",
     "slug": "all-in-one-seo-pack"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/g-meta-keywords/",
   "source": "edition"
  },
  {
   "slug": "woosidebars",
   "name": "WooSidebars",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "No update for two and a half years. It solves a widget-era problem, so sites moving to block themes may not need it at all.",
   "action": "If you still use custom sidebars, try one of the alternatives below.",
   "job": "Shows different sidebar widgets depending on the page or category.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-04-03. That was 2 yr 7 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.5.14. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "reviews",
     "detail": "The latest 10 reviews average 3.1 stars, against 3.9 overall. 4 of them gave 1 or 2 stars. Newest activity: 2025-02-15. These reviews are clearly lower than the overall score.",
     "source": "WordPress.org reviews"
    }
   ],
   "open_advisories": [],
   "last_updated": "2024-04-03",
   "tested_up_to": "6.5.14",
   "version": "1.4.6",
   "installs": "100k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Content Aware Sidebars",
     "note": "Show different widget areas by context.",
     "url": "https://wordpress.org/plugins/content-aware-sidebars/",
     "slug": "content-aware-sidebars"
    },
    {
     "type": "plugin",
     "name": "Widget Options",
     "note": "Control where each widget appears.",
     "url": "https://wordpress.org/plugins/widget-options/",
     "slug": "widget-options"
    },
    {
     "type": "builtin",
     "name": "Block theme templates",
     "note": "Build different layouts with the Site Editor.",
     "url": "https://wordpress.org/documentation/article/site-editor/"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/woosidebars/",
   "source": "edition"
  },
  {
   "slug": "sassy-social-share",
   "name": "Sassy Social Share",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "A public advisory covers the current version, and no fix is listed yet. It has also gone over a year without an update.",
   "action": "Check for a newer version. If none is out, try one of the alternatives below.",
   "job": "Adds social sharing buttons to posts and pages.",
   "second_sign": "Public advisory with no fix listed",
   "based_on": [
    {
     "signal": "security",
     "detail": "12 public advisories on record, and 1 has no fix listed. Details are below.",
     "source": "wpvulnerability.net"
    }
   ],
   "open_advisories": [
    {
     "cve": "CVE-2026-94170",
     "title": "Cross-site scripting",
     "severity": "High (7.1)",
     "fix": "No fix listed"
    }
   ],
   "last_updated": "2025-09-15",
   "tested_up_to": "6.8.12",
   "version": "3.3.79",
   "installs": "100k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "AddToAny Share Buttons",
     "note": "Share buttons for posts and pages.",
     "url": "https://wordpress.org/plugins/add-to-any/",
     "slug": "add-to-any"
    },
    {
     "type": "plugin",
     "name": "Simple Social Media Share Buttons",
     "note": "Lightweight share buttons.",
     "url": "https://wordpress.org/plugins/simple-social-buttons/",
     "slug": "simple-social-buttons"
    },
    {
     "type": "plugin",
     "name": "Social Media Share Buttons & Social Sharing Icons",
     "note": "Share buttons and social icons.",
     "url": "https://wordpress.org/plugins/ultimate-social-media-icons/",
     "slug": "ultimate-social-media-icons"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/sassy-social-share/",
   "source": "edition",
   "changes": [
    {
     "slug": "sassy-social-share",
     "date": "2026-11-02",
     "change": "closed",
     "detail": "Closed on WordPress.org and no longer available to download. WordPress.org says the closure is temporary, pending a full review, and gives no other reason. Sites that have it get no updates while it stays closed."
    }
   ]
  },
  {
   "slug": "title-remover",
   "name": "Title Remover",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "Last updated in 2021. It is a simple plugin, so risk is lower, but many themes now offer the same setting.",
   "action": "Try one of the alternatives below, then remove this plugin.",
   "job": "Hides the title on individual posts and pages.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2021-06-03. That was 5 yr 5 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.7.21. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2021-06-03",
   "tested_up_to": "5.7.21",
   "version": "1.2.1",
   "installs": "70k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Theme settings",
     "note": "Check your theme for a hide-title option first.",
     "url": "https://wordpress.org/documentation/article/customizer/"
    },
    {
     "type": "plugin",
     "name": "MM Title Manager",
     "note": "Hide titles on chosen posts and pages.",
     "url": "https://wordpress.org/plugins/hide-titles/",
     "slug": "hide-titles"
    },
    {
     "type": "plugin",
     "name": "Hide Page And Post Title",
     "note": "Hide titles on chosen posts and pages.",
     "url": "https://wordpress.org/plugins/hide-page-and-post-title/",
     "slug": "hide-page-and-post-title"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/title-remover/",
   "source": "edition"
  },
  {
   "slug": "display-posts-shortcode",
   "name": "Display Posts",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "No update for two years. The Query Loop block now covers many post lists, but older pages may still use its shortcode.",
   "action": "Find pages using the shortcode, then rebuild them with one of the alternatives below.",
   "job": "Lists posts on a page through a shortcode, filtered by category, author and more.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-10-14. That was 2 yr 1 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.6.11. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2024-10-14",
   "tested_up_to": "6.6.11",
   "version": "3.0.3",
   "installs": "70k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Query Loop block",
     "note": "Built-in post lists and grids.",
     "url": "https://wordpress.org/documentation/article/query-loop-block/"
    },
    {
     "type": "plugin",
     "name": "GenerateBlocks",
     "note": "Layout blocks with post loops.",
     "url": "https://wordpress.org/plugins/generateblocks/",
     "slug": "generateblocks"
    },
    {
     "type": "plugin",
     "name": "Kadence Blocks",
     "note": "Extra layout and post blocks.",
     "url": "https://wordpress.org/plugins/kadence-blocks/",
     "slug": "kadence-blocks"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/display-posts-shortcode/",
   "source": "edition"
  },
  {
   "slug": "q2w3-fixed-widget",
   "name": "Fixed Widget",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "No update for over three years, and it is tested only up to WordPress 6.2.",
   "action": "Check that sticky sidebars still work. If not, try one of the alternatives below.",
   "job": "Keeps a sidebar widget in view as visitors scroll.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2023-03-30. That was 3 yr 7 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.2.15. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2023-03-30",
   "tested_up_to": "6.2.15",
   "version": "6.2.3",
   "installs": "70k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Sticky Menu & Sticky Header",
     "note": "Make chosen elements sticky.",
     "url": "https://wordpress.org/plugins/sticky-menu-or-anything-on-scroll/",
     "slug": "sticky-menu-or-anything-on-scroll"
    },
    {
     "type": "plugin",
     "name": "My Sticky Bar",
     "note": "Sticky menus and bars.",
     "url": "https://wordpress.org/plugins/mystickymenu/",
     "slug": "mystickymenu"
    },
    {
     "type": "plugin",
     "name": "Content Aware Sidebars",
     "note": "Widget areas by context.",
     "url": "https://wordpress.org/plugins/content-aware-sidebars/",
     "slug": "content-aware-sidebars"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/q2w3-fixed-widget/",
   "source": "edition"
  },
  {
   "slug": "heartbeat-control",
   "name": "Heartbeat Control",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "No update for over three years, and it is tested only up to WordPress 6.3. Performance plugins often include this setting now.",
   "action": "Check whether your cache plugin already controls Heartbeat. If not, try one of the alternatives below.",
   "job": "Changes how often the WordPress Heartbeat API runs.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2023-08-31. That was 3 yr 2 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.3.14. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2023-08-31",
   "tested_up_to": "6.3.14",
   "version": "2.0.1",
   "installs": "70k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "LiteSpeed Cache",
     "note": "A cache plugin with Heartbeat settings.",
     "url": "https://wordpress.org/plugins/litespeed-cache/",
     "slug": "litespeed-cache"
    },
    {
     "type": "plugin",
     "name": "Admin and Site Enhancements",
     "note": "A toolkit with Heartbeat settings.",
     "url": "https://wordpress.org/plugins/admin-site-enhancements/",
     "slug": "admin-site-enhancements"
    },
    {
     "type": "plugin",
     "name": "Speed Optimizer",
     "note": "A performance plugin with Heartbeat settings.",
     "url": "https://wordpress.org/plugins/sg-cachepress/",
     "slug": "sg-cachepress"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/heartbeat-control/",
   "source": "edition"
  },
  {
   "slug": "enhanced-media-library",
   "name": "Enhanced Media Library",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "No update for over two years, on a plugin that organizes every file in the media library. Moving away needs some care.",
   "action": "Try one of the alternatives below on a staging copy. We have not confirmed that categories carry over.",
   "job": "Adds tools for organizing large media libraries.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-07-15. That was 2 yr 4 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.5.14. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "reviews",
     "detail": "The latest 10 reviews average 3.5 stars, against 4.3 overall. 4 of them gave 1 or 2 stars. Newest activity: 2026-04-11. These reviews are clearly lower than the overall score.",
     "source": "WordPress.org reviews"
    }
   ],
   "open_advisories": [],
   "last_updated": "2024-07-15",
   "tested_up_to": "6.5.14",
   "version": "2.9.4",
   "installs": "60k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "FileBird",
     "note": "Media library folders.",
     "url": "https://wordpress.org/plugins/filebird/",
     "slug": "filebird"
    },
    {
     "type": "plugin",
     "name": "Folders",
     "note": "Organize media and content.",
     "url": "https://wordpress.org/plugins/folders/",
     "slug": "folders"
    },
    {
     "type": "plugin",
     "name": "Real Media Library",
     "note": "Media library folders and file management.",
     "url": "https://wordpress.org/plugins/real-media-library-lite/",
     "slug": "real-media-library-lite"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/enhanced-media-library/",
   "source": "edition"
  },
  {
   "slug": "woocommerce-extra-checkout-fields-for-brazil",
   "name": "Brazilian Market on WooCommerce",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "It adds fields to checkout, and it has had no update for over two years. Stores should test it closely with current WooCommerce.",
   "action": "Test checkout on staging, then try one of the alternatives below.",
   "job": "Adds Brazilian fields to the WooCommerce checkout.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-02-17. That was 2 yr 8 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.4.14. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2024-02-17",
   "tested_up_to": "6.4.14",
   "version": "4.0.2",
   "installs": "60k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Campos Checkout Brasileiro para WooCommerce",
     "note": "Brazilian checkout fields for WooCommerce.",
     "url": "https://wordpress.org/plugins/woo-better-shipping-calculator-for-brazil/",
     "slug": "woo-better-shipping-calculator-for-brazil"
    },
    {
     "type": "plugin",
     "name": "Brazilian Checkout Toolkit for WooCommerce",
     "note": "Brazilian checkout tools. It has few installs so far.",
     "url": "https://wordpress.org/plugins/brazilian-checkout-toolkit-for-woocommerce/",
     "slug": "brazilian-checkout-toolkit-for-woocommerce"
    },
    {
     "type": "builtin",
     "name": "WooCommerce checkout settings",
     "note": "Check what the current checkout already covers.",
     "url": "https://wordpress.org/plugins/woocommerce/",
     "slug": "woocommerce"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/woocommerce-extra-checkout-fields-for-brazil/",
   "source": "edition"
  },
  {
   "slug": "underconstruction",
   "name": "underConstruction",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "It decides who can see your site, and it has had no update since 2024. Five past advisories are on record.",
   "action": "If you still use it, try one of the alternatives below.",
   "job": "Shows a coming soon page to visitors who are not logged in.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-03-08. That was 2 yr 8 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.4.14. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2024-03-08",
   "tested_up_to": "6.4.14",
   "version": "1.22",
   "installs": "40k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "LightStart",
     "note": "Maintenance and coming soon pages.",
     "url": "https://wordpress.org/plugins/wp-maintenance-mode/",
     "slug": "wp-maintenance-mode"
    },
    {
     "type": "plugin",
     "name": "Maintenance",
     "note": "A simple maintenance page.",
     "url": "https://wordpress.org/plugins/maintenance/",
     "slug": "maintenance"
    },
    {
     "type": "plugin",
     "name": "Website Builder by SeedProd",
     "note": "Coming soon pages inside a larger site builder.",
     "url": "https://wordpress.org/plugins/coming-soon/",
     "slug": "coming-soon"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/underconstruction/",
   "source": "edition"
  },
  {
   "slug": "revision-control",
   "name": "Revision Control",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "It changes how many post revisions a site keeps, and it was last updated in 2018.",
   "action": "Try one of the alternatives below, then remove this plugin.",
   "job": "Controls how many post revisions WordPress keeps.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2018-04-01. That was 8 yr 7 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.9.35. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2018-04-01",
   "tested_up_to": "4.9.35",
   "version": "2.3.2",
   "installs": "40k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "WP_POST_REVISIONS",
     "note": "Set the revision limit in wp-config.php.",
     "url": "https://developer.wordpress.org/advanced-administration/wordpress/wp-config/"
    },
    {
     "type": "plugin",
     "name": "WP-Optimize",
     "note": "Clean up old revisions and more.",
     "url": "https://wordpress.org/plugins/wp-optimize/",
     "slug": "wp-optimize"
    },
    {
     "type": "plugin",
     "name": "WP-Sweep",
     "note": "Clean up old revisions and more.",
     "url": "https://wordpress.org/plugins/wp-sweep/",
     "slug": "wp-sweep"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/revision-control/",
   "source": "edition"
  },
  {
   "slug": "portfolio-post-type",
   "name": "Portfolio Post Type",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "Your portfolio content lives in the post type it creates. The plugin was last updated in 2020. It is tested only up to WordPress 5.5.",
   "action": "Recreate the post type with one of the alternatives below using the same name, then check your portfolio pages.",
   "job": "Adds a portfolio post type with its own tags and categories.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2020-08-29. That was 6 yr 2 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.5.24. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2020-08-29",
   "tested_up_to": "5.5.24",
   "version": "1.0.1",
   "installs": "40k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Custom Post Type UI",
     "note": "Create custom post types from wp-admin.",
     "url": "https://wordpress.org/plugins/custom-post-type-ui/",
     "slug": "custom-post-type-ui"
    },
    {
     "type": "plugin",
     "name": "Pods",
     "note": "Custom post types and fields.",
     "url": "https://wordpress.org/plugins/pods/",
     "slug": "pods"
    },
    {
     "type": "plugin",
     "name": "Secure Custom Fields",
     "note": "Custom fields and post types.",
     "url": "https://wordpress.org/plugins/secure-custom-fields/",
     "slug": "secure-custom-fields"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/portfolio-post-type/",
   "source": "edition"
  },
  {
   "slug": "export-media-library",
   "name": "Export Media Library",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "It packs your media files into a download, and it was last updated in 2023.",
   "action": "For full copies, try one of the alternatives below.",
   "job": "Exports media library files as a ZIP archive.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2023-04-05. That was 3 yr 7 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.2.15. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2023-04-05",
   "tested_up_to": "6.2.15",
   "version": "4.0.2",
   "installs": "30k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "UpdraftPlus",
     "note": "Scheduled backups with remote storage.",
     "url": "https://wordpress.org/plugins/updraftplus/",
     "slug": "updraftplus"
    },
    {
     "type": "plugin",
     "name": "All-in-One WP Migration and Backup",
     "note": "Export a whole site as one file.",
     "url": "https://wordpress.org/plugins/all-in-one-wp-migration/",
     "slug": "all-in-one-wp-migration"
    },
    {
     "type": "plugin",
     "name": "Duplicator",
     "note": "Backups and full-site copies.",
     "url": "https://wordpress.org/plugins/duplicator/",
     "slug": "duplicator"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/export-media-library/",
   "source": "edition"
  },
  {
   "slug": "upload-max-file-size",
   "name": "Increase Maximum Upload File Size",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "It changes a site’s upload limit, and it was last updated in 2023. It is tested only up to WordPress 5.8.",
   "action": "Ask your host to set the limit, or try one of the alternatives below.",
   "job": "Raises the maximum upload file size.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2023-08-14. That was 3 yr 3 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.8.19. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2023-08-14",
   "tested_up_to": "5.8.19",
   "version": "2.0.4",
   "installs": "30k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Server settings",
     "note": "Ask your host to raise upload_max_filesize.",
     "url": "https://www.php.net/manual/en/ini.core.php#ini.upload-max-filesize"
    },
    {
     "type": "plugin",
     "name": "Big File Uploads",
     "note": "Upload large files in smaller pieces.",
     "url": "https://wordpress.org/plugins/tuxedo-big-file-uploads/",
     "slug": "tuxedo-big-file-uploads"
    },
    {
     "type": "plugin",
     "name": "EasyMedia",
     "note": "Change the upload limit from wp-admin.",
     "url": "https://wordpress.org/plugins/wp-maximum-upload-file-size/",
     "slug": "wp-maximum-upload-file-size"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/upload-max-file-size/",
   "source": "edition"
  },
  {
   "slug": "social-media-widget",
   "name": "Social Media Widget",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "Five past advisories are on record, and it was last updated in 2024.",
   "action": "Try one of the alternatives below, then remove this plugin.",
   "job": "Adds a widget with links to social media profiles.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-06-10. That was 2 yr 5 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.4.14. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2024-06-10",
   "tested_up_to": "6.4.14",
   "version": "4.0.9",
   "installs": "30k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Social Icons block",
     "note": "Built into the block editor.",
     "url": "https://wordpress.org/documentation/article/social-icons/"
    },
    {
     "type": "plugin",
     "name": "Simple Social Icons",
     "note": "Social icons in a widget.",
     "url": "https://wordpress.org/plugins/simple-social-icons/",
     "slug": "simple-social-icons"
    },
    {
     "type": "plugin",
     "name": "Social Media Share Buttons & Social Sharing Icons",
     "note": "Share buttons and social icons.",
     "url": "https://wordpress.org/plugins/ultimate-social-media-icons/",
     "slug": "ultimate-social-media-icons"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/social-media-widget/",
   "source": "edition"
  },
  {
   "slug": "hide-title",
   "name": "Hide Title",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "It was last updated in 2019, and its latest reviews are clearly lower than its overall score.",
   "action": "Try one of the alternatives below, then remove this plugin.",
   "job": "Hides the title on individual posts and pages.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2019-05-22. That was 7 yr 5 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.2.30. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "reviews",
     "detail": "The latest 10 reviews average 2.1 stars, against 3.7 overall. 7 of them gave 1 or 2 stars. Newest activity: 2023-05-29. These reviews are clearly lower than the overall score.",
     "source": "WordPress.org reviews"
    }
   ],
   "open_advisories": [],
   "last_updated": "2019-05-22",
   "tested_up_to": "5.2.30",
   "version": "1.0.8",
   "installs": "30k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Theme settings",
     "note": "Check your theme for a hide-title option first.",
     "url": "https://wordpress.org/documentation/article/customizer/"
    },
    {
     "type": "plugin",
     "name": "MM Title Manager",
     "note": "Hide titles on chosen posts and pages.",
     "url": "https://wordpress.org/plugins/hide-titles/",
     "slug": "hide-titles"
    },
    {
     "type": "plugin",
     "name": "Hide Page And Post Title",
     "note": "Hide titles on chosen posts and pages.",
     "url": "https://wordpress.org/plugins/hide-page-and-post-title/",
     "slug": "hide-page-and-post-title"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/hide-title/",
   "source": "edition"
  },
  {
   "slug": "transients-manager",
   "name": "Transients Manager",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "It edits and deletes stored site data, and it has had no update for two years.",
   "action": "Use it only when you need it, and deactivate it afterwards. The alternatives below cover some of the same checks.",
   "job": "Lets admins view, edit and delete WordPress transients.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-10-18. That was 2 yr before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.6.11. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2024-10-18",
   "tested_up_to": "6.6.11",
   "version": "2.0.7",
   "installs": "20k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Query Monitor",
     "note": "See transients set on each page load.",
     "url": "https://wordpress.org/plugins/query-monitor/",
     "slug": "query-monitor"
    },
    {
     "type": "plugin",
     "name": "WP-Optimize",
     "note": "Clean up expired transients and more.",
     "url": "https://wordpress.org/plugins/wp-optimize/",
     "slug": "wp-optimize"
    },
    {
     "type": "plugin",
     "name": "Advanced Database Cleaner",
     "note": "Find and remove old database data.",
     "url": "https://wordpress.org/plugins/advanced-database-cleaner/",
     "slug": "advanced-database-cleaner"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/transients-manager/",
   "source": "edition"
  },
  {
   "slug": "wp-maximum-execution-time-exceeded",
   "name": "WP Maximum Execution Time Exceeded",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "It changes a server time limit, and it was last updated in 2021. A slow script usually needs a real fix.",
   "action": "Ask your host about the limit, and use the alternatives below to find what is slow.",
   "job": "Raises the PHP time limit to stop timeout errors.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2021-01-25. That was 5 yr 9 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.6.23. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2021-01-25",
   "tested_up_to": "5.6.23",
   "version": "1.0.3",
   "installs": "20k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Server settings",
     "note": "Ask your host about max_execution_time.",
     "url": "https://www.php.net/manual/en/info.configuration.php#ini.max-execution-time"
    },
    {
     "type": "builtin",
     "name": "Site Health",
     "note": "See your server limits in wp-admin.",
     "url": "https://wordpress.org/documentation/article/site-health-screen/"
    },
    {
     "type": "plugin",
     "name": "Query Monitor",
     "note": "Find slow queries and code.",
     "url": "https://wordpress.org/plugins/query-monitor/",
     "slug": "query-monitor"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/wp-maximum-execution-time-exceeded/",
   "source": "edition"
  },
  {
   "slug": "block-options",
   "name": "EditorsKit",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "It adds tools across the block editor, and it was last updated in 2024. Its latest reviews are clearly lower than its overall score.",
   "action": "Check which tools you use, then try one of the alternatives below.",
   "job": "Adds extra styling and formatting tools to the block editor.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-05-28. That was 2 yr 5 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.5.14. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "reviews",
     "detail": "The latest 10 reviews average 3.3 stars, against 4.6 overall. 4 of them gave 1 or 2 stars. Newest activity: 2026-09-24. These reviews are clearly lower than the overall score.",
     "source": "WordPress.org reviews"
    }
   ],
   "open_advisories": [],
   "last_updated": "2024-05-28",
   "tested_up_to": "6.5.14",
   "version": "1.40.6",
   "installs": "20k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Block editor",
     "note": "Check what the current editor already covers.",
     "url": "https://wordpress.org/documentation/article/wordpress-block-editor/"
    },
    {
     "type": "plugin",
     "name": "GenerateBlocks",
     "note": "Lightweight layout blocks.",
     "url": "https://wordpress.org/plugins/generateblocks/",
     "slug": "generateblocks"
    },
    {
     "type": "plugin",
     "name": "Kadence Blocks",
     "note": "Extra layout blocks.",
     "url": "https://wordpress.org/plugins/kadence-blocks/",
     "slug": "kadence-blocks"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/block-options/",
   "source": "edition"
  },
  {
   "slug": "spiderblocker",
   "name": "Spider Blocker",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "It decides which bots can reach your site, and it was last updated in 2024. A wrong rule can hide a site from search engines.",
   "action": "Review your blocked bots, then try one of the alternatives below.",
   "job": "Blocks common bots from reaching a site.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-05-07. That was 2 yr 6 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.5.14. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2024-05-07",
   "tested_up_to": "6.5.14",
   "version": "1.3.7",
   "installs": "20k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Blackhole for Bad Bots",
     "note": "Traps bots that ignore your rules.",
     "url": "https://wordpress.org/plugins/blackhole-bad-bots/",
     "slug": "blackhole-bad-bots"
    },
    {
     "type": "plugin",
     "name": "Wordfence Security",
     "note": "Firewall with rate limiting and blocking.",
     "url": "https://wordpress.org/plugins/wordfence/",
     "slug": "wordfence"
    },
    {
     "type": "builtin",
     "name": "robots.txt",
     "note": "Ask well-behaved bots to stay out.",
     "url": "https://developer.wordpress.org/reference/functions/do_robots/"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/spiderblocker/",
   "source": "edition"
  },
  {
   "slug": "contact-form-7-shortcode-enabler",
   "name": "Contact Form 7 Shortcode Enabler",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "It changes what runs inside Contact Form 7 forms, and it has had no update for two years.",
   "action": "List the shortcodes your forms use, then check whether a standard form tag covers them. We have not confirmed a direct replacement.",
   "job": "Lets other shortcodes run inside Contact Form 7 forms.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-10-18. That was 2 yr before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.6.11. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2024-10-18",
   "tested_up_to": "6.6.11",
   "version": "1.1",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Conditional Fields for Contact Form 7",
     "note": "Show and hide Contact Form 7 fields.",
     "url": "https://wordpress.org/plugins/cf7-conditional-fields/",
     "slug": "cf7-conditional-fields"
    },
    {
     "type": "builtin",
     "name": "Contact Form 7 form tags",
     "note": "Check whether a standard form tag covers your need.",
     "url": "https://contactform7.com/tag-syntax/"
    },
    {
     "type": "plugin",
     "name": "Fluent Forms",
     "note": "A separate form plugin, if you are open to moving forms.",
     "url": "https://wordpress.org/plugins/fluentform/",
     "slug": "fluentform"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/contact-form-7-shortcode-enabler/",
   "source": "edition"
  },
  {
   "slug": "wp-no-base-permalink",
   "name": "WP No Base Permalink",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "It changes your category and tag URLs, and it was last updated in 2020. Removing it can change those URLs.",
   "action": "Try one of the alternatives below on staging, and redirect any URL that changes.",
   "job": "Removes the category and tag base from URLs.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2020-05-06. That was 6 yr 6 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.8.34. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2020-05-06",
   "tested_up_to": "4.8.34",
   "version": "1.0",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Permalink Manager Lite",
     "note": "Control individual URLs.",
     "url": "https://wordpress.org/plugins/permalink-manager/",
     "slug": "permalink-manager"
    },
    {
     "type": "plugin",
     "name": "Remove Category URL",
     "note": "Remove the category base from URLs.",
     "url": "https://wordpress.org/plugins/remove-category-url/",
     "slug": "remove-category-url"
    },
    {
     "type": "builtin",
     "name": "Permalink settings",
     "note": "Choose your URL structure in WordPress.",
     "url": "https://wordpress.org/documentation/article/settings-permalinks-screen/"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/wp-no-base-permalink/",
   "source": "edition"
  },
  {
   "slug": "search-everything",
   "name": "Search Everything",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "It changes how site search works, and it was last updated in 2017. Its latest reviews are clearly lower than its overall score.",
   "action": "Try one of the alternatives below, and test your search results on staging.",
   "job": "Extends WordPress search to more types of content.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "WordPress.org shows 2017-11-28, but the plugin’s readme last changed on 2017-03-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.7.39. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "reviews",
     "detail": "The latest 10 reviews average 2.5 stars, against 4.1 overall. 7 of them gave 1 or 2 stars. Newest activity: 2023-02-24. These reviews are clearly lower than the overall score.",
     "source": "WordPress.org reviews"
    }
   ],
   "open_advisories": [],
   "last_updated": "2017-11-28",
   "tested_up_to": "4.7.39",
   "version": "8.1.9",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Relevanssi",
     "note": "Better search results across your content.",
     "url": "https://wordpress.org/plugins/relevanssi/",
     "slug": "relevanssi"
    },
    {
     "type": "plugin",
     "name": "Ajax Search Lite",
     "note": "Live search results.",
     "url": "https://wordpress.org/plugins/ajax-search-lite/",
     "slug": "ajax-search-lite"
    },
    {
     "type": "plugin",
     "name": "SearchWP Live Ajax Search",
     "note": "Live search results.",
     "url": "https://wordpress.org/plugins/searchwp-live-ajax-search/",
     "slug": "searchwp-live-ajax-search"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/search-everything/",
   "source": "edition"
  },
  {
   "slug": "robots-txt-editor",
   "name": "Robots.txt Editor",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "It controls what search engines may crawl, and it was last updated in 2021.",
   "action": "Copy your rules to one of the alternatives below.",
   "job": "Edits the site’s robots.txt rules from the admin area.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2021-01-16. That was 5 yr 9 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.6.23. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2021-01-16",
   "tested_up_to": "5.6.23",
   "version": "1.1.4",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Yoast SEO",
     "note": "An SEO plugin with a robots.txt editor.",
     "url": "https://wordpress.org/plugins/wordpress-seo/",
     "slug": "wordpress-seo"
    },
    {
     "type": "plugin",
     "name": "Rank Math SEO",
     "note": "An SEO plugin with a robots.txt editor.",
     "url": "https://wordpress.org/plugins/seo-by-rank-math/",
     "slug": "seo-by-rank-math"
    },
    {
     "type": "plugin",
     "name": "All in One SEO",
     "note": "An SEO plugin with a robots.txt editor.",
     "url": "https://wordpress.org/plugins/all-in-one-seo-pack/",
     "slug": "all-in-one-seo-pack"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/robots-txt-editor/",
   "source": "edition"
  },
  {
   "slug": "wp-missed-schedule-posts",
   "name": "WP Missed Schedule Posts",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "It publishes scheduled posts that WordPress misses, and it was last updated in 2017.",
   "action": "Try one of the alternatives below.",
   "job": "Publishes scheduled posts that WordPress missed.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2017-07-20. That was 9 yr 3 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.8.34. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2017-07-20",
   "tested_up_to": "4.8.34",
   "version": "1.1",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Server cron",
     "note": "Run WordPress scheduled tasks from your server.",
     "url": "https://developer.wordpress.org/plugins/cron/hooking-wp-cron-into-the-system-task-scheduler/"
    },
    {
     "type": "plugin",
     "name": "WP Crontrol",
     "note": "See and manage scheduled tasks.",
     "url": "https://wordpress.org/plugins/wp-crontrol/",
     "slug": "wp-crontrol"
    },
    {
     "type": "plugin",
     "name": "MWW Scheduled Post Trigger",
     "note": "Publishes scheduled posts that were missed.",
     "url": "https://wordpress.org/plugins/scheduled-post-trigger/",
     "slug": "scheduled-post-trigger"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/wp-missed-schedule-posts/",
   "source": "edition"
  },
  {
   "slug": "wp-notification-bars",
   "name": "WP Notification Bars",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "It was last updated in 2022, and its latest reviews are clearly lower than its overall score.",
   "action": "If you still use a bar, try one of the alternatives below.",
   "job": "Adds a notice bar at the top of a site.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2022-02-28. That was 4 yr 8 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.9.20. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "reviews",
     "detail": "The latest 10 reviews average 2.5 stars, against 3.7 overall. 7 of them gave 1 or 2 stars. Newest activity: 2022-04-21. These reviews are clearly lower than the overall score.",
     "source": "WordPress.org reviews"
    }
   ],
   "open_advisories": [],
   "last_updated": "2022-02-28",
   "tested_up_to": "5.9.20",
   "version": "1.0.12",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Simple Banner",
     "note": "A simple site-wide banner.",
     "url": "https://wordpress.org/plugins/simple-banner/",
     "slug": "simple-banner"
    },
    {
     "type": "plugin",
     "name": "WPFront Notification Bar",
     "note": "A notification bar with scheduling.",
     "url": "https://wordpress.org/plugins/wpfront-notification-bar/",
     "slug": "wpfront-notification-bar"
    },
    {
     "type": "plugin",
     "name": "My Sticky Bar",
     "note": "Sticky menus and bars.",
     "url": "https://wordpress.org/plugins/mystickymenu/",
     "slug": "mystickymenu"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/wp-notification-bars/",
   "source": "edition"
  },
  {
   "slug": "multiple-post-thumbnails",
   "name": "Multiple Post Thumbnails",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "Your theme may depend on the extra images it adds. The plugin was last updated in 2018.",
   "action": "Check your theme code for it, then try one of the alternatives below.",
   "job": "Adds more than one featured image to a post.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2018-11-26. That was 7 yr 11 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.0.31. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "reviews",
     "detail": "The latest 10 reviews average 3.8 stars, against 4.7 overall. 3 of them gave 1 or 2 stars. Newest activity: 2020-06-11. These reviews are clearly lower than the overall score.",
     "source": "WordPress.org reviews"
    }
   ],
   "open_advisories": [],
   "last_updated": "2018-11-26",
   "tested_up_to": "5.0.31",
   "version": "1.7",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Secure Custom Fields",
     "note": "Add image fields to posts.",
     "url": "https://wordpress.org/plugins/secure-custom-fields/",
     "slug": "secure-custom-fields"
    },
    {
     "type": "plugin",
     "name": "Meta Box",
     "note": "Custom fields for developers.",
     "url": "https://wordpress.org/plugins/meta-box/",
     "slug": "meta-box"
    },
    {
     "type": "plugin",
     "name": "Pods",
     "note": "Custom post types and fields.",
     "url": "https://wordpress.org/plugins/pods/",
     "slug": "pods"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/multiple-post-thumbnails/",
   "source": "edition"
  },
  {
   "slug": "woocommerce-grid-list-toggle",
   "name": "WooCommerce Grid / List toggle",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "It changes store product pages, and it was last updated in 2018.",
   "action": "Test your shop page, then try one of the alternatives below.",
   "job": "Adds a grid and list view switch to product pages.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2018-05-11. That was 8 yr 6 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.9.35. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2018-05-11",
   "tested_up_to": "4.9.35",
   "version": "1.2.1",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Grid/List View for WooCommerce",
     "note": "A grid and list switch for shop pages.",
     "url": "https://wordpress.org/plugins/gridlist-view-for-woocommerce/",
     "slug": "gridlist-view-for-woocommerce"
    },
    {
     "type": "plugin",
     "name": "Product Table & List Builder for WooCommerce",
     "note": "Show products as a table or list.",
     "url": "https://wordpress.org/plugins/wc-product-table-lite/",
     "slug": "wc-product-table-lite"
    },
    {
     "type": "plugin",
     "name": "Product Filter for WooCommerce by WBW",
     "note": "Product filters for shop pages.",
     "url": "https://wordpress.org/plugins/woo-product-filter/",
     "slug": "woo-product-filter"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/woocommerce-grid-list-toggle/",
   "source": "edition"
  },
  {
   "slug": "search-by-sku-for-woocommerce",
   "name": "Search by SKU for Woocommerce",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "It changes how store search works, and it was last updated in 2021.",
   "action": "Test SKU search on staging, then try one of the alternatives below.",
   "job": "Lets WooCommerce search find products by SKU.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2021-07-16. That was 5 yr 4 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.7.21. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2021-07-16",
   "tested_up_to": "5.7.21",
   "version": "0.8.0",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Advanced Woo Search",
     "note": "Product search that covers SKUs.",
     "url": "https://wordpress.org/plugins/advanced-woo-search/",
     "slug": "advanced-woo-search"
    },
    {
     "type": "plugin",
     "name": "FiboSearch",
     "note": "Live product search.",
     "url": "https://wordpress.org/plugins/ajax-search-for-woocommerce/",
     "slug": "ajax-search-for-woocommerce"
    },
    {
     "type": "plugin",
     "name": "Relevanssi",
     "note": "Better search results across your content.",
     "url": "https://wordpress.org/plugins/relevanssi/",
     "slug": "relevanssi"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/search-by-sku-for-woocommerce/",
   "source": "edition"
  },
  {
   "slug": "options-framework",
   "name": "Options Framework",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "Older themes may store their settings through it, and it was last updated in 2017.",
   "action": "Check whether your theme needs it before you change anything. Developers can try one of the alternatives below.",
   "job": "Gives theme developers a ready-made settings panel.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2017-11-01. That was 9 yr before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.8.34. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2017-11-01",
   "tested_up_to": "4.8.34",
   "version": "1.8.5",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Secure Custom Fields",
     "note": "Build settings pages with custom fields.",
     "url": "https://wordpress.org/plugins/secure-custom-fields/",
     "slug": "secure-custom-fields"
    },
    {
     "type": "plugin",
     "name": "Kirki",
     "note": "Also a page builder, so check it suits your project.",
     "url": "https://wordpress.org/plugins/kirki/",
     "slug": "kirki"
    },
    {
     "type": "builtin",
     "name": "Customizer API",
     "note": "Built-in theme settings for developers.",
     "url": "https://developer.wordpress.org/themes/classic-themes/customize-api/"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/options-framework/",
   "source": "edition"
  },
  {
   "slug": "breadcrumb-trail",
   "name": "Breadcrumb Trail",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "Breadcrumbs appear on every page and in search listings, and it was last updated in 2017.",
   "action": "Try one of the alternatives below, then remove this plugin.",
   "job": "Adds breadcrumb navigation to a site.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "WordPress.org shows 2017-11-28, but the plugin’s readme last changed on 2017-09-26.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.8.34. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2017-11-28",
   "tested_up_to": "4.8.34",
   "version": "1.1.0",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Breadcrumb NavXT",
     "note": "A dedicated breadcrumb plugin.",
     "url": "https://wordpress.org/plugins/breadcrumb-navxt/",
     "slug": "breadcrumb-navxt"
    },
    {
     "type": "plugin",
     "name": "Yoast SEO",
     "note": "An SEO plugin with breadcrumbs.",
     "url": "https://wordpress.org/plugins/wordpress-seo/",
     "slug": "wordpress-seo"
    },
    {
     "type": "plugin",
     "name": "Rank Math SEO",
     "note": "An SEO plugin with breadcrumbs.",
     "url": "https://wordpress.org/plugins/seo-by-rank-math/",
     "slug": "seo-by-rank-math"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/breadcrumb-trail/",
   "source": "edition"
  },
  {
   "slug": "wp-content-copy-protection",
   "name": "WP Content Copy Protection",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "It was last updated in 2023, and it is tested only up to WordPress 6.2. A separate plugin has a nearly identical name, so check which one you run.",
   "action": "Try one of the alternatives below, and test the site with a keyboard and a screen reader.",
   "job": "Tries to stop visitors from copying text and images.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2023-06-27. That was 3 yr 4 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.2.15. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2023-06-27",
   "tested_up_to": "6.2.15",
   "version": "2.0.6",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "WP Content Copy Protection & No Right Click",
     "note": "A separate plugin with a similar name.",
     "url": "https://wordpress.org/plugins/wp-content-copy-protector/",
     "slug": "wp-content-copy-protector"
    },
    {
     "type": "plugin",
     "name": "Secure Copy Content Protection and Content Locking",
     "note": "Copy protection with more settings.",
     "url": "https://wordpress.org/plugins/secure-copy-content-protection/",
     "slug": "secure-copy-content-protection"
    },
    {
     "type": "builtin",
     "name": "No plugin",
     "note": "Copy blocking is easy to get around, and it can get in the way of keyboard users.",
     "url": "https://www.w3.org/WAI/fundamentals/accessibility-principles/"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/wp-content-copy-protection/",
   "source": "edition"
  },
  {
   "slug": "yandex-metrika",
   "name": "Яндекс Метрика",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Quiet",
   "reason": "It adds visitor tracking to every page, and it has not changed since 2016. It is tested only up to WordPress 4.6.",
   "action": "Add the tracking code with one of the alternatives below, then remove this plugin.",
   "job": "Adds Yandex Metrica visitor tracking to a site.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "WordPress.org shows 2017-11-28, but the plugin’s readme last changed on 2016-07-29.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.6.30. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2017-11-28",
   "tested_up_to": "4.6.30",
   "version": "0.8.4",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "WPCode",
     "note": "Add the tracking code without a dedicated plugin.",
     "url": "https://wordpress.org/plugins/insert-headers-and-footers/",
     "slug": "insert-headers-and-footers"
    },
    {
     "type": "plugin",
     "name": "Header Footer Code Manager",
     "note": "Manage header and footer code.",
     "url": "https://wordpress.org/plugins/header-footer-code-manager/",
     "slug": "header-footer-code-manager"
    },
    {
     "type": "plugin",
     "name": "Code Snippets",
     "note": "Run PHP snippets without editing theme files.",
     "url": "https://wordpress.org/plugins/code-snippets/",
     "slug": "code-snippets"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/yandex-metrika/",
   "source": "edition"
  },
  {
   "slug": "layout-grid",
   "name": "Layout Grid Block",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Falling behind",
   "reason": "WordPress now includes Columns and Grid layouts. This block was last updated in 2023 and is tested only up to WordPress 6.2.",
   "action": "Find pages that use the block, then rebuild them with one of the alternatives below.",
   "job": "A block that aligns content on a page-wide grid.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2023-07-11. That was 3 yr 4 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.2.15. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2023-07-11",
   "tested_up_to": "6.2.15",
   "version": "1.8.4",
   "installs": "200k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Columns block",
     "note": "Built into the block editor.",
     "url": "https://wordpress.org/documentation/article/columns-block/"
    },
    {
     "type": "plugin",
     "name": "GenerateBlocks",
     "note": "Lightweight layout blocks.",
     "url": "https://wordpress.org/plugins/generateblocks/",
     "slug": "generateblocks"
    },
    {
     "type": "plugin",
     "name": "Kadence Blocks",
     "note": "Extra layout blocks.",
     "url": "https://wordpress.org/plugins/kadence-blocks/",
     "slug": "kadence-blocks"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/layout-grid/",
   "source": "edition"
  },
  {
   "slug": "async-javascript",
   "name": "Async JavaScript",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Falling behind",
   "reason": "WordPress 6.3 gave developers built-in defer and async script loading. This plugin has not been updated since 2023 and is tested only up to 6.2.",
   "action": "Measure whether it still helps. If you need script optimization, try one of the alternatives below.",
   "job": "Adds async or defer to scripts so pages can load faster.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2023-06-22. That was 3 yr 4 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.2.15. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2023-06-22",
   "tested_up_to": "6.2.15",
   "version": "2.21.08.31",
   "installs": "60k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Autoptimize",
     "note": "Optimize and defer scripts.",
     "url": "https://wordpress.org/plugins/autoptimize/",
     "slug": "autoptimize"
    },
    {
     "type": "plugin",
     "name": "WP-Optimize",
     "note": "Caching, compression and minification.",
     "url": "https://wordpress.org/plugins/wp-optimize/",
     "slug": "wp-optimize"
    },
    {
     "type": "plugin",
     "name": "Flying Scripts",
     "note": "Delay chosen scripts until interaction.",
     "url": "https://wordpress.org/plugins/flying-scripts/",
     "slug": "flying-scripts"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/async-javascript/",
   "source": "edition"
  },
  {
   "slug": "all-in-one-favicon",
   "name": "All In One Favicon",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Falling behind",
   "reason": "WordPress now includes a Site Icon setting, so most sites no longer need a plugin for this.",
   "action": "Try one of the alternatives below, confirm your icon shows, then remove this plugin.",
   "job": "Adds a favicon to the site and the admin pages.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2023-08-08. That was 3 yr 3 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.2.15. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2023-08-08",
   "tested_up_to": "6.2.15",
   "version": "4.8",
   "installs": "60k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Site Icon",
     "note": "Set your icon in the WordPress Site Identity settings.",
     "url": "https://wordpress.org/documentation/article/customizer/"
    },
    {
     "type": "plugin",
     "name": "Favicon by RealFaviconGenerator",
     "note": "Create icons for more devices.",
     "url": "https://wordpress.org/plugins/favicon-by-realfavicongenerator/",
     "slug": "favicon-by-realfavicongenerator"
    },
    {
     "type": "plugin",
     "name": "WPCode",
     "note": "Add custom icon tags yourself.",
     "url": "https://wordpress.org/plugins/insert-headers-and-footers/",
     "slug": "insert-headers-and-footers"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/all-in-one-favicon/",
   "source": "edition"
  },
  {
   "slug": "column-shortcodes",
   "name": "Column Shortcodes",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Falling behind",
   "reason": "The block editor has a Columns block, and this plugin was last updated in 2022. Old posts may still depend on its shortcodes.",
   "action": "Find posts using the shortcodes, and rebuild them with one of the alternatives below before you remove this plugin.",
   "job": "Creates columns in posts and pages through shortcodes.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2022-10-11. That was 4 yr 1 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.0.18. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2022-10-11",
   "tested_up_to": "6.0.18",
   "version": "1.0.1",
   "installs": "60k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Columns block",
     "note": "Built into the block editor.",
     "url": "https://wordpress.org/documentation/article/columns-block/"
    },
    {
     "type": "plugin",
     "name": "Kadence Blocks",
     "note": "Extra layout blocks.",
     "url": "https://wordpress.org/plugins/kadence-blocks/",
     "slug": "kadence-blocks"
    },
    {
     "type": "plugin",
     "name": "GenerateBlocks",
     "note": "Lightweight layout blocks.",
     "url": "https://wordpress.org/plugins/generateblocks/",
     "slug": "generateblocks"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/column-shortcodes/",
   "source": "edition"
  },
  {
   "slug": "easy-theme-and-plugin-upgrades",
   "name": "Easy Theme and Plugin Upgrades",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Falling behind",
   "reason": "Since WordPress 5.5, you can upload a ZIP and replace an installed plugin or theme without an extra plugin.",
   "action": "Try one of the alternatives below, then remove this plugin.",
   "job": "Updates themes and plugins from a ZIP file without removing them first.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2022-04-20. That was 4 yr 6 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.7.21. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2022-04-20",
   "tested_up_to": "5.7.21",
   "version": "2.0.2",
   "installs": "60k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "ZIP upload",
     "note": "Upload a newer ZIP and choose to replace the installed version.",
     "url": "https://wordpress.org/documentation/article/manage-plugins/"
    },
    {
     "type": "plugin",
     "name": "WP Rollback",
     "note": "Return to an earlier version.",
     "url": "https://wordpress.org/plugins/wp-rollback/",
     "slug": "wp-rollback"
    },
    {
     "type": "plugin",
     "name": "Easy Updates Manager",
     "note": "More control over updates.",
     "url": "https://wordpress.org/plugins/stops-core-theme-and-plugin-updates/",
     "slug": "stops-core-theme-and-plugin-updates"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/easy-theme-and-plugin-upgrades/",
   "source": "edition"
  },
  {
   "slug": "wp-show-posts",
   "name": "WP Show Posts",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Falling behind",
   "reason": "The Query Loop block now covers many post-list layouts. This plugin is tested only up to WordPress 6.1.",
   "action": "Rebuild simple lists with one of the alternatives below. Check layouts on staging first.",
   "job": "Adds lists of posts to a page through a shortcode.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-04-16. That was 2 yr 7 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.1.16. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2024-04-16",
   "tested_up_to": "6.1.16",
   "version": "1.1.6",
   "installs": "60k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Query Loop block",
     "note": "Built-in post lists and grids.",
     "url": "https://wordpress.org/documentation/article/query-loop-block/"
    },
    {
     "type": "plugin",
     "name": "GenerateBlocks",
     "note": "Layout blocks with post loops.",
     "url": "https://wordpress.org/plugins/generateblocks/",
     "slug": "generateblocks"
    },
    {
     "type": "plugin",
     "name": "Kadence Blocks",
     "note": "Extra layout and post blocks.",
     "url": "https://wordpress.org/plugins/kadence-blocks/",
     "slug": "kadence-blocks"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/wp-show-posts/",
   "source": "edition"
  },
  {
   "slug": "hotjar",
   "name": "Hotjar",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Falling behind",
   "reason": "An official vendor plugin can still go quiet. It was last updated in 2023 and is tested only up to WordPress 6.0.",
   "action": "Check Hotjar’s current install guidance. One of the alternatives below may be enough.",
   "job": "Adds Hotjar visitor tracking to a site.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2023-10-25. That was 3 yr before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.0.18. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "reviews",
     "detail": "The latest 10 reviews average 2.3 stars, against 2.9 overall. 7 of them gave 1 or 2 stars. Newest activity: 2024-06-06. These reviews are clearly lower than the overall score.",
     "source": "WordPress.org reviews"
    }
   ],
   "open_advisories": [],
   "last_updated": "2023-10-25",
   "tested_up_to": "6.0.18",
   "version": "1.0.16",
   "installs": "60k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "WPCode",
     "note": "Add the tracking snippet without a Hotjar plugin.",
     "url": "https://wordpress.org/plugins/insert-headers-and-footers/",
     "slug": "insert-headers-and-footers"
    },
    {
     "type": "plugin",
     "name": "Header Footer Code Manager",
     "note": "Manage header and footer code.",
     "url": "https://wordpress.org/plugins/header-footer-code-manager/",
     "slug": "header-footer-code-manager"
    },
    {
     "type": "plugin",
     "name": "Microsoft Clarity",
     "note": "A separate behavior analytics service.",
     "url": "https://wordpress.org/plugins/microsoft-clarity/",
     "slug": "microsoft-clarity"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/hotjar/",
   "source": "edition"
  },
  {
   "slug": "disable-google-fonts",
   "name": "Disable Google Fonts",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Falling behind",
   "reason": "It was last updated in 2019, before the default WordPress themes began shipping their own fonts. It is tested only up to WordPress 5.1.",
   "action": "Check whether your site still loads Google Fonts. If it does, try one of the alternatives below.",
   "job": "Stops WordPress and themes from loading Google Fonts.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2019-02-24. That was 7 yr 8 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.1.28. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2019-02-24",
   "tested_up_to": "5.1.28",
   "version": "2.0",
   "installs": "40k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Disable and Remove Google Fonts",
     "note": "Remove Google Fonts from a site.",
     "url": "https://wordpress.org/plugins/disable-remove-google-fonts/",
     "slug": "disable-remove-google-fonts"
    },
    {
     "type": "plugin",
     "name": "OMGF",
     "note": "Keep Google Fonts on your own server.",
     "url": "https://wordpress.org/plugins/host-webfonts-local/",
     "slug": "host-webfonts-local"
    },
    {
     "type": "plugin",
     "name": "Local Google Fonts",
     "note": "Keep Google Fonts on your own server.",
     "url": "https://wordpress.org/plugins/local-google-fonts/",
     "slug": "local-google-fonts"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/disable-google-fonts/",
   "source": "edition"
  },
  {
   "slug": "selfhost-google-fonts",
   "name": "Self-Hosted Google Fonts",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Falling behind",
   "reason": "WordPress 6.5 added a Font Library that can store fonts on your own site. This plugin was last updated in 2018.",
   "action": "Try one of the alternatives below, then remove this plugin.",
   "job": "Stores a site’s Google Fonts on its own server.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2018-06-15. That was 8 yr 5 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.9.35. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2018-06-15",
   "tested_up_to": "4.9.35",
   "version": "1.0.1",
   "installs": "30k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Font Library",
     "note": "Built into WordPress since 6.5.",
     "url": "https://make.wordpress.org/core/2024/03/14/new-feature-font-library/"
    },
    {
     "type": "plugin",
     "name": "OMGF",
     "note": "Keep Google Fonts on your own server.",
     "url": "https://wordpress.org/plugins/host-webfonts-local/",
     "slug": "host-webfonts-local"
    },
    {
     "type": "plugin",
     "name": "Local Google Fonts",
     "note": "Keep Google Fonts on your own server.",
     "url": "https://wordpress.org/plugins/local-google-fonts/",
     "slug": "local-google-fonts"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/selfhost-google-fonts/",
   "source": "edition"
  },
  {
   "slug": "any-mobile-theme-switcher",
   "name": "Any Mobile Theme Switcher",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Falling behind",
   "reason": "Most themes now adapt to any screen, so few sites need a separate mobile theme. This plugin was last updated in 2024.",
   "action": "Check your site on a phone with one responsive theme, then remove this plugin.",
   "job": "Shows a different theme to visitors on mobile devices.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2024-09-03. That was 2 yr 2 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.6.11. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "reviews",
     "detail": "The latest 10 reviews average 3.8 stars, against 4.8 overall. 3 of them gave 1 or 2 stars. Newest activity: 2023-11-21. These reviews are clearly lower than the overall score.",
     "source": "WordPress.org reviews"
    }
   ],
   "open_advisories": [],
   "last_updated": "2024-09-03",
   "tested_up_to": "6.6.11",
   "version": "3.2",
   "installs": "20k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Responsive theme",
     "note": "Use one theme that adapts to every screen.",
     "url": "https://wordpress.org/themes/"
    },
    {
     "type": "plugin",
     "name": "Multi Device Switcher",
     "note": "Set a theme for each device type.",
     "url": "https://wordpress.org/plugins/multi-device-switcher/",
     "slug": "multi-device-switcher"
    },
    {
     "type": "builtin",
     "name": "Customizer preview",
     "note": "Preview your theme at phone size before you switch.",
     "url": "https://wordpress.org/documentation/article/customizer/"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/any-mobile-theme-switcher/",
   "source": "edition"
  },
  {
   "slug": "lazy-load",
   "name": "Lazy Load",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Falling behind",
   "reason": "WordPress has lazy-loaded images by itself since version 5.5. This plugin was last updated in 2018.",
   "action": "Remove it and check that images still load.",
   "job": "Loads images only when they come into view.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2018-11-22. That was 7 yr 11 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.0.31. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "reviews",
     "detail": "The latest 10 reviews average 2.4 stars, against 4.0 overall. 7 of them gave 1 or 2 stars. Newest activity: 2023-04-29. These reviews are clearly lower than the overall score.",
     "source": "WordPress.org reviews"
    }
   ],
   "open_advisories": [],
   "last_updated": "2018-11-22",
   "tested_up_to": "5.0.31",
   "version": "0.6.1",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "WordPress lazy loading",
     "note": "Built in since WordPress 5.5.",
     "url": "https://make.wordpress.org/core/2020/07/14/lazy-loading-images-in-5-5/"
    },
    {
     "type": "plugin",
     "name": "a3 Lazy Load",
     "note": "More lazy-loading options, including video.",
     "url": "https://wordpress.org/plugins/a3-lazy-load/",
     "slug": "a3-lazy-load"
    },
    {
     "type": "plugin",
     "name": "Autoptimize",
     "note": "A wider speed plugin with lazy loading.",
     "url": "https://wordpress.org/plugins/autoptimize/",
     "slug": "autoptimize"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/lazy-load/",
   "source": "edition"
  },
  {
   "slug": "custom-post-template",
   "name": "Custom Post Template",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Falling behind",
   "reason": "WordPress has supported templates for posts since version 4.7. This plugin has not changed since 2012 and is tested only up to WordPress 3.4.",
   "action": "Move your templates to one of the alternatives below, check each post, then remove this plugin.",
   "job": "Lets editors choose a template for each post.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "WordPress.org shows 2017-11-28, but the plugin’s readme last changed on 2012-06-14.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 3.4.2. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2017-11-28",
   "tested_up_to": "3.4.2",
   "version": "1.5",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Post type templates",
     "note": "Built in since WordPress 4.7.",
     "url": "https://make.wordpress.org/core/2016/11/03/post-type-templates-in-4-7/"
    },
    {
     "type": "builtin",
     "name": "Site Editor templates",
     "note": "Build templates in a block theme.",
     "url": "https://wordpress.org/documentation/article/site-editor/"
    },
    {
     "type": "builtin",
     "name": "Child theme",
     "note": "Keep custom templates in your own theme files.",
     "url": "https://developer.wordpress.org/themes/advanced-topics/child-themes/"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/custom-post-template/",
   "source": "edition"
  },
  {
   "slug": "use-google-libraries",
   "name": "Use Google Libraries",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Falling behind",
   "reason": "Loading shared scripts from Google once saved time. Browsers no longer share cached files between sites, and this plugin was last updated in 2017.",
   "action": "Remove it, and let WordPress load its own copies.",
   "job": "Loads common JavaScript libraries from Google’s servers.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "WordPress.org shows 2017-11-28, but the plugin’s readme last changed on 2017-05-03.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.7.39. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "reviews",
     "detail": "The latest 10 reviews average 2.8 stars, against 4.4 overall. 5 of them gave 1 or 2 stars. Newest activity: 2024-09-15. These reviews are clearly lower than the overall score.",
     "source": "WordPress.org reviews"
    }
   ],
   "open_advisories": [],
   "last_updated": "2017-11-28",
   "tested_up_to": "4.7.39",
   "version": "1.6.2.3",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "WordPress bundled scripts",
     "note": "WordPress includes its own copies of these libraries.",
     "url": "https://developer.wordpress.org/reference/functions/wp_enqueue_script/"
    },
    {
     "type": "plugin",
     "name": "Autoptimize",
     "note": "Optimize and defer scripts.",
     "url": "https://wordpress.org/plugins/autoptimize/",
     "slug": "autoptimize"
    },
    {
     "type": "plugin",
     "name": "WP-Optimize",
     "note": "Caching, compression and minification.",
     "url": "https://wordpress.org/plugins/wp-optimize/",
     "slug": "wp-optimize"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/use-google-libraries/",
   "source": "edition"
  },
  {
   "slug": "meks-easy-instagram-widget",
   "name": "Meks Easy Photo Feed Widget",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Falling behind",
   "reason": "Instagram retired its Basic Display API in December 2024, after this plugin’s last update in 2023.",
   "action": "Check whether the feed still loads. If not, remove it or try one of the alternatives below.",
   "job": "Shows Instagram photos in a widget.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2023-09-11. That was 3 yr 2 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 6.3.14. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2023-09-11",
   "tested_up_to": "6.3.14",
   "version": "1.2.8",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Smash Balloon Social Photo Feed",
     "note": "Instagram feeds on a page or in a widget.",
     "url": "https://wordpress.org/plugins/instagram-feed/",
     "slug": "instagram-feed"
    },
    {
     "type": "plugin",
     "name": "Spotlight Social Photo Feed",
     "note": "Instagram feeds with a visual designer.",
     "url": "https://wordpress.org/plugins/spotlight-social-photo-feeds/",
     "slug": "spotlight-social-photo-feeds"
    },
    {
     "type": "plugin",
     "name": "Feed Them Social",
     "note": "Feeds from several social networks.",
     "url": "https://wordpress.org/plugins/feed-them-social/",
     "slug": "feed-them-social"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/meks-easy-instagram-widget/",
   "source": "edition"
  },
  {
   "slug": "easy-twitter-feed-widget",
   "name": "Easy Twitter Feed Widget",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Falling behind",
   "reason": "It was last updated in 2017, long before X changed how outside sites reach its data.",
   "action": "Check whether the feed still loads. If not, remove it or try one of the alternatives below.",
   "job": "Shows a Twitter feed in a widget.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2017-12-20. That was 8 yr 10 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 4.9.35. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2017-12-20",
   "tested_up_to": "4.9.35",
   "version": "0.9",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Custom Twitter Feeds",
     "note": "Feeds from X on a page or in a widget.",
     "url": "https://wordpress.org/plugins/custom-twitter-feeds/",
     "slug": "custom-twitter-feeds"
    },
    {
     "type": "plugin",
     "name": "Feed Them Social",
     "note": "Feeds from several social networks.",
     "url": "https://wordpress.org/plugins/feed-them-social/",
     "slug": "feed-them-social"
    },
    {
     "type": "builtin",
     "name": "Embed block",
     "note": "Embed single posts in the block editor.",
     "url": "https://wordpress.org/documentation/article/embeds/"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/easy-twitter-feed-widget/",
   "source": "edition"
  },
  {
   "slug": "woocommerce-colors",
   "name": "WooCommerce Colors",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Falling behind",
   "reason": "It was last updated in 2020, and WooCommerce has changed its styling a great deal since then. Its latest reviews are also low.",
   "action": "Check whether your colors still apply. If not, remove it and set them in your theme.",
   "job": "Changes button and element colors in WooCommerce.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2020-08-27. That was 6 yr 2 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.5.24. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "reviews",
     "detail": "The latest 10 reviews average 2.7 stars, against 3.2 overall. 6 of them gave 1 or 2 stars. Newest activity: 2022-03-21. These reviews are clearly lower than the overall score.",
     "source": "WordPress.org reviews"
    }
   ],
   "open_advisories": [],
   "last_updated": "2020-08-27",
   "tested_up_to": "5.5.24",
   "version": "1.0.7",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Additional CSS",
     "note": "Add CSS in the WordPress Customizer or Site Editor.",
     "url": "https://wordpress.org/documentation/article/customizer/"
    },
    {
     "type": "builtin",
     "name": "Site Editor styles",
     "note": "Set colors in a block theme.",
     "url": "https://wordpress.org/documentation/article/site-editor/"
    },
    {
     "type": "plugin",
     "name": "Simple Custom CSS and JS",
     "note": "Manage CSS and JavaScript snippets.",
     "url": "https://wordpress.org/plugins/custom-css-js/",
     "slug": "custom-css-js"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/woocommerce-colors/",
   "source": "edition"
  },
  {
   "slug": "shortcode-ui",
   "name": "Shortcake",
   "verdict": "plan_a_move",
   "verdict_label": "Plan a move",
   "trend": "Falling behind",
   "reason": "It gave shortcodes a visual editor before blocks arrived, and it was last updated in 2019.",
   "action": "Find what depends on it, and rebuild those parts as blocks where you can.",
   "job": "Gives shortcodes a visual editing screen.",
   "second_sign": null,
   "based_on": [
    {
     "signal": "updates",
     "detail": "No release since 2019-01-16. That was 7 yr 10 mo before our check.",
     "source": "WordPress.org plugin directory"
    },
    {
     "signal": "compatibility",
     "detail": "Tested up to WordPress 5.0.31. WordPress 7.1.4 was current on 2026-10-31.",
     "source": "WordPress.org plugin directory"
    }
   ],
   "open_advisories": [],
   "last_updated": "2019-01-16",
   "tested_up_to": "5.0.31",
   "version": "0.7.4",
   "installs": "10k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Block editor",
     "note": "Blocks replace most uses of a shortcode editor.",
     "url": "https://wordpress.org/documentation/article/wordpress-block-editor/"
    },
    {
     "type": "builtin",
     "name": "Shortcode block",
     "note": "Keep using a shortcode inside the block editor.",
     "url": "https://wordpress.org/documentation/article/shortcode-block/"
    },
    {
     "type": "plugin",
     "name": "Secure Custom Fields",
     "note": "Build custom blocks and fields.",
     "url": "https://wordpress.org/plugins/secure-custom-fields/",
     "slug": "secure-custom-fields"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/shortcode-ui/",
   "source": "edition"
  },
  {
   "slug": "regenerate-thumbnails",
   "name": "Regenerate Thumbnails",
   "verdict": "watch",
   "verdict_label": "Watch",
   "trend": "Quiet",
   "reason": "The most-installed plugin here, with one listed contributor and no update for 14 months.",
   "action": "No action needed yet. Test it after each WordPress release.",
   "job": "Rebuilds image thumbnails, which helps after a change of theme or image sizes.",
   "second_sign": null,
   "based_on": [],
   "open_advisories": [],
   "last_updated": "2025-08-20",
   "tested_up_to": "6.8.12",
   "version": "3.1.6",
   "installs": "1M+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "WP-CLI media regenerate",
     "note": "Use wp media regenerate where your host provides WP-CLI.",
     "url": "https://developer.wordpress.org/cli/commands/media/regenerate/"
    },
    {
     "type": "plugin",
     "name": "Image Regenerate & Select Crop",
     "note": "Regenerate images and control crops.",
     "url": "https://wordpress.org/plugins/image-regenerate-select-crop/",
     "slug": "image-regenerate-select-crop"
    },
    {
     "type": "plugin",
     "name": "Perfect Images",
     "note": "Regenerate thumbnails and manage image sizes.",
     "url": "https://wordpress.org/plugins/wp-retina-2x/",
     "slug": "wp-retina-2x"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/regenerate-thumbnails/",
   "source": "edition"
  },
  {
   "slug": "intuitive-custom-post-order",
   "name": "Intuitive Custom Post Order",
   "verdict": "watch",
   "verdict_label": "Watch",
   "trend": "Quiet",
   "reason": "No update for 13 months, with one listed contributor. Past advisories show why continued maintenance matters here.",
   "action": "Keep it updated, and recheck next quarter.",
   "job": "Reorders posts, pages and taxonomies by drag and drop.",
   "second_sign": null,
   "based_on": [],
   "open_advisories": [],
   "last_updated": "2025-09-16",
   "tested_up_to": "6.8.12",
   "version": "3.2.0",
   "installs": "400k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Simple Custom Post Order",
     "note": "Drag-and-drop post ordering.",
     "url": "https://wordpress.org/plugins/simple-custom-post-order/",
     "slug": "simple-custom-post-order"
    },
    {
     "type": "plugin",
     "name": "Post Types Order",
     "note": "Order posts and custom post types.",
     "url": "https://wordpress.org/plugins/post-types-order/",
     "slug": "post-types-order"
    },
    {
     "type": "plugin",
     "name": "Simple Page Ordering",
     "note": "Reorder pages from the list screen.",
     "url": "https://wordpress.org/plugins/simple-page-ordering/",
     "slug": "simple-page-ordering"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/intuitive-custom-post-order/",
   "source": "edition"
  },
  {
   "slug": "amp",
   "name": "AMP",
   "verdict": "watch",
   "verdict_label": "Watch",
   "trend": "Quiet",
   "reason": "No update for 18 months, and tested up to WordPress 6.8. It has a wide contributor list, so a return is possible.",
   "action": "If you use it, check whether AMP pages still bring you value.",
   "job": "Helps a site publish AMP versions of its pages.",
   "second_sign": null,
   "based_on": [],
   "open_advisories": [],
   "last_updated": "2025-04-10",
   "tested_up_to": "6.8.12",
   "version": "2.5.5",
   "installs": "300k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "AMP for WP",
     "note": "A different AMP plugin, if you still need AMP.",
     "url": "https://wordpress.org/plugins/accelerated-mobile-pages/",
     "slug": "accelerated-mobile-pages"
    },
    {
     "type": "plugin",
     "name": "Performance Lab",
     "note": "WordPress performance features.",
     "url": "https://wordpress.org/plugins/performance-lab/",
     "slug": "performance-lab"
    },
    {
     "type": "plugin",
     "name": "WP-Optimize",
     "note": "Speed up standard pages.",
     "url": "https://wordpress.org/plugins/wp-optimize/",
     "slug": "wp-optimize"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/amp/",
   "source": "edition"
  },
  {
   "slug": "child-theme-configurator",
   "name": "Child Theme Configurator",
   "verdict": "watch",
   "verdict_label": "Watch",
   "trend": "Quiet",
   "reason": "No update for 16 months, with one listed contributor. Most sites use it once, so the risk depends on whether it stays installed.",
   "action": "If your child theme is finished, consider deactivating it.",
   "job": "Creates a child theme from an installed theme and helps customize it.",
   "second_sign": null,
   "based_on": [],
   "open_advisories": [],
   "last_updated": "2025-06-10",
   "tested_up_to": "6.8.12",
   "version": "2.6.7",
   "installs": "300k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "WP-CLI scaffold",
     "note": "Use wp scaffold child-theme where your host provides WP-CLI.",
     "url": "https://developer.wordpress.org/cli/commands/scaffold/child-theme/"
    },
    {
     "type": "plugin",
     "name": "WP Child Theme Generator",
     "note": "Create a child theme from wp-admin.",
     "url": "https://wordpress.org/plugins/wp-child-theme-generator/",
     "slug": "wp-child-theme-generator"
    },
    {
     "type": "plugin",
     "name": "Child Theme Wizard",
     "note": "Create a child theme from wp-admin.",
     "url": "https://wordpress.org/plugins/child-theme-wizard/",
     "slug": "child-theme-wizard"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/child-theme-configurator/",
   "source": "edition"
  },
  {
   "slug": "yet-another-related-posts-plugin",
   "name": "YARPP",
   "verdict": "watch",
   "verdict_label": "Watch",
   "trend": "Quiet",
   "reason": "Almost two years without an update, and a long history of fixed advisories. It moves to Plan a move if it stays quiet past November 2026.",
   "action": "Compare your options now if related posts matter to your site.",
   "job": "Shows related posts on a site.",
   "second_sign": null,
   "based_on": [],
   "open_advisories": [],
   "last_updated": "2024-11-11",
   "tested_up_to": "6.7.11",
   "version": "5.30.11",
   "installs": "100k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Contextual Related Posts",
     "note": "Show related posts by content.",
     "url": "https://wordpress.org/plugins/contextual-related-posts/",
     "slug": "contextual-related-posts"
    },
    {
     "type": "plugin",
     "name": "Related Posts Thumbnails",
     "note": "Related posts with thumbnails.",
     "url": "https://wordpress.org/plugins/related-posts-thumbnails/",
     "slug": "related-posts-thumbnails"
    },
    {
     "type": "plugin",
     "name": "Related Posts for WordPress",
     "note": "Related posts for WordPress.",
     "url": "https://wordpress.org/plugins/related-posts-for-wp/",
     "slug": "related-posts-for-wp"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/yet-another-related-posts-plugin/",
   "source": "edition"
  },
  {
   "slug": "menu-image",
   "name": "Menu Image",
   "verdict": "watch",
   "verdict_label": "Watch",
   "trend": "Quiet",
   "reason": "No update for 15 months, and it is tested only up to WordPress 6.7. Past advisories show why continued maintenance matters here.",
   "action": "Keep it updated, and recheck next quarter.",
   "job": "Adds images or icons to menu items.",
   "second_sign": null,
   "based_on": [],
   "open_advisories": [],
   "last_updated": "2025-07-20",
   "tested_up_to": "6.7.11",
   "version": "3.13",
   "installs": "100k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Menu Icons by Themeisle",
     "note": "Add icons to menu items.",
     "url": "https://wordpress.org/plugins/menu-icons/",
     "slug": "menu-icons"
    },
    {
     "type": "plugin",
     "name": "Max Mega Menu",
     "note": "Larger menus with images and widgets.",
     "url": "https://wordpress.org/plugins/megamenu/",
     "slug": "megamenu"
    },
    {
     "type": "builtin",
     "name": "Navigation block",
     "note": "Build menus in the block editor.",
     "url": "https://wordpress.org/documentation/article/navigation-block/"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/menu-image/",
   "source": "edition"
  },
  {
   "slug": "edit-author-slug",
   "name": "Edit Author Slug",
   "verdict": "watch",
   "verdict_label": "Watch",
   "trend": "Quiet",
   "reason": "No update for 17 months, with one listed contributor.",
   "action": "No action needed yet. Test it after each WordPress release.",
   "job": "Changes the author slug and author base in author URLs.",
   "second_sign": null,
   "based_on": [],
   "open_advisories": [],
   "last_updated": "2025-05-27",
   "tested_up_to": "6.8.12",
   "version": "1.9.2",
   "installs": "100k+",
   "alternatives": [
    {
     "type": "plugin",
     "name": "Smart User Slug Hider",
     "note": "Hide usernames in author URLs.",
     "url": "https://wordpress.org/plugins/smart-user-slug-hider/",
     "slug": "smart-user-slug-hider"
    },
    {
     "type": "plugin",
     "name": "Custom Permalinks",
     "note": "Set custom URLs.",
     "url": "https://wordpress.org/plugins/custom-permalinks/",
     "slug": "custom-permalinks"
    },
    {
     "type": "plugin",
     "name": "Admin and Site Enhancements",
     "note": "A toolkit with author URL settings.",
     "url": "https://wordpress.org/plugins/admin-site-enhancements/",
     "slug": "admin-site-enhancements"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/edit-author-slug/",
   "source": "edition"
  },
  {
   "slug": "simple-custom-css",
   "name": "Simple Custom CSS",
   "verdict": "watch",
   "verdict_label": "Watch",
   "trend": "Quiet",
   "reason": "No update for 19 months, with one listed contributor. WordPress also has its own place for custom CSS.",
   "action": "If your CSS is short, try one of the alternatives below.",
   "job": "Adds custom CSS to a site from the admin area.",
   "second_sign": null,
   "based_on": [],
   "open_advisories": [],
   "last_updated": "2025-03-11",
   "tested_up_to": "6.7.11",
   "version": "4.0.7",
   "installs": "100k+",
   "alternatives": [
    {
     "type": "builtin",
     "name": "Additional CSS",
     "note": "Add CSS in the WordPress Customizer or Site Editor.",
     "url": "https://wordpress.org/documentation/article/customizer/"
    },
    {
     "type": "plugin",
     "name": "Simple Custom CSS and JS",
     "note": "Manage CSS and JavaScript snippets.",
     "url": "https://wordpress.org/plugins/custom-css-js/",
     "slug": "custom-css-js"
    },
    {
     "type": "plugin",
     "name": "WPCode",
     "note": "Manage code snippets from one screen.",
     "url": "https://wordpress.org/plugins/insert-headers-and-footers/",
     "slug": "insert-headers-and-footers"
    }
   ],
   "url": "https://stalewp.com/risk-radar/edition-1/simple-custom-css/",
   "source": "edition"
  }
 ]
}