Last updated 2026-11-02
StaleWP is operated by Abhishek Deshpande, Nagpur, India.
Terms of use
StaleWP is provided for general information. By using this site, you agree to use it at your own risk. Content may not be complete or current, and we may change or remove it at any time.
No professional advice
Our content is not professional security, legal or business advice. Back up your site and test changes on a staging copy before you update, remove or replace a plugin. You are responsible for decisions about your own site.
Radar placements
Radar placements are our opinions, based on the public evidence shown and the date stated. They are not statements that a plugin is unsafe, exploited or unsuitable for every site. A plugin’s status can change after publication.
Corrections
To report a mistake, email [email protected]. See Corrections.
Trademarks
WordPress is a trademark of the WordPress Foundation. Plugin and company names belong to their owners. Their use here identifies them and does not imply any endorsement or connection. StaleWP is not affiliated with WordPress.org or the WordPress Foundation.
Our data
We use public information: the WordPress.org plugin directory and review pages, and the WPVulnerability database. Later editions may also use Wordfence Intelligence and the CISA Known Exploited Vulnerabilities catalog. We save dated snapshots so published claims can be traced to the data behind them, and a person reviews each edition before it is published. A plugin that disappears from the directory is reported as closed only after we confirm it.
Privacy
Newsletter. If you subscribe, we store your email address, the time you signed up, the time you confirmed and the wording you agreed to, so we can send the StaleWP Newsletter. We email you a link to confirm, which works for 7 days. We keep your email address until you unsubscribe or ask us to delete it. After you unsubscribe, we keep only your address and the date, so we don’t email you again. If you don’t confirm your signup, we delete your address after 30 days. We do not sell your email address. We send our emails, including the newsletter, through Amazon Simple Email Service (AWS SES), which processes your email address to deliver them. See the AWS privacy notice. You can unsubscribe through any issue, or ask us to delete your address by emailing [email protected].
Cloudflare. We use Cloudflare to deliver and protect this site. Cloudflare processes technical data such as IP addresses and may set cookies needed for security. See the Cloudflare privacy policy.
Google Analytics. We use Google Analytics to understand how people use this site, such as which pages are visited. It uses cookies and collects data such as device, browser and approximate location, which Google processes on its systems. These cookies load only if you accept them in our cookie banner. You can change your choice at any time with Cookie settings in the footer. See Google’s privacy policy.
Your choice. We remember your cookie choice in your browser. Cookies that are needed for security or login are not covered by the banner.
Server logs and cookies. Our hosting provider may keep standard server logs, such as IP addresses and pages visited, for security and maintenance. We host our fonts ourselves.
Links to WordPress.org and other sites are covered by those sites’ own policies.
Contact
Questions about this page: [email protected].