Skip to content
StaleWP

Published quarterly

Risk Radar

Popular WordPress plugins that have stopped getting updates, or that WordPress has moved past. Each edition places them in one of three rings, and every plugin gets its own page with the evidence and at least three options to move to.

Read Edition 1

Most installed in Replace now

From Edition 1, checked 2026-10-31. Open a plugin for its evidence and what to do next.

  1. Limit Login Attempts 300k+ installs · not updated since Apr 2023
  2. Search & Replace 100k+ installs · not updated since Aug 2024
  3. BackUpWordPress 80k+ installs · not updated since Apr 2024
  4. Disable REST API 80k+ installs · not updated since Sep 2023
  5. PHP Code Widget 70k+ installs · not updated since Mar 2022
  6. Add From Server 60k+ installs · not updated since Dec 2020
  7. Contact Form 7 add confirm 50k+ installs · not updated since Feb 2018
  8. WP Extra File Types 40k+ installs · not updated since Oct 2023
  9. WP Edit 40k+ installs · open advisory, no fix listed
  10. Scripts n Styles 30k+ installs · open advisory, no fix listed

See all 100 plugins in Edition 1

Replace now43

Quiet 38 · Falling behind 5

Plan a move49

Quiet 32 · Falling behind 17

Watch8

Quiet 8 · Falling behind 0

Recovered0

Quiet 0 · Falling behind 0

See all 100 plugins

Placements are our opinion, based on public evidence. Risk here means a plugin may not get a fix if a problem appears. It doesn’t mean we found a flaw, unless we show an advisory. Going quiet alone never puts a plugin in Replace now.

Editions

Edition 1 43 Replace now · 49 Plan a move · 8 Watch Published

How we place plugins

Replace now10,000+ installs, no update for 2+ years and a second warning sign.
Plan a moveNo update for 2+ years, with 50,000+ installs or a job the site depends on. Or a public advisory with no fix listed.
Watch100,000+ installs and no update for 1–2 years.
RecoveredUpdated again after being listed. Starts with Edition 2.

A second warning sign is a sensitive job, such as logins or payments, a public advisory with no fix listed, or a plugin or service that has been shut down.

Quiet
No update for over a year.
Falling behind
WordPress or a service it relies on has moved on.

Each edition shows how many plugins in the directory met the rules, and lists every plugin we left out, with the reason. How plugins got on Edition 1

Schedule

New editions are planned for the 2nd of February, May, August and November. Next: 2 February 2027. Between editions, closures, fixes and new advisories show as a note on the plugin’s page.

Open data

The latest edition is also published as JSON, free to reuse under CC0: latest.json

StaleWP Newsletter

What changed in the plugin directory, twice a month. Free, unsubscribe anytime.

See how we handle your email on our Legal page.