StaleWP Risk Radar · November 2026

Edition 1

100 popular WordPress plugins to replace, plan a move from or watch, picked from the 77,501 in the plugin directory.

Published 2026-11-02 Checked 2026-10-31 Next edition 2027-02-02

How plugins get on the radar

77,501

plugins in the directory
2,163

have 10,000+ installs
171

have also gone quiet
71

left out by us
100

on the radar

Gone quiet means no update for a year at 100,000+ installs, or for two years at 10,000–99,999 installs.

Left out means 66 smaller plugins with a minor job and no open advisory, and 5 with another stated reason. What counts as minor is our judgement, so both lists are published.

100 is not a target. It is where these rules landed.

Not checked: 92 plugins with 10,000–99,999 installs and one to two years without an update fall outside the rules for this edition.

Replace now

10,000+ installs, no update for 2+ years and a second warning sign.

Plan a move

No update for 2+ years, with 50,000+ installs or a job the site depends on. Or a public advisory with no fix listed.

Watch

100,000+ installs and no update for 1–2 years.

Recovered

Updated again after being listed. Starts with Edition 2.

How we place plugins Suggest a correction

Replace now43

Quiet 38 · Falling behind 5

Plan a move49

Quiet 32 · Falling behind 17

Watch8

Quiet 8 · Falling behind 0

Recovered0

Quiet 0 · Falling behind 0

See all 100 plugins

Placements are our opinion, based on public evidence. Risk here means a plugin may not get a fix if a problem appears. It doesn’t mean we found a flaw, unless we show an advisory. Going quiet alone never puts a plugin in Replace now.

Plugins on the radar
Number	Plugin	Ring	Side
01	Limit Login Attempts	Replace now	Quiet
02	Search & Replace	Replace now	Quiet
03	BackUpWordPress	Replace now	Quiet
04	Disable REST API	Replace now	Quiet
05	PHP Code Widget	Replace now	Quiet
06	Add From Server	Replace now	Quiet
07	Contact Form 7 add confirm	Replace now	Quiet
08	WP Extra File Types	Replace now	Quiet
09	WP Edit	Replace now	Quiet
10	Scripts n Styles	Replace now	Quiet
11	Enhanced Text Widget	Replace now	Quiet
12	reCAPTCHA for MW WP Form	Replace now	Quiet
13	My-Plugins	Replace now	Quiet
14	Advanced Automatic Updates	Replace now	Quiet
15	Audit Trail	Replace now	Quiet
16	WP Test Email	Replace now	Quiet
17	Site Offline	Replace now	Quiet
18	Contact Form 7 Phone mask field	Replace now	Quiet
19	WP Hardening	Replace now	Quiet
20	Login by Auth0	Replace now	Quiet
21	Lockdown WP Admin	Replace now	Quiet
22	Password Strength Settings for WooCommerce	Replace now	Quiet
23	PagSeguro for WooCommerce	Replace now	Quiet
24	Custom CSS and JavaScript	Replace now	Quiet
25	Blog Designer	Replace now	Quiet
26	Disable Right Click For WP	Replace now	Quiet
27	Typing Effect	Replace now	Quiet
28	WP Tab Widget	Replace now	Quiet
29	Oceanwp sticky header	Replace now	Quiet
30	SEO Friendly Images	Replace now	Quiet
31	Dashboard Notepad	Replace now	Quiet
32	TC Custom JavaScript	Replace now	Quiet
33	Gravity Forms No CAPTCHA reCAPTCHA	Replace now	Quiet
34	Zendesk Chat	Replace now	Quiet
35	SEO Ultimate	Replace now	Quiet
36	Multiple Domain	Replace now	Quiet
37	Cookies for Comments	Replace now	Quiet
38	JivoChat	Replace now	Quiet
39	Facebook Chat Plugin	Replace now	Falling behind
40	WordPress REST API (Version 2)	Replace now	Falling behind
41	Disable Real MIME Check	Replace now	Falling behind
42	10WebSocial	Replace now	Falling behind
43	G Meta Keywords	Replace now	Falling behind
44	WooSidebars	Plan a move	Quiet
45	Sassy Social Share	Plan a move	Quiet
46	Title Remover	Plan a move	Quiet
47	Display Posts	Plan a move	Quiet
48	Fixed Widget	Plan a move	Quiet
49	Heartbeat Control	Plan a move	Quiet
50	Enhanced Media Library	Plan a move	Quiet
51	Brazilian Market on WooCommerce	Plan a move	Quiet
52	underConstruction	Plan a move	Quiet
53	Revision Control	Plan a move	Quiet
54	Portfolio Post Type	Plan a move	Quiet
55	Export Media Library	Plan a move	Quiet
56	Increase Maximum Upload File Size	Plan a move	Quiet
57	Social Media Widget	Plan a move	Quiet
58	Hide Title	Plan a move	Quiet
59	Transients Manager	Plan a move	Quiet
60	WP Maximum Execution Time Exceeded	Plan a move	Quiet
61	EditorsKit	Plan a move	Quiet
62	Spider Blocker	Plan a move	Quiet
63	Contact Form 7 Shortcode Enabler	Plan a move	Quiet
64	WP No Base Permalink	Plan a move	Quiet
65	Search Everything	Plan a move	Quiet
66	Robots.txt Editor	Plan a move	Quiet
67	WP Missed Schedule Posts	Plan a move	Quiet
68	WP Notification Bars	Plan a move	Quiet
69	Multiple Post Thumbnails	Plan a move	Quiet
70	WooCommerce Grid / List toggle	Plan a move	Quiet
71	Search by SKU for Woocommerce	Plan a move	Quiet
72	Options Framework	Plan a move	Quiet
73	Breadcrumb Trail	Plan a move	Quiet
74	WP Content Copy Protection	Plan a move	Quiet
75	Яндекс Метрика	Plan a move	Quiet
76	Layout Grid Block	Plan a move	Falling behind
77	Async JavaScript	Plan a move	Falling behind
78	All In One Favicon	Plan a move	Falling behind
79	Column Shortcodes	Plan a move	Falling behind
80	Easy Theme and Plugin Upgrades	Plan a move	Falling behind
81	WP Show Posts	Plan a move	Falling behind
82	Hotjar	Plan a move	Falling behind
83	Disable Google Fonts	Plan a move	Falling behind
84	Self-Hosted Google Fonts	Plan a move	Falling behind
85	Any Mobile Theme Switcher	Plan a move	Falling behind
86	Lazy Load	Plan a move	Falling behind
87	Custom Post Template	Plan a move	Falling behind
88	Use Google Libraries	Plan a move	Falling behind
89	Meks Easy Photo Feed Widget	Plan a move	Falling behind
90	Easy Twitter Feed Widget	Plan a move	Falling behind
91	WooCommerce Colors	Plan a move	Falling behind
92	Shortcake	Plan a move	Falling behind
93	Regenerate Thumbnails	Watch	Quiet
94	Intuitive Custom Post Order	Watch	Quiet
95	AMP	Watch	Quiet
96	Child Theme Configurator	Watch	Quiet
97	YARPP	Watch	Quiet
98	Menu Image	Watch	Quiet
99	Edit Author Slug	Watch	Quiet
100	Simple Custom CSS	Watch	Quiet

Closed plugins: none found among the plugins we rechecked. Changed hands: tracking starts in February 2027. Recovered: this ring starts filling from Edition 2.

What stood out

Replace now still covers many sites.The 43 plugins in Replace now report at least 1.4 million active installs between them.
WordPress caught up with some plugins.Favicons, ZIP updates, columns and post lists no longer need a separate plugin on most sites.
Plugins can outlive their purpose.A temporary fix from the WordPress 4.7 era and a pre-core REST API beta still report 10,000 installs each.
A big name is no guarantee.Official plugins from Facebook, Hotjar and Auth0 all appear here.
15 plugins have an open advisory.Each has a public advisory covering its current version, with no fix listed when we checked. All are marked on their own pages.
Quiet plugins are still being downloaded.The 43 plugins in Replace now had 70,949 downloads in the last 30 days, including updates.

All 100 plugins

Numbers match the radar and are not a ranking. Open a plugin for its evidence and at least three options.

Replace now

43 plugins

10,000+ installs, no update for 2+ years and a second warning sign.

01 Limit Login Attempts Guards the login page Quiet It guards the login page, and it has had no update for over three years. A separate plugin, Limit Login Attempts Security, has a nearly identical name, so check which one you actually run.

Installs: 300k+
Last update: 2023-04-04
Tested to: 6.2.15

02 Search & Replace Rewrites the database Quiet This tool rewrites the site database, so it needs active upkeep. It has had no update for over two years. A critical issue was fixed in its last release.

Installs: 100k+
Last update: 2024-08-26
Tested to: 6.5.14

03 BackUpWordPress Handles backups Quiet Backups have to work on the day you need them. This plugin has had no update for two and a half years and is tested only up to WordPress 6.5.

Installs: 80k+
Last update: 2024-04-24
Tested to: 6.5.14

04 Disable REST API Controls API access Quiet It controls who can reach the WordPress REST API, and it has had no update for over three years. It is tested only up to WordPress 6.3.

Installs: 80k+
Last update: 2023-09-14
Tested to: 6.3.14

05 PHP Code Widget Runs site code Quiet It runs PHP entered into a widget, which is a powerful job for a plugin last updated in 2022. Any hidden fault here affects code running on your site.

Installs: 70k+
Last update: 2022-03-30
Tested to: 5.9.20

06 Add From Server Reads server files Quiet It reads files on your server, and it was last updated in 2020. It is tested only up to WordPress 5.5.

Installs: 60k+
Last update: 2020-12-11
Tested to: 5.5.24

07 Contact Form 7 add confirm Handles form submissions Quiet It sits in the path of visitor form submissions, and it was last updated in 2018. Its top rating comes from four reviews, so that score says very little.

Installs: 50k+
Last update: 2018-02-27
Tested to: 4.9.35

08 WP Extra File Types Controls file uploads Quiet It lets a site accept more kinds of uploaded file, so its settings affect what reaches your server. It has had no update for three years.

Installs: 40k+
Last update: 2023-10-28
Tested to: 6.3.14

09 WP Edit Public advisory with no fix listed Quiet A public advisory covers the current version, and no fix is listed. It was last updated in 2018 and is tested only up to WordPress 4.9.

Installs: 40k+
Last update: 2018-10-15
Tested to: 4.9.35

10 Scripts n Styles Public advisory with no fix listed Quiet It adds custom code to posts and pages, and a public advisory covers the current version with no fix listed. It was last updated in 2023.

Installs: 30k+
Last update: 2023-06-06
Tested to: 6.2.15

11 Enhanced Text Widget Runs site code Quiet It can run PHP from a widget, and it has seven public advisories on record. It was last updated in 2024.

Installs: 30k+
Last update: 2024-07-17
Tested to: 6.6.11

12 reCAPTCHA for MW WP Form Guards forms from spam Quiet It protects forms from spam, and it was last updated in 2024. It is tested only up to WordPress 6.5.

Installs: 30k+
Last update: 2024-05-09
Tested to: 6.5.14

13 My-Plugins Shows the plugins a site runs Quiet It shows a public list of the plugins a site runs. It was last updated in 2013 and is tested only up to WordPress 3.5.

Installs: 30k+
Last update: 2013-07-02
Tested to: 3.5.2

14 Advanced Automatic Updates Controls updates Quiet It controls how a site updates itself, and it was last updated in 2021. WordPress now includes automatic updates for core, plugins and themes.

Installs: 20k+
Last update: 2021-06-04
Tested to: 5.0.31

15 Audit Trail Keeps the activity log Quiet An activity log needs to be reliable when you investigate a problem. This one has not changed since 2016 and is tested only up to WordPress 4.7.

Installs: 20k+
Last update: 2017-11-28
Tested to: 4.7.39

16 WP Test Email Public advisory with no fix listed Quiet Three public advisories cover the version on WordPress.org, and one has no fix listed. The plugin was last updated in 2024.

Installs: 20k+
Last update: 2024-07-31
Tested to: 6.6.11

17 Site Offline Public advisory with no fix listed Quiet It decides who can see your site, and a public advisory covers the current version with no fix listed. It was last updated in 2024.

Installs: 20k+
Last update: 2024-03-20
Tested to: 6.4.14

18 Contact Form 7 Phone mask field Handles form submissions Quiet It sits in the path of visitor form submissions, and it was last updated in 2021.

Installs: 20k+
Last update: 2021-01-07
Tested to: 5.6.23

19 WP Hardening Discontinued by its author Quiet Its own WordPress.org page says it is discontinued and advises deleting it as soon as possible. It still reports 10,000 active installs.

Installs: 10k+
Last update: 2024-09-13
Tested to: 6.0.18

20 Login by Auth0 Replaces the login page Quiet It replaces the WordPress login page, so a fault here affects every user. It has had no update for over two years, and WordPress.org warns it has not been tested with the latest three major releases.

Installs: 10k+
Last update: 2024-07-12
Tested to: 6.5.14

21 Lockdown WP Admin Controls admin access Quiet It controls access to the admin area, and it has not changed since 2015. It is tested only up to WordPress 4.3.

Installs: 10k+
Last update: 2017-11-28
Tested to: 4.3.34

22 Password Strength Settings for WooCommerce Sets password rules Quiet It changes the password rules for customer accounts, and it has had no update for three years. It is tested only up to WordPress 6.3.

Installs: 10k+
Last update: 2023-10-11
Tested to: 6.3.14

23 PagSeguro for WooCommerce Handles payments Quiet This payment gateway was last updated in 2020 and is tested only up to WordPress 5.5. Its high rating comes from reviews that may be years old.

Installs: 10k+
Last update: 2020-08-10
Tested to: 5.5.24

24 Custom CSS and JavaScript Public advisory with no fix listed Quiet It adds code to every page, and a public advisory covers the current version with no fix listed. It was last updated in 2024.

Installs: 10k+
Last update: 2024-08-12
Tested to: 6.6.11

25 Blog Designer Public advisory with no fix listed Quiet A public advisory covers the current version, and no fix is listed. It was last updated in 2024.

Installs: 10k+
Last update: 2024-08-12
Tested to: 6.6.11

26 Disable Right Click For WP Public advisory with no fix listed Quiet A public advisory covers the current version, and no fix is listed. It was last updated in 2023.

Installs: 10k+
Last update: 2023-11-26
Tested to: 6.4.14

27 Typing Effect Public advisory with no fix listed Quiet A public advisory covers the current version, and no fix is listed. It was last updated in 2023.

Installs: 10k+
Last update: 2023-10-26
Tested to: 6.3.14

28 WP Tab Widget Public advisory with no fix listed Quiet A public advisory covers the current version, and no fix is listed. It was last updated in 2022 and is tested only up to WordPress 5.9.

Installs: 10k+
Last update: 2022-01-26
Tested to: 5.9.20

29 Oceanwp sticky header Public advisory with no fix listed Quiet A public advisory covers the current version, and no fix is listed. It was last updated in 2021 and is tested only up to WordPress 5.8.

Installs: 10k+
Last update: 2021-10-22
Tested to: 5.8.19

30 SEO Friendly Images Public advisory with no fix listed Quiet A public advisory covers the current version, and no fix is listed. It has not changed since 2015 and is tested only up to WordPress 4.1.

Installs: 10k+
Last update: 2017-11-28
Tested to: 4.1.42

31 Dashboard Notepad Public advisory with no fix listed Quiet A public advisory covers the current version, and no fix is listed. It was last updated in 2017 and is tested only up to WordPress 4.1.

Installs: 10k+
Last update: 2017-07-30
Tested to: 4.1.42

32 TC Custom JavaScript Runs site code Quiet It adds JavaScript to every page from one screen, and it was last updated in 2023. It is tested only up to WordPress 6.1.

Installs: 10k+
Last update: 2023-02-24
Tested to: 6.1.16

33 Gravity Forms No CAPTCHA reCAPTCHA Guards forms from spam Quiet It protects forms from spam, and it has not changed since 2015. It is tested only up to WordPress 4.0.

Installs: 10k+
Last update: 2017-11-28
Tested to: 4.0.0

34 Zendesk Chat Handles customer conversations Quiet It carries live conversations with your customers, and it was last updated in 2020. It is tested only up to WordPress 5.5.

Installs: 10k+
Last update: 2020-08-20
Tested to: 5.5.24

35 SEO Ultimate Controls search listings Quiet It controls how search engines see the whole site, and it was last updated in 2016. It is tested only up to WordPress 4.6.

Installs: 10k+
Last update: 2016-11-03
Tested to: 4.6.30

36 Multiple Domain Controls site domains Quiet It decides which domains serve your site, and it was last updated in 2021. Past advisories are on record.

Installs: 10k+
Last update: 2021-04-11
Tested to: 5.7.21

37 Cookies for Comments Guards comments from spam Quiet It protects comments from spam, and it was last updated in 2019. It is tested only up to WordPress 5.2.

Installs: 10k+
Last update: 2019-06-04
Tested to: 5.2.30

38 JivoChat Handles customer conversations Quiet It carries live conversations with your customers, and it has had no update for three years.

Installs: 10k+
Last update: 2023-10-25
Tested to: 6.4.14

39 Facebook Chat Plugin Service shut down Falling behind Meta’s developer documentation said this chat service would stop working on 9 May 2024, and the plugin itself was last updated in 2022.

Installs: 70k+
Last update: 2022-07-05
Tested to: 5.9.20

40 WordPress REST API (Version 2) Replaced by WordPress Falling behind This beta plugin was built before the REST API moved into WordPress core. It has not changed since 2016 and still reports 10,000 active installs.

Installs: 10k+
Last update: 2017-11-28
Tested to: 4.7.39

41 Disable Real MIME Check Turns off an upload check Falling behind It turns off a WordPress upload check. Its own page calls it a temporary workaround and says to remove it once WordPress 4.7.3 is available.

Installs: 10k+
Last update: 2017-11-28
Tested to: 4.7.39

42 10WebSocial Public advisory with no fix listed Falling behind Two public advisories cover the current version, with no fix listed. Instagram retired its Basic Display API in December 2024, after this plugin’s last update in 2023.

Installs: 10k+
Last update: 2023-02-09
Tested to: 5.0.31

43 G Meta Keywords Public advisory with no fix listed Falling behind A public advisory covers the current version, and no fix is listed. Google has said for years that it does not use the keywords meta tag for ranking.

Installs: 10k+
Last update: 2019-06-19
Tested to: 5.1.28

Back to the filters

Plan a move

49 plugins

No update for 2+ years, with 50,000+ installs or a job the site depends on. Or a public advisory with no fix listed.

44 WooSidebars Quiet No update for two and a half years. It solves a widget-era problem, so sites moving to block themes may not need it at all.

Installs: 100k+
Last update: 2024-04-03
Tested to: 6.5.14

45 Sassy Social Share Public advisory with no fix listed Quiet A public advisory covers the current version, and no fix is listed yet. It has also gone over a year without an update.

Installs: 100k+
Last update: 2025-09-15
Tested to: 6.8.12

46 Title Remover Quiet Last updated in 2021. It is a simple plugin, so risk is lower, but many themes now offer the same setting.

Installs: 70k+
Last update: 2021-06-03
Tested to: 5.7.21

47 Display Posts Quiet No update for two years. The Query Loop block now covers many post lists, but older pages may still use its shortcode.

Installs: 70k+
Last update: 2024-10-14
Tested to: 6.6.11

48 Fixed Widget Quiet No update for over three years, and it is tested only up to WordPress 6.2.

Installs: 70k+
Last update: 2023-03-30
Tested to: 6.2.15

49 Heartbeat Control Quiet No update for over three years, and it is tested only up to WordPress 6.3. Performance plugins often include this setting now.

Installs: 70k+
Last update: 2023-08-31
Tested to: 6.3.14

50 Enhanced Media Library Quiet No update for over two years, on a plugin that organizes every file in the media library. Moving away needs some care.

Installs: 60k+
Last update: 2024-07-15
Tested to: 6.5.14

51 Brazilian Market on WooCommerce Quiet It adds fields to checkout, and it has had no update for over two years. Stores should test it closely with current WooCommerce.

Installs: 60k+
Last update: 2024-02-17
Tested to: 6.4.14

52 underConstruction Quiet It decides who can see your site, and it has had no update since 2024. Five past advisories are on record.

Installs: 40k+
Last update: 2024-03-08
Tested to: 6.4.14

53 Revision Control Quiet It changes how many post revisions a site keeps, and it was last updated in 2018.

Installs: 40k+
Last update: 2018-04-01
Tested to: 4.9.35

54 Portfolio Post Type Quiet Your portfolio content lives in the post type it creates. The plugin was last updated in 2020. It is tested only up to WordPress 5.5.

Installs: 40k+
Last update: 2020-08-29
Tested to: 5.5.24

55 Export Media Library Quiet It packs your media files into a download, and it was last updated in 2023.

Installs: 30k+
Last update: 2023-04-05
Tested to: 6.2.15

56 Increase Maximum Upload File Size Quiet It changes a site’s upload limit, and it was last updated in 2023. It is tested only up to WordPress 5.8.

Installs: 30k+
Last update: 2023-08-14
Tested to: 5.8.19

57 Social Media Widget Quiet Five past advisories are on record, and it was last updated in 2024.

Installs: 30k+
Last update: 2024-06-10
Tested to: 6.4.14

58 Hide Title Quiet It was last updated in 2019, and its latest reviews are clearly lower than its overall score.

Installs: 30k+
Last update: 2019-05-22
Tested to: 5.2.30

59 Transients Manager Quiet It edits and deletes stored site data, and it has had no update for two years.

Installs: 20k+
Last update: 2024-10-18
Tested to: 6.6.11

60 WP Maximum Execution Time Exceeded Quiet It changes a server time limit, and it was last updated in 2021. A slow script usually needs a real fix.

Installs: 20k+
Last update: 2021-01-25
Tested to: 5.6.23

61 EditorsKit Quiet It adds tools across the block editor, and it was last updated in 2024. Its latest reviews are clearly lower than its overall score.

Installs: 20k+
Last update: 2024-05-28
Tested to: 6.5.14

62 Spider Blocker Quiet It decides which bots can reach your site, and it was last updated in 2024. A wrong rule can hide a site from search engines.

Installs: 20k+
Last update: 2024-05-07
Tested to: 6.5.14

63 Contact Form 7 Shortcode Enabler Quiet It changes what runs inside Contact Form 7 forms, and it has had no update for two years.

Installs: 10k+
Last update: 2024-10-18
Tested to: 6.6.11

64 WP No Base Permalink Quiet It changes your category and tag URLs, and it was last updated in 2020. Removing it can change those URLs.

Installs: 10k+
Last update: 2020-05-06
Tested to: 4.8.34

65 Search Everything Quiet It changes how site search works, and it was last updated in 2017. Its latest reviews are clearly lower than its overall score.

Installs: 10k+
Last update: 2017-11-28
Tested to: 4.7.39

66 Robots.txt Editor Quiet It controls what search engines may crawl, and it was last updated in 2021.

Installs: 10k+
Last update: 2021-01-16
Tested to: 5.6.23

67 WP Missed Schedule Posts Quiet It publishes scheduled posts that WordPress misses, and it was last updated in 2017.

Installs: 10k+
Last update: 2017-07-20
Tested to: 4.8.34

68 WP Notification Bars Quiet It was last updated in 2022, and its latest reviews are clearly lower than its overall score.

Installs: 10k+
Last update: 2022-02-28
Tested to: 5.9.20

69 Multiple Post Thumbnails Quiet Your theme may depend on the extra images it adds. The plugin was last updated in 2018.

Installs: 10k+
Last update: 2018-11-26
Tested to: 5.0.31

70 WooCommerce Grid / List toggle Quiet It changes store product pages, and it was last updated in 2018.

Installs: 10k+
Last update: 2018-05-11
Tested to: 4.9.35

71 Search by SKU for Woocommerce Quiet It changes how store search works, and it was last updated in 2021.

Installs: 10k+
Last update: 2021-07-16
Tested to: 5.7.21

72 Options Framework Quiet Older themes may store their settings through it, and it was last updated in 2017.

Installs: 10k+
Last update: 2017-11-01
Tested to: 4.8.34

73 Breadcrumb Trail Quiet Breadcrumbs appear on every page and in search listings, and it was last updated in 2017.

Installs: 10k+
Last update: 2017-11-28
Tested to: 4.8.34

74 WP Content Copy Protection Quiet It was last updated in 2023, and it is tested only up to WordPress 6.2. A separate plugin has a nearly identical name, so check which one you run.

Installs: 10k+
Last update: 2023-06-27
Tested to: 6.2.15

75 Яндекс Метрика Quiet It adds visitor tracking to every page, and it has not changed since 2016. It is tested only up to WordPress 4.6.

Installs: 10k+
Last update: 2017-11-28
Tested to: 4.6.30

76 Layout Grid Block Falling behind WordPress now includes Columns and Grid layouts. This block was last updated in 2023 and is tested only up to WordPress 6.2.

Installs: 200k+
Last update: 2023-07-11
Tested to: 6.2.15

77 Async JavaScript Falling behind WordPress 6.3 gave developers built-in defer and async script loading. This plugin has not been updated since 2023 and is tested only up to 6.2.

Installs: 60k+
Last update: 2023-06-22
Tested to: 6.2.15

78 All In One Favicon Falling behind WordPress now includes a Site Icon setting, so most sites no longer need a plugin for this.

Installs: 60k+
Last update: 2023-08-08
Tested to: 6.2.15

79 Column Shortcodes Falling behind The block editor has a Columns block, and this plugin was last updated in 2022. Old posts may still depend on its shortcodes.

Installs: 60k+
Last update: 2022-10-11
Tested to: 6.0.18

80 Easy Theme and Plugin Upgrades Falling behind Since WordPress 5.5, you can upload a ZIP and replace an installed plugin or theme without an extra plugin.

Installs: 60k+
Last update: 2022-04-20
Tested to: 5.7.21

81 WP Show Posts Falling behind The Query Loop block now covers many post-list layouts. This plugin is tested only up to WordPress 6.1.

Installs: 60k+
Last update: 2024-04-16
Tested to: 6.1.16

82 Hotjar Falling behind An official vendor plugin can still go quiet. It was last updated in 2023 and is tested only up to WordPress 6.0.

Installs: 60k+
Last update: 2023-10-25
Tested to: 6.0.18

83 Disable Google Fonts Falling behind It was last updated in 2019, before the default WordPress themes began shipping their own fonts. It is tested only up to WordPress 5.1.

Installs: 40k+
Last update: 2019-02-24
Tested to: 5.1.28

84 Self-Hosted Google Fonts Falling behind WordPress 6.5 added a Font Library that can store fonts on your own site. This plugin was last updated in 2018.

Installs: 30k+
Last update: 2018-06-15
Tested to: 4.9.35

85 Any Mobile Theme Switcher Falling behind Most themes now adapt to any screen, so few sites need a separate mobile theme. This plugin was last updated in 2024.

Installs: 20k+
Last update: 2024-09-03
Tested to: 6.6.11

86 Lazy Load Falling behind WordPress has lazy-loaded images by itself since version 5.5. This plugin was last updated in 2018.

Installs: 10k+
Last update: 2018-11-22
Tested to: 5.0.31

87 Custom Post Template Falling behind WordPress has supported templates for posts since version 4.7. This plugin has not changed since 2012 and is tested only up to WordPress 3.4.

Installs: 10k+
Last update: 2017-11-28
Tested to: 3.4.2

88 Use Google Libraries Falling behind Loading shared scripts from Google once saved time. Browsers no longer share cached files between sites, and this plugin was last updated in 2017.

Installs: 10k+
Last update: 2017-11-28
Tested to: 4.7.39

89 Meks Easy Photo Feed Widget Falling behind Instagram retired its Basic Display API in December 2024, after this plugin’s last update in 2023.

Installs: 10k+
Last update: 2023-09-11
Tested to: 6.3.14

90 Easy Twitter Feed Widget Falling behind It was last updated in 2017, long before X changed how outside sites reach its data.

Installs: 10k+
Last update: 2017-12-20
Tested to: 4.9.35

91 WooCommerce Colors Falling behind It was last updated in 2020, and WooCommerce has changed its styling a great deal since then. Its latest reviews are also low.

Installs: 10k+
Last update: 2020-08-27
Tested to: 5.5.24

92 Shortcake Falling behind It gave shortcodes a visual editor before blocks arrived, and it was last updated in 2019.

Installs: 10k+
Last update: 2019-01-16
Tested to: 5.0.31

Back to the filters

Watch

8 plugins

100,000+ installs and no update for 1–2 years.

93 Regenerate Thumbnails Quiet The most-installed plugin here, with one listed contributor and no update for 14 months.

Installs: 1M+
Last update: 2025-08-20
Tested to: 6.8.12

94 Intuitive Custom Post Order Quiet No update for 13 months, with one listed contributor. Past advisories show why continued maintenance matters here.

Installs: 400k+
Last update: 2025-09-16
Tested to: 6.8.12

95 AMP Quiet No update for 18 months, and tested up to WordPress 6.8. It has a wide contributor list, so a return is possible.

Installs: 300k+
Last update: 2025-04-10
Tested to: 6.8.12

96 Child Theme Configurator Quiet No update for 16 months, with one listed contributor. Most sites use it once, so the risk depends on whether it stays installed.

Installs: 300k+
Last update: 2025-06-10
Tested to: 6.8.12

97 YARPP Quiet Almost two years without an update, and a long history of fixed advisories. It moves to Plan a move if it stays quiet past November 2026.

Installs: 100k+
Last update: 2024-11-11
Tested to: 6.7.11

98 Menu Image Quiet No update for 15 months, and it is tested only up to WordPress 6.7. Past advisories show why continued maintenance matters here.

Installs: 100k+
Last update: 2025-07-20
Tested to: 6.7.11

99 Edit Author Slug Quiet No update for 17 months, with one listed contributor.

Installs: 100k+
Last update: 2025-05-27
Tested to: 6.8.12

100 Simple Custom CSS Quiet No update for 19 months, with one listed contributor. WordPress also has its own place for custom CSS.

Installs: 100k+
Last update: 2025-03-11
Tested to: 6.7.11

Back to the filters

What we left out

Reviewed and left out (5)

Health Check & Troubleshooting ↗ 200k+ A WordPress project tool used for troubleshooting.
Hello Dolly ↗ 600k+ A small WordPress project plugin. Age says little here.
Blogger Importer ↗ 50k+ A WordPress project importer, used once.
Categories to Tags Converter ↗ 50k+ A WordPress project importer, used once.
Easy SSL Plugin for SAKURA Rental Server ↗ 50k+ Specific to one hosting company.

Smaller plugins with a minor job (66)

10,000–50,000 installs, no update for two years, and no open advisory when we checked. Which jobs count as minor is our judgement. If you think one belongs on the radar, tell us.

AccessibleWP – Accessibility Toolbar ↗ 10k+ · 2024-10-03
Accordion Blocks ↗ 10k+ · 2022-02-07
ACF Theme Code for Advanced Custom Fields ↗ 10k+ · 2023-11-28
Add Category to Pages ↗ 20k+ · 2019-10-19
Adjust Admin Categories ↗ 10k+ · 2022-06-27
Adobe Fonts (formerly Typekit) for WordPress ↗ 10k+ · 2024-07-17
Advanced TinyMCE Configuration ↗ 10k+ · 2023-04-10
Bootstrap for Contact Form 7 ↗ 10k+ · 2018-05-24
Bulk Page Creator ↗ 10k+ · 2022-05-07
Bulk Post Update Date ↗ 10k+ · 2024-08-02
Central Color Palette ↗ 10k+ · 2023-08-16
Change WordPress Login Logo ↗ 20k+ · 2024-07-31
Create And Assign Categories For Pages ↗ 10k+ · 2024-01-19
Custom Icons for Elementor ↗ 10k+ · 2024-10-28
Cyclone Demo Importer ↗ 10k+ · 2024-06-18
Dash Notifier ↗ 10k+ · 2021-03-26
Disable Feeds ↗ 20k+ · 2018-03-30
Disable Theme and Plugin Auto-Update Emails ↗ 10k+ · 2023-10-24
Display PHP Version ↗ 30k+ · 2023-05-16
Exclude Pages ↗ 20k+ · 2017-11-28
External Thumbnail ↗ 20k+ · 2016-06-17
Genesis Columns Advanced ↗ 10k+ · 2024-06-23
Granular Controls For Elementor ↗ 10k+ · 2018-03-29
Hide Admin Notices ↗ 20k+ · 2024-02-18
Hide Featured Image ↗ 10k+ · 2018-05-28
JetSticky For Elementor ↗ 20k+ · 2023-08-24
jQuery Pin It Button for Images ↗ 10k+ · 2020-10-01
Lightweight Grid Columns ↗ 10k+ · 2019-03-14
Lightweight Social Icons ↗ 20k+ · 2020-03-18
Link Manager ↗ 20k+ · 2017-11-28
Login Logo ↗ 40k+ · 2024-09-11
Material Design Icons for Page Builders ↗ 20k+ · 2024-03-20
Meks Easy Ads Widget ↗ 10k+ · 2024-07-25
Meks Easy Social Share ↗ 10k+ · 2024-07-29
Meks Simple Flickr Widget ↗ 10k+ · 2024-07-29
Meks Smart Author Widget ↗ 10k+ · 2024-07-23
Meks Smart Social Widget ↗ 10k+ · 2024-07-29
Meks ThemeForest Smart Widget ↗ 10k+ · 2024-07-23
OT Flatsome Vertical Menu ↗ 10k+ · 2020-06-17
Parent Category Toggler ↗ 10k+ · 2017-11-28
Popup Trigger URL for Elementor Pro ↗ 10k+ · 2020-06-16
Posts in Page ↗ 10k+ · 2019-05-13
Public Post Preview Configurator ↗ 10k+ · 2021-09-23
PuSHPress ↗ 20k+ · 2022-03-04
Related Posts Flatsome ↗ 10k+ · 2022-08-22
Remove Yoast SEO Comments ↗ 10k+ · 2018-09-25
RSS Importer ↗ 20k+ · 2024-10-17
Scroll Back To Top ↗ 10k+ · 2017-11-28
Seed Fonts ↗ 20k+ · 2024-08-06
Shortcodes for Divi ↗ 10k+ · 2024-08-13
Show-Hide / Collapse-Expand ↗ 10k+ · 2023-03-19
Show/Hide Content at Set Time ↗ 10k+ · 2019-10-01
Simple Full Screen Background Image ↗ 10k+ · 2023-03-29
Simple Map ↗ 10k+ · 2018-03-11
Simple Taxonomy Ordering ↗ 10k+ · 2023-03-22
Social Icons ↗ 10k+ · 2021-02-08
Tag Pages ↗ 10k+ · 2022-06-24
TinyMCE Clear Float ↗ 10k+ · 2018-08-01
TS Webfonts for さくらのレンタルサーバ ↗ 30k+ · 2024-02-14
Uber Login Logo ↗ 10k+ · 2017-11-28
Ultimate Posts Widget ↗ 10k+ · 2024-07-17
Video User Manuals ↗ 10k+ · 2019-06-02
Visual Term Description Editor ↗ 10k+ · 2024-08-17
WP Author, Date and Meta Remover ↗ 10k+ · 2021-01-25
WP Font Awesome ↗ 10k+ · 2024-07-09
wp-jalali ↗ 10k+ · 2017-11-28

How we place plugins

Replace now	10,000+ installs, no update for 2+ years and a second warning sign.
Plan a move	No update for 2+ years, with 50,000+ installs or a job the site depends on. Or a public advisory with no fix listed.
Watch	100,000+ installs and no update for 1–2 years.
Recovered	Updated again after being listed. Starts with Edition 2.

A second warning sign is a sensitive job, such as logins or payments, a public advisory with no fix listed, or a plugin or service that has been shut down.

Quiet: No update for over a year.
Falling behind: WordPress or a service it relies on has moved on.

Method

We start from a full snapshot of the plugin directory. Plugins with 50,000+ installs are reviewed after two years without an update, and plugins with 100,000+ installs after one year. Plugins with 10,000–50,000 installs are reviewed after two years without an update, and listed if a public advisory has no fix listed or a site depends on their job. A person reviews every entry. Larger plugins we left out are listed below with the reason. Smaller plugins with a minor job and no open advisory are not on the radar, and are listed below too.

Sources and limits

Plugin figures and reviews come from WordPress.org. Security records come from wpvulnerability.net. We do not contact plugin owners before publishing, and recommended alternatives have not been tested. We checked 178 possible alternatives. 169 passed our maintenance check, and 152 are recommended, along with 49 options that need no extra plugin. A quiet record is not proof of safety.

No one can pay to appear on the radar or to change a placement. How we stay independent

Something wrong, or updated since we checked? Suggest a correction

Edition 1

How plugins get on the radar

What stood out

All 100 plugins

Replace now

Plan a move

Watch

What we left out

How we place plugins

Method

Sources and limits

StaleWP Newsletter