chiprook
← Security
SecurityOctober 26, 2026, 03:40

58.4% of WordPress plugins have gone over a year without a release

A census of the WordPress plugin directory on 28 August 2026 found 70,909 listed plugins, of which 41,395 (58.4%) had no release in over a year and 50.2% in over two years. Weighted by active installs, abandoned plugins account for only 3.7–7.8%, with 67 top plugins holding 41.5–60.9% of all installs.

58.4% of WordPress plugins have gone over a year without a release
#WordPress
Read next
Security

Expivi WooCommerce plugin has unauthenticated RCE with CVSS 9.8

Security

Rank Math PRO WordPress plugin hit by supply chain attack

Security

Wordfence blocks 440,000 attacks on WordPress plugin RCE flaws

Security

CVE-2026-17609: Critical Arbitrary Directory Deletion in Super Forms WordPress Plugin