Here's an overview of the plugins currently in use on our WordPress site, as of 8/31/26
| name | risk score | evidence | Anca Recommendation | slug_or_owner | status | type | wporg_last_updated | section | version_or_bytes | wporg_tested_to | wporg_active_installs | closed |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| WordPress Importer | 2 | Tested only to an earlier WordPress major version. | upgrade. | wordpress-importer | inactive | standard | 2026-08-27 11:40am GMT | plugin | 0.9.5 | 6.8.8 | 2000000 | no |
| Jetpack | 1 | No abandonment indicators were found. | upgrade | jetpack | active | standard | 2026-08-20 5:58pm GMT | plugin | 16.1.1 | 7.0.4 | 3000000 | no |
| All-in-One Event Calendar by Time.ly | WordPress.org data unavailable. | This plugin is no longer supported on wordpress.org There are some events already created. | all-in-one-event-calendar | active | standard | plugin | 3.0.0 | 0 | no | |||
| CiviCRM | 5 | WordPress.org data unavailable. | There are about 500 contacts here. Do we need this? We should upgrade to a new version, as the current one is a security risk. | civicrm | active | standard | plugin | 5.1.2 | 0 | no | ||
| Email Return-Path Header Fix | WordPress.org data unavailable. | review in detail | email-return-path-fix | active | standard | plugin | 0.1 | 0 | no | |||
| Ninja Forms | 1 | No abandonment indicators were found. | remove. Not used. | ninja-forms | inactive | standard | 2026-08-31 2:05pm GMT | plugin | 3.15.0 | 7.0.4 | 600000 | no |
| Ninja Forms Legacy | WordPress.org data unavailable. | remove. Not used | ninja-forms-legacy | inactive | standard | plugin | 3.9.99 | 0 | no | |||
| Gravity Forms (nl) | WordPress.org data unavailable. | remove. Does not look like a legitimate version of gravity forms | gravityforms-nl | active | standard | plugin | 2.9.3 | 0 | no | |||
| Advanced Post Block | 1 | No abandonment indicators were found. | remove, does not work. | advanced-post-block | active | standard | 2026-08-30 2:58am GMT | plugin | 2.4.0 | 7.1 | 10000 | no |
| Gravity Forms + Stripe | 5 | Last updated 5.8 years ago. Tested only to an earlier WordPress major version. Fewer than 1,000 active installs were reported. | Remove, does not look legit. | gravity-forms-stripe | inactive | standard | 2020-11-19 7:01am GMT | plugin | 1.9.2.14 | 5.5.20 | 600 | no |
| Accept Stripe Payments | 1 | No abandonment indicators were found. | remove | stripe-payments | inactive | standard | 2026-08-21 3:48am GMT | plugin | 2.0.96 | 7.1 | 20000 | no |
| Advanced Import | 1 | No abandonment indicators were found. | remove | advanced-import | inactive | standard | 2026-06-09 6:28pm GMT | plugin | 1.4.5 | 7.0.4 | 80000 | no |
| Flattr | WordPress.org data unavailable. | remove | flattr | inactive | standard | plugin | 1.2.2 | 0 | no | |||
| Hello Dolly | 2 | Tested only to an earlier WordPress major version. | remove | hello-dolly | inactive | standard | 2025-10-24 4:13am GMT | plugin | 1.7.2 | 6.9.7 | 600000 | no |
| Hyper Cache | 2 | Tested only to an earlier WordPress major version. | remove | hyper-cache | active | standard | 2026-02-03 9:12am GMT | plugin | 3.4.4 | 6.9.7 | 8000 | no |
| Inactive User Deleter | 5 | Last updated 2.2 years ago. Tested only to an earlier WordPress major version. Fewer than 1,000 active installs were reported. | remove | inactive-user-deleter | active | standard | 2024-06-15 9:31am GMT | plugin | 1.65 | 6.5.10 | 800 | no |
| Memberful - Membership Plugin | 2 | Tested only to an earlier WordPress major version. | remove | memberful-wp | inactive | standard | 2026-08-07 7:41am GMT | plugin | 1.76.1 | 6.9.7 | 1000 | no |
| Mozilla Persona | WordPress.org data unavailable. | remove | browserid | inactive | standard | plugin | 0.50 | 0 | no | |||
| Responsive WordPress Slider - Soliloquy Lite | 1 | No abandonment indicators were found. | remove | soliloquy-lite | inactive | standard | 2026-08-18 8:34pm GMT | plugin | 2.8.1 | 7.1 | 30000 | no |
| The Day We Fight Back | 5 | Last updated 12.6 years ago. Tested only to an earlier WordPress major version. Fewer than 1,000 active installs were reported. | remove | tdwfb | inactive | standard | 2014-02-10 8:26pm GMT | plugin | 1.1 | 3.7.41 | 30 | no |
| The Events Calendar | 1 | No abandonment indicators were found. | remove | the-events-calendar | inactive | standard | 2026-08-26 10:54pm GMT | plugin | 6.15.13.1 | 7.1 | 600000 | no |
| WePay Wordpress Plugin | 5 | Last updated 13.6 years ago. Tested only to an earlier WordPress major version. Fewer than 1,000 active installs were reported. | remove | wepay-wordpress-plugin | inactive | standard | 2013-01-31 1:00am GMT | plugin | 1.5 | 3.4.2 | 10 | no |
| WP Full Pay | 1 | No abandonment indicators were found. | remove | wp-full-stripe-free | inactive | standard | 2026-08-20 7:10pm GMT | plugin | 8.3.4 | 7.1 | 9000 | no |
| WP Stripe | 5 | Last updated 12.4 years ago. Tested only to an earlier WordPress major version. Fewer than 1,000 active installs were reported. | remove | wp-stripe | inactive | standard | 2014-04-23 9:52am GMT | plugin | 1.5 | 3.9.40 | 100 | no |
| WP Stripe Email Receipts | 5 | Last updated 13.2 years ago. Tested only to an earlier WordPress major version. Fewer than 1,000 active installs were reported. | remove | wp-stripe-email-receipts | inactive | standard | 2013-06-24 12:51pm GMT | plugin | 1.0 | 3.5.2 | 10 | no |
| WPForms Lite | 1 | No abandonment indicators were found. | keep. This is the forms plugin we are currently using. | wpforms-lite | active | standard | 2026-08-27 10:37am GMT | plugin | 2.0.0.5 | 7.0.4 | 5000000 | no |
| Events Manager | 1 | No abandonment indicators were found. | Keep. Needs update | events-manager | active | standard | 2026-08-27 2:34pm GMT | plugin | 7.4.2 | 7.0.4 | 60000 | no |
| Events Manager ESS | WordPress.org data unavailable. | Keep, needs update | events-manager-ess | active | standard | plugin | 1.4 | 0 | no | |||
| advanced-cache.php | Directory scoring does not apply to this plugin type. | keep, but make sure we have the latest version | advanced-cache | active | drop-in | plugin | 0 | no | ||||
| Akismet Anti-spam: Spam Protection | 1 | No abandonment indicators were found. | keep | akismet | active | standard | 2026-08-18 11:42pm GMT | plugin | 5.7.1 | 7.1 | 5000000 | no |
| Disable XML-RPC | 1 | No abandonment indicators were found. | keep | disable-xml-rpc | active | standard | 2026-05-27 11:12pm GMT | plugin | 1.0.1 | 7.0.4 | 200000 | no |
| Donations via PayPal | 1 | No abandonment indicators were found. | keep | paypal-donations | active | standard | 2026-08-17 6:15am GMT | plugin | 1.9.11 | 7.1 | 20000 | no |
| iframe | 1 | No abandonment indicators were found. | keep | iframe | active | standard | 2026-05-17 2:17am GMT | plugin | 6.0 | 7.0.4 | 60000 | no |
| ImageMagick Engine | 1 | No abandonment indicators were found. | keep | imagemagick-engine | active | standard | 2026-08-19 6:35am GMT | plugin | 1.8.0 | 7.1 | 60000 | no |
| Improved User Experience | WordPress.org data unavailable. | keep | improved-user-experience | active | standard | plugin | 1.1.2 | 0 | no | |||
| OSM | 1 | No abandonment indicators were found. | keep | osm | active | standard | 2026-06-04 5:07am GMT | plugin | 6.2.6 | 7.0.4 | 10000 | no |
| WP Last Login | 2 | Tested only to an earlier WordPress major version. | keep | wp-last-login | active | standard | 2026-05-28 6:18pm GMT | plugin | 7 | 6.9.7 | 10000 | no |
| bSlider – Build Sliders That Bring Your Content to Life | 1 | No abandonment indicators were found. | evaluate if in use. remove if not. Needs update | b-slider | active | standard | 2026-08-31 2:36pm GMT | plugin | 2.0.19 | 7.1 | 6000 | no |
| Carousel Slider Block | 1 | No abandonment indicators were found. | evaluate if in use. remove if not. Needs update | carousel-block | active | standard | 2026-07-02 2:37pm GMT | plugin | 2.1.5 | 7.0.4 | 50000 | no |
| Content Slider Block | 1 | No abandonment indicators were found. | evaluate if in use. remove if not. | content-slider-block | active | standard | 2026-08-30 2:59am GMT | plugin | 3.2.1 | 7.1 | 3000 | no |
| Envira Gallery for WordPress - Image Photo Gallery, Video Gallery, Slideshows & More | 1 | No abandonment indicators were found. | delete | envira-gallery-lite | inactive | standard | 2026-08-18 7:48pm GMT | plugin | 1.12.3 | 7.1 | 100000 | no |
| Markdown Comment Block | 5 | Last updated 2.1 years ago. Tested only to an earlier WordPress major version. Fewer than 1,000 active installs were reported. | check if used. Remove if not | markdown-comment-block | active | standard | 2024-07-14 2:37am GMT | plugin | 1.0.0 | 6.6.7 | 300 | no |
| Swipe Slider | 1 | No abandonment indicators were found. | check if used. Remove if not | swipe-slider | active | standard | 2026-08-21 5:13pm GMT | plugin | 0.23 | 7.0.4 | 3000 | no |
| TemplateGalaxy | WordPress.org data unavailable. | check if used. Remove if not | templategalaxy | active | standard | plugin | 1.0.8 | 0 | no | |||
| WP FullCalendar | 1 | No abandonment indicators were found. | check if used. Remove if not | wp-fullcalendar | active | standard | 2026-05-23 5:53pm GMT | plugin | 1.6 | 7.0.4 | 8000 | no |
| WP Lightbox 2 | 2 | Tested only to an earlier WordPress major version. | check if used. Remove if not | wp-lightbox-2 | active | standard | 2026-01-31 5:52pm GMT | plugin | 3.0.7 | 6.9.7 | 20000 | no |
- Proposed process to move WordPress site
1. Make a backup of the current install 2. Update all plugins that need it, delete the ones we don't need, along with their data 3. Make import package of existing site 4. Import the site into the new WordPress install. All that is needed for this is the basic install, the import will add all the other stuff that's needed.