Who controls the plugins on your site?
Not who wrote them - who has commit access today. OwnerTrail reads the public WordPress.org directory and SVN record for every plugin you have installed, and tells you the moment that record changes.
How it works
-
Research
EssentialPlugin backdoor, replayed: 31 of 31 warned
Thirty-one plugins, one backdoor, eight months of silence. We replayed OwnerTrail's rules against what was public at the time, week by week, to see when it would have spoken up.
-
How-to
How to check who owns a WordPress plugin
Everything you need is public. It takes about three minutes per plugin, and the part most guides skip is the part that matters.
-
Incidents
The 2026 WordPress supply-chain attacks: what happened, and what each one teaches
Two separate compromises hit WordPress plugins in 2026. They are usually discussed together, and they were not the same kind of attack at all.
-
How-to
WordPress file integrity check: was your plugin code changed?
WordPress.org publishes a fingerprint for every file it ships. Comparing your files with those fingerprints is the fastest way to know whether anyone changed your code.
-
How-to
How to lock the WordPress plugin and theme editor
Anyone with an administrator login can rewrite your plugins from the browser. Here is how to close that door, and what each option costs you.
-
How-to
A WordPress plugin was closed: what it means and what to do
A closed plugin keeps running on your site exactly as before. It just never gets another fix, and WordPress does not tell you.
-
Background
Every way a WordPress plugin can change hands
You are trusting whoever controls each plugin on your site today, not whoever wrote it. Here is every way that person changes.
-
How-to
Reading a WordPress plugin’s SVN commit history
Every plugin in the directory has a public repository. Most people never open one. It answers questions the directory page cannot.
-
Practice
An agency’s plugin provenance checklist
You did not choose most of the plugins you maintain, and you will still be the one answering for them. This is a routine that fits in an hour a month.
