Vexalyn Deadwood – Abandoned & Closed Software Detector
by Kantari Samy 0 (0 reviews)

Vexalyn Deadwood – Abandoned & Closed Software Detector

Finds installed plugins and themes that are closed, removed, abandoned or untested on WordPress.org, and alerts administrators.

Vexalyn Deadwood ranks #66,675 among WordPress.org plugins with 0+ active installations, is #3,858 of 5,058 in the Security category, and was last updated Oct 29, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1.4
v1.0.0 Current Version v1.0.0
Updated 3 days ago Last Update on 29 Oct, 2026
Refreshed 2 days ago Last Refreshed on
#3,858 of 5,058 in Security Actively maintained
View on WordPress.org
Rank
#66,675
— No change
Active Installs
0+
— No change
KW Avg Position
N/A
— No change
Downloads
30
+44 today
Support Resolved
0%
— No change
Rating
0%
Review 0 out of 5
0 (0 reviews)

Next Milestone 10

Total Progress 10%
0+ 10+
39,107
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

  • Exact install estimates within tiers
  • Track install growth over time
  • Milestone progress predictions
Upgrade to Pro
Need 9 more installs to reach 10+

Rank Changes

63,341 65,008 66,675 68,342 70,009 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026
63,341 65,008 66,675 68,342 70,009 17-10-2026 18-10-2026 19-10-2026 20-10-2026 21-10-2026 22-10-2026 23-10-2026 24-10-2026 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026
Current #66,675
Change
Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Active Installs 0,000,000+
Growth +0.0%
Peak 0,000,000

Downloads Growth

0 10 20 30 40 50 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026
0 10 20 30 40 50 17-10-2026 18-10-2026 19-10-2026 20-10-2026 21-10-2026 22-10-2026 23-10-2026 24-10-2026 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026
Downloads
Growth
Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

0.0
0 reviews
Overall 0%
5
0 (0%)
4
0 (0%)
3
0 (0%)
2
0 (0%)
1
0 (0%)

Frequently Asked Questions

Common questions about Vexalyn Deadwood – Abandoned & Closed Software Detector

No. It only reports. What to do with a closed or abandoned plugin is your decision.
The plugin or theme is not listed on WordPress.org, which is normal for premium and custom ones. Deadwood cannot check them, so it does not report them as a problem.
Its folder has the same name as a plugin hosted on WordPress.org, so the directory answers for that other plugin. WordPress has the same limitation for updates. Use "Ignore" on that line, or add an Update URI header to your plugin, which also stops WordPress from offering it the wrong updates.
WordPress.org does not publish a "Tested up to" version or a closed state for themes. A theme taken out of the directory is reported as "Removed", provided Deadwood saw it there in an earlier scan.
No. It contacts no server until an administrator allows it from the Deadwood screen or the settings, and it stops as soon as "Automatic checks" is unticked.
Nothing changes. Each item keeps its last known status, marked as not refreshed, and no notification is sent.
All administrators by default. You can select specific administrators and add other addresses in the settings. On a multisite network, administrators are the super admins.
When a secret is saved, each request carries an X-Vexalyn-Deadwood-Signature header: the HMAC SHA-256 of the raw request body, in hexadecimal. Compute the same value with your secret and compare. The docs/hooks.md file shipped with the plugin has an example and describes the payload. My webhook URL is on my internal network and is refused. WordPress blocks requests to private and local addresses, and to ports other than 80, 443 and 8080. Allow your host with the http_request_host_is_external filter, and a custom port with http_allowed_safe_ports. docs/hooks.md has an example.
Yes. wp vexalyn-deadwood scan --yes --fail-on=abandoned exits with code 1 when a plugin is abandoned, removed or closed. wp vexalyn-deadwood report does the same on the last report, without scanning again. Both support --format=json and --format=csv.
No. They are counted and mentioned in the report as not checked.

Sign In / Register

You need to sign in or register to use this feature.