Title: Creatools Maintenance Check
Author: creatools
Published: <strong>12 Oktober, 2026</strong>
Last modified: 12 Oktober, 2026

---

Search plugins

![](https://ps.w.org/creatools-maintenance-check/assets/banner-772x250.png?rev=3740376)

![](https://ps.w.org/creatools-maintenance-check/assets/icon-256x256.png?rev=3740376)

# Creatools Maintenance Check

 Troch [creatools](https://profiles.wordpress.org/creatools/)

[Download](https://downloads.wordpress.org/plugin/creatools-maintenance-check.0.3.0.zip)

 * [Details](https://fy.wordpress.org/plugins/creatools-maintenance-check/#description)
 * [Resinsjes](https://fy.wordpress.org/plugins/creatools-maintenance-check/#reviews)
 *  [Ynstallaasje](https://fy.wordpress.org/plugins/creatools-maintenance-check/#installation)
 * [Ûntwikkeling](https://fy.wordpress.org/plugins/creatools-maintenance-check/#developers)

 [Stypje](https://wordpress.org/support/plugin/creatools-maintenance-check/)

## Beskriuwing

Creatools Maintenance Check organizes research before you press an update button.
It reads existing WordPress core, theme and plugin update information and explains
what to check before deciding on maintenance.

 * Review installed versions and native update candidates separately.
 * Check declared WordPress and PHP requirements, Tested up to and available dependency
   information.
 * Optionally retrieve WordPress.org directory metadata and WPVulnerability known
   vulnerability records.
 * Read priority, hold, review and update-candidate reasons separately from information
   completeness.
 * Review human-readable vulnerability summaries and copy a maintenance report.
 * Use automatic environment information or a manual PHP assessment value.
 * Use the administration screens in English or Japanese.

This plugin does not perform updates, enable automatic updates, back up or restore
your site. Results do not guarantee safety, compatibility or a successful update.
The final maintenance decision remains yours.

Coverage includes inactive plugins and unused themes. MU plugins and drop-ins are
outside the research scope. Premium and private products may have limited information;
directory identity and update source are separate. A directory-name candidate alone
is not treated as a verified identity. Multisite research is disabled with an explanatory
message; native WordPress updates remain available.

Native metadata can inform requirement checks, but WordPress Core’s last_checked
is not proof of successful retrieval or freshness. Missing information, service 
failures and expired data are not treated as evidence of no problems. Database information
is informational. PHP 7.4 compatibility helps research on older environments and
is not a recommendation to run unsupported PHP.

### External services

Both services are OFF by default. Requests start only after you enable the relevant
service and explicitly start research. Valid caches can avoid requests. Disabling
a service stops subsequent requests; retained findings can still be shown with their
original dates. The services do not receive your manual PHP value or database information.

#### WordPress.org

Purpose: directory identity verification, declared requirements, Tested up to, publication
status, release dates and changelog references for plugins and themes.

Endpoints: https://api.wordpress.org/plugins/info/1.2/ and https://api.wordpress.
org/themes/info/1.2/

Sent: product slug (including eligible identity-verification candidates), information
action, en_US locale, requested API fields, and the fixed Creatools-Maintenance-
Check User-Agent with plugin version. Product headers and installed/target versions
are compared locally.

API documentation: https://codex.wordpress.org/WordPress.org_API
 Project license:
https://wordpress.org/about/license/ Privacy policy: https://wordpress.org/about/
privacy/

These are the provider’s published API, project license and privacy references; 
the project license is not a separate API service-use agreement.

#### WPVulnerability

Purpose: known vulnerabilities for installed and target versions, with source references
and available severity/exploitation information.

Endpoints: https://www.wpvulnerability.net/core/{version}/, https://www.wpvulnerability.
net/plugin/{slug}/ and https://www.wpvulnerability.net/theme/{slug}/

Sent: WordPress core version in a core request, or verified directory slug in a 
plugin/theme request, and the fixed Creatools-Maintenance-Check User-Agent with 
plugin version. Plugin/theme version-range matching takes place locally. No API 
key is required by this integration.

API documentation: https://docs.wpvulnerability.com/
 License / provider conditions:
https://www.wpvulnerability.com/license/ Privacy policy: https://www.wpvulnerability.
com/privacy/ Fair use / sponsorship: https://www.wpvulnerability.com/sponsorship/

For both providers, the connection IP is visible. No site content, site URL, user
data, passwords, credentials or database contents are included in these research
requests. Retrieved strings are treated as data, not executable code. There are 
no remote scripts, CDN assets or telemetry in this plugin.

## Skermôfbyldings

[⌊Dashboard showing the effective environment, maintenance priorities and separate
information coverage counts.⌉⌊Dashboard showing the effective environment, maintenance
priorities and separate information coverage counts.⌉[

Dashboard showing the effective environment, maintenance priorities and separate
information coverage counts.

[⌊Update candidates grouped by WordPress core, themes and plugins, with reasons 
and compatibility summaries.⌉⌊Update candidates grouped by WordPress core, themes
and plugins, with reasons and compatibility summaries.⌉[

Update candidates grouped by WordPress core, themes and plugins, with reasons and
compatibility summaries.

[⌊Detail drawer showing assessment, installed and target versions, declared compatibility
and directory publication status.⌉⌊Detail drawer showing assessment, installed and
target versions, declared compatibility and directory publication status.⌉[

Detail drawer showing assessment, installed and target versions, declared compatibility
and directory publication status.

[⌊Settings showing environment information, PHP assessment-mode selection and individual
external-service consent.⌉⌊Settings showing environment information, PHP assessment-
mode selection and individual external-service consent.⌉[

Settings showing environment information, PHP assessment-mode selection and individual
external-service consent.

[⌊Vulnerability summaries showing severity and CVSS coverage, installed and target
versions, source links and provenance.⌉⌊Vulnerability summaries showing severity
and CVSS coverage, installed and target versions, source links and provenance.⌉[

Vulnerability summaries showing severity and CVSS coverage, installed and target
versions, source links and provenance.

## Ynstallaasje

 1. Install the ZIP through Plugins > Add New > Upload Plugin, then activate it.
 2. Open Tools > Maintenance Check and select Settings.
 3. Review the effective PHP value. Enable each external service only after reading
    its disclosure.
 4. Use the native WordPress Updates screen if you need to refresh WordPress’s update
    information. This plugin does not initiate those update checks.
 5. Select Check information. Normal checks reuse valid research caches; the research
    option to refetch external information requests fresh data subject to rate limits.
 6. Review reasons, source dates and missing information before deciding what to update.
    Copy the report if needed.

## FAQ

### Does this plugin update WordPress, plugins, or themes?

No. It only researches and organizes information for maintenance decisions. WordPress’s
standard update mechanism remains responsible for updates and automatic-update preferences.

### Does it guarantee that an update is safe?

No. Available compatibility and vulnerability information cannot establish complete
compatibility or safety. An update candidate still needs your normal testing and
maintenance preparation.

### Why are WordPress.org and WPVulnerability disabled until I enable them?

Both external research services are opt-in. You choose each service in Settings 
after reviewing its purpose and transmitted data. Opening the page or activating
this plugin does not start its external research requests.

### What data is sent externally?

WordPress.org receives a plugin or theme slug and API action, locale and field-selection
parameters. Eligible local plugin slug candidates may be queried to verify directory
identity; local header names and publisher information are compared locally, not
transmitted. WPVulnerability receives a core version or a verified plugin or theme
slug. Plugin and theme installed/target versions are matched locally. Both services
receive a fixed plugin User-Agent containing this plugin’s version and can see the
connection IP. See External services below.

No site content, site URL, user data, email addresses, passwords, authentication
credentials or database content is sent by this plugin’s research requests. WordPress
itself and other plugins can make their own requests independently.

### What happens with premium or private plugins?

Available native target requirements can be used with their provenance retained.
Directory metadata and vulnerability coverage may be unavailable if identity cannot
be verified. An external update source does not by itself rule out a directory identity.
Check missing information with the product provider.

### Does this plugin use AI?

No. The current version does not use an AI service.

### Does manual PHP selection change my server?

No. It only changes the value used for assessment. Manual mode remains selected 
until you explicitly switch back to automatic mode.

### What happens if an external service fails?

The affected information remains incomplete, and other research items can continue.
Successful cached data is not overwritten by a request failure. Old negative results
cannot establish an update candidate; retained positive findings keep their original
retrieval dates.

### Does information checking always fetch everything again?

No. Normal research uses valid caches. Security data has a 6-hour freshness window
and directory data a 12-hour window; successful results can be retained for up to
72 hours. Refetching respects consent and service rate limits. Closing the browser
stops research; there is no scheduled background monitoring.

### What is stored, and how do I remove it?

Settings, temporary source facts, research snapshots, progress and short-lived coordination
data are stored in WordPress. Clear research cache removes tracked research caches;
deactivation also clears them while retaining settings. Uninstall removes this plugin’s
settings, tracked caches, progress and coordination data. WordPress’s own update
information is not removed.

## Resinsjes

D’r binne gjin resinsjes foar dizze plugin.

## Meiwurkers & amp; Untwikkelders

“Creatools Maintenance Check” is iepen boarne software. De folgjende minsken hawwe
bydroegen oan dizze plugin.

Meiwurkers

 *   [ creatools ](https://profiles.wordpress.org/creatools/)

[Oersette “Creatools Maintenance Check” yn jo taal.](https://translate.wordpress.org/projects/wp-plugins/creatools-maintenance-check)

### Ynteressearre yn ûntwikkeling?

[Blêdzje troch de koade](https://plugins.trac.wordpress.org/browser/creatools-maintenance-check/),
besjoch de [SVN-repository](https://plugins.svn.wordpress.org/creatools-maintenance-check/),
of abonnearje op it [ûntwikkelingslogboek](https://plugins.trac.wordpress.org/log/creatools-maintenance-check/)
troch [RSS](https://plugins.trac.wordpress.org/log/creatools-maintenance-check/?limit=100&mode=stop_on_copy&format=rss).

## Feroaringslog

#### 0.3.0

 * Initial public release.
 * Added maintenance research for WordPress core, themes, and plugins.
 * Added WordPress and PHP compatibility checks.
 * Added opt-in WordPress.org directory information.
 * Added opt-in WPVulnerability known-vulnerability checks.
 * Added human-readable maintenance reports and vulnerability summaries.

## Meta

 *  Version **0.3.0**
 *  Last updated **17 oeren yn ôl**
 *  Active installations **Minder as 10**
 *  WordPress version ** 6.0 of heger **
 *  Tested up to **7.1.3**
 *  PHP version ** 7.4 of heger **
 *  Language
 * [English (US)](https://wordpress.org/plugins/creatools-maintenance-check/)
 * Tags
 * [maintenance](https://fy.wordpress.org/plugins/tags/maintenance/)[updates](https://fy.wordpress.org/plugins/tags/updates/)
   [vulnerabilities](https://fy.wordpress.org/plugins/tags/vulnerabilities/)
 *  [Avansearre werjefte](https://fy.wordpress.org/plugins/creatools-maintenance-check/advanced/)

## Wurdearrings

Der binne noch gjin resinsjes ynstjoerd.

[Your review](https://wordpress.org/support/plugin/creatools-maintenance-check/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/creatools-maintenance-check/reviews/)

## Meiwurkers

 *   [ creatools ](https://profiles.wordpress.org/creatools/)

## Stypje

Hast wat te sizzen? Help nedich hawwe?

 [Besjoch stipefoarum](https://wordpress.org/support/plugin/creatools-maintenance-check/)