PLUGIN SECURITY
Is Query Monitor safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Query Monitor WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
query-monitor - Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
- CVE-2026-4267 — Query Monitor [query-monitor] < 3.20.4
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Safer / more established alternatives
- WP Crontrol — 300000+ active installs — max PHP 8.4
- Debug Bar — 20000+ active installs — max PHP 8.4
- WP Debugging — 10000+ active installs — max PHP 8.4
- Debug Log Manager – Conveniently Monitor and Inspect Errors — 10000+ active installs
- My WP Customize Admin/Frontend — 9000+ active installs
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.