Skip to content
PluginCanary

bbPress

by John James Jacoby · 100,000+ active installs · Checked 3 Nov 2026
Healthy2 Warnings

Healthy: vulnerability published 11 Sep 2026, fixed in 2.6.15.

86/ 100 Canary Score
Sub-scores for bbPress
Ownership100
Maintenance100
Security80
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 11 Sep 2026, fixed in 2.6.15. Update to version 2.6.15 or later.11 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 31 Aug 2026, fixed in 2.6.15. Update to version 2.6.15 or later.31 Aug 2026Evidence
  • InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
johnjamesjacoby13 Jan 2010 to 27 Oct 2026, 400 commits
Otto4228 May 2020 to 28 May 2020, 1 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
7 days ago
Releases, 24 months
9
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter for bbPress
Q1 20240
Q2 20242
Q3 20240
Q4 20240
Q1 20251
Q2 20251
Q3 20251
Q4 20250
Q1 20260
Q2 20260
Q3 20264
Q4 20262

Last release 27 Oct 2026. Tested with WordPress 7.1 (current).

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
14 Oct 2026bbPress < 2.6.19 - Unauthenticated Information Exposure5.3< 2.6.192.6.19n/a
11 Sep 2026bbPress <= 2.6.14 - Unauthenticated Information Exposure5.3<= 2.6.142.6.150
31 Aug 2026bbPress <= 2.6.14 - Missing Authorization5.3<= 2.6.142.6.154
4 Mar 2025bbPress <= 2.6.11 - Cross-Site Request Forgery to Limited Privilege Escalation6.3<= 2.6.112.6.120
28 May 2020bbPress <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting via the forums list table4.8<= 2.6.42.6.51
28 May 2020bbPress <= 2.6.4 - Unauthenticated Privilege Escalation9.8<= 2.6.42.6.51
13 Nov 2017bbPress < 2.5.13 - Unauthenticated Blind SQL Injection8.3< 2.5.132.5.130
13 Jul 2016bbPress <= 2.5.9 - Cross-Site Scripting4.7<= 2.5.92.5.101
3 May 2016bbPress < 2.5.9 - Stored Cross-Site Scripting7.2< 2.5.92.5.90

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for bbPress
Q4 20231.0
Q1 20241.0
Q2 20243.7
Q3 20242.4
Q4 20245.0
Q1 20252.0
Q2 20251.0
Q3 20253.0
Q4 20255.0
Q4 20262.0

Average rating rose from 1.0 to 2.0 between Q4 2023 and Q4 2026.

Rating distribution
5 star197
4 star40
3 star24
2 star24
1 star58
Latest low reviews

Momentum

100,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for bbPress
4 May 20261,924
11 May 20263,264
18 May 20263,217
25 May 20263,030
1 Jun 20263,235
8 Jun 20263,510
15 Jun 20262,930
22 Jun 20263,093
29 Jun 20262,548
6 Jul 20262,809
13 Jul 20263,444
20 Jul 20263,290
27 Jul 20263,633
3 Aug 20263,966
10 Aug 20263,703
17 Aug 20263,375
24 Aug 20262,965
31 Aug 202641,521
7 Sep 202612,192
14 Sep 202652,055
21 Sep 202657,627
28 Sep 202645,778
5 Oct 202618,473
12 Oct 202643,812
19 Oct 202615,971
26 Oct 202658,056
2 Nov 20262,455

Weekly downloads over the last 4 weeks are 102% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Private groupsScore 91 · 1,000+BuddyDriveScore 91 · 1,000+forumAttachments for bbPressScore 90 · 6,000+bbPress Notify (No-Spam)Score 90 · 2,000+WP DiscourseScore 90 · 1,000+

Facts

Version2.6.21
AuthorJohn James Jacoby
Added13 Jan 2010
Last updated27 Oct 2026
Active installs100,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.2
CategoryCommunity & Social > Forums & Discussion Boards
Tagsforum, forums, support, discussion

Other plugins by this author: Post Type Switcher, WP User Avatars, WP Term Order, WP Term Images, WP Media Categories, WP Term Colors, WP User Groups, WP Term Icons, WP User Profiles, WP User Activity, WP Comment Humility, WP Multi Network

Questions

Is bbPress still maintained?

bbPress was last updated on 27 Oct 2026. Its Canary status is Healthy.

Is bbPress safe?

bbPress has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns bbPress?

The wordpress.org author is John James Jacoby. Recent committers: johnjamesjacoby, Otto42, netweb, matt, plugin-master. We have recorded no ownership change.

What can I use instead of bbPress?

Plugins in the same category with a higher Canary Score: Private groups, BuddyDrive, forumAttachments for bbPress, bbPress Notify (No-Spam), WP Discourse.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue