Skip to content
PluginCanary

Custom Post Type UI

by webdevstudios · 1,000,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 14 Jul 2026, 10 releases in 24 months, no unpatched vulnerabilities.

87/ 100 Canary Score
Sub-scores for Custom Post Type UI
Ownership100
Maintenance90
Security90
SupportNo data
Reputation60

How the score works

Quick answers

Is Custom Post Type UI still maintained?
Yes. Last release 14 Jul 2026, 10 releases in the last 24 months. 14 Jul 2026 · wordpress.org
Who owns Custom Post Type UI, and has it changed hands?
No change recorded. Main committer webdevstudios since Mar 2023. 4 Nov 2026 · SVN log
Was Custom Post Type UI removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Custom Post Type UI safe?
4 known vulnerabilities, all fixed (latest in 1.18.2). Not on the exploited list. 12 Dec 2025 · Wordfence Intelligence
Is the latest Custom Post Type UI update safe to install?
No ownership change before 1.19.3. No one-star spike after it. 14 Jul 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
tw211326 Apr 2013 to 16 Dec 2022, 139 commits
webdevstudios27 Mar 2023 to 14 Jul 2026, 22 commits

2 committers recorded. No ownership change since 2010.

Maintenance

Last release
4 months ago
Releases, 24 months
10
Tested up to
7.0 vs 7.1
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Custom Post Type UI
Q1 20240
Q2 20243
Q3 20240
Q4 20241
Q1 20250
Q2 20251
Q3 20251
Q4 20252
Q1 20261
Q2 20263
Q3 20261
Q4 20260

Last release 14 Jul 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 4.6.

Average rating per quarter for Custom Post Type UI
Q4 20235.0
Q1 20244.3
Q2 20245.0
Q1 20255.0
Q4 20253.0
Q1 20265.0
Q2 20263.7

Average rating fell from 5.0 to 3.7 between Q4 2023 and Q2 2026.

Rating distribution
5 star235
4 star14
3 star7
2 star4
1 star16
Latest low reviews

Security record

2 vulnerabilities in 24 months (4 on record), all patched (latest fixed in 1.18.2).

Show 4 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
12 Dec 2025Custom Post Type UI <= 1.18.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'label' Import Parameter4.4<= 1.18.11.18.2Patched before disclosure
3 Dec 2025Custom Post Type UI <= 1.18.0 - Missing Authorization to Unauthenticated (Previously Administrator+) Custom Post Type Modification4.8<= 1.18.01.18.1Patched before disclosure
28 Mar 2023Custom Post Type UI <= 1.13.4 - Cross-Site Request Forgery to Sensitive Information Exposure5.4<= 1.13.41.13.5Patched before disclosure
18 Mar 2020Custom Post Type UI <= 1.7.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting8.8< 1.7.41.7.41

Changelog mentions of security fixes: 1.19.3 (nonce).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 3 support threads resolved in the last 2 months.

Momentum

1,000,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Custom Post Type UI
4 May 202628,528
11 May 2026326,043
18 May 2026104,613
25 May 202654,161
1 Jun 202645,122
8 Jun 202635,884
15 Jun 202631,919
22 Jun 202629,804
29 Jun 202627,928
6 Jul 202626,293
13 Jul 2026337,464
20 Jul 202686,237
27 Jul 202659,760
3 Aug 202650,587
10 Aug 202635,128
17 Aug 202634,221
24 Aug 202634,944
31 Aug 202629,294
7 Sep 202627,764
14 Sep 202625,524
21 Sep 202626,327
28 Sep 202624,424
5 Oct 202623,889
12 Oct 202620,629
19 Oct 202648,191
26 Oct 202633,749
2 Nov 20264,699

Weekly downloads over the last 4 weeks are 55% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Custom Post Type PermalinksScore 100 · 200,000+Pages with category and tagScore 100 · 50,000+Custom Post Type WidgetsScore 95 · 10,000+Post Type SwitcherScore 93 · 200,000+MB Custom Post Types & Custom TaxonomiesScore 93 · 10,000+

Facts

Version1.19.3
Authorwebdevstudios
Added26 Feb 2010
Last updated14 Jul 2026
Active installs1,000,000+
Requires WordPress6.6
Tested up to7.0.8
Requires PHP7.4
CategoryContent Management > Blog & Article Publishing
Tagstypes, taxonomy, post type, content types, custom post types

Other plugins by this author: WP Search with Algolia, Automatic Featured Images from Videos, Taxonomy Switcher, Hash Link Scroll Offset, Chat Room, Reactor: Core, Mapbox For WP, WDS Site Documentation, WDS Multisite Aggregate, Easy Digital Downloads - Internal Notes for Products, Cubify WP

Questions

Is Custom Post Type UI still maintained?

Yes. Last release 14 Jul 2026, 10 releases in the last 24 months.

Who owns Custom Post Type UI, and has it changed hands?

No change recorded. Main committer webdevstudios since Mar 2023.

Was Custom Post Type UI removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Custom Post Type UI safe?

4 known vulnerabilities, all fixed (latest in 1.18.2). Not on the exploited list.

Is the latest Custom Post Type UI update safe to install?

No ownership change before 1.19.3. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue