Skip to content
PluginCanary

Event Post

by Bastien Ho · 1,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 8 Oct 2026, 19 releases in 24 months, no unpatched vulnerabilities.

81/ 100 Canary Score
Sub-scores for Event Post
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Quick answers

Is Event Post still maintained?
Yes. Last release 8 Oct 2026, 19 releases in the last 24 months. 8 Oct 2026 · wordpress.org
Who owns Event Post, and has it changed hands?
No change recorded. Main committer bastho since Mar 2013. 3 Nov 2026 · SVN log
Was Event Post removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Event Post safe?
14 known vulnerabilities, all fixed (latest in 6.1.2). Not on the exploited list. 12 Oct 2026 · Wordfence Intelligence
Is the latest Event Post update safe to install?
No ownership change before 6.1.2. No one-star spike after it. 8 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
bastho31 Mar 2013 to 2 Nov 2026, 785 commits
leroysabrina18 Mar 2022 to 18 Mar 2022, 9 commits
enzomangiante20 Dec 2022 to 27 Oct 2026, 22 commits
aureliefoucher23 Apr 2024 to 20 Jul 2026, 14 commits
agencenous14 May 2024 to 14 May 2024, 1 commits

5 committers recorded. No ownership change since 2013.

Maintenance

Last release
27 days ago
Releases, 24 months
19
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Event Post
Q1 20246
Q2 20242
Q3 20241
Q4 20242
Q1 20252
Q2 20255
Q3 20251
Q4 20250
Q1 20261
Q2 20262
Q3 20265
Q4 20261

Last release 8 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.3.

Rating distribution
5 star22
4 star7
3 star2
2 star4
1 star0

Security record

10 vulnerabilities in 24 months (14 on record), all patched (latest fixed in 6.1.2).

Show 14 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
12 Oct 2026Event Post <= 6.1.1 - Missing Authorization4.3<= 6.1.16.1.2Patched before disclosure
12 Oct 2026Event Post <= 6.1.1 - Authenticated (Contributor+) Insecure Direct Object Reference4.3<= 6.1.16.1.2Patched before disclosure
22 Jul 2026Event Post <= 6.1.0 - Missing Authorization5.3<= 6.1.06.1.122
16 Oct 2025Event post <= 5.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 5.10.35.10.4Patched before disclosure
5 Jun 2025Event post <= 5.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 5.10.15.10.2Patched before disclosure
22 Apr 2025Event post <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 5.9.115.10.0Patched before disclosure
25 Mar 2025Event post <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting5.4<= 5.9.95.9.10Patched before disclosure
11 Mar 2025Event post <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 5.9.85.9.9Patched before disclosure
24 Jan 2025Event post <= 5.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 5.9.75.9.8Patched before disclosure
5 Nov 2024Event Post <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via events_cal Shortcode6.4<= 5.9.65.9.7Patched before disclosure
11 Jul 2024Event post <= 5.9.10 - Cross-Site Request Forgery4.3<= 5.9.10Not affectedn/a
11 Jul 2024Event post <= 5.9.5 - Unauthenticated Local File Inclusion9.8<= 5.9.55.9.619
23 May 2024Event post <= 5.9.4 - Missing Authorization4.3<= 5.9.45.9.5Patched before disclosure
29 Nov 2023Event post <= 5.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode6.4<= 5.9.05.9.1105

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Event Post
4 May 202670
11 May 2026125
18 May 2026147
25 May 2026128
1 Jun 202676
8 Jun 2026693
15 Jun 2026166
22 Jun 2026172
29 Jun 2026657
6 Jul 2026782
13 Jul 2026152
20 Jul 2026704
27 Jul 2026203
3 Aug 2026201
10 Aug 2026730
17 Aug 2026229
24 Aug 2026170
31 Aug 2026139
7 Sep 2026145
14 Sep 2026162
21 Sep 2026172
28 Sep 2026150
5 Oct 2026800
12 Oct 2026342
19 Oct 2026296
26 Oct 2026296
2 Nov 202656

Weekly downloads over the last 4 weeks are 16% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Events Shortcodes For The EventsScore 92 · 10,000+Events Widgets For Elementor And TheScore 91 · 10,000+The Events Calendar Shortcode & BlockScore 91 · 10,000+Sugar CalendarScore 91 · 10,000+Timetable and Event Schedule byScore 89 · 30,000+

Facts

Version6.1.2
AuthorBastien Ho
Added31 Mar 2013
Last updated8 Oct 2026
Active installs1,000+
Requires WordPress6.3
Tested up to7.1.4
Requires PHPnot stated
CategoryE-commerce & Shopping
Tagsmap, events, booking, calendar, geolocation

Other plugins by this author: Accounting for WooCommerce, Contact Form 7 Tiny MCE, SpeakUp! Email Petitions Importer, Custom GlotPress Source, WP SlideYourNet, WP Scheduled Read-Only, YAST : Yet Another Support Tool, MultiSite Widget Link, Contact Form 7 to Post, Logos des partis politiques francais, Badge for GlotPress

Questions

Is Event Post still maintained?

Yes. Last release 8 Oct 2026, 19 releases in the last 24 months.

Who owns Event Post, and has it changed hands?

No change recorded. Main committer bastho since Mar 2013.

Was Event Post removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Event Post safe?

14 known vulnerabilities, all fixed (latest in 6.1.2). Not on the exploited list.

Is the latest Event Post update safe to install?

No ownership change before 6.1.2. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue