ForumWP
Watch: tested up to WordPress 6.9.11, 2 major versions behind 7.1.4.
| Ownership | 100 |
|---|---|
| Maintenance | 50 |
| Security | 70 |
| Support | 70 |
| Reputation | 70 |
Quick answers
- Is ForumWP still maintained?
- Yes. Last release 1 Apr 2026, 10 releases in the last 24 months. 1 Apr 2026 · wordpress.org
- Who owns ForumWP, and has it changed hands?
- No change recorded. Main committer nsinelnikov since Mar 2021. 3 Nov 2026 · SVN log
- Was ForumWP removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is ForumWP safe?
- 6 known vulnerabilities, all fixed (latest in 2.1.7). Not on the exploited list. 5 Jan 2026 · Wordfence Intelligence
- Is the latest ForumWP update safe to install?
- No ownership change before 2.1.9. No one-star spike after it. 1 Apr 2026 · Release history
Active signals
Facts we detected, with links to the source.
- WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 16 Feb 2021 to 16 Feb 2021, 1 commits |
|---|---|
| nsinelnikov | 2 Mar 2021 to 1 Apr 2026, 20 commits |
2 committers recorded. No ownership change since 2021.
Maintenance
- Last release
- 7 months ago
- Releases, 24 months
- 10
- Tested up to
- 6.9 vs 7.1
- Requires PHP
- 7.0 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 5 |
| Q1 2025 | 0 |
| Q2 2025 | 1 |
| Q3 2025 | 0 |
| Q4 2025 | 3 |
| Q1 2026 | 1 |
| Q2 2026 | 1 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 1 Apr 2026. Tested up to 6.9, 2 major versions behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 3.6.
| 5 star | 7 |
|---|---|
| 4 star | 1 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 4 |
Security record
5 vulnerabilities in 24 months (6 on record), all patched (latest fixed in 2.1.7).
Show 6 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 5 Jan 2026 | ForumWP – Forum & Discussion Board <= 2.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display Name | 6.4 | <= 2.1.6 | 2.1.7 | n/a |
| 21 Nov 2025 | ForumWP <= 2.1.4 - Missing Authorization | 4.3 | <= 2.1.4 | 2.1.5 | n/a |
| 11 Dec 2024 | ForumWP <= 2.1.0 - Unauthenticated PHP Object Injection | 9.8 | <= 2.1.0 | 2.1.1 | n/a |
| 5 Dec 2024 | ForumWP – Forum & Discussion Board <= 2.1.2 - Reflected Cross-Site Scripting | 6.1 | <= 2.1.2 | 2.1.3 | n/a |
| 5 Dec 2024 | ForumWP – Forum & Discussion Board <= 2.1.2 - Reflected Cross-Site Scripting via url Parameter | 6.1 | <= 2.1.2 | 2.1.3 | n/a |
| 6 Sep 2024 | ForumWP – Forum & Discussion Board Plugin <= 2.0.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Privilege Escalation via Account Takeover | 8.8 | <= 2.0.2 | 2.1.0 | n/a |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
800+ active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 2.1.9 |
|---|---|
| Author | Ultimate Member |
| Added | 2 Mar 2021 |
| Last updated | 1 Apr 2026 |
| Active installs | 800+ |
| Requires WordPress | 5.5 |
| Tested up to | 6.9.11 |
| Requires PHP | 7.0 |
| Category | Community & Social > Forums & Discussion Boards |
| Tags | forum, reply, topic, user profile, User Registration |
Other plugins by this author: Ultimate Member - User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin, JobBoardWP - Job Board Listings and Submissions
Questions
Is ForumWP still maintained?
Yes. Last release 1 Apr 2026, 10 releases in the last 24 months.
Who owns ForumWP, and has it changed hands?
No change recorded. Main committer nsinelnikov since Mar 2021.
Was ForumWP removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is ForumWP safe?
6 known vulnerabilities, all fixed (latest in 2.1.7). Not on the exploited list.
Is the latest ForumWP update safe to install?
No ownership change before 2.1.9. No one-star spike after it.