Skip to content
PluginCanary

Postie

by Wayne Allen · 10,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: vulnerability published 27 Oct 2026, fixed in 1.9.88.

87/ 100 Canary Score
Sub-scores for Postie
Ownership100
Maintenance100
Security85
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 27 Oct 2026, fixed in 1.9.88. Update to version 1.9.88 or later.27 Oct 2026Evidence
  • InfoSEC-33 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
WayneAllen28 Aug 2012 to 23 Oct 2026, 1195 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
11 days ago
Releases, 24 months
18
Tested up to
7.0 vs 7.1
Requires PHP
7.0 supported 8.2+
Releases per quarter for Postie
Q1 20240
Q2 20241
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20254
Q4 20250
Q1 20262
Q2 20261
Q3 202610
Q4 20261

Last release 23 Oct 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Support

100% of 4 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
27 Oct 2026Postie <= 1.9.87 - Unauthenticated Stored Cross-Site Scripting via Email Body URL Autolink5.4<= 1.9.871.9.880
31 Dec 2025Postie <= 1.9.73 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.9.731.9.747
8 Sep 2025Postie <= 1.9.70 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 1.9.701.9.710
2 Jan 2020Postie <= 1.9.40 - Post Submission Spoofing & Stored Cross-Site Scripting5.3< 1.9.411.9.41n/a
2 Jan 2020Postie <= 1.9.40 - Cross-Site Scripting5.4< 1.9.411.9.41n/a
8 Aug 2012Postie < 1.4.10 - Cross-Site Scripting7.2<= 1.4.91.4.10126

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Postie
Q1 20245.0
Q1 20255.0
Q2 20255.0
Q4 20255.0
Q1 20265.0

Average rating stayed at 5.0 between Q1 2024 and Q1 2026.

Rating distribution
5 star124
4 star5
3 star2
2 star1
1 star7
Latest low reviews

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Postie
4 May 2026216
11 May 2026505
18 May 2026401
25 May 2026681
1 Jun 2026324
8 Jun 2026383
15 Jun 2026268
22 Jun 20266,144
29 Jun 20262,386
6 Jul 202614,867
13 Jul 20261,288
20 Jul 20267,975
27 Jul 20267,852
3 Aug 20261,603
10 Aug 2026710
17 Aug 2026695
24 Aug 2026768
31 Aug 2026657
7 Sep 2026585
14 Sep 2026787
21 Sep 202621,546
28 Sep 20261,588
5 Oct 20261,476
12 Oct 2026835
19 Oct 20267,212
26 Oct 20264,683
2 Nov 2026241

Weekly downloads over the last 4 weeks are 1% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version1.9.88
AuthorWayne Allen
Added12 Feb 2009
Last updated23 Oct 2026
Active installs10,000+
Requires WordPress5.6
Tested up to7.0.8
Requires PHP7.0
CategoryCommunication & Messaging > Transactional Email
Tagsemail, e-mail, post by email

Questions

Is Postie still maintained?

Postie was last updated on 23 Oct 2026. Its Canary status is Healthy.

Is Postie safe?

Postie has no open unpatched vulnerabilities on record. 3 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Postie?

The wordpress.org author is Wayne Allen. Recent committers: WayneAllen, robfelty, plugin-master. We have recorded no ownership change.

What can I use instead of Postie?

We have no healthier plugin in the same category on record yet.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue