Posts By Tag
Avoid: vulnerability published 22 Oct 2025 still has no fix after 14 days.
Capped at 39 while a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 35 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 22 Oct 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.5 Nov 2025Evidence
- CriticalMNT-1No release in 61 months (last release 13 Oct 2021). Plan a replacement if the plugin is important to your site.13 Oct 2022Evidence
- WarningMNT-2Tested up to WordPress 5.8.19, 13 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| sudar | 27 Jul 2009 to 13 Oct 2021, 137 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 5 years ago
- Releases, 24 months
- 0
- Tested up to
- 5.8 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 13 Oct 2021. Tested up to 5.8, 13 major versions behind WordPress 7.1.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 22 Oct 2025 | Posts By Tag <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 3.2.1 | No fix | n/a |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 3.8 from 15 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 10 |
|---|---|
| 4 star | 0 |
| 3 star | 1 |
| 2 star | 0 |
| 1 star | 4 |
Momentum
1,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 16 |
|---|---|
| 11 May 2026 | 32 |
| 18 May 2026 | 29 |
| 25 May 2026 | 52 |
| 1 Jun 2026 | 33 |
| 8 Jun 2026 | 50 |
| 15 Jun 2026 | 30 |
| 22 Jun 2026 | 28 |
| 29 Jun 2026 | 29 |
| 6 Jul 2026 | 30 |
| 13 Jul 2026 | 36 |
| 20 Jul 2026 | 38 |
| 27 Jul 2026 | 50 |
| 3 Aug 2026 | 46 |
| 10 Aug 2026 | 44 |
| 17 Aug 2026 | 45 |
| 24 Aug 2026 | 58 |
| 31 Aug 2026 | 46 |
| 7 Sep 2026 | 67 |
| 14 Sep 2026 | 68 |
| 21 Sep 2026 | 65 |
| 28 Sep 2026 | 61 |
| 5 Oct 2026 | 81 |
| 12 Oct 2026 | 72 |
| 19 Oct 2026 | 111 |
| 26 Oct 2026 | 107 |
| 2 Nov 2026 | 18 |
Weekly downloads over the last 4 weeks are 55% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 3.2.1 |
|---|---|
| Author | Sudar Muthu |
| Added | 27 Jul 2009 |
| Last updated | 13 Oct 2021 |
| Active installs | 1,000+ |
| Requires WordPress | 4.0 |
| Tested up to | 5.8.19 |
| Requires PHP | not stated |
| Category | Content Management > Blog & Article Publishing |
| Tags | tag, cache, posts, widget, sidebar |
Other plugins by this author: Delete Pending Comments, Bulk Move, Simple Reverse Comments, Easy Retweet, WP Github Gist, Github Ribbon, WP Github Commits, WP Plugin Reviews, Geo Mark, WP Year End Stats, Twitter Avatar Reloaded, WP IRC
Questions
Is Posts By Tag still maintained?
Posts By Tag was last updated on 13 Oct 2021. Its Canary status is Avoid.
Is Posts By Tag safe?
Posts By Tag has 1 published vulnerability with no patched version. Its Canary status is Avoid.
Who owns Posts By Tag?
The wordpress.org author is Sudar Muthu. Recent committers: sudar, plugin-master. We have recorded no ownership change.
What can I use instead of Posts By Tag?
Plugins in the same category with a higher Canary Score: Recent Posts Widget With Thumbnails, WebberZone Top 10 - Popular Posts, upPrev, Manual Related Posts, Related Posts by Taxonomy.