Skip to content
PluginCanary

PublishPress Taxonomies

PublishPress Taxonomies - Tag, Category, and Taxonomy Manager - Autotagger Automatically Add Terms
by PublishPress · 40,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 3 Nov 2026, 32 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for PublishPress Taxonomies
Ownership100
Maintenance100
Security60
SupportNo data
Reputation85

How the score works

Quick answers

Is PublishPress Taxonomies still maintained?
Yes. Last release 3 Nov 2026, 32 releases in the last 24 months. 3 Nov 2026 · wordpress.org
Who owns PublishPress Taxonomies, and has it changed hands?
No change recorded. Main committer ojopaul since Nov 2021. 4 Nov 2026 · SVN log
Was PublishPress Taxonomies removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is PublishPress Taxonomies safe?
16 known vulnerabilities, all fixed (latest in 3.52.0). Not on the exploited list. 19 Aug 2026 · Wordfence Intelligence
Is the latest PublishPress Taxonomies update safe to install?
No ownership change before 4.0.1. No one-star spike after it. 3 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
momo360modena10 Oct 2007 to 9 Dec 2019, 364 commits
WebFactory10 Sep 2020 to 17 Feb 2021, 14 commits
olatechpro24 Feb 2021 to 24 May 2022, 33 commits
publishpress15 Mar 2021 to 21 Oct 2021, 47 commits
stevejburge25 Oct 2021 to 19 Aug 2026, 45 commits
ojopaul17 Nov 2021 to 16 Apr 2025, 51 commits
deji9822 Apr 2025 to 3 Nov 2026, 34 commits

7 committers recorded. No ownership change since 2007.

Maintenance

Last release
yesterday
Releases, 24 months
32
Tested up to
7.1 current
Requires PHP
8.2 supported 8.2+
Releases per quarter
Releases per quarter for PublishPress Taxonomies
Q1 20243
Q2 20242
Q3 20246
Q4 20245
Q1 20254
Q2 20254
Q3 20256
Q4 20254
Q1 20262
Q2 20262
Q3 20264
Q4 20262

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (2 reviews). Lifetime: 4.6.

Average rating per quarter for PublishPress Taxonomies
Q4 20243.0
Q1 20255.0
Q2 20255.0
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20264.4
Q3 20265.0
Q4 20265.0

Average rating rose from 3.0 to 5.0 between Q4 2024 and Q4 2026.

Rating distribution
5 star165
4 star9
3 star4
2 star4
1 star13
Latest low reviews

Security record

10 vulnerabilities in 24 months (16 on record), all patched (latest fixed in 3.52.0).

Show 16 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
19 Aug 2026Tag, Category, and Taxonomy Manager - Autotagger Automatically Add Terms <= 3.51.0 - Authenticated (Editor+) PHP Object Injection6.6<= 3.51.03.52.02
24 Jul 2026TaxoPress <= 3.50.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Private Post Disclosure4.3<= 3.50.03.51.0Patched before disclosure
22 Mar 2026TaxoPress <= 3.44.0 - Authenticated (Editor+) SQL Injection4.9<= 3.44.03.45.026
5 Jan 2026TaxoPress <= 3.41.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Tag Modification4.3<= 3.41.03.42.0Patched before disclosure
5 Dec 2025Tag, Category, and Taxonomy Manager - AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection via ORDER BY Clause6.5<= 3.40.13.41.0Patched before disclosure
3 Dec 2025Tag, Category, and Taxonomy Manager - AI Autotagger with OpenAI <= 3.40.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Taxonomy Term Manipulation4.3<= 3.40.13.41.0Patched before disclosure
3 Dec 2025Tag, Category, and Taxonomy Manager - AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection6.5<= 3.40.13.41.0Patched before disclosure
7 Nov 2025Tag, Category, and Taxonomy Manager - AI Autotagger with OpenAI <= 3.40.0 - Authenticated (Editor+) SQL Injection4.9<= 3.40.03.40.1Patched before disclosure
14 Aug 2025Tag, Category, and Taxonomy Manager - AI Autotagger with OpenAI <= 3.37.2 - Authenticated (Subscriber+) Information Exposure4.3<= 3.37.23.37.3Patched before disclosure
7 Apr 2025WordPress Tag, Category, and Taxonomy Manager - AI Autotagger <= 3.32.0 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 3.32.03.33.0Patched before disclosure
3 Apr 2024WordPress Tag and Category Manager - AI Autotagger <= 3.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 3.12.03.20.0Patched before disclosure
18 Apr 2023TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting5.5<= 3.6.43.6.5Patched before disclosure
18 Apr 2023TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting5.5<= 3.6.43.6.5Patched before disclosure
18 Apr 2023TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting5.5<= 3.6.43.6.5Patched before disclosure
7 Feb 2022TaxoPress <= 3.4.4 - Reflected Cross-Site Scripting6.1<= 3.4.43.4.51
30 Jun 2021TaxoPress <= 3.0.7.1 - Stored Cross-Site Scripting5.5<= 3.0.7.13.0.7.2Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

40,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for PublishPress Taxonomies
4 May 20262,774
11 May 202627,292
18 May 202610,759
25 May 20267,558
1 Jun 20267,135
8 Jun 20267,118
15 Jun 20266,163
22 Jun 20266,028
29 Jun 20266,244
6 Jul 20266,368
13 Jul 20266,332
20 Jul 202626,912
27 Jul 20269,752
3 Aug 20269,237
10 Aug 20266,850
17 Aug 202629,277
24 Aug 202610,503
31 Aug 202628,601
7 Sep 20268,175
14 Sep 20268,774
21 Sep 202629,465
28 Sep 202610,146
5 Oct 202628,317
12 Oct 20268,125
19 Oct 202617,276
26 Oct 202610,108
2 Nov 20261,284

Weekly downloads over the last 4 weeks are 26% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Custom Post Type PermalinksScore 100 · 200,000+Pages with category and tagScore 100 · 50,000+Custom Post Type WidgetsScore 95 · 10,000+Post Type SwitcherScore 93 · 200,000+MB Custom Post Types & Custom TaxonomiesScore 93 · 10,000+

Facts

Version4.0.1
AuthorPublishPress
Added10 Oct 2007
Last updated3 Nov 2026
Active installs40,000+
Requires WordPress6.7
Tested up to7.1.4
Requires PHP8.2
CategorySite Administration & Utilities > Site Migration & Cloning
Tagstag, category, taxonomy, tag cloud, categories

Other plugins by this author: Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories, PublishPress Capabilities: User Role Access Control, Admin Area Permissions, Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors, PublishPress Blocks - Block Controls, Block Visibility, Block Permissions, PublishPress Permissions: Access Control, Content Permissions, User Access, PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes, PublishPress Planner - Editorial Calendar, Marketing Content, Kanban Board, PublishPress Checklists: Pre-Publishing Approval Checklist - Validate Post Requirements, PublishPress Tag Groups: Stylish Displays For Your Tags and Categories, Issues and Series for Newspapers, Magazines, Publishers, Writers, PublishPress Statuses - Custom Post Status and Workflow, PublishPress Shortlinks - The Link Manager for WordPress

Questions

Is PublishPress Taxonomies still maintained?

Yes. Last release 3 Nov 2026, 32 releases in the last 24 months.

Who owns PublishPress Taxonomies, and has it changed hands?

No change recorded. Main committer ojopaul since Nov 2021.

Was PublishPress Taxonomies removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is PublishPress Taxonomies safe?

16 known vulnerabilities, all fixed (latest in 3.52.0). Not on the exploited list.

Is the latest PublishPress Taxonomies update safe to install?

No ownership change before 4.0.1. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue