PublishPress Tag Groups
Healthy: maintained, last release 13 Oct 2026, 12 releases in 24 months, no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 90 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is PublishPress Tag Groups still maintained?
- Yes. Last release 13 Oct 2026, 12 releases in the last 24 months. 13 Oct 2026 · wordpress.org
- Who owns PublishPress Tag Groups, and has it changed hands?
- No change recorded. Main committer stevejburge since Nov 2022. 3 Nov 2026 · SVN log
- Was PublishPress Tag Groups removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is PublishPress Tag Groups safe?
- 5 known vulnerabilities, all fixed (latest in 2.2.0). Not on the exploited list. 29 Jun 2026 · Wordfence Intelligence
- Is the latest PublishPress Tag Groups update safe to install?
- No ownership change before 3.0.0. No one-star spike after it. 5 Oct 2026 · Release history
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| camthor | 19 Jun 2012 to 8 Oct 2022, 344 commits |
|---|---|
| stevejburge | 2 Nov 2022 to 13 Oct 2026, 47 commits |
| ojopaul | 28 Feb 2023 to 16 Jan 2025, 7 commits |
| deji98 | 22 Jan 2025 to 6 Oct 2026, 16 commits |
4 committers recorded. No ownership change since 2012.
Maintenance
- Last release
- 22 days ago
- Releases, 24 months
- 12
- Tested up to
- 7.1 current
- Requires PHP
- 7.2.5 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 1 |
| Q4 2024 | 1 |
| Q1 2025 | 4 |
| Q2 2025 | 0 |
| Q3 2025 | 1 |
| Q4 2025 | 1 |
| Q1 2026 | 0 |
| Q2 2026 | 2 |
| Q3 2026 | 2 |
| Q4 2026 | 1 |
Last release 13 Oct 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: no reviews. Lifetime: 4.8.
| 5 star | 50 |
|---|---|
| 4 star | 4 |
| 3 star | 1 |
| 2 star | 1 |
| 1 star | 1 |
Security record
2 vulnerabilities in 24 months (5 on record), all patched (latest fixed in 2.2.0).
Show 5 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 29 Jun 2026 | Tag Groups <= 2.1.0 - Reflected Cross-Site Scripting | 6.1 | <= 2.1.0 | 2.2.0 | Patched before disclosure |
| 14 Jan 2025 | Tag Groups is the Advanced Way to Display Your Taxonomy Terms <= 2.0.4 - Reflected Cross-Site Scripting | 6.1 | <= 2.0.4 | 2.0.5 | Patched before disclosure |
| 12 Sep 2024 | WordPress Tag Cloud Plugin - Tag Groups <= 2.0.3 - Missing Authorization to Information Exposure | 5.3 | <= 2.0.3 | 2.0.4 | Patched before disclosure |
| 18 Jul 2023 | Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get | 6.1 | 1.18.3 to 1.44.3.1 | 2.0.0 | Patched before disclosure |
| 4 Mar 2022 | Freemius SDK <= 2.4.2 - Missing Authorization Checks | 6.3 | < 1.43.10.1 | 1.43.10.1 | Patched before disclosure |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
100% of 1 support threads resolved in the last 2 months.
Momentum
3,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 100 |
|---|---|
| 11 May 2026 | 237 |
| 18 May 2026 | 414 |
| 25 May 2026 | 282 |
| 1 Jun 2026 | 197 |
| 8 Jun 2026 | 172 |
| 15 Jun 2026 | 160 |
| 22 Jun 2026 | 2,100 |
| 29 Jun 2026 | 391 |
| 6 Jul 2026 | 401 |
| 13 Jul 2026 | 244 |
| 20 Jul 2026 | 2,003 |
| 27 Jul 2026 | 505 |
| 3 Aug 2026 | 514 |
| 10 Aug 2026 | 246 |
| 17 Aug 2026 | 2,383 |
| 24 Aug 2026 | 414 |
| 31 Aug 2026 | 312 |
| 7 Sep 2026 | 216 |
| 14 Sep 2026 | 215 |
| 21 Sep 2026 | 210 |
| 28 Sep 2026 | 382 |
| 5 Oct 2026 | 2,563 |
| 12 Oct 2026 | 502 |
| 19 Oct 2026 | 482 |
| 26 Oct 2026 | 352 |
| 2 Nov 2026 | 50 |
Weekly downloads over the last 4 weeks are 42% below the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 3.0.0 |
|---|---|
| Author | PublishPress |
| Added | 19 Jun 2012 |
| Last updated | 13 Oct 2026 |
| Active installs | 3,000+ |
| Requires WordPress | 5.5 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.2.5 |
| Category | Site Structure & Navigation > Tags & Classification |
| Tags | tags, taxonomy, Accordion, tag cloud |
Other plugins by this author: Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories, PublishPress Capabilities: User Role Access Control, Admin Area Permissions, PublishPress Taxonomies - Tag, Category, and Taxonomy Manager - Autotagger Automatically Add Terms, PublishPress Blocks - Block Controls, Block Visibility, Block Permissions, Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors, PublishPress Permissions: Access Control, Content Permissions, User Access, PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes, PublishPress Planner - Editorial Calendar, Marketing Content, Kanban Board, PublishPress Checklists: Pre-Publishing Approval Checklist - Validate Post Requirements, Issues and Series for Newspapers, Magazines, Publishers, Writers, PublishPress Statuses - Custom Post Status and Workflow, PublishPress Shortlinks - The Link Manager for WordPress
Questions
Is PublishPress Tag Groups still maintained?
Yes. Last release 13 Oct 2026, 12 releases in the last 24 months.
Who owns PublishPress Tag Groups, and has it changed hands?
No change recorded. Main committer stevejburge since Nov 2022.
Was PublishPress Tag Groups removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is PublishPress Tag Groups safe?
5 known vulnerabilities, all fixed (latest in 2.2.0). Not on the exploited list.
Is the latest PublishPress Tag Groups update safe to install?
No ownership change before 3.0.0. No one-star spike after it.