Skip to content
PluginCanary

Taggbox

Taggbox: Social Media Feed Widget
by Taggbox · 1,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 16 Oct 2026, 14 releases in 24 months, no unpatched vulnerabilities.

96/ 100 Canary Score
Sub-scores for Taggbox
Ownership100
Maintenance100
Security90
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Taggbox still maintained?
Yes. Last release 16 Oct 2026, 14 releases in the last 24 months. 16 Oct 2026 · wordpress.org
Who owns Taggbox, and has it changed hands?
No change recorded. Main committer taggbox since Sep 2020. 3 Nov 2026 · SVN log
Was Taggbox removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Taggbox safe?
5 known vulnerabilities, all fixed (latest in 3.4). Not on the exploited list. 11 Jul 2024 · Wordfence Intelligence
Is the latest Taggbox update safe to install?
No ownership change before 4.8. No one-star spike after it. 16 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master2 Sep 2020 to 2 Sep 2020, 1 commits
taggbox7 Sep 2020 to 16 Oct 2026, 140 commits

2 committers recorded. No ownership change since 2020.

Maintenance

Last release
19 days ago
Releases, 24 months
14
Tested up to
7.1 current
Requires PHP
5.6 supported 8.2+
Releases per quarter
Releases per quarter for Taggbox
Q1 20240
Q2 20240
Q3 20241
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20265
Q2 20261
Q3 20266
Q4 20262

Last release 16 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 5.0.

Rating distribution
5 star4
4 star0
3 star0
2 star0
1 star0

Security record

5 vulnerabilities on record, all patched (latest fixed in 3.4).

Show 5 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
11 Jul 2024Taggbox <= 3.3 - Cross-Site Request Forgery4.3<= 3.33.47
16 Apr 2024Tagbox - UGC Galleries, Social Media Widgets, User Reviews & Analytics <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.23.3n/a
5 Jan 2024Taggbox <= 3.1 - Unauthenticated PHP Object Injection9.8<= 3.13.2n/a
19 Oct 2023Taggbox <= 3.3 - Missing Authorization5.4<= 3.33.4273
12 Oct 2023Taggbox <= 3.3 - Cross-Site Request Forgery4.3<= 3.33.4280

Changelog mentions of security fixes: 4.2 (security, XSS, escaping); 4.3 (security, escaping).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Taggbox
4 May 202626
11 May 2026102
18 May 2026169
25 May 202685
1 Jun 202676
8 Jun 2026109
15 Jun 202673
22 Jun 202669
29 Jun 2026711
6 Jul 2026217
13 Jul 2026112
20 Jul 2026677
27 Jul 2026264
3 Aug 2026241
10 Aug 2026766
17 Aug 2026769
24 Aug 2026235
31 Aug 2026149
7 Sep 2026118
14 Sep 2026887
21 Sep 2026223
28 Sep 2026797
5 Oct 2026919
12 Oct 2026786
19 Oct 2026326
26 Oct 2026287
2 Nov 202624

Weekly downloads over the last 4 weeks are 4% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

SocialFeedsScore 100 · 40,000+Social LikeBox & FeedScore 100 · 10,000+ButtonizerScore 98 · 40,000+Feed Them SocialScore 97 · 20,000+

Facts

Version4.8
AuthorTaggbox
Added7 Sep 2020
Last updated16 Oct 2026
Active installs1,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHP5.6
CategoryE-commerce & Shopping > Product Management & Catalogs
TagsReviews Widget, shoppable video, Social Media Feed, Social Media Widget, social proof widget

Questions

Is Taggbox still maintained?

Yes. Last release 16 Oct 2026, 14 releases in the last 24 months.

Who owns Taggbox, and has it changed hands?

No change recorded. Main committer taggbox since Sep 2020.

Was Taggbox removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Taggbox safe?

5 known vulnerabilities, all fixed (latest in 3.4). Not on the exploited list.

Is the latest Taggbox update safe to install?

No ownership change before 4.8. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue