Skip to content
PluginCanary

Ultimate Posts Widget

by cl272 · 10,000+ active installs · Checked 4 Nov 2026
At risk1 Critical1 Warning

At risk: no release in 28 months (last release 17 Jul 2024).

59/ 100 Canary Score

Capped at 59: a Critical signal is open.

Sub-scores for Ultimate Posts Widget
Ownership100
Maintenance0
Security100
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Ultimate Posts Widget still maintained?
No. Last release 17 Jul 2024, over 2 years ago. 17 Jul 2024 · wordpress.org
Who owns Ultimate Posts Widget, and has it changed hands?
No change recorded. 4 Nov 2026 · SVN log
Was Ultimate Posts Widget removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Ultimate Posts Widget safe?
4 known vulnerabilities, all fixed (latest in 2.3.0). Not on the exploited list. 10 Apr 2024 · Wordfence Intelligence
Is the latest Ultimate Posts Widget update safe to install?
No ownership change before 2.3.2. No one-star spike after it. 17 Jul 2024 · Release history

Active signals

Facts we detected, with links to the source.

  • CriticalMNT-1No release in 28 months (last release 17 Jul 2024). Plan a replacement if the plugin is important to your site.17 Jul 2025Evidence
  • WarningMNT-2Tested up to WordPress 6.6.11, 5 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
cl27215 Nov 2019 to 30 Mar 2022, 15 commits
upwsupport27 Mar 2020 to 21 Apr 2021, 8 commits
iclyde25 May 2021 to 17 Jul 2024, 15 commits

3 committers recorded. No ownership change since 2012.

Maintenance

Last release
2 years ago
Releases, 24 months
0
Tested up to
6.6 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Ultimate Posts Widget
Q1 20242
Q2 20240
Q3 20241
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 17 Jul 2024. Tested up to 6.6, 5 major versions behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 4.5.

Rating distribution
5 star41
4 star7
3 star2
2 star1
1 star4
Latest low reviews

Security record

4 vulnerabilities on record, all patched (latest fixed in 2.3.0).

Show 4 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
10 Apr 2024Inisev Analyst Module <= Various Versions - Missing Authorization4.3<= 2.2.92.3.0Patched before disclosure
13 Feb 2024Ultimate Posts Widget <= 2.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 2.3.02.3.1Patched before disclosure
27 Jul 2023Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function4.3<= 2.2.42.2.5Patched before disclosure
27 Jul 2023Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function4.3<= 2.2.42.2.5Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Ultimate Posts Widget
4 May 202665
11 May 2026122
18 May 2026125
25 May 2026105
1 Jun 2026105
8 Jun 2026136
15 Jun 2026115
22 Jun 2026100
29 Jun 202699
6 Jul 2026106
13 Jul 2026115
20 Jul 2026147
27 Jul 2026151
3 Aug 2026177
10 Aug 2026160
17 Aug 2026157
24 Aug 2026173
31 Aug 2026151
7 Sep 2026142
14 Sep 2026219
21 Sep 2026215
28 Sep 2026194
5 Oct 2026225
12 Oct 2026171
19 Oct 2026302
26 Oct 2026301
2 Nov 202647

Weekly downloads over the last 4 weeks are 34% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

AnWP Post Grid and Post Carousel SliderScore 100 · 20,000+EleSpareScore 98 · 10,000+Post Grid Addon for ElementorScore 98 · 10,000+Post Slider and Post Carousel with PostScore 96 · 10,000+Blog Designer PackScore 95 · 30,000+

Facts

Version2.3.2
Authorcl272
Added10 Jul 2012
Last updated17 Jul 2024
Active installs10,000+
Requires WordPress3.5
Tested up to6.6.11
Requires PHPnot stated
CategorySite Administration & Utilities > Site Health & Diagnostics
Tagswidget, recent posts, sticky posts, featured image, custom post types

Other plugins by this author: Enhanced Text Widget

Questions

Is Ultimate Posts Widget still maintained?

No. Last release 17 Jul 2024, over 2 years ago.

Who owns Ultimate Posts Widget, and has it changed hands?

No change recorded.

Was Ultimate Posts Widget removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Ultimate Posts Widget safe?

4 known vulnerabilities, all fixed (latest in 2.3.0). Not on the exploited list.

Is the latest Ultimate Posts Widget update safe to install?

No ownership change before 2.3.2. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue