Upcoming Events Lists
Avoid: vulnerability published 22 Sep 2025 still has no fix after 14 days.
Capped at 39 while a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 20 |
| Security | 35 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 22 Sep 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.6 Oct 2025Evidence
- WarningMNT-2Tested up to WordPress 6.8.12, 3 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
- WarningMNT-1No release in 18 months (last release 15 Apr 2025). Plan a replacement if the plugin is important to your site.15 Apr 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 19 months ago
- Releases, 24 months
- 1
- Tested up to
- 6.8 vs 7.1
- Requires PHP
- 7.0 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 1 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 15 Apr 2025. Tested up to 6.8, 3 major versions behind WordPress 7.1.
Support
0% of 1 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 22 Sep 2025 | Upcoming Events Lists <= 1.4.0 - Authenticated (Subscriber+) Insecure Direct Object Reference | 4.3 | <= 1.4.0 | No fix | n/a |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.8 from 6 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 5 |
|---|---|
| 4 star | 1 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Momentum
900+ active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.4.0 |
|---|---|
| Author | Sayful Islam |
| Added | 4 Jun 2014 |
| Last updated | 15 Apr 2025 |
| Active installs | 900+ |
| Requires WordPress | 6.0 |
| Tested up to | 6.8.12 |
| Requires PHP | 7.0 |
| Category | Bookings & Scheduling > Event Management & Ticketing |
| Tags | feed, events, widget, calendar, upcoming events |
Other plugins by this author: Carousel Slider, Scroll Back To Top Button, Filterable Portfolio
Questions
Is Upcoming Events Lists still maintained?
Upcoming Events Lists was last updated on 15 Apr 2025. Its Canary status is Avoid.
Is Upcoming Events Lists safe?
Upcoming Events Lists has 1 published vulnerability with no patched version. Its Canary status is Avoid.
Who owns Upcoming Events Lists?
The wordpress.org author is Sayful Islam. We have recorded no ownership change.
What can I use instead of Upcoming Events Lists?
Plugins in the same category with a higher Canary Score: Sugar Calendar - Events Calendar, Event Tickets, and Events Management Platform, Simple Event Planner, Pie Calendar - Events Calendar Made Simple, RSVP and Event Management, EventPrime - Events Calendar, Bookings, Tickets & AI.