Skip to content
PluginCanary

User Submitted Posts - Enable Users to Submit Posts from the Front End

by Jeff Starr · 10,000+ active installs · Checked 3 Nov 2026
Healthy2 Warnings

Healthy: vulnerability published 30 Oct 2026, fixed in 20261029.

83/ 100 Canary Score
Sub-scores for User Submitted Posts - Enable Users to Submit Posts from the Front End
Ownership100
Maintenance100
Security60
Support70
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 20261029. Update to version 20261029 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 30 Sep 2026, fixed in 20260916. Update to version 20260916 or later.30 Sep 2026Evidence
  • InfoSEC-38 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
specialk21 Feb 2011 to 29 Oct 2026, 133 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
5 days ago
Releases, 24 months
14
Tested up to
7.1 current
Requires PHP
5.6.20 supported 8.2+
Releases per quarter for User Submitted Posts - Enable Users to Submit Posts from the Front End
Q1 20241
Q2 20241
Q3 20241
Q4 20241
Q1 20251
Q2 20251
Q3 20250
Q4 20252
Q1 20264
Q2 20263
Q3 20262
Q4 20261

Last release 29 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 2 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026User Submitted Posts <= 20260916 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user-submitted-content' Parameter via Block-Comment Shortcode Splitting7.2<= 20260916202610290
30 Sep 2026User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20260810 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 20260810202609160
10 Jun 2026User Submitted Posts <= 20260607 - Unauthenticated Stored Cross-Site Scripting7.2<= 20260607202606080
17 Feb 2026User Submitted Posts <= 20260113 - Incorrect Authorization to Unauthenticated Category Restriction Bypass via 'user-submitted-category' Parameter5.3<= 20260113202602170
23 Jan 2026User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20251210 - Unauthenticated Stored Cross-Site Scripting via Custom Field7.2<= 20251210202601100
15 Jan 2026User Submitted Posts <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode6.4<= 20260110202601130
1 Jan 2026User Submitted Posts <= 20251121 - Unauthenticated Open Redirect5.3<= 20251121202512100
2 Apr 2025User Submitted Posts <= 20241026 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 20241026202503270
22 Jun 2024User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20240319 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 20240319202405160
10 Oct 2023User Submitted Posts <= 20230902 - Unauthenticated Arbitrary File Upload9.8<= 20230902202309140
6 Sep 2023User Submitted Posts <= 20230901 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 20230901202309020
5 Sep 2023User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 20230811202309010
14 Aug 2023User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content'7.2<= 20230809202308110
2 May 2019User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload9.8< 20190426201904260
10 Feb 2016User Submitted Posts < 20160215 - Reflected Cross-Site Scripting7.2< 2016021520160215n/a

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for User Submitted Posts - Enable Users to Submit Posts from the Front End
Q4 20235.0
Q1 20245.0
Q2 20244.0
Q3 20245.0
Q4 20245.0
Q1 20255.0
Q2 20255.0
Q3 20255.0
Q4 20254.8
Q1 20265.0
Q2 20265.0
Q3 20265.0
Q4 20265.0

Average rating stayed at 5.0 between Q4 2023 and Q4 2026.

Rating distribution
5 star854
4 star22
3 star8
2 star5
1 star24

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for User Submitted Posts - Enable Users to Submit Posts from the Front End
4 May 2026544
11 May 2026963
18 May 20261,336
25 May 2026913
1 Jun 2026737
8 Jun 20267,910
15 Jun 20261,303
22 Jun 2026935
29 Jun 2026880
6 Jul 20261,330
13 Jul 2026728
20 Jul 2026777
27 Jul 2026731
3 Aug 2026739
10 Aug 20268,439
17 Aug 20261,325
24 Aug 20261,216
31 Aug 20261,064
7 Sep 2026832
14 Sep 20268,155
21 Sep 20262,385
28 Sep 20261,479
5 Oct 20261,091
12 Oct 2026959
19 Oct 20261,229
26 Oct 20267,995
2 Nov 2026508

Weekly downloads over the last 4 weeks are 28% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version20261029
AuthorJeff Starr
Added21 Feb 2011
Last updated29 Oct 2026
Active installs10,000+
Requires WordPress4.7
Tested up to7.1.4
Requires PHP5.6.20
CategoryCommunity & Social > Membership Sites & Subscriptions
Tagsguest post, public post, submit post, visitor post, frontend post

Other plugins by this author: Disable Gutenberg, GA Google Analytics - Connect Google Analytics to WordPress, BBQ Firewall - Fast & Powerful Firewall Security, Blackhole for Bad Bots, Disable WP REST API, Disable WP Sitemaps, Disable Media Sizes, Head Meta Data, Disable Lazy Load, Theme Switcha - Easily Switch Themes for Development and Testing, Simple Blog Stats, Dashboard Widgets Suite

Questions

Is User Submitted Posts - Enable Users to Submit Posts from the Front End still maintained?

User Submitted Posts - Enable Users to Submit Posts from the Front End was last updated on 29 Oct 2026. Its Canary status is Healthy.

Is User Submitted Posts - Enable Users to Submit Posts from the Front End safe?

User Submitted Posts - Enable Users to Submit Posts from the Front End has no open unpatched vulnerabilities on record. 8 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns User Submitted Posts - Enable Users to Submit Posts from the Front End?

The wordpress.org author is Jeff Starr. Recent committers: specialk, plugin-master. We have recorded no ownership change.

What can I use instead of User Submitted Posts - Enable Users to Submit Posts from the Front End?

We have no healthier plugin in the same category on record yet.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue