Skip to content
PluginCanary

Userback

by userback · 1,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: maintained, last release 24 Dec 2025, 3 releases in 24 months, no unpatched vulnerabilities.

Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4.

80/ 100 Canary Score

Based on 3 of 5 areas

Sub-scores for Userback
Ownership100
Maintenance50
Security95
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Userback still maintained?
Yes. Last release 24 Dec 2025, 3 releases in the last 24 months. 24 Dec 2025 · wordpress.org
Who owns Userback, and has it changed hands?
No change recorded. Main committer userback since Feb 2020. 3 Nov 2026 · SVN log
Was Userback removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Userback safe?
2 known vulnerabilities, all fixed (latest in 1.0.16). Not on the exploited list. 12 Dec 2025 · Wordfence Intelligence
Is the latest Userback update safe to install?
No ownership change before 1.0.17. No one-star spike after it. 24 Dec 2025 · Release history

Active signals

Facts we detected, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master12 Feb 2020 to 12 Feb 2020, 1 commits
userback13 Feb 2020 to 24 Dec 2025, 38 commits

2 committers recorded. No ownership change since 2020.

Maintenance

Last release
11 months ago
Releases, 24 months
3
Tested up to
6.9 vs 7.1
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Userback
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20251
Q3 20250
Q4 20252
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 24 Dec 2025. Tested up to 6.9, 2 major versions behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 3.6.

Rating distribution
5 star5
4 star0
3 star1
2 star1
1 star2

Security record

1 vulnerability in 24 months (2 on record), patched (latest fixed in 1.0.16).

Show 2 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
12 Dec 2025Userback <= 1.0.15 - Missing Authorization to Authenticated (Subscriber+) Plugin's Configuration Exposure4.3<= 1.0.151.0.167
17 Oct 2023Userback <= 1.0.13 - Cross-Site Request Forgery4.3<= 1.0.131.0.149

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Userback
4 May 202632
11 May 202673
18 May 2026105
25 May 2026114
1 Jun 202669
8 Jun 202685
15 Jun 202671
22 Jun 202662
29 Jun 202666
6 Jul 202672
13 Jul 202677
20 Jul 2026118
27 Jul 2026100
3 Aug 2026107
10 Aug 202685
17 Aug 2026111
24 Aug 202689
31 Aug 202696
7 Sep 2026119
14 Sep 2026114
21 Sep 2026105
28 Sep 2026113
5 Oct 2026103
12 Oct 2026101
19 Oct 2026183
26 Oct 2026160
2 Nov 202630

Weekly downloads over the last 4 weeks are 25% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version1.0.17
Authoruserback
Added13 Feb 2020
Last updated24 Dec 2025
Active installs1,000+
Requires WordPress3.5.0
Tested up to6.9.11
Requires PHP7.4
CategorySupport & Help Desk > Help Desk & Ticketing Systems
Tagssurveys, feedback, bug-tracking

Questions

Is Userback still maintained?

Yes. Last release 24 Dec 2025, 3 releases in the last 24 months.

Who owns Userback, and has it changed hands?

No change recorded. Main committer userback since Feb 2020.

Was Userback removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Userback safe?

2 known vulnerabilities, all fixed (latest in 1.0.16). Not on the exploited list.

Is the latest Userback update safe to install?

No ownership change before 1.0.17. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue