Skip to content
PluginCanary

UserFeedback

UserFeedback - Create Interactive Feedback Form, User Surveys, and Polls in Seconds
by Syed Balkhi · 200,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 16 Sep 2026, 17 releases in 24 months, no unpatched vulnerabilities.

90/ 100 Canary Score
Sub-scores for UserFeedback
Ownership100
Maintenance100
Security80
SupportNo data
Reputation75

How the score works

Quick answers

Is UserFeedback still maintained?
Yes. Last release 16 Sep 2026, 17 releases in the last 24 months. 16 Sep 2026 · wordpress.org
Who owns UserFeedback, and has it changed hands?
Changed. New committer euthelup made a first commit on 15 Jul 2026. 15 Jul 2026 · SVN log
Was UserFeedback removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is UserFeedback safe?
9 known vulnerabilities, all fixed (latest in 1.11.0). Not on the exploited list. 18 Mar 2026 · Wordfence Intelligence
Is the latest UserFeedback update safe to install?
Caution. Ownership change before 1.12.0: new committer euthelup made a first commit on 15 Jul 2026. No one-star spike after it. 16 Sep 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master25 Jan 2023 to 25 Jan 2023, 1 commits
manejaam31 Jan 2023 to 19 Sep 2023, 8 commits
micheleam23 May 2023 to 24 Jul 2024, 13 commits
dpaternina2 Jul 2024 to 21 May 2026, 23 commits
euthelup15 Jul 2026 to 15 Jul 2026, 1 commits
AhmedGeek3 Sep 2026 to 16 Sep 2026, 4 commits

New committer euthelup made a first commit on 15 Jul 2026. New committer AhmedGeek made a first commit on 3 Sep 2026.

Maintenance

Last release
49 days ago
Releases, 24 months
17
Tested up to
7.0 vs 7.1
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for UserFeedback
Q1 20241
Q2 20241
Q3 20245
Q4 20242
Q1 20253
Q2 20252
Q3 20252
Q4 20253
Q1 20262
Q2 20261
Q3 20263
Q4 20260

Last release 16 Sep 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: 5.0 (6 reviews). Lifetime: 4.8.

Average rating per quarter for UserFeedback
Q4 20255.0
Q1 20265.0
Q2 20264.9
Q3 20265.0
Q4 20265.0

Average rating stayed at 5.0 between Q4 2025 and Q4 2026.

Rating distribution
5 star285
4 star7
3 star3
2 star2
1 star12

Security record

4 vulnerabilities in 24 months (9 on record), all patched (latest fixed in 1.11.0).

Show 9 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
18 Mar 2026User Feedback <= 1.10.1 - Missing Authorization4.3<= 1.10.11.11.0Patched before disclosure
20 Feb 2026User Feedback <= 1.10.1 - Authenticated (Editor+) SQL Injection4.9<= 1.10.11.11.020
22 Dec 2025User Feedback <= 1.10.0 - Authenticated (Editor+) SQL Injection4.9<= 1.10.01.10.1Patched before disclosure
24 Oct 2025User Feedback - Create Interactive Feedback Form, User Surveys, and Polls in Seconds <= 1.8.0 - Missing Authorization to Information Disclosure5.3<= 1.8.01.9.0Patched before disclosure
12 Jul 2024UserFeedback Lite <= 1.0.15 - Unauthenticated Stored Cross-Site Scripting via Name Parameter7.2<= 1.0.151.0.16Patched before disclosure
21 Feb 2024User Feedback - Create Interactive Feedback Form, User Surveys, and Polls in Seconds <= 1.0.13 - Unauthenticated Stored Cross-Site Scripting5.4<= 1.0.131.0.14Patched before disclosure
26 Dec 2023User Feedback <= 1.0.10 - Missing Authorization5.3<= 1.0.101.0.11Patched before disclosure
17 Oct 2023User Feedback <= 1.0.9 - Unauthenticated Cross-Site Scripting7.2<= 1.0.91.0.10Patched before disclosure
4 Sep 2023User Feedback <= 1.0.7 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.0.71.0.8Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

200,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for UserFeedback
4 May 20262,465
11 May 20267,273
18 May 202691,276
25 May 202621,179
1 Jun 202612,628
8 Jun 20269,191
15 Jun 20268,254
22 Jun 20267,188
29 Jun 20266,854
6 Jul 20266,562
13 Jul 202686,521
20 Jul 202619,663
27 Jul 202612,311
3 Aug 20269,910
10 Aug 20267,517
17 Aug 20267,388
24 Aug 20267,930
31 Aug 202675,105
7 Sep 202618,755
14 Sep 202689,902
21 Sep 202621,198
28 Sep 202610,635
5 Oct 20268,816
12 Oct 20266,977
19 Oct 202610,782
26 Oct 20267,046
2 Nov 2026968

Weekly downloads over the last 4 weeks are 70% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Crowdsignal DashboardScore 96 · 200,000+WP-PollsScore 96 · 40,000+Crowdsignal FormsScore 95 · 200,000+

Facts

Version1.12.0
AuthorSyed Balkhi
Added31 Jan 2023
Last updated16 Sep 2026
Active installs200,000+
Requires WordPress5.9.0
Tested up to7.0.8
Requires PHP7.4
CategoryCustomer Management > Customer Retention Tools
Tagssurveys, feedback, analytics, user feedback, website feedback

Other plugins by this author: WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More, WP Mail SMTP by WPForms - SMTP for Reliable Email Delivery with Gmail, Outlook, Amazon SES, Brevo, Other SMTP & More, WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager, All in One SEO - AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights), Popup Builder & Popup Maker for WordPress - OptinMonster Email Marketing and Lead Generation, One Click Demo Import, Smash Balloon Social Photo Feed - Easy Social Feeds Plugin, Duplicator - Backups & Migration Plugin - Cloud Backups, Scheduled Backups, & More, Easy WP SMTP - WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more, Photo Gallery, Sliders, Proofing and Themes - NextGEN Gallery, WP Crontrol, WP Mail Logging

Questions

Is UserFeedback still maintained?

Yes. Last release 16 Sep 2026, 17 releases in the last 24 months.

Who owns UserFeedback, and has it changed hands?

Changed. New committer euthelup made a first commit on 15 Jul 2026.

Was UserFeedback removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is UserFeedback safe?

9 known vulnerabilities, all fixed (latest in 1.11.0). Not on the exploited list.

Is the latest UserFeedback update safe to install?

Caution. Ownership change before 1.12.0: new committer euthelup made a first commit on 15 Jul 2026. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue