Skip to content
PluginCanary

W4 Post List

by Shazzad Hossain Khan · 3,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 2 Oct 2026, 22 releases in 24 months, no unpatched vulnerabilities.

91/ 100 Canary Score
Sub-scores for W4 Post List
Ownership100
Maintenance100
Security95
SupportNo data
Reputation60

How the score works

Quick answers

Is W4 Post List still maintained?
Yes. Last release 2 Oct 2026, 22 releases in the last 24 months. 2 Oct 2026 · wordpress.org
Who owns W4 Post List, and has it changed hands?
No change recorded. Main committer sajib1223 since Dec 2010. 3 Nov 2026 · SVN log
Was W4 Post List removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is W4 Post List safe?
7 known vulnerabilities, all fixed (latest in 3.0.7). Not on the exploited list. 23 Sep 2026 · Wordfence Intelligence
Is the latest W4 Post List update safe to install?
No ownership change before 3.0.9. No one-star spike after it. 2 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
sajib12238 Dec 2010 to 2 Oct 2026, 292 commits

1 committer recorded. No ownership change since 2010.

Maintenance

Last release
33 days ago
Releases, 24 months
22
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for W4 Post List
Q1 20241
Q2 20240
Q3 20242
Q4 20242
Q1 20250
Q2 20250
Q3 20250
Q4 20252
Q1 20261
Q2 20260
Q3 202616
Q4 20261

Last release 2 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.7.

Rating distribution
5 star81
4 star7
3 star1
2 star2
1 star3

Security record

1 vulnerability in 24 months (7 on record), patched (latest fixed in 3.0.7).

Show 7 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
23 Sep 2026W4 Post List <= 3.0.6 - Authenticated (Editor+) SQL Injection4.9<= 3.0.63.0.7Patched before disclosure
22 Mar 2023W4 Post List <= 2.4.5 - Information Disclosure via post_excerpt4.3<= 2.4.52.4.6Patched before disclosure
22 Mar 2023W4 Post List <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Options6.4<= 2.4.52.4.6Patched before disclosure
22 Mar 2023W4 Post List <= 2.4.5 - Reflected Cross-Site Scripting6.1<= 2.4.52.4.6Patched before disclosure
8 Mar 2023W4 Post List <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'w4pl[no_items_text]'6.4<= 2.4.42.4.5n/a
16 Dec 2022Appsero <= 1.2.1 - Missing Authorization4.3<= 2.4.22.4.3n/a
14 Dec 2022Appsero <= 1.2.0 - Cross-Site Request Forgery4.3<= 2.4.22.4.3n/a

Changelog mentions of security fixes: 2.11.0 (nonce); 3.0.6 (escaping).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

3,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for W4 Post List
4 May 202643
11 May 202679
18 May 202688
25 May 2026130
1 Jun 2026105
8 Jun 202692
15 Jun 202692
22 Jun 202691
29 Jun 202674
6 Jul 202696
13 Jul 20261,228
20 Jul 20261,508
27 Jul 20261,666
3 Aug 20261,474
10 Aug 20262,405
17 Aug 20261,525
24 Aug 20261,545
31 Aug 20261,402
7 Sep 20261,493
14 Sep 20261,563
21 Sep 20261,641
28 Sep 20261,532
5 Oct 2026517
12 Oct 2026271
19 Oct 2026385
26 Oct 2026290
2 Nov 202643

Weekly downloads over the last 4 weeks are 69% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

AnWP Post Grid and Post Carousel SliderScore 100 · 20,000+EleSpareScore 98 · 10,000+Post Grid Addon for ElementorScore 98 · 10,000+Post Slider and Post Carousel with PostScore 96 · 10,000+Blog Designer PackScore 95 · 30,000+

Facts

Version3.0.9
AuthorShazzad Hossain Khan
Added8 Dec 2010
Last updated2 Oct 2026
Active installs3,000+
Requires WordPress5.8
Tested up to7.1.4
Requires PHP7.4
CategoryContent Management > Blog & Article Publishing
Tagspost grid, post list, shortcode, user list, category list

Other plugins by this author: Adminkeep - Site Lockdown & Admin Enhancements

Questions

Is W4 Post List still maintained?

Yes. Last release 2 Oct 2026, 22 releases in the last 24 months.

Who owns W4 Post List, and has it changed hands?

No change recorded. Main committer sajib1223 since Dec 2010.

Was W4 Post List removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is W4 Post List safe?

7 known vulnerabilities, all fixed (latest in 3.0.7). Not on the exploited list.

Is the latest W4 Post List update safe to install?

No ownership change before 3.0.9. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue