10WebSocial
Avoid: vulnerability published 28 Oct 2026 with no patched version yet.
Capped at 39: a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 25 |
| Support | 70 |
| Reputation | 70 |
Quick answers
- Is 10WebSocial still maintained?
- No. Last release 9 Feb 2023, over 3 years ago. 9 Feb 2023 · wordpress.org
- Who owns 10WebSocial, and has it changed hands?
- No change recorded. 4 Nov 2026 · SVN log
- Was 10WebSocial removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is 10WebSocial safe?
- No. 2 known vulnerabilities have no fix in the current version. 28 Oct 2026 · Wordfence Intelligence
- Is the latest 10WebSocial update safe to install?
- No ownership change before 1.4.35. No one-star spike after it. 9 Feb 2023 · Release history
Active signals
Facts we detected, with links to the source.
- CriticalSEC-1Vulnerability published 28 Oct 2026 with no patched version yet. Disable or replace the plugin until a fix is released.28 Oct 2026Evidence
- CriticalSEC-2Vulnerability published 5 Oct 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.19 Oct 2026Evidence
- CriticalMNT-1No release in 45 months (last release 9 Feb 2023). Plan a replacement if the plugin is important to your site.9 Feb 2024Evidence
- WarningMNT-2Tested up to WordPress 5.0.31, 21 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| webdorado | 23 Nov 2015 to 17 Dec 2020, 182 commits |
|---|---|
| 10web | 26 Jun 2019 to 9 Feb 2023, 99 commits |
2 committers recorded. No ownership change since 2015.
Maintenance
- Last release
- 4 years ago
- Releases, 24 months
- 0
- Tested up to
- 5.0 vs 7.1
- Requires PHP
- 5.2 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 9 Feb 2023. Tested up to 5.0, 21 major versions behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 4.5.
| 5 star | 296 |
|---|---|
| 4 star | 13 |
| 3 star | 6 |
| 2 star | 11 |
| 1 star | 26 |
- Error Insufficient Developer Role · 1 star · 6 Dec 2023
- Works once · 1 star · 8 Sep 2023
- error · 1 star · 3 Aug 2023
Security record
2 vulnerabilities in 24 months (4 on record), 2 with no fix in the current version.
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 28 Oct 2026 | 10WebSocial <= 1.5.6 - Authenticated (Contributor+) PHP Object Injection | 7.5 | <= 1.5.6 | No fix | n/a |
| 5 Oct 2026 | 10WebSocial <= 1.4.35 - Missing Authorization | 5.3 | <= 1.4.35 | No fix | n/a |
Show 2 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 7 Dec 2021 | 10Web Social Photo Feed <= 1.4.28 - Reflected Cross-Site Scripting | 6.1 | <= 1.4.28 | 1.4.29 | Patched before disclosure |
| 23 Apr 2018 | WD Instagram Feed <= 1.3.0 - Cross-site scripting | 6.1 | < 1.3.1 | 1.3.1 | 1 |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
10,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 58 |
|---|---|
| 11 May 2026 | 118 |
| 18 May 2026 | 120 |
| 25 May 2026 | 122 |
| 1 Jun 2026 | 117 |
| 8 Jun 2026 | 146 |
| 15 Jun 2026 | 119 |
| 22 Jun 2026 | 99 |
| 29 Jun 2026 | 98 |
| 6 Jul 2026 | 122 |
| 13 Jul 2026 | 106 |
| 20 Jul 2026 | 130 |
| 27 Jul 2026 | 125 |
| 3 Aug 2026 | 154 |
| 10 Aug 2026 | 151 |
| 17 Aug 2026 | 132 |
| 24 Aug 2026 | 171 |
| 31 Aug 2026 | 139 |
| 7 Sep 2026 | 140 |
| 14 Sep 2026 | 225 |
| 21 Sep 2026 | 218 |
| 28 Sep 2026 | 232 |
| 5 Oct 2026 | 243 |
| 12 Oct 2026 | 299 |
| 19 Oct 2026 | 353 |
| 26 Oct 2026 | 320 |
| 2 Nov 2026 | 57 |
Weekly downloads over the last 4 weeks are 61% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 1.4.35 |
|---|---|
| Author | 10Web |
| Added | 23 Nov 2015 |
| Last updated | 9 Feb 2023 |
| Active installs | 10,000+ |
| Requires WordPress | 4.6 |
| Tested up to | 5.0.31 |
| Requires PHP | 5.2 |
| Category | Communication & Messaging > Transactional Email |
| Tags | not stated |
Other plugins by this author: Photo Gallery by 10Web - Mobile-Friendly Image Gallery, 10Web Booster - Website speed optimization, Cache & Page Speed optimizer, Form Maker by 10Web - Mobile-Friendly Drag & Drop Contact Form Builder, Slider by 10Web - Responsive Image Slider, Image Optimizer by 10web - Image Optimizer and Compression plugin, Import to Photo Gallery from NextGen gallery, Z
Questions
Is 10WebSocial still maintained?
No. Last release 9 Feb 2023, over 3 years ago.
Who owns 10WebSocial, and has it changed hands?
No change recorded.
Was 10WebSocial removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is 10WebSocial safe?
No. 2 known vulnerabilities have no fix in the current version.
Is the latest 10WebSocial update safe to install?
No ownership change before 1.4.35. No one-star spike after it.