WP Blog and Widgets
Avoid: WP Blog and Widgets is closed on wordpress.org and no longer gets updates.
Capped at 10 because the plugin is closed.
| Ownership | 100 |
|---|---|
| Maintenance | 10 |
| Security | 90 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- CriticalCLS-1Closed on wordpress.org on 7 Apr 2026, reason: security issue. Replace this plugin. It no longer receives updates from wordpress.org.7 Apr 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- not recorded
- Releases, 24 months
- 0
- Tested up to
- not stated vs 7.1
- Requires PHP
- not stated supported 8.2+
Release history builds as we see new versions.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 9 Apr 2026 | Essentialplugin Plugins (Various Versions) - Injected Backdoor | 9.8 | 2.6.6 | 2.6.6.1 | n/a |
| 16 Aug 2023 | Multiple WPOnlineSupport Plugins <= (Various Versions) - Missing Authorization to Notice Dismissal | 5.3 | <= 2.5 | 2.6 | n/a |
| 12 Jan 2023 | WP Blog and Widget <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | 7.4 | <= 2.3 | 2.3.1 | n/a |
Source: Wordfence Intelligence.
Reputation
No ratings yet.
Momentum
Fewer than 10 active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | not stated |
|---|---|
| Author | not stated |
| Added | not stated |
| Last updated | not stated |
| Active installs | Fewer than 10 |
| Requires WordPress | not stated |
| Tested up to | not stated |
| Requires PHP | not stated |
| Category | Content Management > Blog & Article Publishing |
| Tags | not stated |
Questions
Is WP Blog and Widgets still maintained?
No. WP Blog and Widgets was closed on wordpress.org on 7 Apr 2026 (security issue) and gets no updates there.
Is WP Blog and Widgets safe?
WP Blog and Widgets has no open unpatched vulnerabilities on record. 1 vulnerability was published in the last 24 months. Its Canary status is Avoid.
Who owns WP Blog and Widgets?
The wordpress.org author is not listed. We have recorded no ownership change.
What can I use instead of WP Blog and Widgets?
We have no healthier plugin in the same category on record yet.