WP Event Aggregator
Healthy: maintained, last release 29 Oct 2026, 13 releases in 24 months, no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 90 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is WP Event Aggregator still maintained?
- Yes. Last release 29 Oct 2026, 13 releases in the last 24 months. 29 Oct 2026 · wordpress.org
- Who owns WP Event Aggregator, and has it changed hands?
- No change recorded. Main committer xylus since Dec 2016. 3 Nov 2026 · SVN log
- Was WP Event Aggregator removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is WP Event Aggregator safe?
- 4 known vulnerabilities, all fixed (latest in 1.9.0). Not on the exploited list. 17 Feb 2026 · Wordfence Intelligence
- Is the latest WP Event Aggregator update safe to install?
- No ownership change before 1.9.4. No one-star spike after it. 29 Oct 2026 · Release history
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| xylus | 14 Dec 2016 to 29 Oct 2026, 135 commits |
|---|
1 committer recorded. No ownership change since 2016.
Maintenance
- Last release
- 6 days ago
- Releases, 24 months
- 13
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 2 |
| Q3 2024 | 1 |
| Q4 2024 | 2 |
| Q1 2025 | 1 |
| Q2 2025 | 1 |
| Q3 2025 | 1 |
| Q4 2025 | 1 |
| Q1 2026 | 4 |
| Q2 2026 | 1 |
| Q3 2026 | 2 |
| Q4 2026 | 1 |
Last release 29 Oct 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: no reviews. Lifetime: 4.6.
| 5 star | 47 |
|---|---|
| 4 star | 1 |
| 3 star | 1 |
| 2 star | 1 |
| 1 star | 4 |
Security record
2 vulnerabilities in 24 months (4 on record), all patched (latest fixed in 1.9.0).
Show 4 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 17 Feb 2026 | WP Event Aggregator <= 1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | 6.4 | <= 1.8.7 | 1.9.0 | Patched before disclosure |
| 1 Feb 2025 | WP Event Aggregator <= 1.8.2 - Reflected Cross-Site Scripting | 6.1 | <= 1.8.2 | 1.8.3 | Patched before disclosure |
| 11 Jul 2024 | WP Event Aggregator <= 1.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 1.7.9 | 1.8.0 | Patched before disclosure |
| 9 Apr 2024 | WP Event Aggregator <= 1.7.6 - Cross-Site Request Forgery via wpea_deauthorize_user() | 4.3 | <= 1.7.6 | 1.7.7 | Patched before disclosure |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
1,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 26 |
|---|---|
| 11 May 2026 | 77 |
| 18 May 2026 | 1,356 |
| 25 May 2026 | 283 |
| 1 Jun 2026 | 153 |
| 8 Jun 2026 | 125 |
| 15 Jun 2026 | 115 |
| 22 Jun 2026 | 85 |
| 29 Jun 2026 | 105 |
| 6 Jul 2026 | 114 |
| 13 Jul 2026 | 103 |
| 20 Jul 2026 | 114 |
| 27 Jul 2026 | 135 |
| 3 Aug 2026 | 112 |
| 10 Aug 2026 | 1,391 |
| 17 Aug 2026 | 1,524 |
| 24 Aug 2026 | 276 |
| 31 Aug 2026 | 171 |
| 7 Sep 2026 | 183 |
| 14 Sep 2026 | 200 |
| 21 Sep 2026 | 231 |
| 28 Sep 2026 | 211 |
| 5 Oct 2026 | 190 |
| 12 Oct 2026 | 204 |
| 19 Oct 2026 | 279 |
| 26 Oct 2026 | 1,460 |
| 2 Nov 2026 | 129 |
Weekly downloads over the last 4 weeks are 50% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 1.9.4 |
|---|---|
| Author | Xylus Themes |
| Added | 8 Dec 2016 |
| Last updated | 29 Oct 2026 |
| Active installs | 1,000+ |
| Requires WordPress | 5.0 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | E-commerce & Shopping |
| Tags | ical import, event calendar, event importer, facebook event, eventbrite event |
Other plugins by this author: WP Bulk Delete, Import Eventbrite Events, Import Social Events, WP Smart Import : Import any XML File to WordPress, XT Event Widget for Social Events, Event SEO: Event Schema / Structured Data: Google Rich Snippet Schema for Event, Import Meetup Events - Meetup Sync & Event Aggregator for WordPress, Easy Events Calendar : All-in-One Events Calendar with Social Event, Eventbrite, Meetup, Google & iCal Import Support, XT Corporate ToolKit, Xylus Toolkit, XT Feed for LinkedIn, AdRotater Email Ad Reports
Questions
Is WP Event Aggregator still maintained?
Yes. Last release 29 Oct 2026, 13 releases in the last 24 months.
Who owns WP Event Aggregator, and has it changed hands?
No change recorded. Main committer xylus since Dec 2016.
Was WP Event Aggregator removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is WP Event Aggregator safe?
4 known vulnerabilities, all fixed (latest in 1.9.0). Not on the exploited list.
Is the latest WP Event Aggregator update safe to install?
No ownership change before 1.9.4. No one-star spike after it.