WP Notes Widget
Avoid: vulnerability published 16 May 2025 still has no fix after 14 days.
Capped at 39 while a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 35 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 16 May 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.30 May 2025Evidence
- CriticalMNT-1No release in 46 months (last release 14 Jan 2023). Plan a replacement if the plugin is important to your site.14 Jan 2024Evidence
- WarningMNT-2Tested up to WordPress 6.1.16, 10 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 4 years ago
- Releases, 24 months
- 0
- Tested up to
- 6.1 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 14 Jan 2023. Tested up to 6.1, 10 major versions behind WordPress 7.1.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 16 May 2025 | WP Notes Widget <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 1.0.6 | No fix | n/a |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.6 from 12 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 9 |
|---|---|
| 4 star | 2 |
| 3 star | 0 |
| 2 star | 1 |
| 1 star | 0 |
Momentum
700+ active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 1.0.6 |
|---|---|
| Author | Steve Puddick |
| Added | 2 Nov 2014 |
| Last updated | 14 Jan 2023 |
| Active installs | 700+ |
| Requires WordPress | 3.5 |
| Tested up to | 6.1.16 |
| Requires PHP | not stated |
| Category | Communication & Messaging > Notification Management |
| Tags | news, notes, widget, sidebar, notification |
Other plugins by this author: Notes Widget Wrapper, Custom Ratings, Enhanced YouTube Embed, Admin Notes WP, Restricted User Activity
Questions
Is WP Notes Widget still maintained?
WP Notes Widget was last updated on 14 Jan 2023. Its Canary status is Avoid.
Is WP Notes Widget safe?
WP Notes Widget has 1 published vulnerability with no patched version. Its Canary status is Avoid.
Who owns WP Notes Widget?
The wordpress.org author is Steve Puddick. We have recorded no ownership change.
What can I use instead of WP Notes Widget?
We have no healthier plugin in the same category on record yet.