Skip to content
PluginCanary

WP Post Author - Author Box, Multiple Authors, Guest Authors & Custom Avatars

by AF themes · 10,000+ active installs · Checked 3 Nov 2026
Healthy5 Warnings

Healthy: vulnerability published 27 Oct 2026, fixed in 4.2.0.

81/ 100 Canary Score
Sub-scores for WP Post Author - Author Box, Multiple Authors, Guest Authors & Custom Avatars
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 27 Oct 2026, fixed in 4.2.0. Update to version 4.2.0 or later.27 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 27 Oct 2026, fixed in 4.2.0. Update to version 4.2.0 or later.27 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 4.1.0. Update to version 4.1.0 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 4.1.0. Update to version 4.1.0 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 7 Oct 2026, fixed in 4.0.1. Update to version 4.0.1 or later.7 Oct 2026Evidence
  • InfoSEC-39 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
afthemes14 Mar 2018 to 20 Oct 2026, 97 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
15 days ago
Releases, 24 months
2
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter for WP Post Author - Author Box, Multiple Authors, Guest Authors & Custom Avatars
Q1 20240
Q2 20240
Q3 20245
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20261
Q3 20260
Q4 20261

Last release 20 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
27 Oct 2026Post Author <= 4.1.0 - Missing Authorization5.3<= 4.1.04.2.0n/a
27 Oct 2026Post Author <= 4.1.0 - Unauthenticated Information Exposure5.3<= 4.1.04.2.0n/a
9 Oct 2026WP Post Author 4.0.0 - Authenticated (Contributor+) SQL Injection6.54.0.0 to 4.1.04.1.0n/a
9 Oct 2026WP Post Author <= 4.0.0 - Authenticated (Admin+) SQL Injection4.9< 4.1.04.1.0n/a
7 Oct 2026WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars <= 4.0.0 - Authenticated (Administrator+) SQL Injection4.9<= 4.0.04.0.1n/a
4 Aug 2026WP Post Author <= 3.9.1 - Authenticated (Author+) SQL Injection6.5<= 3.9.13.10.00
26 Jun 2026WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars <= 3.9.1 - Authenticated (Contributor+) SQL Injection6.5<= 3.9.13.10.00
30 Apr 2026Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter6.1<= 3.8.33.8.4n/a
30 Dec 2024WP Post Author <= 3.8.2 - Authenticated (Administrator+) SQL Injection4.9<= 3.8.23.8.3n/a
11 Oct 2024Boost Your Blog's Engagement with WP Post Author <= 3.8.1 - Authenticated (Administrator+) SQL Injection7.2<= 3.8.13.8.2n/a
20 Jun 2024WP Post Author <= 3.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.6.73.6.8n/a
6 May 2024WP Post Author – Enhance Your Posts with the Author Bio, Co-Authors, Guest Authors, and Post Rating System, including User Registration Form Builder <= 3.6.4 - Missing Authorization to Rating Manipulation4.3<= 3.6.43.6.5n/a
6 May 2024WP Post Author – Enhance Your Posts with the Author Bio, Co-Authors, Guest Authors, and Post Rating System, including User Registration Form Builder <= 3.7.4 - Missing Authorization4.3<= 3.7.43.7.5n/a
28 Jun 2023WP Post Author <= 3.2.3 - Privilege Escalation9.8<= 3.2.33.3.09

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for WP Post Author - Author Box, Multiple Authors, Guest Authors & Custom Avatars
Q4 20235.0
Q3 20245.0
Q4 20245.0
Q4 20253.0
Q2 20263.0

Average rating fell from 5.0 to 3.0 between Q4 2023 and Q2 2026.

Rating distribution
5 star17
4 star1
3 star0
2 star0
1 star4
Latest low reviews

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP Post Author - Author Box, Multiple Authors, Guest Authors & Custom Avatars
4 May 20262,253
11 May 20264,169
18 May 20264,706
25 May 202610,490
1 Jun 20265,199
8 Jun 20265,095
15 Jun 20269,726
22 Jun 20265,894
29 Jun 20265,192
6 Jul 20264,669
13 Jul 20264,398
20 Jul 20264,246
27 Jul 20264,482
3 Aug 20264,703
10 Aug 20264,658
17 Aug 20264,781
24 Aug 20269,888
31 Aug 20265,572
7 Sep 20264,970
14 Sep 20265,139
21 Sep 20265,026
28 Sep 20264,685
5 Oct 202623,061
12 Oct 202611,086
19 Oct 202610,810
26 Oct 20266,257
2 Nov 2026793

Weekly downloads over the last 4 weeks are 14% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Simple Author BoxScore 91 · 90,000+Co-Authors PlusScore 91 · 20,000+Molongui Authorship - Author Boxes, Guest Authors & Co-Authors for WordPressScore 91 · 10,000+VK Post Author DisplayScore 91 · 10,000+Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress AuthorsScore 86 · 20,000+

Facts

Version4.2.0
AuthorAF themes
Added14 Mar 2018
Last updated20 Oct 2026
Active installs10,000+
Requires WordPress3.0
Tested up to7.1.4
Requires PHPnot stated
CategoryCommunity & Social > Membership Sites & Subscriptions
Tagsauthor bio, author box, guest author, Author Profile, author social icons

Other plugins by this author: AF Companion - Starter Sites, Speed Booster & Growth Suite for Professional Publishing, Latest Posts Block - Dynamic Posts Grid, Posts List, Posts Tile with Stunning Layouts for WordPress Blogs & Pages, Magic Content & CTA Box Builder - Advanced Gutenberg Blocks for Flexible Page Sections, Headers, Buttons, Shape Dividers, and Layout Options, AF Translate - AI Translation Editor, PO Editor & POT Generator for WordPress

Questions

Is WP Post Author - Author Box, Multiple Authors, Guest Authors & Custom Avatars still maintained?

WP Post Author - Author Box, Multiple Authors, Guest Authors & Custom Avatars was last updated on 20 Oct 2026. Its Canary status is Healthy.

Is WP Post Author - Author Box, Multiple Authors, Guest Authors & Custom Avatars safe?

WP Post Author - Author Box, Multiple Authors, Guest Authors & Custom Avatars has no open unpatched vulnerabilities on record. 9 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns WP Post Author - Author Box, Multiple Authors, Guest Authors & Custom Avatars?

The wordpress.org author is AF themes. Recent committers: afthemes, plugin-master. We have recorded no ownership change.

What can I use instead of WP Post Author - Author Box, Multiple Authors, Guest Authors & Custom Avatars?

Plugins in the same category with a higher Canary Score: Simple Author Box, Co-Authors Plus, Molongui Authorship - Author Boxes, Guest Authors & Co-Authors for WordPress, VK Post Author Display, Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue