Skip to content
PluginCanary

WP-PostRatings

by Lester Chan · 20,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 1 Sep 2026, 4 releases in 24 months, no unpatched vulnerabilities.

91/ 100 Canary Score
Sub-scores for WP-PostRatings
Ownership100
Maintenance100
Security100
Support70
Reputation70

How the score works

Quick answers

Is WP-PostRatings still maintained?
Yes. Last release 1 Sep 2026, 4 releases in the last 24 months. 1 Sep 2026 · wordpress.org
Who owns WP-PostRatings, and has it changed hands?
No change recorded. Main committer GamerZ since Feb 2006. 3 Nov 2026 · SVN log
Was WP-PostRatings removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is WP-PostRatings safe?
5 known vulnerabilities, all fixed (latest in 1.91.2). Not on the exploited list. 1 Aug 2024 · Wordfence Intelligence
Is the latest WP-PostRatings update safe to install?
No ownership change before 2.0.2. No one-star spike after it. 1 Sep 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
GamerZ10 Feb 2006 to 1 Sep 2026, 396 commits

1 committer recorded. No ownership change since 2006.

Maintenance

Last release
2 months ago
Releases, 24 months
4
Tested up to
7.1 current
Requires PHP
8.2 supported 8.2+
Releases per quarter
Releases per quarter for WP-PostRatings
Q1 20240
Q2 20240
Q3 20241
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20264
Q4 20260

Last release 1 Sep 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.4.

Average rating fell from 5.0 to 1.0 between Q2 2024 and Q4 2024.

Rating distribution
5 star133
4 star15
3 star9
2 star3
1 star18
Latest low reviews

Security record

5 vulnerabilities on record, all patched (latest fixed in 1.91.2).

Show 5 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
1 Aug 2024WP-PostRatings <= 1.91.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.91.11.91.2Patched before disclosure
16 Aug 2023WP-PostRatings <= 1.91 - IP Spoofing5.3<= 1.911.91.1Patched before disclosure
31 Aug 2022WP-PostRatings <= 1.89 - Race Condition4.3<= 1.891.90Patched before disclosure
24 Dec 2020WP-PostRatings <= 1.86 - Cross-Site Scripting5.5<= 1.861.86.1Patched before disclosure
6 Oct 2011WP-PostRatings <= 1.61 - SQL Injection8.8<= 1.611.62n/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 2 support threads resolved in the last 2 months.

Momentum

20,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP-PostRatings
4 May 2026167
11 May 2026286
18 May 2026282
25 May 2026299
1 Jun 2026355
8 Jun 2026391
15 Jun 2026336
22 Jun 2026303
29 Jun 2026328
6 Jul 2026291
13 Jul 2026307
20 Jul 20265,513
27 Jul 20262,104
3 Aug 20261,749
10 Aug 20264,204
17 Aug 20261,149
24 Aug 20263,738
31 Aug 20264,385
7 Sep 20261,034
14 Sep 20261,079
21 Sep 2026814
28 Sep 2026806
5 Oct 2026753
12 Oct 2026679
19 Oct 20261,326
26 Oct 2026982
2 Nov 2026169

Weekly downloads over the last 4 weeks are 37% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version2.0.2
AuthorLester Chan
Added8 Feb 2006
Last updated1 Sep 2026
Active installs20,000+
Requires WordPress6.8
Tested up to7.1.4
Requires PHP8.2
CategoryCommunication & Messaging > Transactional Email
Tagsajax, post, vote, rating, ratings

Other plugins by this author: WP-PageNavi, WP-Sweep, WP-PostViews, WP-DBManager, WP-Polls, WP-UserOnline, WP-ServerInfo, WP-ShowHide, WP-Print, WP-Ban, WP-DownloadManager, WP-Stats

Questions

Is WP-PostRatings still maintained?

Yes. Last release 1 Sep 2026, 4 releases in the last 24 months.

Who owns WP-PostRatings, and has it changed hands?

No change recorded. Main committer GamerZ since Feb 2006.

Was WP-PostRatings removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is WP-PostRatings safe?

5 known vulnerabilities, all fixed (latest in 1.91.2). Not on the exploited list.

Is the latest WP-PostRatings update safe to install?

No ownership change before 2.0.2. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue