Skip to content
PluginCanary

WPAdverts

WPAdverts - Classifieds Plugin
by Greg Winiarski · 4,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 7 Oct 2026, 19 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for WPAdverts
Ownership100
Maintenance100
Security60
SupportNo data
ReputationNo data

How the score works

Quick answers

Is WPAdverts still maintained?
Yes. Last release 7 Oct 2026, 19 releases in the last 24 months. 7 Oct 2026 · wordpress.org
Who owns WPAdverts, and has it changed hands?
No change recorded. Main committer gwin since Aug 2015. 3 Nov 2026 · SVN log
Was WPAdverts removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is WPAdverts safe?
16 known vulnerabilities, all fixed (latest in 2.3.5). Not on the exploited list. 9 Oct 2026 · Wordfence Intelligence
Is the latest WPAdverts update safe to install?
No ownership change before 2.3.5. No one-star spike after it. 7 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
gwin16 Aug 2015 to 7 Oct 2026, 188 commits

1 committer recorded. No ownership change since 2015.

Maintenance

Last release
28 days ago
Releases, 24 months
19
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter
Releases per quarter for WPAdverts
Q1 20242
Q2 20240
Q3 20243
Q4 20243
Q1 20252
Q2 20254
Q3 20251
Q4 20253
Q1 20262
Q2 20262
Q3 20262
Q4 20261

Last release 7 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.8.

Rating distribution
5 star149
4 star3
3 star3
2 star1
1 star4

Security record

14 vulnerabilities in 24 months (16 on record), all patched (latest fixed in 2.3.5).

Show 16 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
9 Oct 2026WPAdverts <= 2.3.4 - Unauthenticated Stored Cross-Site Scripting via 'adverts_location' Parameter7.2<= 2.3.42.3.5Patched before disclosure
8 Oct 2026WPAdverts - Classifieds Plugin <= 2.3.4 - Reflected Cross-Site Scripting6.1<= 2.3.42.3.5Patched before disclosure
8 Oct 2026WPAdverts - Classifieds Plugin <= 2.3.4 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.3.42.3.5Patched before disclosure
8 Sep 2026WPAdverts - Classifieds Plugin <= 2.3.3 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.3.32.3.4Patched before disclosure
17 Aug 2026WPAdverts <= 2.3.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via classifieds-types REST Endpoint7.5<= 2.3.22.3.3Patched before disclosure
1 Jul 2026WPAdverts - Classifieds Plugin <= 2.3.1 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.3.12.3.2Patched before disclosure
22 Apr 2026WPAdverts - Classifieds Plugin <= 2.3.0 - Missing Authorization5.3<= 2.3.02.3.1Patched before disclosure
7 Jan 2026WPAdverts - Classifieds Plugin <= 2.3.0 - Missing Authorization4.3<= 2.3.02.3.196
16 Jul 2025WPAdverts <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.2.52.2.6Patched before disclosure
12 Jun 2025WPAdverts <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.2.42.2.5Patched before disclosure
19 May 2025WPAdverts <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.2.32.2.4Patched before disclosure
7 May 2025WPAdverts <= 2.2.2 - Authenticated (Contributor+) Local File Inclusion8.8<= 2.2.22.2.3Patched before disclosure
16 Apr 2025WPAdverts <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.2.12.2.2Patched before disclosure
20 Nov 2024WPAdverts - Classifieds Plugin <= 2.1.7 - Reflected Cross-Site Scripting6.1<= 2.1.72.1.8Patched before disclosure
29 Oct 2024WPAdverts - Classifieds Plugin <= 2.1.6 - Unauthenticated Stored Cross-Site Scripting via adverts_add Shortcode7.2<= 2.1.62.1.7Patched before disclosure
21 Jun 2024WPAdverts - Classifieds Plugin <= 2.1.2 - Cross-Site Request Forgery4.3<= 2.1.22.1.3Patched before disclosure

Changelog mentions of security fixes: 2.3.5 (XSS).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 2 support threads resolved in the last 2 months.

Momentum

4,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WPAdverts
4 May 2026179
11 May 2026301
18 May 2026372
25 May 2026265
1 Jun 20262,667
8 Jun 2026772
15 Jun 2026416
22 Jun 2026266
29 Jun 2026436
6 Jul 2026434
13 Jul 2026222
20 Jul 2026271
27 Jul 2026288
3 Aug 20263,081
10 Aug 2026528
17 Aug 2026667
24 Aug 2026333
31 Aug 20262,974
7 Sep 2026751
14 Sep 2026592
21 Sep 2026452
28 Sep 2026414
5 Oct 20263,207
12 Oct 2026812
19 Oct 2026700
26 Oct 2026589
2 Nov 202678

Weekly downloads over the last 4 weeks are 33% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

WP Job ManagerScore 98 · 70,000+Simple Job BoardScore 96 · 10,000+HireZootScore 94 · 30,000+Business Directory PluginScore 88 · 10,000+

Facts

Version2.3.5
AuthorGreg Winiarski
Added16 Aug 2015
Last updated7 Oct 2026
Active installs4,000+
Requires WordPress5.7
Tested up to7.1.4
Requires PHP7.0
CategoryE-commerce & Shopping
Tagsclassified, classifieds, classified ads, classifieds plugin, classifieds script

Other plugins by this author: Custom Login URL, BlackBox Debug Bar

Questions

Is WPAdverts still maintained?

Yes. Last release 7 Oct 2026, 19 releases in the last 24 months.

Who owns WPAdverts, and has it changed hands?

No change recorded. Main committer gwin since Aug 2015.

Was WPAdverts removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is WPAdverts safe?

16 known vulnerabilities, all fixed (latest in 2.3.5). Not on the exploited list.

Is the latest WPAdverts update safe to install?

No ownership change before 2.3.5. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue