Zotpress
Healthy: vulnerability published 8 Oct 2026, fixed in 7.4.5.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 85 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| kseaborn | 5 Feb 2011 to 25 Oct 2026, 166 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 10 days ago
- Releases, 24 months
- 7
- Tested up to
- 7.1 current
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 2 |
| Q3 2024 | 3 |
| Q4 2024 | 1 |
| Q1 2025 | 0 |
| Q2 2025 | 2 |
| Q3 2025 | 0 |
| Q4 2025 | 2 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 2 |
| Q4 2026 | 1 |
Last release 25 Oct 2026. Tested with WordPress 7.1 (current).
Support
0% of 2 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 8 Oct 2026 | Zotpress <= 7.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 7.4.4 | 7.4.5 | 18 |
| 10 Jun 2025 | ZotPress <= 7.3.15 - Authenticated (Author+) Stored Cross-Site Scripting via 'nickname' | 6.4 | <= 7.3.15 | 7.4 | 0 |
| 4 Nov 2024 | Zotpress <= 7.3.12 - Missing Authorization | 4.3 | <= 7.3.12 | 7.3.13 | 0 |
| 30 Sep 2024 | Zotpress <= 7.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 7.3.10 | 7.3.11 | 0 |
| 7 May 2024 | Zotpress <= 7.3.9 - Authenticated (Contributor+) Cross-Site Scripting | 6.4 | <= 7.3.9 | 7.3.10 | 0 |
| 28 Mar 2024 | Zotpress <= 7.3.7 - Authenticated (Contributor+) SQL Injection | 9.9 | <= 7.3.7 | 7.3.8 | 0 |
| 10 Sep 2023 | Zotpress <= 7.3.4 - Reflected Cross-Site Scripting via 'PHP_SELF' | 6.1 | <= 7.3.4 | 7.3.5 | 0 |
| 16 May 2023 | Zotpress <= 7.3.3 - Reflected Cross-Site Scripting | 5.4 | <= 7.3.3 | 7.3.4 | 1 |
| 6 Oct 2016 | Zotpress < 6.1.3 - SQL Injection | 9.8 | < 6.1.3 | 6.1.3 | 0 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.9 from 66 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 63 |
|---|---|
| 4 star | 2 |
| 3 star | 1 |
| 2 star | 0 |
| 1 star | 0 |
Momentum
2,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 58 |
|---|---|
| 11 May 2026 | 92 |
| 18 May 2026 | 73 |
| 25 May 2026 | 92 |
| 1 Jun 2026 | 102 |
| 8 Jun 2026 | 99 |
| 15 Jun 2026 | 81 |
| 22 Jun 2026 | 60 |
| 29 Jun 2026 | 103 |
| 6 Jul 2026 | 1,658 |
| 13 Jul 2026 | 266 |
| 20 Jul 2026 | 240 |
| 27 Jul 2026 | 228 |
| 3 Aug 2026 | 1,525 |
| 10 Aug 2026 | 524 |
| 17 Aug 2026 | 286 |
| 24 Aug 2026 | 252 |
| 31 Aug 2026 | 202 |
| 7 Sep 2026 | 190 |
| 14 Sep 2026 | 176 |
| 21 Sep 2026 | 192 |
| 28 Sep 2026 | 193 |
| 5 Oct 2026 | 233 |
| 12 Oct 2026 | 178 |
| 19 Oct 2026 | 648 |
| 26 Oct 2026 | 1,811 |
| 2 Nov 2026 | 82 |
Weekly downloads over the last 4 weeks are 90% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 7.4.5 |
|---|---|
| Author | Katie |
| Added | 5 Feb 2011 |
| Last updated | 25 Oct 2026 |
| Active installs | 2,000+ |
| Requires WordPress | 3.6 |
| Tested up to | 7.1.4 |
| Requires PHP | not stated |
| Category | Content Management > Blog & Article Publishing |
| Tags | zotero, bibliography, publications, citation manager, academic blogging |
Questions
Is Zotpress still maintained?
Zotpress was last updated on 25 Oct 2026. Its Canary status is Healthy.
Is Zotpress safe?
Zotpress has no open unpatched vulnerabilities on record. 3 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Zotpress?
The wordpress.org author is Katie. Recent committers: kseaborn, plugin-master. We have recorded no ownership change.
What can I use instead of Zotpress?
We have no healthier plugin in the same category on record yet.