User Submitted Posts – Enable Users to Submit Posts from the Front End

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

1. ★★★★★ anliajewellery

   3mo ago

   Thank you so much for letting us have a good and thoughtful plugin to use that works well!

   Read on wp.org ↗
2. ★★★★★ andreywesta

   5mo ago

   very very good! i recomended!

   Read on wp.org ↗
3. ★★★★★ monkeybralf

   5mo ago

   Easy to use and helpful

   Read on wp.org ↗
4. ★★★★★ nmak

   5mo ago

   Great plugin works like a charm

   Read on wp.org ↗
5. ★★★★★ scomor74

   6mo ago

   Great plugin for a WordPress newbie like me 🙂

   Read on wp.org ↗
6. ★★★★★ rickjohns

   7mo ago

   Brilliant. It does what it says without any fussing or fiddling. Very easy to set up and very easy for front end users to post. Well done.

   Read on wp.org ↗
7. ★★★★★ Putra Matahari

   8mo ago

   I’ve been using the User Submitted Posts plugin for a few months now, and I can’t recommend it enough! As someone who runs a community-driven website, I needed an easy way to let users contribute content without giving them full access to the backend. This plugin does exactly that, and more! The setup was super straightforward, and I was able to customize the submission form to match the style of my site with just a few clicks. The plugin also lets me control exactly what users can submit, including categories, tags, and even custom fields, which is incredibly helpful for organizing content. One of the best features is how smoothly it integrates into the front-end. Users can submit posts directly from the front end, and the submissions are queued for review, so I have full control over what gets published. It’s perfect for keeping the site organized while encouraging user engagement!

   Read on wp.org ↗
8. ★★★★★ tomlandon

   9mo ago

   Thank you very much, but why cannot safe any changes in the form settings?

   Read on wp.org ↗

12 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 User Submitted Posts <= 20260113 - Incorrect Authorization to Unauthenticated Category Restriction Bypass via 'user-submitted-category' Parameter ↗
   2026-02-17 CVE-2026-2126 Incorrect Authorization Affects <= 20260113 Patched in 20260217
2. High · 7.2 User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20251210 - Unauthenticated Stored Cross-Site Scripting via Custom Field ↗
   2026-01-23 CVE-2026-0800 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 20251210 Patched in 20260110
3. Medium · 6.4 User Submitted Posts <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode ↗
   2026-01-15 CVE-2026-0913 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 20260110 Patched in 20260113
4. Medium · 5.3 User Submitted Posts <= 20251121 - Unauthenticated Open Redirect ↗
   2026-01-01 CVE-2025-68509 URL Redirection to Untrusted Site ('Open Redirect') Affects <= 20251121 Patched in 20251210
5. Medium · 4.4 User Submitted Posts <= 20241026 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2025-04-02 CVE-2025-2874 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 20241026 Patched in 20250327
6. Medium · 4.4 User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20240319 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2024-06-22 CVE-2024-5002 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 20240319 Patched in 20240516
7. Critical · 9.8 User Submitted Posts <= 20230902 - Unauthenticated Arbitrary File Upload ↗
   2023-10-10 CVE-2023-45603 Unrestricted Upload of File with Dangerous Type Affects <= 20230902 Patched in 20230914
8. Medium · 6.4 User Submitted Posts <= 20230901 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2023-09-06 CVE-2023-7251 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 20230901 Patched in 20230902
9. Medium · 6.4 User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2023-09-05 CVE-2023-4779 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 20230811 Patched in 20230901
10. High · 7.2 User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content' ↗
    2023-08-14 CVE-2023-4308 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 20230809 Patched in 20230811
11. Critical · 9.8 User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload ↗
    2019-05-02 CVE-2019-25138 Unrestricted Upload of File with Dangerous Type Affects < 20190426 Patched in 20190426
12. High · 7.2 User Submitted Posts < 20160215 - Reflected Cross-Site Scripting ↗
    2016-02-10 CVE-2016-11001 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 20160215 Patched in 20160215

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 52 languages, 1 at 90% or more

Plus 28 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-12-07 20K+ → 10K+ down after 2 days in tier
2. 2025-12-05 10K+ → 20K+ up after 1 days in tier
3. 2025-12-04 20K+ → 10K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Easy Post Submission – Frontend Posting, Guest Publishing & Submit Content for WordPress 4K+ installs · 4.1★ · 3 shared tags B
• Guest posting / Frontend Posting / Front Editor – WP Front User Submit 100+ installs · 4.6★ · 3 shared tags A
• U UGC Creator 10+ installs · 3.6★ · 2 shared tags D
• B BigIdeas — installs · 3.6★ · 2 shared tags D
• User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission 20K+ installs · 4.1★ · 1 shared tag A
• Guest Author 5K+ installs · 4.0★ · 1 shared tag B

Embed this report card

Drop a live Pulse card for User Submitted Posts – Enable Users to Submit Posts from the Front End into a readme, a review or a deck. It updates itself.

User Submitted Posts – Enable Users to Submit Posts from the Front End: 10K+ active installs, 4.8★ (911 reviews). Plugin Pulse (WP Mayor), as of 2026-08-28. https://plugins.wpmayor.com/plugin/user-submitted-posts