W4 Post List
by Shazzad Hossain Khan · Login & Users
Build lists the Query Loop can't: posts grouped by year, category or author, term lists and user directories — via block, shortcode or widget.
90 health vs 59 average across 1,442 Login & Users plugins
Directory ranking optimization
How it's scored →How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.
Excellent listing optimization
Well tuned across the board
Daily downloads
Since 2022-10-05 · 1,424 days · wp.org + Plugin Pulse archive
30-day downloads
Rolling 30-day volume · peaks are release surges
7.6K
now · peak 8.3K
Directory rank vs rivals
wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you
Rating trend
Star average over time · dips mark rough releases
Update activity
How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.
Release cadence
Actively maintainedHow often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.
7
releases in the last 12 months
1mo ago
latest release · v2.5.9
44
tagged releases on record
Recent releases
What its installed base runs
via wordpress.orgShare of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.
Estimated active installs
The public count shows “3K+”. Our estimate pins where the real number sits.
Refined from the date this plugin crossed into its current band.
Install history · since 2015-03-10 · 1,453 observations
Estimated value
What this plugin might earn a year, and what it might sell for. Modeled from public signals; we don't see anyone's books.
Est. annual revenue
Est. acquisition value
No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. The recent download trend is too spiky to read.
Details
Recent reviews
All reviews on wp.org ↗- ★★★★★ lichtenstern4mo ago
For me it did simplify the process of showing custom post types without handling all the difficulties of different archive-types for them. So I can produce lists for my own.
Read on wp.org ↗ - ★★★★★ brasofilo2.6y ago
Very good plugin, simple and complete. It just gets the job done.
Read on wp.org ↗ - ★★★★★ Jakub3.0y ago
The plugin has a lot of settings, really a lot. But I can’t make it work just to render a simple list of posts (without any filters or advanced settings). Seems broken a bit. But it has potential to be a great plugin.
Read on wp.org ↗ - ★★★★★ Airtrooper3.2y ago
I’ve been searching high and low for a Knowledge Base category List plugin for several months, there are sooo many legacy, abandoned and over complicated ones out there. This is actually really easy to use and has lots of potential. I’m also using as a Table of Contents… should be renamed to suit its versatility. Well done, great plugin!
Read on wp.org ↗ - ★★★★★ Franz Wieser3.5y ago
its genial to use data from WordPress (post, Tax, User) to publish as list, blocks, grids, and any other ideas.
Read on wp.org ↗ - ★★★★★ jorgejgm3.7y ago
Thank you very much for your work!!!
Read on wp.org ↗ - ★★★★★ hornblower5.0y ago
Shazzad, thank you for writing this awesome plugin. It was exactly what I needed to create a custom post listing – especially with the avatar support. The ability to influence every part and position of every component and part of an archive post listing was quite simply revelatroy. This is the only plugin that I have found after hours of searching that does this – nothing else even came close! Thank you again – if I could give it more than 5 stars I would.
Read on wp.org ↗ - ★★★★★ Anax5.1y ago
This is an excellent plugin with tons of customization for creation of custom filtered post lists and their templates. Outstanding work.
Read on wp.org ↗
Latest updates
via wp.org changelogRecent releases and news for this plugin
- — Version 2.7.0 New: First-run onboarding – fresh installs get a draft “Example: Recent Posts” list, so there is always a working configuration to open and learn from. New: A dismissible “Get started” notice after activation walks throu 2.7.0
- — Version 2.6.0 New: Automated test suite now gates every release – characterization snapshots freeze the rendered output of all five list types (including grouped lists and pagination) so updates can no longer break existing lists unno 2.6.0
- — Version 2.5.9 New: Added a WordPress Playground blueprint that powers the Live Preview button on the wordpress.org plugin page. 2.5.9
- — Version 2.5.8 Fix: Documentation examples used unregistered template tags ([post_link], [group_name], [group_link]) and invalid HTML, so copy-pasting them produced broken output. All examples now use registered tags with valid loop ma 2.5.8
- — Version 2.5.7 Improved: Rewrote the wordpress.org listing for accuracy — removed the reference to the retired TinyMCE button, repositioned the description around grouped lists and user directories, expanded the FAQ from real support q 2.5.7
- — Version 2.5.6 New: Post status options now include all registered statuses, including custom ones (e.g. “Expired” from job listing plugins) – https://github.com/w4devInc/w4-post-list/issues/88. Tested up to WordPress 7.0.2. 2.5.6
Known vulnerabilities
via Wordfence Intelligence6 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.
- 2023-03-22 CVE-2023-1371 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.4.5 Patched in 2.4.6
- Medium · 6.4 W4 Post List <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Options ↗2023-03-22 CVE-2023-0374 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4.5 Patched in 2.4.6
- 2023-03-22 CVE-2023-1373 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4.5 Patched in 2.4.6
- Medium · 6.4 W4 Post List <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'w4pl[no_items_text]' ↗2023-03-08 CVE-2023-27413 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4.4 Patched in 2.4.5
- Medium · 4.3 Appsero <= 1.2.1 - Missing Authorization ↗2022-12-16 Missing Authorization Affects <= 2.4.2 Patched in 2.4.3
- Medium · 4.3 Appsero <= 1.2.0 - Cross-Site Request Forgery ↗
Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.
CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.
Behavioral tests
via WP HiveAutomated install-time checks, tested on PHP 8.1.12 · WP 7.0.1
Languages
via translate.wordpress.orgTranslated into 133 languages, 1 at 90% or more
Plus 109 more locales with partial translations.
Growth timeline
Install-tier crossings we have observed, and how long each tier took to outgrow
- 2026-03-09 4K+ → 3K+ down after 600 days in tier
- 2024-07-17 5K+ → 4K+ down after 1 days in tier
- 2024-07-16 4K+ → 5K+ up after 1 days in tier
- 2024-07-15 5K+ → 4K+ down after 1 days in tier
- 2024-07-14 4K+ → 5K+ up after 2 days in tier
- 2024-07-12 5K+ → 4K+ down after 1 days in tier
- 2024-07-11 4K+ → 5K+ up after 1 days in tier
- 2024-07-10 5K+ → 4K+ down
Competes with
The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).
-
Advanced Post Block – Display Your Posts Exactly How You Want 10K+ installs · 4.1★ · 2 shared tags B -
Post Content Shortcodes 2K+ installs · 4.6★ · 2 shared tags D -
Ultimate Post List 2K+ installs · 4.2★ · 2 shared tags A -
WP Sitemap Pages and Posts 1K+ installs · 4.0★ · 2 shared tags B -
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget 900+ installs · 4.1★ · 2 shared tags A -
Post Blocks & Tools 500+ installs · 3.6★ · 2 shared tags B
Embed this report card
Drop a live Pulse card for W4 Post List into a readme, a review or a deck. It updates itself.
<iframe src="https://plugins.wpmayor.com/embed/w4-post-list" width="480" height="300" style="border:0" loading="lazy" title="W4 Post List — Plugin Pulse"></iframe> W4 Post List: 3K+ active installs, 4.7★ (94 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/w4-post-list