WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 49% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ angryjerknxc

   4mo ago

   The plugin does its job. At least, for what I use it for. With that said, nagging me to leave a review or upgrade to pro every other day is a sure-fire way to receive a one-star review. Stop nagging users.

   Read on wp.org ↗
2. ★★★★★ rockstroh

   4mo ago

   funktioniert gut

   Read on wp.org ↗
3. ★★★★★ iamfels22

   9mo ago

   I love it

   Read on wp.org ↗
4. ★★★★★ hoffman1030

   10mo ago

   Can’t exactly use the plugin when it doesn’t work. Avatar doesn’t show up no matter what I do, and the only suggestion from documentation is to go to an admin menu that doesn’t exist. Uninstalling.

   Read on wp.org ↗
5. ★★★★★ raoulbtc

   1.9y ago

   this is the last time i’m writing this

   Read on wp.org ↗
6. ★★★★★ YodaSec Expose

   2.0y ago

   Wonderful plugin 👍

   Read on wp.org ↗
7. ★★★★★ mandatory1958

   2.7y ago

   One can easily choose this plugin and get the most outcome of it.

   Read on wp.org ↗
8. ★★★★★ ascen7

   2.9y ago

   I am very happy with it! It works great.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.9.0 New: Local Avatars support – Users can now upload and assign custom profile pictures directly via the WordPress Media Library. New: Performance optimization – Option to bypass Gravatar and host avatars locally for faster 3.9.0
2. — Version 3.8.3 Update: Security Improvement Update: General Improvement 3.8.3
3. — Version 3.8.2 Update: Security Improvement Update: General Improvement 3.8.2
4. — Version 3.8.1 Update: Security Improvement Update: General Improvement 3.8.1
5. — Version 3.8.0 New: Login page selection option added New: Register page selection option added New: Post Ratetd users list added 3.8.0
6. — Version 3.7.5 Update: Security Improvement Update: General Improvement 3.7.5

9 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.5 WP Post Author <= 3.9.1 - Authenticated (Author+) SQL Injection ↗
   2026-08-04 CVE-2026-11977 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.9.1 Patched in 3.10.0
2. Medium · 6.5 WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars <= 3.9.1 - Authenticated (Contributor+) SQL Injection ↗
   2026-06-26 CVE-2026-57643 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.9.1 Patched in 3.10.0
3. Medium · 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter ↗
   2026-04-30 CVE-2024-13362 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.8.3 Patched in 3.8.4
4. Medium · 4.9 WP Post Author <= 3.8.2 - Authenticated (Administrator+) SQL Injection ↗
   2024-12-30 CVE-2024-56247 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.8.2 Patched in 3.8.3
5. High · 7.2 Boost Your Blog's Engagement with WP Post Author <= 3.8.1 - Authenticated (Administrator+) SQL Injection ↗
   2024-10-11 CVE-2024-8757 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.8.1 Patched in 3.8.2
6. Medium · 6.4 WP Post Author <= 3.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-06-20 CVE-2024-37101 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.6.7 Patched in 3.6.8
7. Medium · 4.3 WP Post Author – Enhance Your Posts with the Author Bio, Co-Authors, Guest Authors, and Post Rating System, including User Registration Form Builder <= 3.6.4 - Missing Authorization to Rating Manipulation ↗
   2024-05-06 CVE-2024-34387 Missing Authorization Affects <= 3.6.4 Patched in 3.6.5
8. Medium · 4.3 WP Post Author – Enhance Your Posts with the Author Bio, Co-Authors, Guest Authors, and Post Rating System, including User Registration Form Builder <= 3.7.4 - Missing Authorization ↗
   2024-05-06 CVE-2024-34389 Missing Authorization Affects <= 3.7.4 Patched in 3.7.5
9. Critical · 9.8 WP Post Author <= 3.2.3 - Privilege Escalation ↗
   2023-06-28 Improper Privilege Management Affects <= 3.2.3 Patched in 3.3.0

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 2 languages, 1 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2023-07-06 20K+ → 10K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Simple Author Box 90K+ installs · 4.3★ · 5 shared tags A
• Smart Author Box Widget 60+ installs · 3.6★ · 5 shared tags C
• Cool Author Box – For Widget and Post Content 600+ installs · 4.1★ · 4 shared tags B
• Meta Author Box — installs · 3.6★ · 4 shared tags C
• Magic Author Box — installs · 3.6★ · 4 shared tags B
• Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress 10K+ installs · 4.6★ · 3 shared tags A

Embed this report card

Drop a live Pulse card for WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars into a readme, a review or a deck. It updates itself.

WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars: 10K+ active installs, 4.2★ (22 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/wp-post-author