Bitcoin Payments
Avoid: vulnerability published 13 Oct 2026 still has no fix after 14 days.
Capped at 39: a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 30 |
| Support | 70 |
| Reputation | 70 |
Quick answers
- Is Bitcoin Payments still maintained?
- Yes. Last release 9 Sep 2026, 12 releases in the last 24 months. 9 Sep 2026 · wordpress.org
- Who owns Bitcoin Payments, and has it changed hands?
- No change recorded. Main committer blockonomics since Mar 2017. 3 Nov 2026 · SVN log
- Was Bitcoin Payments removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is Bitcoin Payments safe?
- No. 1 known vulnerability has no fix in the current version. 13 Oct 2026 · Wordfence Intelligence
- Is the latest Bitcoin Payments update safe to install?
- No ownership change before 3.11.0. No one-star spike after it. 9 Sep 2026 · Release history
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 13 Oct 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.27 Oct 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| blockonomics | 17 Mar 2017 to 9 Sep 2026, 217 commits |
|---|
1 committer recorded. No ownership change since 2017.
Maintenance
- Last release
- 56 days ago
- Releases, 24 months
- 12
- Tested up to
- 7.0 vs 7.1
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 2 |
|---|---|
| Q2 2024 | 2 |
| Q3 2024 | 2 |
| Q4 2024 | 2 |
| Q1 2025 | 0 |
| Q2 2025 | 2 |
| Q3 2025 | 2 |
| Q4 2025 | 1 |
| Q1 2026 | 2 |
| Q2 2026 | 0 |
| Q3 2026 | 3 |
| Q4 2026 | 0 |
Last release 9 Sep 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 4.5.
| 5 star | 28 |
|---|---|
| 4 star | 3 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 4 |
Security record
1 vulnerability in 24 months (3 on record), 1 with no fix in the current version.
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 13 Oct 2026 | Bitcoin Payments - Blockonomics 3.11.0 - Unauthenticated Stored Cross-Site Scripting | 7.2 | 3.11.0 | No fix | n/a |
Show 2 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 3 Jan 2023 | WordPress Bitcoin Payments - Blockonomics <= 3.5.7 - Reflected Cross-Site Scripting | 6.1 | <= 3.5.7 | 3.5.8 | Patched before disclosure |
| 1 Jun 2021 | WordPress Bitcoin Payments - Blockonomics <= 3.2 - Reflected Cross-Site Scripting | 6.1 | < 3.3 | 3.3 | 29 |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
2,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 146 |
|---|---|
| 11 May 2026 | 199 |
| 18 May 2026 | 261 |
| 25 May 2026 | 202 |
| 1 Jun 2026 | 177 |
| 8 Jun 2026 | 158 |
| 15 Jun 2026 | 158 |
| 22 Jun 2026 | 147 |
| 29 Jun 2026 | 158 |
| 6 Jul 2026 | 145 |
| 13 Jul 2026 | 151 |
| 20 Jul 2026 | 138 |
| 27 Jul 2026 | 147 |
| 3 Aug 2026 | 1,585 |
| 10 Aug 2026 | 335 |
| 17 Aug 2026 | 282 |
| 24 Aug 2026 | 220 |
| 31 Aug 2026 | 205 |
| 7 Sep 2026 | 1,345 |
| 14 Sep 2026 | 494 |
| 21 Sep 2026 | 430 |
| 28 Sep 2026 | 304 |
| 5 Oct 2026 | 301 |
| 12 Oct 2026 | 278 |
| 19 Oct 2026 | 323 |
| 26 Oct 2026 | 320 |
| 2 Nov 2026 | 49 |
Weekly downloads over the last 4 weeks are 24% below the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 3.11.0 |
|---|---|
| Author | blockonomics |
| Added | 9 Mar 2017 |
| Last updated | 9 Sep 2026 |
| Active installs | 2,000+ |
| Requires WordPress | 5.6 |
| Tested up to | 7.0.8 |
| Requires PHP | 7.4 |
| Category | Payments & Financial > Payment Gateways & Processors |
| Tags | bitcoin, woocommerce, usdt payments, cryptocurrency, bitcoin payments |
Other plugins by this author: Bitcoin Easy Digital Downloads - Blockonomics
Questions
Is Bitcoin Payments still maintained?
Yes. Last release 9 Sep 2026, 12 releases in the last 24 months.
Who owns Bitcoin Payments, and has it changed hands?
No change recorded. Main committer blockonomics since Mar 2017.
Was Bitcoin Payments removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is Bitcoin Payments safe?
No. 1 known vulnerability has no fix in the current version.
Is the latest Bitcoin Payments update safe to install?
No ownership change before 3.11.0. No one-star spike after it.