Bopo
Healthy: maintained, last release 24 Oct 2026, no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 85 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is Bopo still maintained?
- Yes. Last release 24 Oct 2026, 0 releases in the last 24 months. 24 Oct 2026 · wordpress.org
- Who owns Bopo, and has it changed hands?
- No change recorded. Main committer vietmike since Nov 2021. 3 Nov 2026 · SVN log
- Was Bopo removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is Bopo safe?
- 3 known vulnerabilities, all fixed (latest in 1.2.4). Not on the exploited list. 26 Oct 2026 · Wordfence Intelligence
- Is the latest Bopo update safe to install?
- Not enough data. No release date on record for the current version. Release history
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 22 Oct 2021 to 22 Oct 2021, 1 commits |
|---|---|
| villatheme | 23 Oct 2021 to 3 May 2024, 2 commits |
| vietmike | 5 Nov 2021 to 22 Aug 2026, 29 commits |
| dragonlord47 | 21 Mar 2022 to 21 Mar 2022, 1 commits |
| mrt3vn | 21 May 2024 to 21 May 2024, 1 commits |
| dudleynguyen | 21 Nov 2024 to 26 Jul 2025, 8 commits |
| haidev | 8 Nov 2025 to 8 Nov 2025, 1 commits |
| mytrinh | 3 Apr 2026 to 3 Apr 2026, 1 commits |
| leminhhung | 24 Oct 2026 to 24 Oct 2026, 1 commits |
9 committers recorded. No ownership change since 2021.
Maintenance
- Last release
- 12 days ago
- Releases, 24 months
- 0
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
Last release 24 Oct 2026. Tested with WordPress 7.1 (current). Release history builds as we see new versions.
Reputation
Last 90 days: no reviews. Lifetime: 5.0.
| 5 star | 4 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Security record
3 vulnerabilities in 24 months, all patched (latest fixed in 1.2.4).
Show 3 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 26 Oct 2026 | Bopo - WooCommerce Product Bundle Builder <= 1.2.3 - Missing Authorization | 5.3 | <= 1.2.3 | 1.2.4 | n/a |
| 8 Jul 2026 | Bopo - WooCommerce Product Bundle Builder <= 1.2.0 - Reflected Cross-Site Scripting | 6.1 | <= 1.2.0 | 1.2.1 | n/a |
| 26 Jun 2026 | Bopo - WooCommerce Product Bundle Builder <= 1.1.6 - Unauthenticated Sensitive Information Exposure | 5.3 | <= 1.1.6 | 1.2.0 | n/a |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
900+ active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 1.2.4 |
|---|---|
| Author | VillaTheme |
| Added | 23 Oct 2021 |
| Last updated | 24 Oct 2026 |
| Active installs | 900+ |
| Requires WordPress | 6.2 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | E-commerce & Shopping |
| Tags | woocommerce, woocommerce bundle, woocommerce bundle plugin, product bundle woocommerce, Woocommerce product bundle |
Other plugins by this author: CURCY - Multi Currency for WooCommerce, Mailonix - Email Template Customizer for WooCommerce, Revopic - Photo Reviews for WooCommerce, Bulky - Bulk Edit Products for WooCommerce, Trakoo - Orders Tracking for WooCommerce, Choosly - Product Variations Swatches for WooCommerce, EU Cookies Bar for WordPress, ALD - Dropshipping and Fulfillment for AliExpress and WooCommerce, Faview - Virtual Reviews for WooCommerce, Sizor Product Size Chart For WooCommerce, EXMAGE - WordPress Image Links, Countix Sales Countdown Timer
Questions
Is Bopo still maintained?
Yes. Last release 24 Oct 2026, 0 releases in the last 24 months.
Who owns Bopo, and has it changed hands?
No change recorded. Main committer vietmike since Nov 2021.
Was Bopo removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is Bopo safe?
3 known vulnerabilities, all fixed (latest in 1.2.4). Not on the exploited list.
Is the latest Bopo update safe to install?
Not enough data. No release date on record for the current version.