Skip to content
PluginCanary

Checkout Files Upload for WooCommerce

by WP Wham · 7,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 21 Oct 2026, 8 releases in 24 months, no unpatched vulnerabilities.

89/ 100 Canary Score
Sub-scores for Checkout Files Upload for WooCommerce
Ownership100
Maintenance100
Security70
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Checkout Files Upload for WooCommerce still maintained?
Yes. Last release 21 Oct 2026, 8 releases in the last 24 months. 21 Oct 2026 · wordpress.org
Who owns Checkout Files Upload for WooCommerce, and has it changed hands?
No change recorded. Main committer wpwham since Oct 2018. 3 Nov 2026 · SVN log
Was Checkout Files Upload for WooCommerce removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Checkout Files Upload for WooCommerce safe?
5 known vulnerabilities, all fixed (latest in 2.4.0). Not on the exploited list. 28 Oct 2026 · Wordfence Intelligence
Is the latest Checkout Files Upload for WooCommerce update safe to install?
No ownership change before 2.4.0. No one-star spike after it. 21 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
wpwham2 Oct 2018 to 21 Oct 2026, 57 commits

1 committer recorded. No ownership change since 2016.

Maintenance

Last release
15 days ago
Releases, 24 months
8
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Checkout Files Upload for WooCommerce
Q1 20240
Q2 20240
Q3 20241
Q4 20240
Q1 20250
Q2 20252
Q3 20250
Q4 20250
Q1 20262
Q2 20262
Q3 20261
Q4 20261

Last release 21 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.4.

Rating distribution
5 star10
4 star2
3 star1
2 star0
1 star1

Security record

4 vulnerabilities in 24 months (5 on record), all patched (latest fixed in 2.4.0).

Show 5 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
28 Oct 2026Checkout Files Upload for WooCommerce < 2.4.0 - Unauthenticated Arbitrary File Upload9.8< 2.4.02.4.0Patched before disclosure
12 May 2026Checkout Files Upload for WooCommerce <= 2.2.5 - Unauthenticated Insecure Direct Object Reference5.3<= 2.2.52.2.64
17 Nov 2025Checkout Files Upload for WooCommerce <= 2.2.1 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.2.12.2.2Patched before disclosure
16 Apr 2025Checkout Files Upload for WooCommerce <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.2.02.2.19
4 May 2022Checkout Files Upload for WooCommerce <= 2.1.2 - Cross-Site Scripting6.1<= 2.1.22.1.36

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

7,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Checkout Files Upload for WooCommerce
4 May 2026568
11 May 20263,607
18 May 20261,562
25 May 2026639
1 Jun 2026503
8 Jun 2026392
15 Jun 2026368
22 Jun 2026287
29 Jun 2026278
6 Jul 2026307
13 Jul 2026296
20 Jul 2026258
27 Jul 2026290
3 Aug 2026301
10 Aug 2026269
17 Aug 2026291
24 Aug 2026255
31 Aug 20262,950
7 Sep 2026666
14 Sep 2026783
21 Sep 2026586
28 Sep 2026538
5 Oct 2026497
12 Oct 2026463
19 Oct 20262,544
26 Oct 20262,175
2 Nov 2026171

Weekly downloads over the last 4 weeks are 65% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Flexible Checkout Fields for WooCommerceScore 97 · 80,000+Checkout Field Editor (Checkout Manager)Score 96 · 400,000+zipaddr-jpScore 96 · 50,000+Checkout Field Editor for WooCommerceScore 96 · 20,000+

Facts

Version2.4.0
AuthorWP Wham
Added6 Sep 2016
Last updated21 Oct 2026
Active installs7,000+
Requires WordPress4.4
Tested up to7.1.4
Requires PHPnot stated
CategoryE-commerce & Shopping
Tagscheckout, woocommerce, woo-commerce, checkout files upload

Other plugins by this author: Currency Switcher for WooCommerce, Product Visibility by User Role for WooCommerce, Product Open Pricing (Name Your Price) for WooCommerce, More Sorting Options for WooCommerce, SKU Generator for WooCommerce, Custom Price Labels for WooCommerce, All Currencies for WooCommerce, Product Visibility by Country for WooCommerce, Multi Order for WooCommerce

Questions

Is Checkout Files Upload for WooCommerce still maintained?

Yes. Last release 21 Oct 2026, 8 releases in the last 24 months.

Who owns Checkout Files Upload for WooCommerce, and has it changed hands?

No change recorded. Main committer wpwham since Oct 2018.

Was Checkout Files Upload for WooCommerce removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Checkout Files Upload for WooCommerce safe?

5 known vulnerabilities, all fixed (latest in 2.4.0). Not on the exploited list.

Is the latest Checkout Files Upload for WooCommerce update safe to install?

No ownership change before 2.4.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue