Skip to content
PluginCanary

UpsellWP

UpsellWP - Upsell and Related Products Offers for WooCommerce
by flycart · 5,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 15 Sep 2026, 16 releases in 24 months, no unpatched vulnerabilities.

87/ 100 Canary Score
Sub-scores for UpsellWP
Ownership100
Maintenance100
Security85
Support70
Reputation70

How the score works

Quick answers

Is UpsellWP still maintained?
Yes. Last release 15 Sep 2026, 16 releases in the last 24 months. 15 Sep 2026 · wordpress.org
Who owns UpsellWP, and has it changed hands?
No change recorded. Main committer upsellwpdev since Jul 2024. 3 Nov 2026 · SVN log
Was UpsellWP removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is UpsellWP safe?
3 known vulnerabilities, all fixed (latest in 2.2.10). Not on the exploited list. 16 Sep 2026 · Wordfence Intelligence
Is the latest UpsellWP update safe to install?
No ownership change before 2.2.10. No one-star spike after it. 15 Sep 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master16 May 2023 to 16 May 2023, 1 commits
flycartdev18 May 2023 to 19 Jun 2024, 55 commits
upsellwpdev17 Jul 2024 to 15 Sep 2026, 43 commits

3 committers recorded. No ownership change since 2023.

Maintenance

Last release
50 days ago
Releases, 24 months
16
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter
Releases per quarter for UpsellWP
Q1 20242
Q2 20245
Q3 20242
Q4 20242
Q1 20253
Q2 20251
Q3 20253
Q4 20251
Q1 20262
Q2 20263
Q3 20262
Q4 20260

Last release 15 Sep 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.9.

Rating distribution
5 star142
4 star2
3 star1
2 star2
1 star3

Security record

3 vulnerabilities in 24 months, all patched (latest fixed in 2.2.10).

Show 3 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
16 Sep 2026UpsellWP <= 2.2.9 - Unauthenticated Payment Bypass5.3<= 2.2.92.2.10Patched before disclosure
14 Mar 2026UpsellWP - WooCommerce Upsell and Related Products Offers <= 2.2.4 - Authenticated (Shop manager+) SQL Injection4.9<= 2.2.42.2.5Patched before disclosure
28 Jan 2026UpsellWP <= 2.2.5 - Missing Authorization4.3<= 2.2.52.2.692

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

5,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for UpsellWP
4 May 2026373
11 May 2026474
18 May 2026613
25 May 20261,911
1 Jun 2026849
8 Jun 2026587
15 Jun 2026386
22 Jun 2026312
29 Jun 2026293
6 Jul 2026507
13 Jul 2026284
20 Jul 2026284
27 Jul 2026238
3 Aug 2026285
10 Aug 20262,597
17 Aug 2026697
24 Aug 2026439
31 Aug 2026399
7 Sep 2026386
14 Sep 20262,878
21 Sep 20261,053
28 Sep 2026566
5 Oct 2026465
12 Oct 2026382
19 Oct 2026453
26 Oct 2026421
2 Nov 202660

Weekly downloads over the last 4 weeks are 51% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Modern CartScore 93 · 60,000+Side Cart WoocommerceScore 92 · 70,000+Sliding Cart for WooCommerce byScore 92 · 30,000+Fluid Checkout for WooCommerceScore 92 · 20,000+Quick Buy Now Button for WooCommerceScore 91 · 50,000+

Facts

Version2.2.10
Authorflycart
Added18 May 2023
Last updated15 Sep 2026
Active installs5,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.0
CategoryE-commerce & Shopping
Tagsupsell, order bump, woocommerce, related products, woocommerce upsell

Other plugins by this author: Discount Rules for WooCommerce, Loyalty Points Rewards and Referral for WooCommerce - WPLoyalty, UpsellWP Side Cart for WooCommerce

Questions

Is UpsellWP still maintained?

Yes. Last release 15 Sep 2026, 16 releases in the last 24 months.

Who owns UpsellWP, and has it changed hands?

No change recorded. Main committer upsellwpdev since Jul 2024.

Was UpsellWP removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is UpsellWP safe?

3 known vulnerabilities, all fixed (latest in 2.2.10). Not on the exploited list.

Is the latest UpsellWP update safe to install?

No ownership change before 2.2.10. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue