Skip to content
PluginCanary

Customer Reviews for WooCommerce

by CusRev · 80,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 2 Nov 2026, 104 releases in 24 months, no unpatched vulnerabilities.

82/ 100 Canary Score
Sub-scores for Customer Reviews for WooCommerce
Ownership100
Maintenance100
Security60
Support62
Reputation85

How the score works

Quick answers

Is Customer Reviews for WooCommerce still maintained?
Yes. Last release 2 Nov 2026, 104 releases in the last 24 months. 2 Nov 2026 · wordpress.org
Who owns Customer Reviews for WooCommerce, and has it changed hands?
No change recorded. Main committer ivole since Apr 2017. 4 Nov 2026 · SVN log
Was Customer Reviews for WooCommerce removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Customer Reviews for WooCommerce safe?
29 known vulnerabilities, all fixed (latest in 5.123.0). Not on the exploited list. 1 Oct 2026 · Wordfence Intelligence
Is the latest Customer Reviews for WooCommerce update safe to install?
No ownership change before 5.127.0. No one-star spike after it. 2 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
ivole6 Apr 2017 to 2 Nov 2026, 497 commits

1 committer recorded. No ownership change since 2017.

Maintenance

Last release
3 days ago
Releases, 24 months
104
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Customer Reviews for WooCommerce
Q1 202422
Q2 202413
Q3 202429
Q4 202420
Q1 20258
Q2 202513
Q3 202510
Q4 202515
Q1 202613
Q2 202610
Q3 202610
Q4 20268

Last release 2 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (13 reviews). Lifetime: 4.8.

Average rating per quarter for Customer Reviews for WooCommerce
Q1 20265.0
Q2 20265.0
Q3 20265.0
Q4 20265.0

Average rating stayed at 5.0 between Q1 2026 and Q4 2026.

Rating distribution
5 star1438
4 star43
3 star12
2 star5
1 star41

Security record

14 vulnerabilities in 24 months (29 on record), all patched (latest fixed in 5.123.0).

Show 29 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
1 Oct 2026Customer Reviews for WooCommerce <= 5.122.0 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name7.2<= 5.122.05.123.0Patched before disclosure
24 Sep 2026Customer Reviews for WooCommerce <= 5.120.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' Parameter9.1<= 5.120.05.121.0Patched before disclosure
24 Sep 2026Customer Reviews for WooCommerce <= 5.120.0 - Missing Authorization5.3<= 5.120.05.121.0Patched before disclosure
31 Aug 2026Customer Reviews for WooCommerce < 5.118.0 - Unauthenticated Stored Cross-Site Scripting7.2< 5.118.05.118.0Patched before disclosure
27 Aug 2026Customer Reviews for WooCommerce <= 5.106.0 - Unauthenticated Stored Cross-Site Scripting via Aggregated Review Form7.2<= 5.106.05.107.0Patched before disclosure
6 Aug 2026Customer Reviews for WooCommerce <= 5.115.0 - Missing Authorization4.3<= 5.115.05.116.0Patched before disclosure
8 Jul 2026Customer Reviews for WooCommerce <= 5.113.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute6.4<= 5.113.05.114.0Patched before disclosure
24 Jun 2026Customer Reviews for WooCommerce <= 5.110.1 - Unauthenticated Stored Cross-Site Scripting7.2<= 5.110.15.111.0Patched before disclosure
15 Apr 2026Customer Reviews for WooCommerce <= 5.101.0 - Reflected Cross-Site Scripting via 'crsearch'6.1<= 5.101.05.102.0Patched before disclosure
9 Apr 2026Customer Reviews for WooCommerce <= 5.103.0 - Unauthenticated Authentication Bypass to Arbitrary Review Submission via 'key' Parameter5.3<= 5.103.05.104.0Patched before disclosure
12 Feb 2026Customer Reviews for WooCommerce <= 5.97.0 - Unauthenticated Stored Cross-Site Scripting via media[].href Parameter7.2<= 5.97.05.98.0Patched before disclosure
6 Jan 2026Customer Reviews for WooCommerce <= 5.93.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via displayName Parameter6.4<= 5.93.15.94.0Patched before disclosure
30 Jul 2025Customer Reviews for WooCommerce <= 5.80.2 - Unauthenticated Stored Cross-Site Scripting via `author` Parameter6.4<= 5.80.25.81.0Patched before disclosure
15 Nov 2024Customer Reviews for WooCommerce <= 5.61.0 - Missing Authorization to Authenticated (Subscriber+) Import Cancellation4.3<= 5.61.05.62.0Patched before disclosure
18 Apr 2024Customer Reviews for WooCommerce <= 5.47.0 - Reflected Cross-Site Scripting via 's'6.1<= 5.47.05.48.0Patched before disclosure
15 Apr 2024Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending4.3<= 5.46.05.47.0Patched before disclosure
15 Apr 2024Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Coupon Search4.3<= 5.46.05.47.0Patched before disclosure
6 Feb 2024Customer Reviews for WooCommerce <= 5.38.10 - Improper Authorization via submit_review5.3<= 5.38.125.39.0327
9 Jan 2024Customer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File Upload8.8<= 5.38.95.38.10264
27 Dec 2023Customer Reviews for WooCommerce <= 5.38.1 - Missing Authorization via CR_Manual5.3<= 5.38.15.38.2277
19 Nov 2023Customer Reviews for WooCommerce <= 5.38.1 - Missing Authorization via manual review reminders4.3< 5.38.25.38.2315
19 Nov 2023Customer Reviews for WooCommerce <= 5.38.1 - Cross-Site Request Forgery via manual review reminders4.3< 5.38.25.38.2315
6 Oct 2023Customer Reviews for WooCommerce <= 5.36.0 - Missing Authorization in Reviews Exporter5.4<= 5.36.05.36.1143
4 Oct 2023Customer Reviews for WooCommerce <= 5.36.0 - Missing Authorization4.3< 5.36.15.36.1145
24 Jan 2023Customer Reviews for WooCommerce <= 5.16.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 5.16.05.17.0229

Changelog mentions of security fixes: 5.111.0 (security); 5.113.0 (security); 5.114.0 (security); 5.116.0 (nonce); 5.118.0 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

62% of 21 support threads resolved in the last 2 months.

Momentum

80,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Customer Reviews for WooCommerce
4 May 20264,844
11 May 202631,689
18 May 202610,067
25 May 20265,134
1 Jun 20264,201
8 Jun 202651,890
15 Jun 202633,654
22 Jun 202634,261
29 Jun 20268,448
6 Jul 202635,694
13 Jul 20267,230
20 Jul 202632,774
27 Jul 20266,964
3 Aug 202636,585
10 Aug 20266,460
17 Aug 202636,393
24 Aug 202655,028
31 Aug 202634,095
7 Sep 202611,719
14 Sep 202635,046
21 Sep 202639,176
28 Sep 202635,059
5 Oct 202635,674
12 Oct 20266,905
19 Oct 202633,136
26 Oct 202636,228
2 Nov 202618,542

Weekly downloads over the last 4 weeks are 7% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version5.127.0
AuthorCusRev
Added5 Apr 2017
Last updated2 Nov 2026
Active installs80,000+
Requires WordPress4.5
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagswoocommerce, review plugin, review reminder, customer reviews, review for discount

Questions

Is Customer Reviews for WooCommerce still maintained?

Yes. Last release 2 Nov 2026, 104 releases in the last 24 months.

Who owns Customer Reviews for WooCommerce, and has it changed hands?

No change recorded. Main committer ivole since Apr 2017.

Was Customer Reviews for WooCommerce removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Customer Reviews for WooCommerce safe?

29 known vulnerabilities, all fixed (latest in 5.123.0). Not on the exploited list.

Is the latest Customer Reviews for WooCommerce update safe to install?

No ownership change before 5.127.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue