Skip to content
PluginCanary

Donation Thermometer

by rhewlif · 2,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 7 Oct 2026, 6 releases in 24 months, no unpatched vulnerabilities.

87/ 100 Canary Score
Sub-scores for Donation Thermometer
Ownership100
Maintenance100
Security85
Support70
Reputation70

How the score works

Quick answers

Is Donation Thermometer still maintained?
Yes. Last release 7 Oct 2026, 6 releases in the last 24 months. 7 Oct 2026 · wordpress.org
Who owns Donation Thermometer, and has it changed hands?
No change recorded. Main committer henryp since Apr 2012. 3 Nov 2026 · SVN log
Was Donation Thermometer removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Donation Thermometer safe?
4 known vulnerabilities, all fixed (latest in 2.3.0). Not on the exploited list. 14 Oct 2026 · Wordfence Intelligence
Is the latest Donation Thermometer update safe to install?
No ownership change before 2.3.0. No one-star spike after it. 7 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
henryp5 Apr 2012 to 7 Oct 2026, 129 commits

1 committer recorded. No ownership change since 2012.

Maintenance

Last release
28 days ago
Releases, 24 months
6
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter
Releases per quarter for Donation Thermometer
Q1 20241
Q2 20240
Q3 20240
Q4 20241
Q1 20250
Q2 20250
Q3 20250
Q4 20251
Q1 20260
Q2 20260
Q3 20264
Q4 20261

Last release 7 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.4.

Rating distribution
5 star10
4 star0
3 star0
2 star1
1 star1

Security record

3 vulnerabilities in 24 months (4 on record), all patched (latest fixed in 2.3.0).

Show 4 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
14 Oct 2026Donation Thermometer < 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4< 2.3.02.3.0Patched before disclosure
26 Jun 2026Donation Thermometer <= 2.2.7 - Missing Authorization5.3<= 2.2.72.2.88
26 Nov 2025Donation Thermometer <= 2.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.2.62.2.7Patched before disclosure
7 Sep 2022Donation Thermometer <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting5.5<= 2.1.22.1.3Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 2 support threads resolved in the last 2 months.

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Donation Thermometer
4 May 202670
11 May 202682
18 May 202671
25 May 2026101
1 Jun 202679
8 Jun 202678
15 Jun 202690
22 Jun 202686
29 Jun 20262,023
6 Jul 20261,187
13 Jul 2026346
20 Jul 2026241
27 Jul 2026238
3 Aug 2026203
10 Aug 2026187
17 Aug 20261,795
24 Aug 2026365
31 Aug 2026270
7 Sep 20261,614
14 Sep 2026517
21 Sep 2026328
28 Sep 2026274
5 Oct 20261,632
12 Oct 2026447
19 Oct 2026438
26 Oct 2026463
2 Nov 202656

Weekly downloads over the last 4 weeks are 29% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version2.3.0
Authorrhewlif
Added5 Apr 2012
Last updated7 Oct 2026
Active installs2,000+
Requires WordPress5.0.3
Tested up to7.1.4
Requires PHP7.0
CategoryE-commerce & Shopping > Digital Products & Downloads
Tagsdonate, tracker, donation, fundraising, thermometer

Other plugins by this author: Earth Observatory IOTD Widget

Questions

Is Donation Thermometer still maintained?

Yes. Last release 7 Oct 2026, 6 releases in the last 24 months.

Who owns Donation Thermometer, and has it changed hands?

No change recorded. Main committer henryp since Apr 2012.

Was Donation Thermometer removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Donation Thermometer safe?

4 known vulnerabilities, all fixed (latest in 2.3.0). Not on the exploited list.

Is the latest Donation Thermometer update safe to install?

No ownership change before 2.3.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue