Payment forms, Buy now buttons, and Invoicing System | GetPaid
Healthy: vulnerability published 26 Oct 2026, fixed in 2.8.63.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 65 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 26 Oct 2026, fixed in 2.8.63. Update to version 2.8.63 or later.26 Oct 2026Evidence
- WarningSEC-1Vulnerability published 16 Oct 2026, fixed in 2.8.62. Update to version 2.8.62 or later.16 Oct 2026Evidence
- InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| stiofansisland | 24 Aug 2017 to 28 Oct 2026, 185 commits |
|---|---|
| wpdev10 | 29 Apr 2019 to 9 Jul 2019, 2 commits |
2 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 7 days ago
- Releases, 24 months
- 47
- Tested up to
- 7.1 current
- Requires PHP
- 5.6 supported 8.2+
| Q1 2024 | 4 |
|---|---|
| Q2 2024 | 1 |
| Q3 2024 | 6 |
| Q4 2024 | 7 |
| Q1 2025 | 3 |
| Q2 2025 | 3 |
| Q3 2025 | 8 |
| Q4 2025 | 4 |
| Q1 2026 | 6 |
| Q2 2026 | 8 |
| Q3 2026 | 7 |
| Q4 2026 | 3 |
Last release 28 Oct 2026. Tested with WordPress 7.1 (current).
Support
0% of 1 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 26 Oct 2026 | Payment forms, Buy now buttons, and Invoicing System | GetPaid <= 2.8.62 - Unauthenticated Stored Cross-Site Scripting | 7.2 | <= 2.8.62 | 2.8.63 | 0 |
| 16 Oct 2026 | Payment forms, Buy now buttons, and Invoicing System | GetPaid <= 2.8.61 - Unauthenticated Stored Cross-Site Scripting via 'mmdwqzpoxadd' Parameter | 7.2 | <= 2.8.61 | 2.8.62 | 0 |
| 31 Jul 2026 | Payment forms, Buy now buttons, and Invoicing System | GetPaid <= 2.8.56 - Authenticated (Administrator+) Local File Inclusion via Payment Form 'type' Element Field | 6.6 | <= 2.8.56 | 2.8.57 | 0 |
| 13 Jul 2026 | GetPaid <= 2.8.54 - Unauthenticated Payment Bypass | 5.3 | <= 2.8.54 | 2.8.55 | 0 |
| 8 Jun 2026 | Payment forms, Buy now buttons, and Invoicing System | GetPaid <= 2.8.49 - Unauthenticated Information Exposure | 5.3 | <= 2.8.49 | 2.8.50 | 0 |
| 28 Aug 2024 | GetPaid <= 2.8.11 - Missing Authorization via column_subscription() | 4.3 | <= 2.8.11 | 2.8.12 | 0 |
| 2 Jun 2021 | WordPress Payments Plugin | GetPaid <= 2.3.3 - Authenticated Stored Cross-Site Scripting | 5.4 | <= 2.3.3 | 2.3.4 | 0 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.5 from 46 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 37 |
|---|---|
| 4 star | 4 |
| 3 star | 0 |
| 2 star | 3 |
| 1 star | 2 |
Momentum
5,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 209 |
|---|---|
| 11 May 2026 | 346 |
| 18 May 2026 | 599 |
| 25 May 2026 | 322 |
| 1 Jun 2026 | 4,109 |
| 8 Jun 2026 | 1,030 |
| 15 Jun 2026 | 2,802 |
| 22 Jun 2026 | 2,887 |
| 29 Jun 2026 | 2,909 |
| 6 Jul 2026 | 3,028 |
| 13 Jul 2026 | 632 |
| 20 Jul 2026 | 2,585 |
| 27 Jul 2026 | 2,779 |
| 3 Aug 2026 | 1,313 |
| 10 Aug 2026 | 460 |
| 17 Aug 2026 | 2,977 |
| 24 Aug 2026 | 533 |
| 31 Aug 2026 | 432 |
| 7 Sep 2026 | 2,567 |
| 14 Sep 2026 | 3,008 |
| 21 Sep 2026 | 766 |
| 28 Sep 2026 | 2,668 |
| 5 Oct 2026 | 981 |
| 12 Oct 2026 | 2,881 |
| 19 Oct 2026 | 3,133 |
| 26 Oct 2026 | 3,764 |
| 2 Nov 2026 | 174 |
Weekly downloads over the last 4 weeks are 35% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 2.8.64 |
|---|---|
| Author | Stiofan |
| Added | 24 Aug 2017 |
| Last updated | 28 Oct 2026 |
| Active installs | 5,000+ |
| Requires WordPress | 6.0 |
| Tested up to | 7.1.4 |
| Requires PHP | 5.6 |
| Category | Payments & Financial > Payment Gateways & Processors |
| Tags | paypal, stripe, payment, payments, invoicing |
Other plugins by this author: API KEY for Google Maps, UsersWP - Front-end login form, User Registration, User Profile & Members Directory plugin for WP, AyeCode Connect, UsersWP - ReCaptcha, UsersWP - Social Login, Events Calendar for GeoDirectory, BlockStrap Page Builder - Bootstrap Blocks, GetPaid Stripe Payments, GetPaid > Wallet, Quotes Addon for GetPaid, GetPaid > Item Inventory
Questions
Is Payment forms, Buy now buttons, and Invoicing System | GetPaid still maintained?
Payment forms, Buy now buttons, and Invoicing System | GetPaid was last updated on 28 Oct 2026. Its Canary status is Healthy.
Is Payment forms, Buy now buttons, and Invoicing System | GetPaid safe?
Payment forms, Buy now buttons, and Invoicing System | GetPaid has no open unpatched vulnerabilities on record. 5 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Payment forms, Buy now buttons, and Invoicing System | GetPaid?
The wordpress.org author is Stiofan. Recent committers: stiofansisland, wpdev10, plugin-master. We have recorded no ownership change.
What can I use instead of Payment forms, Buy now buttons, and Invoicing System | GetPaid?
Plugins in the same category with a higher Canary Score: Donations via PayPal, Stripe Payment Forms by WP Simple Pay - Accept Credit Card Payments + Subscriptions with Stripe, Easy PayPal Shopping Cart, WP Stripe Checkout, Easy Accept Payments via PayPal.