Skip to content
PluginCanary

Ko-fi Button

by koficommunity · 5,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: Ko-fi Button is maintained, has no open risk signals and no unpatched vulnerabilities.

87/ 100 Canary Score
Sub-scores for Ko-fi Button
Ownership100
Maintenance85
Security100
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
chris.odell29 May 2020 to 21 Jul 2021, 11 commits
cameronjonesweb27 Mar 2022 to 19 May 2026, 42 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
6 months ago
Releases, 24 months
5
Tested up to
7.0 vs 7.1
Requires PHP
5.6 supported 8.2+
Releases per quarter for Ko-fi Button
Q1 20241
Q2 20241
Q3 20240
Q4 20241
Q1 20251
Q2 20250
Q3 20251
Q4 20251
Q1 20260
Q2 20262
Q3 20260
Q4 20260

Last release 19 May 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
25 Apr 2023Ko-fi Button <= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 1.3.21.3.30

Source: Wordfence Intelligence.

Reputation

Lifetime rating 5.0 from 1 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star1
4 star0
3 star0
2 star0
1 star0

Momentum

5,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Ko-fi Button
4 May 20262,889
11 May 2026641
18 May 20263,425
25 May 2026548
1 Jun 2026341
8 Jun 2026272
15 Jun 2026266
22 Jun 2026219
29 Jun 2026230
6 Jul 2026202
13 Jul 2026200
20 Jul 2026210
27 Jul 2026244
3 Aug 2026247
10 Aug 2026212
17 Aug 2026236
24 Aug 2026214
31 Aug 2026227
7 Sep 2026208
14 Sep 2026215
21 Sep 2026230
28 Sep 2026283
5 Oct 2026250
12 Oct 2026235
19 Oct 2026294
26 Oct 2026260
2 Nov 202637

Weekly downloads over the last 4 weeks are 57% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Donorbox - Free Recurring Donation Plugin and Fundraising PlatformScore 91 · 8,000+Donation Platform for WooCommerce: Fundraising & Donation ManagementScore 91 · 6,000+SureDonation - Donation Forms, Fundraising Campaigns & Donor ManagementScore 91 · 4,000+Buy Me a Coffee - Button and Widget PluginScore 90 · 6,000+Ultimeter - the Ultimate Progress and Goals MeterScore 89 · 1,000+

Facts

Version1.4.1
Authorkoficommunity
Added23 Oct 2018
Last updated19 May 2026
Active installs5,000+
Requires WordPress4.6
Tested up to7.0.8
Requires PHP5.6
CategoryE-commerce & Shopping
Tagsko-fi, membership, monetization, donate plugin, PayPal Donate

Questions

Is Ko-fi Button still maintained?

Ko-fi Button was last updated on 19 May 2026. Its Canary status is Healthy.

Is Ko-fi Button safe?

Ko-fi Button has no open unpatched vulnerabilities on record. 0 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Ko-fi Button?

The wordpress.org author is koficommunity. Recent committers: cameronjonesweb, chris.odell, koficommunity, plugin-master. We have recorded no ownership change.

What can I use instead of Ko-fi Button?

Plugins in the same category with a higher Canary Score: Donorbox - Free Recurring Donation Plugin and Fundraising Platform, Donation Platform for WooCommerce: Fundraising & Donation Management, SureDonation - Donation Forms, Fundraising Campaigns & Donor Management, Buy Me a Coffee - Button and Widget Plugin, Ultimeter - the Ultimate Progress and Goals Meter.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue