Midtrans-WooCommerce
Avoid: vulnerability published 5 Oct 2026 still has no fix after 14 days.
Capped at 39 while a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 30 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 5 Oct 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.19 Oct 2026Evidence
- CriticalMNT-1No release in 26 months (last release 20 Aug 2024). Plan a replacement if the plugin is important to your site.20 Aug 2025Evidence
- WarningMNT-2Tested up to WordPress 6.6.11, 5 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| yocki | 12 Oct 2016 to 19 Aug 2020, 43 commits |
|---|---|
| rizdaprasetya | 22 May 2017 to 2 Jan 2023, 54 commits |
| fauzim | 20 Aug 2024 to 20 Aug 2024, 1 commits |
3 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 2 years ago
- Releases, 24 months
- 0
- Tested up to
- 6.6 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 1 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 20 Aug 2024. Tested up to 6.6, 5 major versions behind WordPress 7.1.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 5 Oct 2026 | Midtrans-WooCommerce <= 2.32.3 - Unauthenticated Stored Cross-Site Scripting | 7.2 | <= 2.32.3 | No fix | n/a |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.0 from 4 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 3 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 1 |
Momentum
5,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 120 |
|---|---|
| 11 May 2026 | 195 |
| 18 May 2026 | 207 |
| 25 May 2026 | 208 |
| 1 Jun 2026 | 191 |
| 8 Jun 2026 | 236 |
| 15 Jun 2026 | 178 |
| 22 Jun 2026 | 201 |
| 29 Jun 2026 | 192 |
| 6 Jul 2026 | 188 |
| 13 Jul 2026 | 183 |
| 20 Jul 2026 | 176 |
| 27 Jul 2026 | 184 |
| 3 Aug 2026 | 190 |
| 10 Aug 2026 | 167 |
| 17 Aug 2026 | 156 |
| 24 Aug 2026 | 141 |
| 31 Aug 2026 | 164 |
| 7 Sep 2026 | 171 |
| 14 Sep 2026 | 180 |
| 21 Sep 2026 | 172 |
| 28 Sep 2026 | 165 |
| 5 Oct 2026 | 204 |
| 12 Oct 2026 | 176 |
| 19 Oct 2026 | 235 |
| 26 Oct 2026 | 259 |
| 2 Nov 2026 | 63 |
Weekly downloads over the last 4 weeks are 1% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 2.32.3 |
|---|---|
| Author | Midtrans |
| Added | 12 Oct 2016 |
| Last updated | 20 Aug 2024 |
| Active installs | 5,000+ |
| Requires WordPress | 3.9.1 |
| Tested up to | 6.6.11 |
| Requires PHP | not stated |
| Category | E-commerce & Shopping |
| Tags | snap, payment, midtrans, credit card, payment gateway |
Other plugins by this author: Midtrans Payment Gateway for Easy Digital Downloads
Questions
Is Midtrans-WooCommerce still maintained?
Midtrans-WooCommerce was last updated on 20 Aug 2024. Its Canary status is Avoid.
Is Midtrans-WooCommerce safe?
Midtrans-WooCommerce has 1 published vulnerability with no patched version. Its Canary status is Avoid.
Who owns Midtrans-WooCommerce?
The wordpress.org author is Midtrans. Recent committers: fauzim, rizdaprasetya, yocki, plugin-master. We have recorded no ownership change.
What can I use instead of Midtrans-WooCommerce?
Plugins in the same category with a higher Canary Score: WooPayments: Integrated WooCommerce Payments, FunnelKit Payment Gateway for Stripe WooCommerce, Payment Plugins for Stripe WooCommerce, WooCommerce Payfast Gateway, Smart COD for WooCommerce.