Skip to content
PluginCanary

OTP Login & Register Woocommerce

by xootix · 1,000+ active installs · Checked 3 Nov 2026
Healthy3 Warnings

Healthy: vulnerability published 14 Oct 2026, fixed in 2.7.3.

86/ 100 Canary Score
Sub-scores for OTP Login & Register Woocommerce
Ownership100
Maintenance100
Security80
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 14 Oct 2026, fixed in 2.7.3. Update to version 2.7.3 or later.14 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 18 Sep 2026, fixed in 2.7.4. Update to version 2.7.4 or later.18 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 10 Sep 2026, fixed in 2.7.3. Update to version 2.7.3 or later.10 Sep 2026Evidence
  • InfoSEC-33 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master20 Dec 2019 to 20 Dec 2019, 1 commits
xootix21 Dec 2019 to 26 Oct 2026, 114 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
2 months ago
Releases, 24 months
12
Tested up to
7.0 vs 7.1
Requires PHP
5.2.4 supported 8.2+
Releases per quarter for OTP Login & Register Woocommerce
Q1 20243
Q2 20242
Q3 20241
Q4 20243
Q1 20252
Q2 20251
Q3 20251
Q4 20251
Q1 20262
Q2 20260
Q3 20262
Q4 20260

Last release 5 Sep 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
14 Oct 2026OTP Login & Register Woocommerce <= 2.7.2 - Unauthenticated Account Takeover9.8<= 2.7.22.7.30
18 Sep 2026OTP Login & Register Woocommerce <= 2.7.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'fb-config' Setting4.4<= 2.7.32.7.40
10 Sep 2026OTP Login & Register Woocommerce <= 2.7.2 - Unauthenticated Authentication Bypass via Brute Force5.3<= 2.7.22.7.30
5 Jun 2024XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update8.8<= 2.6.12.6.235
16 May 2023OTP Login Woocommerce & Gravity Forms <= 2.2 - Authentication Bypass to Privilege Escalation8.1<= 2.22.30
26 May 2022OTP Login Woocommerce & Gravity Forms <= 2.0 - Cross-Site Scripting6.1<= 2.02.10

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.6 from 44 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star39
4 star0
3 star0
2 star1
1 star4

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for OTP Login & Register Woocommerce
4 May 202685
11 May 2026155
18 May 2026185
25 May 2026143
1 Jun 2026144
8 Jun 2026155
15 Jun 2026160
22 Jun 2026151
29 Jun 2026151
6 Jul 2026158
13 Jul 2026139
20 Jul 2026181
27 Jul 2026166
3 Aug 2026412
10 Aug 2026650
17 Aug 2026277
24 Aug 2026197
31 Aug 2026739
7 Sep 2026673
14 Sep 2026469
21 Sep 2026508
28 Sep 2026351
5 Oct 2026443
12 Oct 2026295
19 Oct 2026335
26 Oct 2026393
2 Nov 202639

Weekly downloads over the last 4 weeks are 8% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

LoginizerScore 93 · 1,000,000+FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social LoginScore 93 · 10,000+All In One LoginScore 92 · 60,000+WPS Hide LoginScore 91 · 2,000,000+Temporary Login Without PasswordScore 91 · 90,000+

Facts

Version2.7.4
Authorxootix
Added22 Dec 2019
Last updated5 Sep 2026
Active installs1,000+
Requires WordPress3.0.1
Tested up to7.0.8
Requires PHP5.2.4
CategoryE-commerce & Shopping
Tags2FA, login with otp, One-Time Password, woocommerce login

Other plugins by this author: Side Cart Woocommerce | Woocommerce Cart, Login & Register Customizer - Forms, Popup, Profile & WooCommerce, Cart Popup for WooCommerce, Waitlist Woocommerce ( Back in stock notifier ), Quick View WooCommerce

Questions

Is OTP Login & Register Woocommerce still maintained?

OTP Login & Register Woocommerce was last updated on 5 Sep 2026. Its Canary status is Healthy.

Is OTP Login & Register Woocommerce safe?

OTP Login & Register Woocommerce has no open unpatched vulnerabilities on record. 3 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns OTP Login & Register Woocommerce?

The wordpress.org author is xootix. Recent committers: xootix, plugin-master. We have recorded no ownership change.

What can I use instead of OTP Login & Register Woocommerce?

Plugins in the same category with a higher Canary Score: Loginizer, FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social Login, All In One Login, WPS Hide Login, Temporary Login Without Password.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue