Skip to content
PluginCanary

PayHere Payment Gateway

by PayHere · 2,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: vulnerability published 29 Oct 2026 with no patched version yet.

89/ 100 Canary Score
Sub-scores for PayHere Payment Gateway
Ownership100
Maintenance100
Security90
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 29 Oct 2026 with no patched version yet. Disable or replace the plugin until a fix is released.29 Oct 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
payhere14 Jul 2016 to 30 Oct 2026, 85 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
5 days ago
Releases, 24 months
10
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter for PayHere Payment Gateway
Q1 20240
Q2 20244
Q3 20243
Q4 20243
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20265
Q2 20261
Q3 20260
Q4 20261

Last release 30 Oct 2026. Tested with WordPress 7.1 (current).

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
29 Oct 2026PayHere Payment Gateway 2.4.0 - 2.4.5 - Unauthenticated Payment Bypass5.32.4.0 to 2.4.5Not affectedn/a
13 Jan 2026PayHere Payment Gateway Plugin for WooCommerce <= 2.3.9 - Missing Authorization to Unauthenticated Order Status Modification5.3<= 2.3.92.4.03
7 Dec 2023PayHere Payment Gateway <= 2.2.11 - Information Disclosure via Log Files5.3<= 2.2.112.2.12n/a

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.5 from 8 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star7
4 star0
3 star0
2 star0
1 star1

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for PayHere Payment Gateway
4 May 202648
11 May 202688
18 May 20261,052
25 May 2026208
1 Jun 2026183
8 Jun 2026150
15 Jun 2026126
22 Jun 2026107
29 Jun 202690
6 Jul 2026106
13 Jul 2026108
20 Jul 2026110
27 Jul 2026120
3 Aug 2026140
10 Aug 2026118
17 Aug 2026110
24 Aug 2026109
31 Aug 2026110
7 Sep 2026132
14 Sep 2026136
21 Sep 2026133
28 Sep 2026146
5 Oct 2026134
12 Oct 2026177
19 Oct 2026108
26 Oct 202647
2 Nov 2026361

Weekly downloads over the last 4 weeks are 5% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

WooPayments: Integrated WooCommerce PaymentsScore 93 · 800,000+FunnelKit Payment Gateway for Stripe WooCommerceScore 92 · 20,000+Payment Plugins for Stripe WooCommerceScore 91 · 100,000+WooCommerce Payfast GatewayScore 91 · 30,000+Smart COD for WooCommerceScore 91 · 30,000+

Facts

Version2.4.6
AuthorPayHere
Added14 Jul 2016
Last updated30 Oct 2026
Active installs2,000+
Requires WordPress6.4
Tested up to7.1.4
Requires PHPnot stated
CategoryE-commerce & Shopping
Tagsonline, payhere, payments, sri lanka

Other plugins by this author: PayHere Payment Gateway - Beta

Questions

Is PayHere Payment Gateway still maintained?

PayHere Payment Gateway was last updated on 30 Oct 2026. Its Canary status is Healthy.

Is PayHere Payment Gateway safe?

PayHere Payment Gateway has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns PayHere Payment Gateway?

The wordpress.org author is PayHere. Recent committers: payhere, plugin-master. We have recorded no ownership change.

What can I use instead of PayHere Payment Gateway?

Plugins in the same category with a higher Canary Score: WooPayments: Integrated WooCommerce Payments, FunnelKit Payment Gateway for Stripe WooCommerce, Payment Plugins for Stripe WooCommerce, WooCommerce Payfast Gateway, Smart COD for WooCommerce.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue