Skip to content
PluginCanary

PayU India

by PayU India · 7,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 21 Oct 2026, 7 releases in 24 months, no unpatched vulnerabilities.

84/ 100 Canary Score
Sub-scores for PayU India
Ownership100
Maintenance100
Security70
Support70
Reputation70

How the score works

Quick answers

Is PayU India still maintained?
Yes. Last release 21 Oct 2026, 7 releases in the last 24 months. 21 Oct 2026 · wordpress.org
Who owns PayU India, and has it changed hands?
No change recorded. Main committer payuplugin since Feb 2021. 3 Nov 2026 · SVN log
Was PayU India removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is PayU India safe?
5 known vulnerabilities, all fixed (latest in 3.9.0). Not on the exploited list. 22 Jul 2026 · Wordfence Intelligence
Is the latest PayU India update safe to install?
No ownership change before 3.9.2. No one-star spike after it. 21 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master8 Feb 2021 to 8 Feb 2021, 1 commits
payuplugin10 Feb 2021 to 21 Oct 2026, 97 commits

2 committers recorded. No ownership change since 2021.

Maintenance

Last release
14 days ago
Releases, 24 months
7
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for PayU India
Q1 20240
Q2 20240
Q3 20241
Q4 20240
Q1 20251
Q2 20251
Q3 20251
Q4 20250
Q1 20260
Q2 20261
Q3 20261
Q4 20262

Last release 21 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 5.0.

Rating distribution
5 star1
4 star0
3 star0
2 star0
1 star0

Security record

4 vulnerabilities in 24 months (5 on record), all patched (latest fixed in 3.9.0).

Show 5 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
22 Jul 2026PayU CommercePro Plugin <= 3.8.9 - Missing Authorization5.3<= 3.8.93.9.0Patched before disclosure
7 Jul 2026PayU CommercePro < 3.9.0 - Missing Authorization5.3< 3.9.03.9.01
5 Jun 2025PayU CommercePro Plugin <= 3.8.7 - Authentication Bypass9.8<= 3.8.73.8.829
6 Jan 2025PayU CommercePro Plugin <= 3.8.3 - Unauthenticated Privilege Escalation9.8<= 3.8.33.8.4Patched before disclosure
26 Feb 2024PayU India <= 3.8.8 - Reflected Cross-Site Scripting via type6.1<= 3.8.83.8.9781

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

7,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for PayU India
4 May 2026159
11 May 2026286
18 May 2026314
25 May 2026283
1 Jun 2026258
8 Jun 2026313
15 Jun 2026294
22 Jun 2026216
29 Jun 202667
6 Jul 20261,602
13 Jul 2026594
20 Jul 20261,061
27 Jul 2026797
3 Aug 2026475
10 Aug 2026379
17 Aug 2026329
24 Aug 2026295
31 Aug 2026395
7 Sep 2026386
14 Sep 2026336
21 Sep 2026313
28 Sep 20261,649
5 Oct 2026763
12 Oct 2026555
19 Oct 20261,842
26 Oct 2026741
2 Nov 202688

Weekly downloads over the last 4 weeks are 47% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

WooPaymentsScore 93 · 800,000+FunnelKit Payment Gateway for StripeScore 92 · 20,000+Payment Plugins for Stripe WooCommerceScore 91 · 100,000+WooCommerce Payfast GatewayScore 91 · 30,000+Smart COD for WooCommerceScore 91 · 30,000+

Facts

Version3.9.2
AuthorPayU India
Added10 Feb 2021
Last updated21 Oct 2026
Active installs7,000+
Requires WordPress5.3
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagspayu, gateway, payment

Questions

Is PayU India still maintained?

Yes. Last release 21 Oct 2026, 7 releases in the last 24 months.

Who owns PayU India, and has it changed hands?

No change recorded. Main committer payuplugin since Feb 2021.

Was PayU India removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is PayU India safe?

5 known vulnerabilities, all fixed (latest in 3.9.0). Not on the exploited list.

Is the latest PayU India update safe to install?

No ownership change before 3.9.2. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue