Pending Order Bot
Limited data: Pending Order Bot has under 1,000 active installs and less than 12 weeks of history, so we do not rate it yet.
Based on 3 of 5 areas
Capped at 39: a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 20 |
| Security | 35 |
| Support | No data |
| Reputation | No data |
Active signals
Open issues right now, with links to the source.
- CriticalSEC-2Vulnerability published 17 Aug 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.31 Aug 2025Evidence
- WarningMNT-2Tested up to WordPress 6.7.11, 4 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
- WarningMNT-1No release in 20 months (last release 16 Feb 2025). Plan a replacement if the plugin is important to your site.16 Feb 2026Evidence
History: 1 past vulnerability, 1 still unpatched in the current version. Patched issues are listed in the Security record, not here.
Quick answers
- Is Pending Order Bot still maintained?
- No. Last release 16 Feb 2025, over 1 year ago. 16 Feb 2025 · wordpress.org
- Who owns Pending Order Bot, and has it changed hands?
- Not enough data. Commit history is collected for plugins with 1,000+ installs or on a watchlist. 4 Nov 2026 · SVN log
- Was Pending Order Bot removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is Pending Order Bot safe?
- No. 1 known vulnerability has no fix in the current version. 17 Aug 2025 · Wordfence Intelligence
- Is the latest Pending Order Bot update safe to install?
- No ownership change before 1.0.2. No one-star spike after it. 16 Feb 2025 · Release history
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
Commit history is collected for plugins with 1,000+ installs or on a watchlist.
Maintenance
- Last release
- 21 months ago
- Releases, 24 months
- 1
- Tested up to
- 6.7 vs 7.1
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 1 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 16 Feb 2025. Tested up to 6.7, 4 major versions behind WordPress 7.1.
Support
- Resolved, last 2 months
- n/a
- Threads, last 2 months
- 0
Trend appears after 8 weekly snapshots.
Security record
1 vulnerability in 24 months, 1 with no fix in the current version.
| Date | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 17 Aug 2025 | Authenticated (Administrator+) Stored Cross-Site Scripting | 4.4 | <= 1.0.2 | No fix | n/a |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Reputation
Last 90 days: no reviews.
| 5 star | 0 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Momentum
- Active installs
- Fewer than 10
Trend appears after 8 weekly snapshots.
Facts
- Version
- 1.0.2
- Author
- badasswp
- Added
- 15 Dec 2024
- Last updated
- 16 Feb 2025
- Active installs
- Fewer than 10
- Requires WordPress
- 4.0
- Tested up to
- 6.7.11
- Requires PHP
- 7.4
- Category
- not stated
- Tags
- bot, order, pending, reminder, woocommerce
Other plugins by this author: Image Converter for WebP, Search and Replace for Block Editor, AI + Block Editor, Convert Blocks to JSON, Create Product On Image Upload, SQL To CPT, Redirect Duplicate Posts, Trash Post in Block Editor, Censor Order Details, Watermark My Images, Addon for Post Meta Translation using, Display Site Notification Bar
Questions about Pending Order Bot
Is Pending Order Bot still maintained?
No. Last release 16 Feb 2025, over 1 year ago.
Who owns Pending Order Bot, and has it changed hands?
Not enough data. Commit history is collected for plugins with 1,000+ installs or on a watchlist.
Was Pending Order Bot removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is Pending Order Bot safe?
No. 1 known vulnerability has no fix in the current version.
Is the latest Pending Order Bot update safe to install?
No ownership change before 1.0.2. No one-star spike after it.