Points and Rewards for WooCommerce - Create Loyalty Programs, Reward Customer Purchases, Referral Points, User Badges, and Gamification
Healthy: vulnerability published 21 Sep 2026, fixed in 2.10.4.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 80 |
| Support | 70 |
| Reputation | 60 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 21 Sep 2026, fixed in 2.10.4. Update to version 2.10.4 or later.21 Sep 2026Evidence
- InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
- InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 21 Nov 2019 to 21 Nov 2019, 1 commits |
|---|---|
| makewebbetter | 22 Nov 2019 to 28 Oct 2022, 45 commits |
| wpswings | 3 Feb 2022 to 22 Oct 2026, 85 commits |
3 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 16 days ago
- Releases, 24 months
- 23
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 6 |
|---|---|
| Q2 2024 | 3 |
| Q3 2024 | 3 |
| Q4 2024 | 3 |
| Q1 2025 | 4 |
| Q2 2025 | 2 |
| Q3 2025 | 4 |
| Q4 2025 | 2 |
| Q1 2026 | 3 |
| Q2 2026 | 2 |
| Q3 2026 | 4 |
| Q4 2026 | 0 |
Last release 19 Oct 2026. Tested with WordPress 7.1 (current).
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 21 Sep 2026 | Points and Rewards for WooCommerce <= 2.10.3 - Missing Authorization | 4.3 | <= 2.10.3 | 2.10.4 | 0 |
| 5 Aug 2026 | Points and Rewards for WooCommerce < 2.10.1 - Unauthenticated Insecure Direct Object Reference | 5.3 | < 2.10.1 | 2.10.1 | 0 |
| 10 Jul 2026 | Points and Rewards for WooCommerce <= 2.10.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via Multiple AJAX Actions | 4.3 | <= 2.10.1 | 2.10.2 | 0 |
| 19 Jan 2026 | Points and Rewards for WooCommerce <= 2.9.5 - Missing Authorization | 4.3 | <= 2.9.5 | 2.9.6 | 8 |
| 5 May 2023 | Points and Rewards for WooCommerce <= 1.5.0 - Missing Authorization | 6.5 | <= 1.5.0 | 1.6.0 | 19 |
| 5 May 2023 | Points and Rewards for WooCommerce <= 1.5.0 - Cross-Site Request Forgery to Settings Change | 4.3 | <= 1.5.0 | 1.6.0 | 19 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.5 from 180 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 154 |
|---|---|
| 4 star | 6 |
| 3 star | 1 |
| 2 star | 2 |
| 1 star | 17 |
Momentum
6,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 2,605 |
|---|---|
| 11 May 2026 | 872 |
| 18 May 2026 | 919 |
| 25 May 2026 | 480 |
| 1 Jun 2026 | 417 |
| 8 Jun 2026 | 376 |
| 15 Jun 2026 | 377 |
| 22 Jun 2026 | 329 |
| 29 Jun 2026 | 314 |
| 6 Jul 2026 | 5,372 |
| 13 Jul 2026 | 2,070 |
| 20 Jul 2026 | 776 |
| 27 Jul 2026 | 465 |
| 3 Aug 2026 | 523 |
| 10 Aug 2026 | 398 |
| 17 Aug 2026 | 358 |
| 24 Aug 2026 | 369 |
| 31 Aug 2026 | 3,056 |
| 7 Sep 2026 | 680 |
| 14 Sep 2026 | 3,262 |
| 21 Sep 2026 | 1,420 |
| 28 Sep 2026 | 725 |
| 5 Oct 2026 | 544 |
| 12 Oct 2026 | 469 |
| 19 Oct 2026 | 695 |
| 26 Oct 2026 | 522 |
| 2 Nov 2026 | 91 |
Weekly downloads over the last 4 weeks are 58% below the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 2.10.4 |
|---|---|
| Author | WP Swings |
| Added | 22 Nov 2019 |
| Last updated | 19 Oct 2026 |
| Active installs | 6,000+ |
| Requires WordPress | 6.7.0 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | E-commerce & Shopping |
| Tags | Loyalty, gamification, Reward points, referral points, Points and Rewards |
Other plugins by this author: Subscriptions for WooCommerce, Ultimate Gift Cards for WooCommerce, Return Refund and Exchange For WooCommerce, WPS Bookings for WooCommerce, Upsell Funnel Builder for WooCommerce - Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups., Wallet System for WooCommerce - Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments, PDF Generator for WordPress, One Click Upsell Funnel for Woocommerce, Event Tickets Manager for WooCommerce, Membership For WooCommerce, Track Orders for WooCommerce - Multi Carrier WooCommerce Shipping, Order Sync with Zendesk for WooCommerce
Questions
Is Points and Rewards for WooCommerce - Create Loyalty Programs, Reward Customer Purchases, Referral Points, User Badges, and Gamification still maintained?
Points and Rewards for WooCommerce - Create Loyalty Programs, Reward Customer Purchases, Referral Points, User Badges, and Gamification was last updated on 19 Oct 2026. Its Canary status is Healthy.
Is Points and Rewards for WooCommerce - Create Loyalty Programs, Reward Customer Purchases, Referral Points, User Badges, and Gamification safe?
Points and Rewards for WooCommerce - Create Loyalty Programs, Reward Customer Purchases, Referral Points, User Badges, and Gamification has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Points and Rewards for WooCommerce - Create Loyalty Programs, Reward Customer Purchases, Referral Points, User Badges, and Gamification?
The wordpress.org author is WP Swings. Recent committers: wpswings, makewebbetter, plugin-master. We have recorded no ownership change.
What can I use instead of Points and Rewards for WooCommerce - Create Loyalty Programs, Reward Customer Purchases, Referral Points, User Badges, and Gamification?
Plugins in the same category with a higher Canary Score: Loyalty Points Rewards and Referral for WooCommerce - WPLoyalty, Refer A Friend for WooCommerce by WPGens, MyRewards.