Skip to content
PluginCanary

Product Catalog Simple

by impleCode · 1,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: 4 vulnerabilities published in the last 24 months.

86/ 100 Canary Score
Sub-scores for Product Catalog Simple
Ownership100
Maintenance100
Security80
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
impleCode8 Oct 2015 to 22 Oct 2026, 197 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
13 days ago
Releases, 24 months
15
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Product Catalog Simple
Q1 20240
Q2 20241
Q3 20240
Q4 20243
Q1 20251
Q2 20252
Q3 20253
Q4 20250
Q1 20260
Q2 20261
Q3 20262
Q4 20263

Last release 22 Oct 2026. Tested with WordPress 7.1 (current).

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
16 Oct 2025Product Catalog Simple <= 1.8.4 - Cross-Site Request Forgery4.3<= 1.8.41.8.50
22 Sep 2025Product Catalog Simple <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.8.21.8.30
5 Jun 2025Product Catalog Simple <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.8.11.8.20
27 Feb 2025Product Catalog Simple <= 1.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via show_products Shortcode6.4<= 1.7.111.8.00
27 Dec 2023Product Catalog Simple <= 1.7.6 - Sensitive Information Exposure via Product CSV5.3< 1.7.71.7.70
8 Nov 2023Product Catalog Simple <= 1.7.5 - Cross-Site Request Forgery via ic_system_status4.3<= 1.7.51.7.61
6 Apr 2023Product Catalog Simple <= 1.6.17 - Reflected Cross-Site Scripting6.1< 1.7.01.7.00
16 Sep 2020Product Catalog Simple <= 1.5.13 - Cross-Site Request Forgery Bypass4.3< 1.5.131.5.130

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.5 from 13 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star10
4 star2
3 star0
2 star0
1 star1

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Product Catalog Simple
4 May 202652
11 May 202691
18 May 202695
25 May 2026109
1 Jun 202670
8 Jun 202671
15 Jun 202653
22 Jun 202650
29 Jun 202638
6 Jul 202645
13 Jul 202663
20 Jul 202663
27 Jul 202668
3 Aug 202675
10 Aug 202664
17 Aug 2026602
24 Aug 2026194
31 Aug 2026150
7 Sep 2026103
14 Sep 2026149
21 Sep 2026706
28 Sep 2026672
5 Oct 2026263
12 Oct 2026716
19 Oct 2026811
26 Oct 2026286
2 Nov 202640

Weekly downloads over the last 4 weeks are 119% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Commerce7 for WordPressScore 91 · 1,000+External Store for ShopifyScore 87 · 2,000+

Facts

Version1.9.3
AuthorimpleCode
Added8 Oct 2015
Last updated22 Oct 2026
Active installs1,000+
Requires WordPress5.9
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagscatalog, product, catalogue, product catalog, product gallery

Other plugins by this author: eCommerce Product Catalog, Reviews Plus, Price Field, Mailer Dragon - Email Marketing Plugin for WordPress, Attributes Table, Shipping Options

Questions

Is Product Catalog Simple still maintained?

Product Catalog Simple was last updated on 22 Oct 2026. Its Canary status is Healthy.

Is Product Catalog Simple safe?

Product Catalog Simple has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Product Catalog Simple?

The wordpress.org author is impleCode. Recent committers: impleCode, plugin-master. We have recorded no ownership change.

What can I use instead of Product Catalog Simple?

Plugins in the same category with a higher Canary Score: Commerce7 for WordPress, External Store for Shopify.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue