Skip to content
PluginCanary

SimpleShop

by Redbit s.r.o. · 1,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 25 Aug 2026, 10 releases in 24 months, no unpatched vulnerabilities.

91/ 100 Canary Score
Sub-scores for SimpleShop
Ownership100
Maintenance100
Security100
Support70
Reputation70

How the score works

Quick answers

Is SimpleShop still maintained?
Yes. Last release 25 Aug 2026, 10 releases in the last 24 months. 25 Aug 2026 · wordpress.org
Who owns SimpleShop, and has it changed hands?
No change recorded. Main committer redbitcz since Sep 2018. 3 Nov 2026 · SVN log
Was SimpleShop removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is SimpleShop safe?
2 known vulnerabilities, all fixed (latest in 2.10.3). Not on the exploited list. 3 May 2024 · Wordfence Intelligence
Is the latest SimpleShop update safe to install?
No ownership change before 2.18.0. No one-star spike after it. 25 Aug 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
redbitcz15 Sep 2018 to 25 Aug 2026, 30 commits
jakubboucek28 Jan 2021 to 7 Nov 2022, 29 commits
vitvavra8 Nov 2022 to 3 Feb 2025, 17 commits

3 committers recorded. No ownership change since 2018.

Maintenance

Last release
2 months ago
Releases, 24 months
10
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for SimpleShop
Q1 20243
Q2 20241
Q3 20241
Q4 20243
Q1 20251
Q2 20250
Q3 20252
Q4 20251
Q1 20260
Q2 20261
Q3 20262
Q4 20260

Last release 25 Aug 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews.

Rating distribution
5 star0
4 star0
3 star0
2 star0
1 star0

Security record

2 vulnerabilities on record, all patched (latest fixed in 2.10.3).

Show 2 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
3 May 2024SimpleShop <= 2.10.2 - Missing Authorization5.3<= 2.10.22.10.3Patched before disclosure
3 May 2024SimpleShop <= 2.10.0 - Cross-Site Request Forgery4.3<= 2.10.02.10.1Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for SimpleShop
4 May 202653
11 May 202649
18 May 202634
25 May 202656
1 Jun 2026497
8 Jun 2026207
15 Jun 2026117
22 Jun 202699
29 Jun 2026515
6 Jul 2026204
13 Jul 2026119
20 Jul 2026109
27 Jul 2026106
3 Aug 2026154
10 Aug 202687
17 Aug 2026103
24 Aug 2026602
31 Aug 2026200
7 Sep 2026150
14 Sep 2026138
21 Sep 2026137
28 Sep 2026129
5 Oct 2026128
12 Oct 2026122
19 Oct 2026163
26 Oct 2026155
2 Nov 202626

Weekly downloads over the last 4 weeks are 29% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version2.18.0
AuthorRedbit s.r.o.
Added15 Sep 2018
Last updated25 Aug 2026
Active installs1,000+
Requires WordPress6.6
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagsmember, membership, simpleshop, selling form, access-control

Questions

Is SimpleShop still maintained?

Yes. Last release 25 Aug 2026, 10 releases in the last 24 months.

Who owns SimpleShop, and has it changed hands?

No change recorded. Main committer redbitcz since Sep 2018.

Was SimpleShop removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is SimpleShop safe?

2 known vulnerabilities, all fixed (latest in 2.10.3). Not on the exploited list.

Is the latest SimpleShop update safe to install?

No ownership change before 2.18.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue