WPZOOM Connect
Healthy: maintained, last release 27 Oct 2026, 25 releases in 24 months, no unpatched vulnerabilities.
Based on 3 of 5 areas
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 90 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is WPZOOM Connect still maintained?
- Yes. Last release 27 Oct 2026, 25 releases in the last 24 months. 27 Oct 2026 · wordpress.org
- Who owns WPZOOM Connect, and has it changed hands?
- No change recorded. Main committer WPZOOM since Mar 2015. 4 Nov 2026 · SVN log
- Was WPZOOM Connect removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is WPZOOM Connect safe?
- 4 known vulnerabilities, all fixed (latest in 4.7.4). Not on the exploited list. 2 Oct 2026 · Wordfence Intelligence
- Is the latest WPZOOM Connect update safe to install?
- No ownership change before 5.0.0. No one-star spike after it. 27 Oct 2026 · Release history
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| WPZOOM | 4 Mar 2015 to 27 Oct 2026, 153 commits |
|---|
1 committer recorded. No ownership change since 2015.
Maintenance
- Last release
- 8 days ago
- Releases, 24 months
- 25
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 2 |
|---|---|
| Q2 2024 | 1 |
| Q3 2024 | 0 |
| Q4 2024 | 5 |
| Q1 2025 | 0 |
| Q2 2025 | 3 |
| Q3 2025 | 0 |
| Q4 2025 | 2 |
| Q1 2026 | 6 |
| Q2 2026 | 3 |
| Q3 2026 | 8 |
| Q4 2026 | 1 |
Last release 27 Oct 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: no reviews. Lifetime: 4.9.
Average rating fell from 5.0 to 1.0 between Q4 2023 and Q2 2026.
| 5 star | 137 |
|---|---|
| 4 star | 3 |
| 3 star | 2 |
| 2 star | 1 |
| 1 star | 1 |
- Plugin delete · 1 star · 19 May 2026
Security record
2 vulnerabilities in 24 months (4 on record), all patched (latest fixed in 4.7.4).
Show 4 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 2 Oct 2026 | WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons <= 4.7.3 - Unauthenticated Sensitive Information Disclosure via HMAC Signature Collision (Missing Domain Separation) in HMAC Signature Domain-Separation Flaw in `/yamidoo/v1/customer`… | 5.3 | <= 4.7.3 | 4.7.4 | Patched before disclosure |
| 12 Mar 2026 | Social Icons Widget & Block <= 4.5.8 - Missing Authorization to Authenticated (Subscriber+) Sharing Configuration Creation | 4.3 | <= 4.5.8 | 4.5.9 | Patched before disclosure |
| 30 Apr 2024 | Social Icons Widget & Block <= 4.2.17 - Authenticated (Administrator+) Stored Cross-Site Scripting | 4.4 | <= 4.2.17 | 4.2.18 | Patched before disclosure |
| 28 Mar 2024 | Social Icons Widget & Block by WPZOOM <= 4.2.15 - Missing Authorization | 4.3 | <= 4.2.15 | 4.2.16 | Patched before disclosure |
Changelog mentions of security fixes: 4.7.4 (security).
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
90,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 1,081 |
|---|---|
| 11 May 2026 | 36,044 |
| 18 May 2026 | 8,765 |
| 25 May 2026 | 35,182 |
| 1 Jun 2026 | 7,258 |
| 8 Jun 2026 | 4,503 |
| 15 Jun 2026 | 3,538 |
| 22 Jun 2026 | 3,072 |
| 29 Jun 2026 | 2,766 |
| 6 Jul 2026 | 5,008 |
| 13 Jul 2026 | 2,448 |
| 20 Jul 2026 | 2,689 |
| 27 Jul 2026 | 2,625 |
| 3 Aug 2026 | 32,384 |
| 10 Aug 2026 | 26,690 |
| 17 Aug 2026 | 23,167 |
| 24 Aug 2026 | 34,957 |
| 31 Aug 2026 | 8,041 |
| 7 Sep 2026 | 4,502 |
| 14 Sep 2026 | 54,311 |
| 21 Sep 2026 | 69,951 |
| 28 Sep 2026 | 8,856 |
| 5 Oct 2026 | 8,239 |
| 12 Oct 2026 | 3,753 |
| 19 Oct 2026 | 4,564 |
| 26 Oct 2026 | 38,616 |
| 2 Nov 2026 | 1,189 |
Weekly downloads over the last 4 weeks are 25% below the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 5.0.0 |
|---|---|
| Author | WPZOOM |
| Added | 4 Mar 2015 |
| Last updated | 27 Oct 2026 |
| Active installs | 90,000+ |
| Requires WordPress | 6.5 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | E-commerce & Shopping |
| Tags | whatsapp, social icons, click to chat, share buttons, social media icons |
Other plugins by this author: WPZOOM Social Feed Widget & Block, WPZOOM Portfolio Lite - Filterable Portfolio Plugin, WPZOOM Addons for Elementor - Starter Templates & Widgets, Recipe Card Blocks Lite, Inspiro Starter Sites - 20+ Free Demo Templates for Gutenberg & Elementor, WPBruiser Security - No CAPTCHA Anti-Spam & Login Protection, Video Popup Block - YouTube, Vimeo, TikTok Lightbox by WPZOOM, WPZOOM Forms - Drag & Drop Contact Form Builder for WordPress, Customizer Backup & Reset, WPZOOM Addons for Beaver Builder, Secondary Product Image for WooCommerce, Preload Featured Images
Questions
Is WPZOOM Connect still maintained?
Yes. Last release 27 Oct 2026, 25 releases in the last 24 months.
Who owns WPZOOM Connect, and has it changed hands?
No change recorded. Main committer WPZOOM since Mar 2015.
Was WPZOOM Connect removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is WPZOOM Connect safe?
4 known vulnerabilities, all fixed (latest in 4.7.4). Not on the exploited list.
Is the latest WPZOOM Connect update safe to install?
No ownership change before 5.0.0. No one-star spike after it.