Skip to content
PluginCanary

TI WooCommerce Wishlist

by templateinvaders · 100,000+ active installs · Checked 4 Nov 2026
Watch

Watch: held back by a low Support score (13 of 100).

72/ 100 Canary Score
Sub-scores for TI WooCommerce Wishlist
Ownership100
Maintenance100
Security60
Support13
Reputation70

How the score works

Quick answers

Is TI WooCommerce Wishlist still maintained?
Yes. Last release 4 Nov 2026, 10 releases in the last 24 months. 4 Nov 2026 · wordpress.org
Who owns TI WooCommerce Wishlist, and has it changed hands?
No change recorded. Main committer templateinvaders since Sep 2016. 4 Nov 2026 · SVN log
Was TI WooCommerce Wishlist removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is TI WooCommerce Wishlist safe?
13 known vulnerabilities, all fixed (latest in 2.13.0). Not on the exploited list. 19 Oct 2026 · Wordfence Intelligence
Is the latest TI WooCommerce Wishlist update safe to install?
No ownership change before 2.14.2. No one-star spike after it. 4 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
templateinvaders22 Sep 2016 to 4 Nov 2026, 308 commits

1 committer recorded. No ownership change since 2016.

Maintenance

Last release
today
Releases, 24 months
10
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for TI WooCommerce Wishlist
Q1 20242
Q2 20240
Q3 20240
Q4 20243
Q1 20250
Q2 20251
Q3 20250
Q4 20252
Q1 20260
Q2 20261
Q3 20261
Q4 20264

Last release 4 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 4.2 (5 reviews). Lifetime: 4.7.

Average rating per quarter for TI WooCommerce Wishlist
Q2 20254.6
Q3 20254.4
Q1 20265.0
Q2 20265.0
Q3 20265.0
Q4 20263.7

Average rating fell from 4.6 to 3.7 between Q2 2025 and Q4 2026.

Rating distribution
5 star451
4 star14
3 star0
2 star6
1 star32
Latest low reviews

Security record

7 vulnerabilities in 24 months (13 on record), all patched (latest fixed in 2.13.0).

Show 13 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
19 Oct 2026TI WooCommerce Wishlist <= 2.12.0 - Missing Authorization5.3<= 2.12.02.13.0Patched before disclosure
12 Dec 2025TI WooCommerce Wishlist <= 2.10.0 - Unauthenticated HTML Injection5.3<= 2.10.02.11.0Patched before disclosure
21 Nov 2025TI WooCommerce Wishlist <= 2.10.0 - Missing Authorization5.3<= 2.10.02.11.0Patched before disclosure
22 Sep 2025TI WooCommerce Wishlist <= 2.10.0 - Missing Authorization6.5<= 2.10.02.11.059
16 May 2025TI WooCommerce Wishlist <= 2.9.2 - Unauthenticated Arbitrary File Upload9.8<= 2.9.22.10.020
15 May 2025TI WooCommerce Wishlist <= 2.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.10.02.11.0189
3 Dec 2024TI WooCommerce Wishlist <= 2.9.1 - Missing Authorization to Unauthenticated Plugin Setup Wizard Access7.5<= 2.9.12.9.2Patched before disclosure
19 Sep 2024TI WooCommerce Wishlist <= 2.9.0 - Unauthenticated SQL Injection via 'lang'7.5<= 2.9.02.9.134
22 Aug 2024TI WooCommerce Wishlist <= 2.8.2 - Unauthenticated SQL Injection9.8<= 2.8.22.9.051
31 Jul 2023TI WooCommerce Wishlist <= 2.7.3 - Unauthenticated Blind SQL Injection via Rest API9.8< 2.7.42.7.4Patched before disclosure
18 Jul 2023Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get6.1<= 1.6.21.7.0Patched before disclosure
31 Jan 2022TI WooCommerce Wishlist / TI WooCommerce Wishlist Pro < 1.40.1 - Unauthenticated SQL Injection9.8< 1.40.11.40.1Patched before disclosure
16 Oct 2020TI WooCommerce Wishlist <= 1.21.11 and TI WooCommerce Wishlist Pro <= 1.21.4 - Arbitrary Options Update8.8<= 1.21.111.21.12Patched before disclosure

Changelog mentions of security fixes: 2.12.1 (security); 2.13.0 (security); 2.14.0 (security); 2.14.1 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

13% of 8 support threads resolved in the last 2 months.

Momentum

100,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for TI WooCommerce Wishlist
4 May 20261,343
11 May 20263,918
18 May 20263,701
25 May 20263,170
1 Jun 20263,405
8 Jun 20263,437
15 Jun 20263,331
22 Jun 202632,335
29 Jun 20269,911
6 Jul 202611,862
13 Jul 20266,090
20 Jul 20265,923
27 Jul 20265,465
3 Aug 20265,141
10 Aug 20264,640
17 Aug 20264,317
24 Aug 20264,991
31 Aug 202631,622
7 Sep 202610,780
14 Sep 202610,870
21 Sep 20267,962
28 Sep 20265,154
5 Oct 20265,548
12 Oct 202632,419
19 Oct 202635,569
26 Oct 202615,946
2 Nov 20266,893

Weekly downloads over the last 4 weeks are 122% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

WCBoostScore 100 · 40,000+QODE Wishlist for WooCommerceScore 98 · 10,000+FavoritesScore 95 · 10,000+WPC Smart Wishlist for WooCommerceScore 89 · 100,000+

Facts

Version2.14.2
Authortemplateinvaders
Added22 Sep 2016
Last updated4 Nov 2026
Active installs100,000+
Requires WordPress6.1
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagsshop, Wishlist, ecommerce, woocommerce, woocommerce wishlist

Questions

Is TI WooCommerce Wishlist still maintained?

Yes. Last release 4 Nov 2026, 10 releases in the last 24 months.

Who owns TI WooCommerce Wishlist, and has it changed hands?

No change recorded. Main committer templateinvaders since Sep 2016.

Was TI WooCommerce Wishlist removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is TI WooCommerce Wishlist safe?

13 known vulnerabilities, all fixed (latest in 2.13.0). Not on the exploited list.

Is the latest TI WooCommerce Wishlist update safe to install?

No ownership change before 2.14.2. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue