Skip to content
PluginCanary

WC Fields Factory

by Saravana Kumar K · 7,000+ active installs · Checked 3 Nov 2026
Avoid1 Critical2 Warnings

Avoid: vulnerability published 5 Oct 2026 still has no fix after 14 days.

39/ 100 Canary Score

Capped at 39 while a vulnerability has no patch.

Sub-scores for WC Fields Factory
Ownership100
Maintenance100
Security25
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 5 Oct 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.19 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 21 Sep 2026, fixed in 4.1.11. Update to version 4.1.11 or later.21 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 21 Sep 2026, fixed in 4.1.11. Update to version 4.1.11 or later.21 Sep 2026Evidence
  • InfoSEC-33 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
mycholan22 Mar 2015 to 4 Sep 2026, 119 commits
palaniyappan15 Sep 2026 to 17 Sep 2026, 6 commits

New committer palaniyappan made a first commit on 15 Sep 2026.

Maintenance

Last release
48 days ago
Releases, 24 months
4
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter for WC Fields Factory
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20261
Q2 20260
Q3 20263
Q4 20260

Last release 17 Sep 2026. Tested with WordPress 7.1 (current).

Support

0% of 2 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
5 Oct 2026WC Fields Factory <= 4.1.12 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 4.1.12No fixn/a
21 Sep 2026WC Fields Factory <= 4.1.10 - Missing Authorization4.3<= 4.1.104.1.110
21 Sep 2026WC Fields Factory <= 4.1.10 - Missing Authorization4.3<= 4.1.104.1.110
28 Mar 2023WC Fields Factory <= 4.1.5 - Authenticated(Subscriber+) SQL Injection8.8<= 4.1.54.1.60
27 Mar 2023WC Fields Factory <= 4.1.5 - Authenticated (Administrator+) SQL Injection7.2<= 4.1.54.1.61

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.3 from 168 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star128
4 star10
3 star6
2 star5
1 star19

Momentum

7,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WC Fields Factory
4 May 2026110
11 May 2026189
18 May 2026521
25 May 2026227
1 Jun 2026191
8 Jun 2026197
15 Jun 2026172
22 Jun 2026181
29 Jun 2026148
6 Jul 2026152
13 Jul 2026183
20 Jul 2026178
27 Jul 2026158
3 Aug 2026205
10 Aug 2026169
17 Aug 2026178
24 Aug 2026149
31 Aug 2026225
7 Sep 2026160
14 Sep 20265,782
21 Sep 20261,002
28 Sep 2026439
5 Oct 2026405
12 Oct 2026367
19 Oct 2026521
26 Oct 2026372
2 Nov 202664

Weekly downloads over the last 4 weeks are 29% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Extra Product Options For WooCommerce | Custom Product Addons and FieldsScore 92 · 30,000+Flexible Product Fields (WooCommerce Product Addons) - WooCommerce Product Page EditorScore 92 · 10,000+Gift Wrapper for WooCommerceScore 91 · 2,000+Product Options and Price Calculation Formulas for WooCommerce - Uni CPOScore 91 · 1,000+Product Addons for Woocommerce - Product Options with Custom FieldsScore 90 · 30,000+

Facts

Version4.1.12
AuthorSaravana Kumar K
Added22 Mar 2015
Last updated17 Sep 2026
Active installs7,000+
Requires WordPress3.5
Tested up to7.1.4
Requires PHPnot stated
CategoryE-commerce & Shopping
Tagscustom admin fields, custom product fields, custom woocommerce fee, overriding product price, Customize WooCommerce Product Page

Other plugins by this author: WC Product Bundles, Sark Migs

Questions

Is WC Fields Factory still maintained?

WC Fields Factory was last updated on 17 Sep 2026. Its Canary status is Avoid.

Is WC Fields Factory safe?

WC Fields Factory has 1 published vulnerability with no patched version. Its Canary status is Avoid.

Who owns WC Fields Factory?

The wordpress.org author is Saravana Kumar K. Recent committers: palaniyappan, mycholan, sarkparanjothi, plugin-master. New committer palaniyappan made a first commit on 15 Sep 2026.

What can I use instead of WC Fields Factory?

Plugins in the same category with a higher Canary Score: Extra Product Options For WooCommerce | Custom Product Addons and Fields, Flexible Product Fields (WooCommerce Product Addons) - WooCommerce Product Page Editor, Gift Wrapper for WooCommerce, Product Options and Price Calculation Formulas for WooCommerce - Uni CPO, Product Addons for Woocommerce - Product Options with Custom Fields.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue