Skip to content
PluginCanary

CardCom Payment Gateway

by CardCom · 3,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 3 Nov 2026, 14 releases in 24 months, no unpatched vulnerabilities.

95/ 100 Canary Score
Sub-scores for CardCom Payment Gateway
Ownership100
Maintenance100
Security85
SupportNo data
ReputationNo data

How the score works

Quick answers

Is CardCom Payment Gateway still maintained?
Yes. Last release 3 Nov 2026, 14 releases in the last 24 months. 3 Nov 2026 · wordpress.org
Who owns CardCom Payment Gateway, and has it changed hands?
No change recorded. Main committer cardcom since Dec 2017. 3 Nov 2026 · SVN log
Was CardCom Payment Gateway removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is CardCom Payment Gateway safe?
1 known vulnerability, fixed (latest in 3.5.1.1). Not on the exploited list. 22 Sep 2025 · Wordfence Intelligence
Is the latest CardCom Payment Gateway update safe to install?
No ownership change before 3.6.0.0. No one-star spike after it. 3 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
cardcom21 Dec 2017 to 3 Nov 2026, 202 commits

1 committer recorded. No ownership change since 2017.

Maintenance

Last release
yesterday
Releases, 24 months
14
Tested up to
7.1 current
Requires PHP
8.2 supported 8.2+
Releases per quarter
Releases per quarter for CardCom Payment Gateway
Q1 20240
Q2 20243
Q3 20241
Q4 20243
Q1 20250
Q2 20251
Q3 20252
Q4 20251
Q1 20262
Q2 20262
Q3 20261
Q4 20262

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 1.0.

Rating distribution
5 star0
4 star0
3 star0
2 star0
1 star1

Security record

1 vulnerability in 24 months, patched (latest fixed in 3.5.1.1).

Show 1 patched vulnerability
PublishedIssueCVSSAffectedFixed inDays to patch
22 Sep 2025CardCom Payment Gateway <= 3.5.1.0 - Missing Authorization6.5<= 3.5.1.03.5.1.1380

Changelog mentions of security fixes: 3.6.0.0 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

3,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for CardCom Payment Gateway
4 May 202695
11 May 2026175
18 May 2026253
25 May 2026155
1 Jun 2026127
8 Jun 2026139
15 Jun 20261,041
22 Jun 2026331
29 Jun 2026262
6 Jul 2026321
13 Jul 2026202
20 Jul 2026218
27 Jul 2026195
3 Aug 2026203
10 Aug 2026175
17 Aug 2026199
24 Aug 20261,004
31 Aug 2026422
7 Sep 2026262
14 Sep 2026364
21 Sep 2026316
28 Sep 2026270
5 Oct 2026348
12 Oct 2026263
19 Oct 20261,331
26 Oct 2026649
2 Nov 202689

Weekly downloads over the last 4 weeks are 67% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Smart COD for WooCommerceScore 100 · 30,000+WooCommerce Payfast GatewayScore 100 · 30,000+Paystack WooCommerce Payment GatewayScore 100 · 20,000+PayPal Enterprise Payments (formerlyScore 100 · 10,000+Inspire Commerce Gateway for WooCommerceScore 100 · 10,000+

Facts

Version3.6.0.0
AuthorCardCom
Added21 Dec 2017
Last updated3 Nov 2026
Active installs3,000+
Requires WordPress7.0
Tested up to7.1.4
Requires PHP8.2
CategoryE-commerce & Shopping
Tagscheckout, woocommerce, payment gateway

Questions

Is CardCom Payment Gateway still maintained?

Yes. Last release 3 Nov 2026, 14 releases in the last 24 months.

Who owns CardCom Payment Gateway, and has it changed hands?

No change recorded. Main committer cardcom since Dec 2017.

Was CardCom Payment Gateway removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is CardCom Payment Gateway safe?

1 known vulnerability, fixed (latest in 3.5.1.1). Not on the exploited list.

Is the latest CardCom Payment Gateway update safe to install?

No ownership change before 3.6.0.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue