Skip to content
PluginCanary

Extra Fees for WooCommerce

by Dotstore · 7,000+ active installs · Checked 3 Nov 2026
Avoid1 Critical

Avoid: vulnerability published 28 Oct 2026 with no patched version yet.

39/ 100 Canary Score

Capped at 39: a vulnerability has no patch.

Sub-scores for Extra Fees for WooCommerce
Ownership100
Maintenance100
Security25
Support70
Reputation70

How the score works

Quick answers

Is Extra Fees for WooCommerce still maintained?
Yes. Last release 29 Oct 2026, 8 releases in the last 24 months. 29 Oct 2026 · wordpress.org
Who owns Extra Fees for WooCommerce, and has it changed hands?
No change recorded. Main committer dots since Feb 2017. 3 Nov 2026 · SVN log
Was Extra Fees for WooCommerce removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Extra Fees for WooCommerce safe?
No. 1 known vulnerability has no fix in the current version. 28 Oct 2026 · Wordfence Intelligence
Is the latest Extra Fees for WooCommerce update safe to install?
No ownership change before 4.4.0. No one-star spike after it. 17 Aug 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-1Vulnerability published 28 Oct 2026 with no patched version yet. Disable or replace the plugin until a fix is released.28 Oct 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
dots13 Feb 2017 to 29 Oct 2026, 202 commits

1 committer recorded. No ownership change since 2017.

Maintenance

Last release
6 days ago
Releases, 24 months
8
Tested up to
7.0 vs 7.1
Requires PHP
7.2 supported 8.2+
Releases per quarter
Releases per quarter for Extra Fees for WooCommerce
Q1 20241
Q2 20241
Q3 20243
Q4 20241
Q1 20251
Q2 20252
Q3 20251
Q4 20250
Q1 20261
Q2 20261
Q3 20261
Q4 20260

Last release 29 Oct 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 4.3.

Rating distribution
5 star32
4 star2
3 star1
2 star2
1 star5

Security record

2 vulnerabilities in 24 months (4 on record), 1 with no fix in the current version.

PublishedIssueCVSSAffectedFixed inDays to patch
28 Oct 2026Extra Fees for WooCommerce <= 4.4.0 - Authenticated (Contributor+) PHP Object Injection7.5<= 4.4.0No fixn/a
Show 3 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
19 Feb 2026Extra Fees Plugin for WooCommerce <= 4.3.3 - Cross-Site Request Forgery4.3<= 4.3.34.3.456
18 Jul 2023Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get6.13.1 to 3.9.3.13.9.3.26
4 Mar 2022Freemius SDK <= 2.4.2 - Missing Authorization Checks6.3< 3.8.23.8.2Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

7,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Extra Fees for WooCommerce
4 May 2026239
11 May 2026368
18 May 2026815
25 May 2026309
1 Jun 2026274
8 Jun 2026274
15 Jun 2026242
22 Jun 2026223
29 Jun 2026207
6 Jul 2026209
13 Jul 2026201
20 Jul 2026201
27 Jul 2026241
3 Aug 2026241
10 Aug 2026186
17 Aug 20264,416
24 Aug 2026742
31 Aug 2026635
7 Sep 2026405
14 Sep 2026394
21 Sep 2026414
28 Sep 2026435
5 Oct 2026384
12 Oct 2026307
19 Oct 2026431
26 Oct 2026462
2 Nov 202657

Weekly downloads over the last 4 weeks are 36% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Preview E-mails for WooCommerceScore 93 · 20,000+PW WooCommerce Bulk EditScore 92 · 20,000+Store Vacation Lite for WooCommerceScore 92 · 10,000+Load More Products for WooCommerceScore 92 · 10,000+StoreCustomizerScore 91 · 20,000+

Facts

Version4.4.0
AuthorDotstore
Added31 Jan 2017
Last updated29 Oct 2026
Active installs7,000+
Requires WordPress5.0
Tested up to7.0.8
Requires PHP7.2
CategoryE-commerce & Shopping
Tagscustom fee, extra fees, Extra Charge, additional fee, Extra Fees Rules

Other plugins by this author: Hide Shipping Method For WooCommerce, Product Size Charts Plugin for WooCommerce, Product Attachment for WooCommerce, Flat Rate Shipping Method for WooCommerce, Fraud Prevention For WooCommerce and EDD, Digital Goods for WooCommerce Checkout, Minimum and Maximum Quantity for WooCommerce, Shipping Method Display Style for WooCommerce, Banner Management For WooCommerce, Local Pickup for WooCommerce, Mass Pages/Posts Creator, Enhanced Ecommerce Google Analytics for WooCommerce

Questions

Is Extra Fees for WooCommerce still maintained?

Yes. Last release 29 Oct 2026, 8 releases in the last 24 months.

Who owns Extra Fees for WooCommerce, and has it changed hands?

No change recorded. Main committer dots since Feb 2017.

Was Extra Fees for WooCommerce removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Extra Fees for WooCommerce safe?

No. 1 known vulnerability has no fix in the current version.

Is the latest Extra Fees for WooCommerce update safe to install?

No ownership change before 4.4.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue