Skip to content
PluginCanary

Payment Gateway bKash for WC

by Kapil Paul · 1,000+ active installs · Checked 3 Nov 2026
Avoid1 Critical

Avoid: vulnerability published 20 Nov 2025 still has no fix after 14 days.

39/ 100 Canary Score

Capped at 39: a vulnerability has no patch.

Sub-scores for Payment Gateway bKash for WC
Ownership100
Maintenance85
Security35
Support70
Reputation70

How the score works

Quick answers

Is Payment Gateway bKash for WC still maintained?
Yes. Last release 16 Jul 2026, 2 releases in the last 24 months. 16 Jul 2026 · wordpress.org
Who owns Payment Gateway bKash for WC, and has it changed hands?
No change recorded. Main committer kapilpaul since Feb 2020. 3 Nov 2026 · SVN log
Was Payment Gateway bKash for WC removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Payment Gateway bKash for WC safe?
No. 1 known vulnerability has no fix in the current version. 20 Nov 2025 · Wordfence Intelligence
Is the latest Payment Gateway bKash for WC update safe to install?
No ownership change before 3.1.0. No one-star spike after it. 27 Oct 2025 · Release history

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 20 Nov 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.4 Dec 2025Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master19 Feb 2020 to 19 Feb 2020, 1 commits
kapilpaul20 Feb 2020 to 16 Jul 2026, 51 commits

2 committers recorded. No ownership change since 2020.

Maintenance

Last release
4 months ago
Releases, 24 months
2
Tested up to
7.0 vs 7.1
Requires PHP
5.6 supported 8.2+
Releases per quarter
Releases per quarter for Payment Gateway bKash for WC
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20251
Q2 20250
Q3 20250
Q4 20251
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 16 Jul 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 5.0.

Rating distribution
5 star10
4 star0
3 star0
2 star0
1 star0

Security record

1 vulnerability in 24 months, 1 with no fix in the current version.

PublishedIssueCVSSAffectedFixed inDays to patch
20 Nov 2025Payment Gateway bKash for WC <= 3.1.0 - Missing Authorization5.3<= 3.1.0No fixn/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Payment Gateway bKash for WC
4 May 2026106
11 May 2026168
18 May 2026136
25 May 202690
1 Jun 2026139
8 Jun 2026136
15 Jun 2026140
22 Jun 2026120
29 Jun 2026140
6 Jul 2026150
13 Jul 2026170
20 Jul 2026168
27 Jul 2026161
3 Aug 2026144
10 Aug 2026144
17 Aug 2026148
24 Aug 2026130
31 Aug 2026182
7 Sep 2026136
14 Sep 2026163
21 Sep 2026146
28 Sep 2026150
5 Oct 2026156
12 Oct 2026169
19 Oct 2026175
26 Oct 2026173
2 Nov 202632

Weekly downloads over the last 4 weeks are 4% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

WooPaymentsScore 93 · 800,000+FunnelKit Payment Gateway for StripeScore 92 · 20,000+Payment Plugins for Stripe WooCommerceScore 91 · 100,000+Smart COD for WooCommerceScore 91 · 30,000+WooCommerce Payfast GatewayScore 91 · 30,000+

Facts

Version3.1.0
AuthorKapil Paul
Added20 Feb 2020
Last updated16 Jul 2026
Active installs1,000+
Requires WordPress4.0
Tested up to7.0.8
Requires PHP5.6
CategoryE-commerce & Shopping
TagsbKash, bkash gateway, bkash payment, bkash checkout, woocommerce payment

Other plugins by this author: Look Inside PDF, DC Nagad Payment, DC EDD bKash Payment

Questions

Is Payment Gateway bKash for WC still maintained?

Yes. Last release 16 Jul 2026, 2 releases in the last 24 months.

Who owns Payment Gateway bKash for WC, and has it changed hands?

No change recorded. Main committer kapilpaul since Feb 2020.

Was Payment Gateway bKash for WC removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Payment Gateway bKash for WC safe?

No. 1 known vulnerability has no fix in the current version.

Is the latest Payment Gateway bKash for WC update safe to install?

No ownership change before 3.1.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue