Revopic - Photo Reviews for WooCommerce
Healthy: vulnerability published 30 Oct 2026, fixed in 1.2.32.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 65 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 1.2.32. Update to version 1.2.32 or later.30 Oct 2026Evidence
- WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 1.2.31. Update to version 1.2.31 or later.9 Oct 2026Evidence
- WarningSEC-1Vulnerability published 3 Oct 2026, fixed in 1.2.31. Update to version 1.2.31 or later.3 Oct 2026Evidence
- WarningSEC-1Vulnerability published 2 Oct 2026, fixed in 1.2.31. Update to version 1.2.31 or later.2 Oct 2026Evidence
- WarningSEC-1Vulnerability published 1 Oct 2026, fixed in 1.2.31. Update to version 1.2.31 or later.1 Oct 2026Evidence
- InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| mrt3vn | 23 Nov 2017 to 23 Aug 2021, 13 commits |
|---|---|
| kimvt1991 | 25 Nov 2017 to 21 Mar 2022, 54 commits |
| mytrinh | 8 Apr 2021 to 24 Oct 2026, 38 commits |
| villatheme | 3 May 2024 to 3 May 2024, 1 commits |
| vietmike | 2 Jul 2024 to 2 Jul 2024, 1 commits |
| dudleynguyen | 21 Nov 2024 to 15 Aug 2025, 14 commits |
| leminhhung | 20 Jun 2026 to 3 Oct 2026, 7 commits |
New committer leminhhung made a first commit on 20 Jun 2026.
Maintenance
- Last release
- 11 days ago
- Releases, 24 months
- 0
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
Last release 24 Oct 2026. Tested with WordPress 7.1 (current). Release history builds as we see new versions.
Support
0% of 1 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 30 Oct 2026 | Photo Reviews for WooCommerce <= 1.2.31 - Unauthenticated File Deletion via 'wcpr_image_upload_id' Parameter | 5.4 | <= 1.2.31 | 1.2.32 | n/a |
| 9 Oct 2026 | Photo Reviews for WooCommerce <= 1.2.30 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'wcpr_image_upload_id' Parameter | 7.2 | <= 1.2.30 | 1.2.31 | n/a |
| 3 Oct 2026 | Photo Reviews for WooCommerce <= 1.2.30 - Reflected Cross-Site Scripting | 6.1 | <= 1.2.30 | 1.2.31 | n/a |
| 2 Oct 2026 | Photo Reviews for WooCommerce <= 1.2.30 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'wcpr_image_upload_id' Parameter | 8.1 | <= 1.2.30 | 1.2.31 | n/a |
| 1 Oct 2026 | Photo Reviews for WooCommerce <= 1.2.30 - Unauthenticated Insecure Direct Object Reference | 5.3 | <= 1.2.30 | 1.2.31 | n/a |
Source: Wordfence Intelligence.
Reputation
| Q4 2023 | 5.0 |
|---|---|
| Q1 2024 | 5.0 |
| Q2 2024 | 5.0 |
| Q4 2024 | 5.0 |
| Q3 2025 | 5.0 |
| Q4 2025 | 5.0 |
Average rating stayed at 5.0 between Q4 2023 and Q4 2025.
| 5 star | 66 |
|---|---|
| 4 star | 4 |
| 3 star | 3 |
| 2 star | 0 |
| 1 star | 4 |
- forcefully displaying Verified Button · 1 star · 3 Mar 2023
- It crashed the site · 1 star · 3 Mar 2021
Momentum
10,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 384 |
|---|---|
| 11 May 2026 | 645 |
| 18 May 2026 | 1,207 |
| 25 May 2026 | 623 |
| 1 Jun 2026 | 583 |
| 8 Jun 2026 | 647 |
| 15 Jun 2026 | 3,076 |
| 22 Jun 2026 | 2,430 |
| 29 Jun 2026 | 1,000 |
| 6 Jul 2026 | 1,294 |
| 13 Jul 2026 | 724 |
| 20 Jul 2026 | 683 |
| 27 Jul 2026 | 629 |
| 3 Aug 2026 | 641 |
| 10 Aug 2026 | 581 |
| 17 Aug 2026 | 8,157 |
| 24 Aug 2026 | 1,656 |
| 31 Aug 2026 | 1,021 |
| 7 Sep 2026 | 817 |
| 14 Sep 2026 | 4,342 |
| 21 Sep 2026 | 2,056 |
| 28 Sep 2026 | 5,468 |
| 5 Oct 2026 | 2,284 |
| 12 Oct 2026 | 984 |
| 19 Oct 2026 | 3,939 |
| 26 Oct 2026 | 3,403 |
| 2 Nov 2026 | 237 |
Weekly downloads over the last 4 weeks are 17% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.2.32 |
|---|---|
| Author | VillaTheme |
| Added | 23 Nov 2017 |
| Last updated | 24 Oct 2026 |
| Active installs | 10,000+ |
| Requires WordPress | 6.0 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | E-commerce & Shopping |
| Tags | coupon, review reminder, customer reviews, woocommerce reviews, product reviews image |
Other plugins by this author: Mailonix - Email Template Customizer for WooCommerce, CURCY - Multi Currency for WooCommerce, Trakoo - Orders Tracking for WooCommerce, Choosly - Product Variations Swatches for WooCommerce, Bulky - Bulk Edit Products for WooCommerce, EU Cookies Bar for WordPress, ALD - Dropshipping and Fulfillment for AliExpress and WooCommerce, Faview - Virtual Reviews for WooCommerce, Sizor Product Size Chart For WooCommerce, Countix Sales Countdown Timer, Notivo Notification for WooCommerce, EXMAGE - WordPress Image Links
Questions
Is Revopic - Photo Reviews for WooCommerce still maintained?
Revopic - Photo Reviews for WooCommerce was last updated on 24 Oct 2026. Its Canary status is Healthy.
Is Revopic - Photo Reviews for WooCommerce safe?
Revopic - Photo Reviews for WooCommerce has no open unpatched vulnerabilities on record. 5 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Revopic - Photo Reviews for WooCommerce?
The wordpress.org author is VillaTheme. Recent committers: mytrinh, leminhhung, dudleynguyen, vietmike, villatheme. New committer leminhhung made a first commit on 20 Jun 2026.
What can I use instead of Revopic - Photo Reviews for WooCommerce?
Plugins in the same category with a higher Canary Score: Faview - Virtual Reviews for WooCommerce, Disable WooCommerce Reviews, TrustMate.io - WooCommerce integration, Yotpo Product Reviews, REVIEWS.io for WooCommerce.