Skip to content
PluginCanary

Product Attachment for WooCommerce

by Dotstore · 6,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 29 Oct 2026, 5 releases in 24 months, no unpatched vulnerabilities.

96/ 100 Canary Score
Sub-scores for Product Attachment for WooCommerce
Ownership100
Maintenance100
Security90
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Product Attachment for WooCommerce still maintained?
Yes. Last release 29 Oct 2026, 5 releases in the last 24 months. 29 Oct 2026 · wordpress.org
Who owns Product Attachment for WooCommerce, and has it changed hands?
No change recorded. Main committer dots since Jul 2017. 3 Nov 2026 · SVN log
Was Product Attachment for WooCommerce removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Product Attachment for WooCommerce safe?
4 known vulnerabilities, all fixed (latest in 2.3.5). Not on the exploited list. 1 Sep 2026 · Wordfence Intelligence
Is the latest Product Attachment for WooCommerce update safe to install?
No ownership change before 2.3.5. No one-star spike after it. 14 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
dots13 Jul 2017 to 29 Oct 2026, 211 commits

1 committer recorded. No ownership change since 2017.

Maintenance

Last release
6 days ago
Releases, 24 months
5
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter
Releases per quarter for Product Attachment for WooCommerce
Q1 20241
Q2 20242
Q3 20240
Q4 20240
Q1 20251
Q2 20250
Q3 20250
Q4 20251
Q1 20260
Q2 20260
Q3 20262
Q4 20261

Last release 29 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.5.

Rating distribution
5 star20
4 star1
3 star0
2 star0
1 star3

Security record

2 vulnerabilities in 24 months (4 on record), all patched (latest fixed in 2.3.5).

Show 4 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
1 Sep 2026Product Attachment for WooCommerce <= 2.3.4 - Unauthenticated Information Exposure5.3<= 2.3.42.3.544
2 Aug 2026Product Attachment for WooCommerce < 2.3.3 - Unauthenticated Information Exposure5.3< 2.3.32.3.3Patched before disclosure
11 Aug 2023WooCommerce Product Attachment <= 2.1.8 - Cross-Site Request Forgery4.3<= 2.1.82.2.07
4 Mar 2022Freemius SDK <= 2.4.2 - Missing Authorization Checks6.3< 2.1.32.1.36

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 2 support threads resolved in the last 2 months.

Momentum

6,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Product Attachment for WooCommerce
4 May 202660
11 May 2026180
18 May 2026187
25 May 2026162
1 Jun 2026150
8 Jun 2026175
15 Jun 2026151
22 Jun 2026170
29 Jun 2026160
6 Jul 2026156
13 Jul 2026146
20 Jul 20262,719
27 Jul 2026637
3 Aug 2026930
10 Aug 2026416
17 Aug 2026391
24 Aug 2026311
31 Aug 2026306
7 Sep 20262,414
14 Sep 20261,038
21 Sep 2026658
28 Sep 2026480
5 Oct 2026405
12 Oct 20262,862
19 Oct 20261,012
26 Oct 2026993
2 Nov 2026115

Weekly downloads over the last 4 weeks are 93% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version2.3.5
AuthorDotstore
Added13 Jul 2017
Last updated29 Oct 2026
Active installs6,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHP7.2
CategoryE-commerce & Shopping
Tagsdots, attachment, woocommerce, orderattachment, productattachment

Other plugins by this author: Hide Shipping Method For WooCommerce, Product Size Charts Plugin for WooCommerce, Extra Fees for WooCommerce, Flat Rate Shipping Method for WooCommerce, Fraud Prevention For WooCommerce and EDD, Minimum and Maximum Quantity for WooCommerce, Digital Goods for WooCommerce Checkout, Banner Management For WooCommerce, Shipping Method Display Style for WooCommerce, Enhanced Ecommerce Google Analytics for WooCommerce, Mass Pages/Posts Creator, Conditional Payment Methods for WooCommerce

Questions

Is Product Attachment for WooCommerce still maintained?

Yes. Last release 29 Oct 2026, 5 releases in the last 24 months.

Who owns Product Attachment for WooCommerce, and has it changed hands?

No change recorded. Main committer dots since Jul 2017.

Was Product Attachment for WooCommerce removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Product Attachment for WooCommerce safe?

4 known vulnerabilities, all fixed (latest in 2.3.5). Not on the exploited list.

Is the latest Product Attachment for WooCommerce update safe to install?

No ownership change before 2.3.5. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue