Razorpay for WooCommerce
Healthy: maintained, last release 4 Nov 2026, 20 releases in 24 months, no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 80 |
| Support | No data |
| Reputation | 60 |
Quick answers
- Is Razorpay for WooCommerce still maintained?
- Yes. Last release 4 Nov 2026, 20 releases in the last 24 months. 4 Nov 2026 · wordpress.org
- Who owns Razorpay for WooCommerce, and has it changed hands?
- No change recorded. Main committer razorpay since Oct 2015. 4 Nov 2026 · SVN log
- Was Razorpay for WooCommerce removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is Razorpay for WooCommerce safe?
- 6 known vulnerabilities, all fixed (latest in 4.8.8). Not on the exploited list. 2 Oct 2026 · Wordfence Intelligence
- Is the latest Razorpay for WooCommerce update safe to install?
- No ownership change before 4.8.9. No one-star spike after it. 4 Nov 2026 · Release history
Active signals
Facts we detected, with links to the source.
- InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| razorpay | 26 Oct 2015 to 4 Nov 2026, 229 commits |
|---|---|
| ramprak | 26 Jul 2019 to 21 Jul 2020, 16 commits |
| premtechchefs | 29 Aug 2019 to 29 Aug 2019, 2 commits |
| chetangn | 6 Jan 2021 to 6 Jan 2021, 2 commits |
4 committers recorded. No ownership change since 2015.
Maintenance
- Last release
- today
- Releases, 24 months
- 20
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 5 |
|---|---|
| Q2 2024 | 5 |
| Q3 2024 | 2 |
| Q4 2024 | 0 |
| Q1 2025 | 2 |
| Q2 2025 | 3 |
| Q3 2025 | 3 |
| Q4 2025 | 1 |
| Q1 2026 | 4 |
| Q2 2026 | 4 |
| Q3 2026 | 2 |
| Q4 2026 | 1 |
Last release 4 Nov 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: no reviews. Lifetime: 2.5.
| Q2 2024 | 1.0 |
|---|---|
| Q3 2024 | 1.0 |
| Q1 2025 | 3.0 |
Average rating rose from 1.0 to 3.0 between Q2 2024 and Q1 2025.
| 5 star | 7 |
|---|---|
| 4 star | 0 |
| 3 star | 3 |
| 2 star | 0 |
| 1 star | 13 |
- Plugin needs a lot of improvements · 1 star · 21 Jan 2025
- Poor Support · 1 star · 17 Sep 2024
- Latest Update adds a MASSIVE banner Ad that cannot be dismissed permanently · 1 star · 25 Apr 2024
Security record
4 vulnerabilities in 24 months (6 on record), all patched (latest fixed in 4.8.8).
Show 6 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 2 Oct 2026 | Razorpay for WooCommerce <= 4.8.7 - Unauthenticated Insecure Direct Object Reference | 5.3 | <= 4.8.7 | 4.8.8 | Patched before disclosure |
| 17 Aug 2026 | Razorpay for WooCommerce <= 4.8.7 - Unauthenticated Insecure Direct Object Reference | 5.3 | <= 4.8.7 | 4.8.8 | 18 |
| 18 Feb 2026 | Razorpay for WooCommerce <= 4.7.8 - Missing Authentication to Unauthenticated Order Modification | 5.3 | <= 4.7.8 | 4.7.9 | Patched before disclosure |
| 16 Feb 2026 | Razorpay for WooCommerce <= 4.8.3 - Missing Authorization | 5.3 | <= 4.8.3 | 4.8.4 | 67 |
| 28 Nov 2023 | Razorpay for WooCommerce <= 4.5.6 - Cross-Site Request Forgery | 4.3 | <= 4.5.6 | 4.5.7 | Patched before disclosure |
| 28 Nov 2023 | Razorpay for WooCommerce <= 4.5.6 - Missing Authorization | 4.3 | <= 4.5.6 | 4.5.7 | Patched before disclosure |
Changelog mentions of security fixes: 4.8.9 (SQL injection); 4.8.8 (vulnerability).
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
0% of 2 support threads resolved in the last 2 months.
Momentum
100,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 1,973 |
|---|---|
| 11 May 2026 | 3,295 |
| 18 May 2026 | 3,202 |
| 25 May 2026 | 2,762 |
| 1 Jun 2026 | 18,374 |
| 8 Jun 2026 | 4,838 |
| 15 Jun 2026 | 16,460 |
| 22 Jun 2026 | 6,074 |
| 29 Jun 2026 | 4,062 |
| 6 Jul 2026 | 3,778 |
| 13 Jul 2026 | 17,362 |
| 20 Jul 2026 | 5,241 |
| 27 Jul 2026 | 3,999 |
| 3 Aug 2026 | 3,629 |
| 10 Aug 2026 | 3,044 |
| 17 Aug 2026 | 3,000 |
| 24 Aug 2026 | 2,640 |
| 31 Aug 2026 | 15,661 |
| 7 Sep 2026 | 8,533 |
| 14 Sep 2026 | 5,354 |
| 21 Sep 2026 | 3,605 |
| 28 Sep 2026 | 2,960 |
| 5 Oct 2026 | 3,212 |
| 12 Oct 2026 | 2,892 |
| 19 Oct 2026 | 2,761 |
| 26 Oct 2026 | 2,948 |
| 2 Nov 2026 | 512 |
Weekly downloads over the last 4 weeks are 60% below the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 4.8.9 |
|---|---|
| Author | Razorpay |
| Added | 26 Oct 2015 |
| Last updated | 4 Nov 2026 |
| Active installs | 100,000+ |
| Requires WordPress | 3.9.2 |
| Tested up to | 7.1.0 |
| Requires PHP | 7.4 |
| Category | E-commerce & Shopping |
| Tags | india, curlec, payments, razorpay, woocommerce |
Other plugins by this author: Razorpay Quick Payments, Razorpay Payment Button Plugin, Razorpay Subscriptions for WooCommerce, Razorpay for Gravity Forms, Razorpay Subscription Button Elementor Plugin, Razorpay Subscription Button Plugin, Razorpay Payment Button for Visual Composer, Razorpay Payment Button SiteOrigin Plugin
Questions
Is Razorpay for WooCommerce still maintained?
Yes. Last release 4 Nov 2026, 20 releases in the last 24 months.
Who owns Razorpay for WooCommerce, and has it changed hands?
No change recorded. Main committer razorpay since Oct 2015.
Was Razorpay for WooCommerce removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is Razorpay for WooCommerce safe?
6 known vulnerabilities, all fixed (latest in 4.8.8). Not on the exploited list.
Is the latest Razorpay for WooCommerce update safe to install?
No ownership change before 4.8.9. No one-star spike after it.