Skip to content
PluginCanary

Wallet for WooCommerce

by Subrata Mal · 20,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 31 Oct 2026, 32 releases in 24 months, no unpatched vulnerabilities.

94/ 100 Canary Score
Sub-scores for Wallet for WooCommerce
Ownership100
Maintenance100
Security80
Support100
ReputationNo data

How the score works

Quick answers

Is Wallet for WooCommerce still maintained?
Yes. Last release 31 Oct 2026, 32 releases in the last 24 months. 31 Oct 2026 · wordpress.org
Who owns Wallet for WooCommerce, and has it changed hands?
No change recorded. Main committer subratamal since Dec 2017. 4 Nov 2026 · SVN log
Was Wallet for WooCommerce removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Wallet for WooCommerce safe?
10 known vulnerabilities, all fixed (latest in 1.6.10). Not on the exploited list. 10 Aug 2026 · Wordfence Intelligence
Is the latest Wallet for WooCommerce update safe to install?
No ownership change before 1.7.4. No one-star spike after it. 31 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
subratamal12 Dec 2017 to 31 Oct 2026, 148 commits

1 committer recorded. No ownership change since 2017.

Maintenance

Last release
4 days ago
Releases, 24 months
32
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Wallet for WooCommerce
Q1 20243
Q2 20243
Q3 20243
Q4 20243
Q1 20250
Q2 20251
Q3 20252
Q4 20252
Q1 20262
Q2 20268
Q3 202610
Q4 20264

Last release 31 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.7.

Average rating per quarter for Wallet for WooCommerce
Q4 20235.0
Q2 20243.7
Q3 20243.0
Q1 20255.0
Q2 20255.0
Q4 20255.0
Q2 20265.0
Q3 20265.0

Average rating stayed at 5.0 between Q4 2023 and Q3 2026.

Rating distribution
5 star170
4 star5
3 star2
2 star1
1 star10
Latest low reviews

Security record

4 vulnerabilities in 24 months (10 on record), all patched (latest fixed in 1.6.10).

Show 10 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
10 Aug 2026TeraWallet - Wallet for WooCommerce <= 1.6.9 - Missing Authorization to Authenticated (Subscriber+) Wallet Balance Inflation4.3<= 1.6.91.6.10Patched before disclosure
10 Jul 2026Wallet for WooCommerce <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) User/Email Enumeration via terawallet_export_user_search AJAX Action4.3<= 1.6.41.6.5Patched before disclosure
20 Feb 2026TeraWallet - For WooCommerce <= 1.5.15 - Authenticated (Customer+) Race Condition4.3<= 1.5.151.5.16Patched before disclosure
27 Nov 2024Wallet for WooCommerce <= 1.5.6 - Authenticated (Subscriber+) Incorrect Conversion between Numeric Types6.5<= 1.5.61.5.7Patched before disclosure
11 Jul 2024Wallet for WooCommerce <= 1.5.4 - Authenticated (Subscriber+) SQL Injection via 'search[value]'8.8<= 1.5.41.5.5Patched before disclosure
24 Apr 2024TeraWallet - Best WooCommerce Wallet System With Cashback Rewards, Partial Payment, Wallet Refunds <= 1.5.0 - Authenticated (Shop Manager+) Stored Cross-Site Scripting4.4<= 1.5.01.5.1Patched before disclosure
7 Mar 2024TeraWallet - Best WooCommerce Wallet System With Cashback Rewards, Partial Payment, Wallet Refunds <= 1.4.10 - Missing Authorization to Authenticated (Subscriber+) User Email Export4.3<= 1.4.101.4.11Patched before disclosure
15 Feb 2023TeraWallet - For WooCommerce <= 1.3.24 - Cross-Site Request Forgery via admin_options4.3<= 1.3.241.4.0Patched before disclosure
31 Oct 2022TeraWallet - For WooCommerce <= 1.4.3 - Insecure Direct Object Reference4.3<= 1.4.31.4.415
30 Oct 2022TeraWallet - For WooCommerce <= 1.3.24 - Cross-Site Request Forgery via lock_unlock_terawallet8.8<= 1.3.241.4.05

Changelog mentions of security fixes: 1.6.1 (security); 1.6.2 (security, XSS, sanitize); 1.6.3 (security, XSS); 1.6.4 (security, sanitize); 1.6.5 (security, authorization, nonce).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 5 support threads resolved in the last 2 months.

Momentum

20,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Wallet for WooCommerce
4 May 2026891
11 May 20261,556
18 May 20265,866
25 May 20268,672
1 Jun 20262,932
8 Jun 20265,305
15 Jun 20262,400
22 Jun 20265,480
29 Jun 20265,946
6 Jul 20266,336
13 Jul 20267,116
20 Jul 20262,688
27 Jul 20261,557
3 Aug 20269,954
10 Aug 20268,425
17 Aug 20267,616
24 Aug 20263,564
31 Aug 20266,129
7 Sep 20269,478
14 Sep 20262,697
21 Sep 20261,961
28 Sep 20261,547
5 Oct 202613,518
12 Oct 20262,638
19 Oct 20262,797
26 Oct 20266,388
2 Nov 2026834

Weekly downloads over the last 4 weeks are 36% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Power Coupons for WooCommerceScore 100 · 30,000+PW WooCommerce Gift CardsScore 97 · 20,000+YITH WooCommerce Gift CardsScore 97 · 10,000+

Facts

Version1.7.4
AuthorSubrata Mal
Added12 Dec 2017
Last updated31 Oct 2026
Active installs20,000+
Requires WordPress6.4
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagscashback, store credit, digital wallet, partial payment, woocommerce wallet

Questions

Is Wallet for WooCommerce still maintained?

Yes. Last release 31 Oct 2026, 32 releases in the last 24 months.

Who owns Wallet for WooCommerce, and has it changed hands?

No change recorded. Main committer subratamal since Dec 2017.

Was Wallet for WooCommerce removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Wallet for WooCommerce safe?

10 known vulnerabilities, all fixed (latest in 1.6.10). Not on the exploited list.

Is the latest Wallet for WooCommerce update safe to install?

No ownership change before 1.7.4. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue