Mercado Pago payments for WooCommerce
Healthy: maintained, last release 22 Oct 2026, 73 releases in 24 months, no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 90 |
| Support | 67 |
| Reputation | 85 |
Quick answers
- Is Mercado Pago payments for WooCommerce still maintained?
- Yes. Last release 22 Oct 2026, 73 releases in the last 24 months. 22 Oct 2026 · wordpress.org
- Who owns Mercado Pago payments for WooCommerce, and has it changed hands?
- No change recorded. Main committer mercadopago since Oct 2017. 4 Nov 2026 · SVN log
- Was Mercado Pago payments for WooCommerce removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is Mercado Pago payments for WooCommerce safe?
- 5 known vulnerabilities, all fixed (latest in 8.9.1). Not on the exploited list. 5 Aug 2026 · Wordfence Intelligence
- Is the latest Mercado Pago payments for WooCommerce update safe to install?
- No ownership change before 8.9.7. No one-star spike after it. 22 Oct 2026 · Release history
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| claudiosanches | 7 Nov 2012 to 10 Aug 2020, 58 commits |
|---|---|
| mercadopago | 24 Oct 2017 to 22 Oct 2026, 519 commits |
2 committers recorded. No ownership change since 2012.
Maintenance
- Last release
- 13 days ago
- Releases, 24 months
- 73
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 4 |
|---|---|
| Q2 2024 | 11 |
| Q3 2024 | 5 |
| Q4 2024 | 6 |
| Q1 2025 | 5 |
| Q2 2025 | 7 |
| Q3 2025 | 16 |
| Q4 2025 | 7 |
| Q1 2026 | 15 |
| Q2 2026 | 10 |
| Q3 2026 | 6 |
| Q4 2026 | 2 |
Last release 22 Oct 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: 5.0 (2 reviews). Lifetime: 3.9.
| Q1 2025 | 5.0 |
|---|---|
| Q2 2025 | 4.4 |
| Q3 2025 | 4.0 |
| Q4 2025 | 4.0 |
| Q1 2026 | 3.2 |
| Q2 2026 | 2.3 |
| Q3 2026 | 5.0 |
Average rating stayed at 5.0 between Q1 2025 and Q3 2026.
| 5 star | 451 |
|---|---|
| 4 star | 43 |
| 3 star | 28 |
| 2 star | 23 |
| 1 star | 148 |
- PEDIDOS PENDIENTES · 1 star · 14 Jun 2026
- Regular · 2 stars · 30 May 2026
- O plugin do Mercado Pago e sua experiência frustrante · 1 star · 22 Apr 2026
Security record
2 vulnerabilities in 24 months (5 on record), all patched (latest fixed in 8.9.1).
Show 5 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 5 Aug 2026 | Mercado Pago payments for WooCommerce <= 8.9.0 - Unauthenticated Insecure Direct Object Reference | 5.3 | <= 8.9.0 | 8.9.1 | Patched before disclosure |
| 5 May 2026 | Mercado Pago payments for WooCommerce <= 8.7.11 - Missing Authorization to Unauthenticated PIX Payment QR Code Image Disclosure | 5.3 | <= 8.7.11 | 8.7.12 | Patched before disclosure |
| 19 Jul 2024 | Mercado Pago payments for WooCommerce 7.3.0 - 7.6.1 - Authenticated (Subscriber+) Arbitrary File Download | 6.5 | 7.3.0 to 7.6.1 | 7.6.2 | Patched before disclosure |
| 6 Feb 2023 | Mercado Pago payments for WooCommerce <= 6.3.1 - Cross-Site Request Forgery | 4.3 | <= 6.3.1 | 6.4.0 | 316 |
| 23 Jan 2023 | Mercado Pago payments for WooCommerce <= 6.6.0 - Cross-Site Request Forgery | 4.3 | <= 6.6.0 | 6.7.0 | 330 |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
67% of 6 support threads resolved in the last 2 months.
Momentum
100,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 12,393 |
|---|---|
| 11 May 2026 | 42,095 |
| 18 May 2026 | 13,289 |
| 25 May 2026 | 7,854 |
| 1 Jun 2026 | 34,094 |
| 8 Jun 2026 | 35,206 |
| 15 Jun 2026 | 10,021 |
| 22 Jun 2026 | 34,606 |
| 29 Jun 2026 | 35,045 |
| 6 Jul 2026 | 11,894 |
| 13 Jul 2026 | 35,854 |
| 20 Jul 2026 | 10,348 |
| 27 Jul 2026 | 7,632 |
| 3 Aug 2026 | 40,561 |
| 10 Aug 2026 | 10,583 |
| 17 Aug 2026 | 40,908 |
| 24 Aug 2026 | 36,506 |
| 31 Aug 2026 | 8,683 |
| 7 Sep 2026 | 6,941 |
| 14 Sep 2026 | 8,787 |
| 21 Sep 2026 | 55,626 |
| 28 Sep 2026 | 11,722 |
| 5 Oct 2026 | 33,347 |
| 12 Oct 2026 | 9,543 |
| 19 Oct 2026 | 31,002 |
| 26 Oct 2026 | 14,443 |
| 2 Nov 2026 | 1,241 |
Weekly downloads over the last 4 weeks are 37% below the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 8.9.7 |
|---|---|
| Author | Mercado Pago |
| Added | 7 Nov 2012 |
| Last updated | 22 Oct 2026 |
| Active installs | 100,000+ |
| Requires WordPress | 6.3 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | E-commerce & Shopping |
| Tags | ecommerce, mercadopago, woocommerce |
Other plugins by this author: WPeComm Mercado Pago Module Oficial
Questions
Is Mercado Pago payments for WooCommerce still maintained?
Yes. Last release 22 Oct 2026, 73 releases in the last 24 months.
Who owns Mercado Pago payments for WooCommerce, and has it changed hands?
No change recorded. Main committer mercadopago since Oct 2017.
Was Mercado Pago payments for WooCommerce removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is Mercado Pago payments for WooCommerce safe?
5 known vulnerabilities, all fixed (latest in 8.9.1). Not on the exploited list.
Is the latest Mercado Pago payments for WooCommerce update safe to install?
No ownership change before 8.9.7. No one-star spike after it.