Skip to content
PluginCanary

WooPayments

WooPayments: Integrated WooCommerce Payments
by WooCommerce · 800,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 3 Nov 2026, 62 releases in 24 months, no unpatched vulnerabilities.

93/ 100 Canary Score
Sub-scores for WooPayments
Ownership100
Maintenance100
Security95
Support78
Reputation85

How the score works

Quick answers

Is WooPayments still maintained?
Yes. Last release 3 Nov 2026, 62 releases in the last 24 months. 3 Nov 2026 · wordpress.org
Who owns WooPayments, and has it changed hands?
No change recorded. Main committer automattic since Apr 2020. 4 Nov 2026 · SVN log
Was WooPayments removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is WooPayments safe?
7 known vulnerabilities, all fixed (latest in 10.6.0). Not on the exploited list. 30 Mar 2026 · Wordfence Intelligence
Is the latest WooPayments update safe to install?
No ownership change before 11.2.1. No one-star spike after it. 3 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master20 Mar 2020 to 20 Mar 2020, 1 commits
automattic8 Apr 2020 to 3 Nov 2026, 232 commits
WooCommerce11 Sep 2024 to 11 Sep 2024, 1 commits

3 committers recorded. No ownership change since 2020.

Maintenance

Last release
yesterday
Releases, 24 months
62
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for WooPayments
Q1 20245
Q2 20248
Q3 202411
Q4 20248
Q1 20257
Q2 20255
Q3 20255
Q4 20255
Q1 20264
Q2 20264
Q3 20263
Q4 202624

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 4.6 (14 reviews). Lifetime: 3.4.

Average rating per quarter for WooPayments
Q2 20264.6
Q3 20265.0
Q4 20264.2

Average rating fell from 4.6 to 4.2 between Q2 2026 and Q4 2026.

Rating distribution
5 star101
4 star5
3 star5
2 star5
1 star62
Latest low reviews

Security record

1 vulnerability in 24 months (7 on record), patched (latest fixed in 10.6.0).

Show 7 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
30 Mar 2026WooPayments <= 10.5.1 - Missing Authorization to Unauthenticated Plugin Settings Update via save_upe_appearance_ajax6.5<= 10.5.110.6.0Patched before disclosure
27 Dec 2023WooPayments - Fully Integrated Solution Built and Supported by Woo <= 6.6.2 - Unauthenticated Insecure Direct Object Reference5.3<= 6.6.26.7.0Patched before disclosure
5 Dec 2023WooCommerce Payments <= 6.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 6.4.26.5.0Patched before disclosure
20 Jun 2023WooCommerce Payments <= 5.9.0 - Authenticated (Shop manager+) SQL Injection via currency parameters6.6<= 5.9.05.9.1Patched before disclosure
19 Jun 2023WooCommerce Payments <= 5.9.0 - Missing Authorization via redirect_pay_for_order_to_update_payment_method6.5<= 5.9.05.9.1Patched before disclosure
23 Mar 2023WooCommerce Payments 4.8.0 - 5.6.1 Authentication Bypass and Privilege Escalation9.84.8.0 to 5.6.15.6.2Patched before disclosure
9 Aug 2022WooCommerce Payments <= 4.5.0 - Payment Bypass5.33.9.0 to 3.9.4, 4.0.0 to 4.0.3, 4.1.0 to 4.1.1, 4.2.0 to 4.2.2, 4.3.0 to 4.3.1, 4.4.0 to 4.4.1, 4.5.03.9.4Patched before disclosure

Changelog mentions of security fixes: 10.8.0 (security, vulnerability, nonce); 10.9.0 (security); 11.0.0 (nonce); 10.3.2 (security); 10.6.1 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

78% of 9 support threads resolved in the last 2 months.

Momentum

800,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WooPayments
4 May 202623,445
11 May 202642,542
18 May 2026374,684
25 May 202668,920
1 Jun 202650,668
8 Jun 202642,320
15 Jun 202637,717
22 Jun 2026299,560
29 Jun 202673,932
6 Jul 2026101,589
13 Jul 202644,159
20 Jul 202640,465
27 Jul 202636,485
3 Aug 2026363,615
10 Aug 202662,430
17 Aug 2026357,692
24 Aug 202674,758
31 Aug 2026323,314
7 Sep 202666,029
14 Sep 202686,724
21 Sep 202658,582
28 Sep 202637,822
5 Oct 2026287,374
12 Oct 202669,926
19 Oct 202659,728
26 Oct 202694,509
2 Nov 20266,476

Weekly downloads over the last 4 weeks are 51% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Afterpay Gateway for WooCommerceScore 100 · 10,000+Airwallex Online Payments GatewayScore 98 · 10,000+

Facts

Version11.2.1
AuthorWooCommerce
Added8 Apr 2020
Last updated3 Nov 2026
Active installs800,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagspayment, apple pay, google pay, credit card, woocommerce payments

Other plugins by this author: Google for WooCommerce, WooCommerce PayPal Payments, WooCommerce Stripe Payment Gateway, WooCommerce Tax (formerly WooCommerce Shipping & Tax), Pinterest for WooCommerce, Google Analytics for WooCommerce, Snapchat for WooCommerce, Reddit for WooCommerce, WooCommerce Square, WooCommerce Shipping, ShipStation for WooCommerce, WooCommerce Payfast Gateway

Questions

Is WooPayments still maintained?

Yes. Last release 3 Nov 2026, 62 releases in the last 24 months.

Who owns WooPayments, and has it changed hands?

No change recorded. Main committer automattic since Apr 2020.

Was WooPayments removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is WooPayments safe?

7 known vulnerabilities, all fixed (latest in 10.6.0). Not on the exploited list.

Is the latest WooPayments update safe to install?

No ownership change before 11.2.1. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue