WooCommerce PayPal Payments
Healthy: maintained, last release 21 Oct 2026, 33 releases in 24 months, no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 85 |
| Support | 64 |
| Reputation | 70 |
Quick answers
- Is WooCommerce PayPal Payments still maintained?
- Yes. Last release 21 Oct 2026, 33 releases in the last 24 months. 21 Oct 2026 · wordpress.org
- Who owns WooCommerce PayPal Payments, and has it changed hands?
- No change recorded. Main committer automattic since Nov 2020. 4 Nov 2026 · SVN log
- Was WooCommerce PayPal Payments removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is WooCommerce PayPal Payments safe?
- 3 known vulnerabilities, all fixed (latest in 3.4.0). Not on the exploited list. 31 Jul 2026 · Wordfence Intelligence
- Is the latest WooCommerce PayPal Payments update safe to install?
- No ownership change before 4.2.0. No one-star spike after it. 21 Oct 2026 · Release history
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 9 Oct 2020 to 9 Oct 2020, 1 commits |
|---|---|
| woothemes | 15 Oct 2020 to 31 Oct 2023, 28 commits |
| automattic | 10 Nov 2020 to 4 Dec 2025, 41 commits |
| wesleyjrosa | 22 Jul 2024 to 21 Oct 2026, 4 commits |
| mattdallan | 10 Dec 2024 to 10 Dec 2024, 1 commits |
| mayishaa | 6 Jan 2025 to 12 Jan 2026, 3 commits |
| eduardoumpierre | 4 Feb 2025 to 17 Mar 2025, 7 commits |
| jessepearson | 26 Mar 2025 to 26 Mar 2025, 2 commits |
| tpaksu | 3 Apr 2025 to 8 Apr 2025, 2 commits |
| diegocwp | 23 Apr 2025 to 9 Sep 2026, 16 commits |
| daledupreez | 10 Feb 2026 to 31 Mar 2026, 6 commits |
| malithsen | 19 May 2026 to 19 May 2026, 1 commits |
New committer malithsen made a first commit on 19 May 2026.
Maintenance
- Last release
- 14 days ago
- Releases, 24 months
- 33
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 7 |
|---|---|
| Q2 2024 | 4 |
| Q3 2024 | 5 |
| Q4 2024 | 4 |
| Q1 2025 | 3 |
| Q2 2025 | 5 |
| Q3 2025 | 6 |
| Q4 2025 | 4 |
| Q1 2026 | 5 |
| Q2 2026 | 4 |
| Q3 2026 | 3 |
| Q4 2026 | 1 |
Last release 21 Oct 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: 4.3 (16 reviews). Lifetime: 2.9.
| Q2 2026 | 4.6 |
|---|---|
| Q3 2026 | 4.7 |
| Q4 2026 | 4.0 |
Average rating fell from 4.6 to 4.0 between Q2 2026 and Q4 2026.
| 5 star | 248 |
|---|---|
| 4 star | 18 |
| 3 star | 15 |
| 2 star | 16 |
| 1 star | 289 |
- Don’t even think about installing it! · 1 star · 28 Oct 2026
- Slows Down website by 30% · 1 star · 14 Oct 2026
- Critical mobile credit card failure - lost customers and switched plugins · 1 star · 12 Sep 2026
Security record
2 vulnerabilities in 24 months (3 on record), all patched (latest fixed in 3.4.0).
Show 3 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 31 Jul 2026 | WooCommerce PayPal Payments <= 3.3.2 - Unauthenticated Sensitive Information Disclosure | 5.3 | <= 3.3.2 | 3.4.0 | Patched before disclosure |
| 22 May 2026 | WooCommerce PayPal Payments <= 4.0.1 - Missing Authorization to Unauthenticated Order Manipulation and Information Disclosure | 8.2 | <= 4.0.1 | 4.0.2 | Patched before disclosure |
| 20 Jun 2023 | WooCommerce PayPal Payments <= 2.0.4 - Cross-Site Request Forgery | 4.3 | < 2.0.5 | 2.0.5 | Patched before disclosure |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
64% of 44 support threads resolved in the last 2 months.
Momentum
800,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 27,929 |
|---|---|
| 11 May 2026 | 48,836 |
| 18 May 2026 | 358,923 |
| 25 May 2026 | 86,661 |
| 1 Jun 2026 | 51,379 |
| 8 Jun 2026 | 41,041 |
| 15 Jun 2026 | 35,765 |
| 22 Jun 2026 | 286,789 |
| 29 Jun 2026 | 71,210 |
| 6 Jul 2026 | 348,124 |
| 13 Jul 2026 | 66,061 |
| 20 Jul 2026 | 49,900 |
| 27 Jul 2026 | 41,440 |
| 3 Aug 2026 | 349,380 |
| 10 Aug 2026 | 60,347 |
| 17 Aug 2026 | 46,349 |
| 24 Aug 2026 | 42,394 |
| 31 Aug 2026 | 39,372 |
| 7 Sep 2026 | 290,892 |
| 14 Sep 2026 | 104,959 |
| 21 Sep 2026 | 66,027 |
| 28 Sep 2026 | 43,263 |
| 5 Oct 2026 | 39,393 |
| 12 Oct 2026 | 34,527 |
| 19 Oct 2026 | 296,236 |
| 26 Oct 2026 | 122,267 |
| 2 Nov 2026 | 9,699 |
Weekly downloads over the last 4 weeks are 2% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 4.2.0 |
|---|---|
| Author | WooCommerce |
| Added | 15 Oct 2020 |
| Last updated | 21 Oct 2026 |
| Active installs | 800,000+ |
| Requires WordPress | 6.5 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | Payments & Financial > Payment Gateways & Processors |
| Tags | paypal, payments, ecommerce, credit card, woocommerce |
Other plugins by this author: Google for WooCommerce, WooPayments: Integrated WooCommerce Payments, WooCommerce Stripe Payment Gateway, WooCommerce Tax (formerly WooCommerce Shipping & Tax), Pinterest for WooCommerce, Google Analytics for WooCommerce, Reddit for WooCommerce, Snapchat for WooCommerce, WooCommerce Square, WooCommerce Shipping, ShipStation for WooCommerce, WooCommerce Payfast Gateway
Questions
Is WooCommerce PayPal Payments still maintained?
Yes. Last release 21 Oct 2026, 33 releases in the last 24 months.
Who owns WooCommerce PayPal Payments, and has it changed hands?
No change recorded. Main committer automattic since Nov 2020.
Was WooCommerce PayPal Payments removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is WooCommerce PayPal Payments safe?
3 known vulnerabilities, all fixed (latest in 3.4.0). Not on the exploited list.
Is the latest WooCommerce PayPal Payments update safe to install?
No ownership change before 4.2.0. No one-star spike after it.