Skip to content
PluginCanary

WCPOS

WCPOS - Point of Sale (POS) plugin for WooCommerce
by kilbot · 5,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 1 Nov 2026, 86 releases in 24 months, no unpatched vulnerabilities.

91/ 100 Canary Score
Sub-scores for WCPOS
Ownership100
Maintenance100
Security75
SupportNo data
ReputationNo data

How the score works

Quick answers

Is WCPOS still maintained?
Yes. Last release 1 Nov 2026, 86 releases in the last 24 months. 1 Nov 2026 · wordpress.org
Who owns WCPOS, and has it changed hands?
No change recorded. Main committer kilbot since May 2014. 3 Nov 2026 · SVN log
Was WCPOS removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is WCPOS safe?
5 known vulnerabilities, all fixed (latest in 1.9.15). Not on the exploited list. 15 Aug 2026 · Wordfence Intelligence
Is the latest WCPOS update safe to install?
No ownership change before 1.11.9. No one-star spike after it. 1 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
kilbot2 May 2014 to 1 Nov 2026, 345 commits

1 committer recorded. No ownership change since 2014.

Maintenance

Last release
3 days ago
Releases, 24 months
86
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for WCPOS
Q1 202418
Q2 20246
Q3 20243
Q4 20243
Q1 20252
Q2 20257
Q3 20252
Q4 20255
Q1 202610
Q2 20267
Q3 202632
Q4 202618

Last release 1 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 3.7.

Rating distribution
5 star53
4 star3
3 star2
2 star5
1 star21

Security record

4 vulnerabilities in 24 months (5 on record), all patched (latest fixed in 1.9.15).

Show 5 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
15 Aug 2026WCPOS <= 1.9.14 - Authenticated (Shop Manager+) Code Injection via 'thermal' Template Engine7.2<= 1.9.141.9.15Patched before disclosure
22 Jul 2026WCPOS <= 1.9.8 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read via 'type' Parameter6.5<= 1.9.81.9.9Patched before disclosure
15 Jun 2026WCPOS - Point of Sale (POS) plugin for WooCommerce <= 1.8.14 - Missing Authorization5.3<= 1.8.141.9.0Patched before disclosure
16 May 2025WooCommerce POS <= 1.7.8 - Missing Authorization5.3<= 1.7.81.7.96
19 Mar 2024WooCommerce POS <= 1.4.11 - Insufficient Verification of Data Authenticity to Authenticated (Customer+) Information Disclosure4.3<= 1.4.111.4.12Patched before disclosure

Changelog mentions of security fixes: 1.10.10 (security); 1.10.11 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

50% of 2 support threads resolved in the last 2 months.

Momentum

5,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WCPOS
4 May 2026181
11 May 20262,180
18 May 20262,973
25 May 2026689
1 Jun 2026596
8 Jun 20263,643
15 Jun 20265,157
22 Jun 2026944
29 Jun 2026708
6 Jul 2026943
13 Jul 20264,031
20 Jul 20264,827
27 Jul 20264,134
3 Aug 20264,147
10 Aug 2026801
17 Aug 20261,135
24 Aug 20265,296
31 Aug 20265,669
7 Sep 20268,347
14 Sep 20269,711
21 Sep 20263,205
28 Sep 20261,006
5 Oct 20265,998
12 Oct 20267,619
19 Oct 20265,772
26 Oct 20263,872
2 Nov 20261,819

Weekly downloads over the last 4 weeks are 35% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Rearrange Products for WooCommerceScore 100 · 20,000+Saphali Woocommerce LiteScore 100 · 10,000+OmnibusScore 100 · 10,000+Products Per Page for WooCommerceScore 100 · 10,000+Hide Categories and Products forScore 100 · 10,000+

Facts

Version1.11.9
Authorkilbot
Added2 May 2014
Last updated1 Nov 2026
Active installs5,000+
Requires WordPress5.6
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagspos, ecommerce, inventory, woocommerce, point-of-sale

Questions

Is WCPOS still maintained?

Yes. Last release 1 Nov 2026, 86 releases in the last 24 months.

Who owns WCPOS, and has it changed hands?

No change recorded. Main committer kilbot since May 2014.

Was WCPOS removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is WCPOS safe?

5 known vulnerabilities, all fixed (latest in 1.9.15). Not on the exploited list.

Is the latest WCPOS update safe to install?

No ownership change before 1.11.9. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue