Skip to content
PluginCanary

WooCommerce Square

by WooCommerce · 80,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: WooCommerce Square is maintained, has no open risk signals and no unpatched vulnerabilities.

89/ 100 Canary Score
Sub-scores for WooCommerce Square
Ownership100
Maintenance100
Security90
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
royho29 Jan 2018 to 5 Jul 2019, 16 commits
bor04 Apr 2018 to 13 Aug 2019, 11 commits
ferdev1 Feb 2019 to 5 Jul 2019, 10 commits
cshultz8822 Jul 2019 to 23 Jul 2019, 8 commits
automattic26 Jul 2019 to 4 Nov 2026, 144 commits
jamesgallan20 Aug 2024 to 20 Aug 2024, 1 commits
mayishaa18 Sep 2024 to 18 Sep 2024, 1 commits
mattdallan10 Dec 2024 to 10 Dec 2024, 1 commits
wesleyjrosa21 Jan 2025 to 21 Jan 2025, 1 commits
haszari4 Feb 2025 to 4 Feb 2025, 1 commits
jessyp12 Feb 2025 to 11 Mar 2025, 2 commits
diegocwp7 Apr 2025 to 7 Apr 2025, 1 commits
peterwilsoncc9 Dec 2025 to 10 Dec 2025, 15 commits

13 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
19 days ago
Releases, 24 months
39
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for WooCommerce Square
Q1 20244
Q2 20243
Q3 20246
Q4 20243
Q1 20253
Q2 20255
Q3 20256
Q4 202511
Q1 20263
Q2 20264
Q3 20264
Q4 20261

Last release 15 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 3 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
9 Jan 2026WooCommerce Square <= 5.1.1 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure in get_token_by_id7.54.2.0 to 4.2.3, 4.3.0 to 4.3.2, 4.4.0 to 4.4.2, 4.5.0 to 4.5.2, 4.6.0 to 4.6.4, 4.7.0 to 4.7.4, 4.8.0 to 4.8.8, 4.9.0 to 4.9.9, 5.0.0 to 5.0.1, 5.1.0 to 5.1.24.2.30
19 Jun 2023WooCommerce Square <= 3.8.1 - Missing Authorization via multiple AJAX actions4.3<= 3.8.13.8.20

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for WooCommerce Square
Q1 20243.2
Q2 20241.8
Q1 20255.0
Q2 20252.0
Q3 20255.0
Q1 20262.5
Q2 20262.5

Average rating fell from 3.2 to 2.5 between Q1 2024 and Q2 2026.

Rating distribution
5 star26
4 star4
3 star6
2 star3
1 star82
Latest low reviews

Momentum

80,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WooCommerce Square
4 May 202631,934
11 May 20268,090
18 May 202611,532
25 May 202635,016
1 Jun 20268,070
8 Jun 20265,012
15 Jun 20263,852
22 Jun 202632,395
29 Jun 20268,512
6 Jul 202611,773
13 Jul 20264,565
20 Jul 202633,872
27 Jul 20267,676
3 Aug 202642,034
10 Aug 20267,476
17 Aug 20264,704
24 Aug 20264,977
31 Aug 202637,421
7 Sep 20265,792
14 Sep 20269,685
21 Sep 202645,660
28 Sep 20265,396
5 Oct 20264,762
12 Oct 202632,974
19 Oct 20269,660
26 Oct 202612,620
2 Nov 2026748

Weekly downloads over the last 4 weeks are 11% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

WooPayments: Integrated WooCommerce PaymentsScore 93 · 800,000+FunnelKit Payment Gateway for Stripe WooCommerceScore 92 · 20,000+Payment Plugins for Stripe WooCommerceScore 91 · 100,000+WooCommerce Payfast GatewayScore 91 · 30,000+Smart COD for WooCommerceScore 91 · 30,000+

Facts

Version5.5.2
AuthorWooCommerce
Added29 Jan 2018
Last updated15 Oct 2026
Active installs80,000+
Requires WordPress6.9
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagssquare, credit card, woocommerce, inventory sync

Other plugins by this author: WooCommerce PayPal Payments, WooPayments: Integrated WooCommerce Payments, Google for WooCommerce, WooCommerce Stripe Payment Gateway, WooCommerce Tax (formerly WooCommerce Shipping & Tax), Pinterest for WooCommerce, Google Analytics for WooCommerce, Snapchat for WooCommerce, Reddit for WooCommerce, WooCommerce Shipping, ShipStation for WooCommerce, WooCommerce Payfast Gateway

Questions

Is WooCommerce Square still maintained?

WooCommerce Square was last updated on 15 Oct 2026. Its Canary status is Healthy.

Is WooCommerce Square safe?

WooCommerce Square has no open unpatched vulnerabilities on record. 1 vulnerability was published in the last 24 months. Its Canary status is Healthy.

Who owns WooCommerce Square?

The wordpress.org author is WooCommerce. Recent committers: automattic, peterwilsoncc, diegocwp, jessyp, haszari. We have recorded no ownership change.

What can I use instead of WooCommerce Square?

Plugins in the same category with a higher Canary Score: WooPayments: Integrated WooCommerce Payments, FunnelKit Payment Gateway for Stripe WooCommerce, Payment Plugins for Stripe WooCommerce, WooCommerce Payfast Gateway, Smart COD for WooCommerce.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue