Skip to content
PluginCanary

Simple Shopping Cart

by mra13 / Team Tips and Tricks HQ · 10,000+ active installs · Checked 3 Nov 2026
Healthy3 Warnings

Healthy: vulnerability published 19 Oct 2026, fixed in 5.3.3.

81/ 100 Canary Score
Sub-scores for Simple Shopping Cart
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 19 Oct 2026, fixed in 5.3.3. Update to version 5.3.3 or later.19 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 19 Oct 2026, fixed in 5.3.3. Update to version 5.3.3 or later.19 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 2 Oct 2026, fixed in 5.2.6. Update to version 5.2.6 or later.2 Oct 2026Evidence
  • InfoSEC-311 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
mra1317 Feb 2009 to 13 Oct 2026, 290 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
22 days ago
Releases, 24 months
27
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Simple Shopping Cart
Q1 20243
Q2 20240
Q3 20242
Q4 20242
Q1 20254
Q2 20252
Q3 20257
Q4 20253
Q1 20263
Q2 20263
Q3 20262
Q4 20261

Last release 13 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 2 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
19 Oct 2026Simple Shopping Cart 5.1.3 - 5.3.2 - Authenticated (Contributor+) Payment Bypass4.35.1.3 to 5.3.25.3.30
19 Oct 2026Simple Shopping Cart <= 5.3.2 - Unauthenticated Payment Bypass5.3<= 5.3.25.3.30
2 Oct 2026Simple Shopping Cart <= 5.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 5.2.55.2.60
2 Jun 2026Simple Shopping Cart <= 5.2.9 - Unauthenticated Insecure Direct Object Reference5.3<= 5.2.95.3.00
3 Apr 2026Simple Shopping Cart <= 5.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpsc_display_product' Shortcode6.4<= 5.2.45.2.50
30 Apr 2025WordPress Simple PayPal Shopping Cart <= 5.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 5.1.35.1.40
30 Apr 2025WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference via 'quantity'5.3<= 5.1.35.1.40
30 Apr 2025WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference6.5<= 5.1.35.1.40
22 Apr 2025WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Product Price Manipulation7.5<= 5.1.25.1.30
22 Apr 2025WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Information Exposure via file_url Parameter8.2<= 5.1.25.1.30
23 Dec 2024WordPress Simple Shopping Cart <= 5.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 5.0.75.0.80
26 Jan 2024WordPress Simple Shopping Cart <= 4.7.1 - Authenticated(Administrator+) Stored Cross-Site Scripting4.4<= 4.7.14.7.20
16 Mar 2023WP Simple Shopping Cart <= 4.6.3 - Information Disclosure5.34.6.34.6.452
27 Dec 2022WordPress Simple PayPal Shopping Cart <= 4.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 4.6.14.6.2n/a
1 Aug 2014WordPress Simple PayPal Shopping Cart < 3.6 - Cross-Site Request Forgery4.7< 3.63.60

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Simple Shopping Cart
Q4 20235.0
Q1 20244.3
Q3 20245.0
Q4 20245.0
Q1 20255.0
Q2 20255.0
Q1 20265.0

Average rating stayed at 5.0 between Q4 2023 and Q1 2026.

Rating distribution
5 star177
4 star16
3 star3
2 star8
1 star11
Latest low reviews

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Simple Shopping Cart
4 May 2026349
11 May 2026627
18 May 20267,773
25 May 20261,314
1 Jun 2026912
8 Jun 2026762
15 Jun 2026634
22 Jun 2026462
29 Jun 2026460
6 Jul 2026454
13 Jul 2026463
20 Jul 2026460
27 Jul 20266,617
3 Aug 20261,760
10 Aug 2026750
17 Aug 20267,658
24 Aug 20261,242
31 Aug 2026837
7 Sep 2026595
14 Sep 2026632
21 Sep 2026611
28 Sep 2026634
5 Oct 2026560
12 Oct 20266,854
19 Oct 20261,771
26 Oct 20261,601
2 Nov 2026131

Weekly downloads over the last 4 weeks are 49% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Commerce7 for WordPressScore 91 · 1,000+External Store for ShopifyScore 87 · 2,000+Product Catalog SimpleScore 86 · 1,000+WooCommerceScore 85 · 7,000,000+Easy Digital Downloads - eCommerce Payments and Subscriptions made easyScore 85 · 40,000+

Facts

Version5.3.3
Authormra13 / Team Tips and Tricks HQ
Added17 Feb 2009
Last updated13 Oct 2026
Active installs10,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagscart, shop, ecommerce, sell online, shopping cart

Other plugins by this author: Easy HTTPS Redirection (SSL), Simple Download Monitor, Accept Stripe Payments, Compact WP Audio Player, Donations via PayPal, Far Future Expiry Header, Easy Accept Payments via PayPal, WP Simple Adsense Insertion, WP Express Checkout (Fast Payments via PayPal & Stripe), Software License Manager, Bot Protection with Turnstile, WP eMember Integration for WooCommerce

Questions

Is Simple Shopping Cart still maintained?

Simple Shopping Cart was last updated on 13 Oct 2026. Its Canary status is Healthy.

Is Simple Shopping Cart safe?

Simple Shopping Cart has no open unpatched vulnerabilities on record. 11 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Simple Shopping Cart?

The wordpress.org author is mra13 / Team Tips and Tricks HQ. Recent committers: mra13, wptipsntricks, plugin-master. We have recorded no ownership change.

What can I use instead of Simple Shopping Cart?

Plugins in the same category with a higher Canary Score: Commerce7 for WordPress, External Store for Shopify, Product Catalog Simple, WooCommerce, Easy Digital Downloads - eCommerce Payments and Subscriptions made easy.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue