Skip to content
PluginCanary

WP Crowdfunding

by Themeum · 2,000+ active installs · Checked 3 Nov 2026
Avoid2 Criticals6 Warnings

Avoid: vulnerability published 28 Oct 2026 with no patched version yet.

39/ 100 Canary Score

Capped at 39 while a vulnerability has no patch.

Sub-scores for WP Crowdfunding
Ownership100
Maintenance100
Security0
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-1Vulnerability published 28 Oct 2026 with no patched version yet. Disable or replace the plugin until a fix is released.28 Oct 2026Evidence
  • CriticalSEC-2Vulnerability published 13 Oct 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.27 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 8 Sep 2026, fixed in 2.2.2. Update to version 2.2.2 or later.8 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 8 Sep 2026, fixed in 2.2.2. Update to version 2.2.2 or later.8 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 14 Aug 2026, fixed in 2.2.1. Update to version 2.2.1 or later.14 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 14 Aug 2026, fixed in 2.2.1. Update to version 2.2.1 or later.14 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 10 Aug 2026, fixed in 2.2.1. Update to version 2.2.1 or later.10 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 10 Aug 2026, fixed in 2.2.1. Update to version 2.2.1 or later.10 Aug 2026Evidence
  • InfoSEC-312 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
themeum21 Aug 2017 to 2 Sep 2026, 75 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
2 months ago
Releases, 24 months
7
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter for WP Crowdfunding
Q1 20240
Q2 20240
Q3 20241
Q4 20242
Q1 20251
Q2 20252
Q3 20251
Q4 20250
Q1 20260
Q2 20260
Q3 20262
Q4 20260

Last release 2 Sep 2026. Tested with WordPress 7.1 (current).

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
28 Oct 2026WP Crowdfunding <= 2.2.2 - Unauthenticated Information Exposure5.3<= 2.2.2No fixn/a
13 Oct 2026WP Crowdfunding <= 2.2.2 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.2.2No fixn/a
8 Sep 2026WP Crowdfunding <= 2.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'first_name' Parameter6.4<= 2.2.12.2.20
8 Sep 2026WP Crowdfunding <= 2.2.1 - Authenticated (Shop Manager+) SQL Injection via 'wpneo_reward' Post Meta4.9<= 2.2.12.2.20
14 Aug 2026WP Crowdfunding < 2.2.1 - Missing Authorization4.3< 2.2.12.2.10
14 Aug 2026WP Crowdfunding < 2.2.1 - Unauthenticated Insecure Direct Object Reference4.3< 2.2.12.2.10
10 Aug 2026Crowdfunding <= 2.2.0 - Missing Authorization4.3<= 2.2.02.2.10
10 Aug 2026Crowdfunding <= 2.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Order Data Disclosure4.3<= 2.2.02.2.10
1 Apr 2025WP Crowdfunding <= 2.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.1.152.1.1651
11 Mar 2025WP Crowdfunding <= 2.1.14 - Missing Authorization to Authenticated (Subscriber+) Post Content Download5.3<= 2.1.142.1.1550
12 Dec 2024WP Crowdfunding <= 2.1.12 - Missing Authorization to Authenticated (Subscriber+) WooCommerce Installation4.3<= 2.1.122.1.130
12 Dec 2024WP Crowdfunding <= 2.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.1.152.1.16160
25 Oct 2024WP Crowdfunding <= 2.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcf_donate Shortcode6.4<= 2.1.112.1.120
26 Aug 2024WP Crowdfunding <= 2.1.10 - Missing Authorization to Authenticated (Subscriber+) to Enable/Disable Addons4.3<= 2.1.102.1.110
22 Dec 2023WP Crowdfunding <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.1.62.1.70
22 Dec 2023WP Crowdfunding <= 2.1.9 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 2.1.92.1.100
13 Dec 2023WP Crowdfunding <= 2.1.8 - Reflected Cross-Site Scripting6.1<= 2.1.82.1.90
28 Nov 2023WP Crowdfunding <= 2.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 2.1.72.1.80
7 Nov 2023WP Crowdfunding <= 2.1.6 - Reflected Cross-Site Scripting via postid6.1<= 2.1.62.1.70
8 Sep 2023WP Crowdfunding <= 2.1.5 - Cross-Site Request Forgery4.3<= 2.1.52.1.60
5 Sep 2023WP Crowdfunding <= 2.1.4 - Missing Authorization via settings_reset4.3<= 2.1.42.1.50

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.4 from 89 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star71
4 star4
3 star4
2 star2
1 star8

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP Crowdfunding
4 May 2026112
11 May 2026102
18 May 202699
25 May 2026125
1 Jun 2026116
8 Jun 2026132
15 Jun 2026105
22 Jun 2026102
29 Jun 2026121
6 Jul 2026119
13 Jul 2026131
20 Jul 2026138
27 Jul 2026126
3 Aug 2026977
10 Aug 2026667
17 Aug 2026309
24 Aug 2026230
31 Aug 20261,097
7 Sep 2026535
14 Sep 2026389
21 Sep 2026287
28 Sep 2026266
5 Oct 2026284
12 Oct 2026289
19 Oct 2026332
26 Oct 2026370
2 Nov 202654

Weekly downloads over the last 4 weeks are 7% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Donorbox - Free Recurring Donation Plugin and Fundraising PlatformScore 91 · 8,000+Donation Platform for WooCommerce: Fundraising & Donation ManagementScore 91 · 6,000+SureDonation - Donation Forms, Fundraising Campaigns & Donor ManagementScore 91 · 4,000+Buy Me a Coffee - Button and Widget PluginScore 90 · 6,000+Ultimeter - the Ultimate Progress and Goals MeterScore 89 · 1,000+

Facts

Version2.2.2
AuthorThemeum
Added2 Aug 2016
Last updated2 Sep 2026
Active installs2,000+
Requires WordPress5.9
Tested up to7.1.4
Requires PHPnot stated
CategoryE-commerce & Shopping
Tagsbacker, donation, fund rising, kickstarter, crowdfunding

Other plugins by this author: Kirki - Freeform Page Builder, Website Builder & Customizer, Tutor LMS - eLearning and online course solution, Tutor LMS Elementor Addons, TutorMate, WP Mega Menu, Qubely - Advanced Gutenberg Blocks, Tutor LMS - Migration Tool, Tutor LMS Divi Modules, Certificate customizer for Tutor LMS, Tutor LMS BunnyNet Integration, Oxygen Tutor LMS, Growfund - Ultimate Donation & Crowdfunding Solution

Questions

Is WP Crowdfunding still maintained?

WP Crowdfunding was last updated on 2 Sep 2026. Its Canary status is Avoid.

Is WP Crowdfunding safe?

WP Crowdfunding has 2 published vulnerabilities with no patched version. Its Canary status is Avoid.

Who owns WP Crowdfunding?

The wordpress.org author is Themeum. Recent committers: themeum, wpneopro, plugin-master. We have recorded no ownership change.

What can I use instead of WP Crowdfunding?

Plugins in the same category with a higher Canary Score: Donorbox - Free Recurring Donation Plugin and Fundraising Platform, Donation Platform for WooCommerce: Fundraising & Donation Management, SureDonation - Donation Forms, Fundraising Campaigns & Donor Management, Buy Me a Coffee - Button and Widget Plugin, Ultimeter - the Ultimate Progress and Goals Meter.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue