Skip to content
PluginCanary

WP Easy Pay

WP Easy Pay - Payment and Donation Form Builder for Square
by Saad Iqbal · 1,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 14 Oct 2026, 14 releases in 24 months, no unpatched vulnerabilities.

81/ 100 Canary Score
Sub-scores for WP Easy Pay
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Quick answers

Is WP Easy Pay still maintained?
Yes. Last release 14 Oct 2026, 14 releases in the last 24 months. 14 Oct 2026 · wordpress.org
Who owns WP Easy Pay, and has it changed hands?
No change recorded. Main committer wpexpertsio since Mar 2018. 3 Nov 2026 · SVN log
Was WP Easy Pay removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is WP Easy Pay safe?
15 known vulnerabilities, all fixed (latest in 4.5.5). Not on the exploited list. 30 Oct 2026 · Wordfence Intelligence
Is the latest WP Easy Pay update safe to install?
No ownership change before 4.5.5. No one-star spike after it. 14 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
wpexpertsio12 Mar 2018 to 14 Oct 2026, 287 commits

1 committer recorded. No ownership change since 2018.

Maintenance

Last release
21 days ago
Releases, 24 months
14
Tested up to
7.1 current
Requires PHP
8.1 supported 8.2+
Releases per quarter
Releases per quarter for WP Easy Pay
Q1 20240
Q2 20242
Q3 20242
Q4 20242
Q1 20252
Q2 20251
Q3 20250
Q4 20251
Q1 20262
Q2 20262
Q3 20263
Q4 20261

Last release 14 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 3.8.

Rating distribution
5 star27
4 star2
3 star2
2 star1
1 star10

Security record

9 vulnerabilities in 24 months (15 on record), all patched (latest fixed in 4.5.5).

Show 15 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026WP Easy Pay – Payment and Donation Form Builder for Square <= 4.5.4 - Unauthenticated Path Traversal7.5<= 4.5.44.5.5Patched before disclosure
15 Oct 2026WP Easy Pay – Payment and Donation Form Builder for Square <= 4.5.4 - Missing Authorization5.3<= 4.5.44.5.5Patched before disclosure
17 Sep 2026WP Easy Pay <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion4.3<= 4.5.04.5.1Patched before disclosure
2 Sep 2026WP Easy Pay – Payment and Donation Form Builder for Square <= 4.5.3 - Unauthenticated Payment Bypass5.3<= 4.5.34.5.4Patched before disclosure
21 Jul 2026WP Easy Pay – Payment and Donation Form Builder for Square <= 4.5.0 - Authenticated (Subscriber+) Arbitrary Content Deletion4.3<= 4.5.04.5.1Patched before disclosure
10 Jul 2026WP Easy Pay <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Status Modification via wpep_draft_confirm AJAX Action4.3<= 4.5.04.5.1Patched before disclosure
18 Jun 2026WP Easy Pay – Payment and Donation form Builder for Square <= 4.5.0 - Cross-Site Request Forgery4.3<= 4.5.04.5.114
8 Apr 2026EasyPay <= 4.3.0 - Unauthenticated Information Exposure5.3<= 4.3.04.4.021
16 Mar 2026WP Easy Pay – Payment and Donation form Builder for Square <= 4.2.11 - Missing Authorization4.3<= 4.2.114.2.12Patched before disclosure
23 Jul 2024WP Easy Pay (Free) <= 4.2.3 - Missing Authorization to Unauthenticated Service Disconnection5.3<= 4.2.34.2.4Patched before disclosure
18 Jul 2023Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get6.1<= 4.14.217
1 May 2023WP EasyPay <= 4.0.4 - Reflected Cross-Site Scripting6.1<= 4.0.44.1Patched before disclosure
14 Apr 2023WP EasyPay <= 4.0.4 - Cross-Site Request Forgery4.3<= 4.0.44.16
4 Mar 2022Freemius SDK <= 2.4.2 - Missing Authorization Checks6.3< 4.0.24.0.2Patched before disclosure
5 Jul 2021WP EasyPay – Square for WordPress <= 3.2.0 - Cross-Site Request Forgery Bypass4.3<= 3.2.03.2.3Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP Easy Pay
4 May 2026113
11 May 2026274
18 May 2026346
25 May 2026198
1 Jun 2026138
8 Jun 2026148
15 Jun 20261,419
22 Jun 2026393
29 Jun 20261,634
6 Jul 2026531
13 Jul 2026235
20 Jul 20261,356
27 Jul 2026317
3 Aug 2026403
10 Aug 2026224
17 Aug 2026236
24 Aug 2026244
31 Aug 20261,491
7 Sep 2026313
14 Sep 2026443
21 Sep 2026326
28 Sep 2026268
5 Oct 2026277
12 Oct 20261,491
19 Oct 2026477
26 Oct 2026535
2 Nov 2026111

Weekly downloads over the last 4 weeks are 27% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Donations via PayPalScore 91 · 20,000+Accept Donations with PayPal & StripeScore 86 · 10,000+Easy PayPal & Stripe Buy Now ButtonScore 86 · 10,000+

Facts

Version4.5.5
AuthorSaad Iqbal
Added12 Mar 2018
Last updated14 Oct 2026
Active installs1,000+
Requires WordPress5.6.0
Tested up to7.1.4
Requires PHP8.1
CategoryE-commerce & Shopping > Product Management & Catalogs
Tagspayment form, Donation form, square payments, square payment form, credit card payments

Other plugins by this author: Password Protected, Post SMTP - Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App, CF7 Apps - Addons for Contact Form 7 (Honeypot, Database, Redirection, Webhook, etc.), Advanced File Manager - Ultimate File Manager for WordPress And Document Library Solution, All In One Login, Social Preview and Open Graph Tags, Email Templates Customizer and Designer for WordPress and WooCommerce, WC Hide Shipping Methods, Gutena Forms - Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder, New User Approve, Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program - myCred, Gutena Tabs

Questions

Is WP Easy Pay still maintained?

Yes. Last release 14 Oct 2026, 14 releases in the last 24 months.

Who owns WP Easy Pay, and has it changed hands?

No change recorded. Main committer wpexpertsio since Mar 2018.

Was WP Easy Pay removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is WP Easy Pay safe?

15 known vulnerabilities, all fixed (latest in 4.5.5). Not on the exploited list.

Is the latest WP Easy Pay update safe to install?

No ownership change before 4.5.5. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue