Skip to content
PluginCanary

FundEngine

FundEngine - Donation and Crowdfunding Platform
by Roxnor · 1,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 20 Aug 2026, 12 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for FundEngine
Ownership100
Maintenance100
Security60
SupportNo data
ReputationNo data

How the score works

Quick answers

Is FundEngine still maintained?
Yes. Last release 20 Aug 2026, 12 releases in the last 24 months. 20 Aug 2026 · wordpress.org
Who owns FundEngine, and has it changed hands?
Changed. New committer roxnor made a first commit on 13 Jul 2026. 13 Jul 2026 · SVN log
Was FundEngine removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is FundEngine safe?
11 known vulnerabilities, all fixed (latest in 1.8.2). Not on the exploited list. 24 Aug 2026 · Wordfence Intelligence
Is the latest FundEngine update safe to install?
Caution. Ownership change before 1.8.2: new committer roxnor made a first commit on 13 Jul 2026. No one-star spike after it. 20 Aug 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master5 Aug 2019 to 5 Aug 2019, 1 commits
ataurr27 Aug 2019 to 15 Jun 2026, 77 commits
wpmet27 Jun 2022 to 7 Apr 2024, 3 commits
xpeedstudio17 Jul 2023 to 24 Jun 2025, 9 commits
roxnor13 Jul 2026 to 20 Aug 2026, 5 commits

New committer roxnor made a first commit on 13 Jul 2026.

Maintenance

Last release
3 months ago
Releases, 24 months
12
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for FundEngine
Q1 20240
Q2 20241
Q3 20240
Q4 20240
Q1 20252
Q2 20252
Q3 20250
Q4 20250
Q1 20260
Q2 20264
Q3 20264
Q4 20260

Last release 20 Aug 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.2.

Rating distribution
5 star17
4 star0
3 star1
2 star0
1 star4

Security record

8 vulnerabilities in 24 months (11 on record), all patched (latest fixed in 1.8.2).

Show 11 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
24 Aug 2026FundEngine <= 1.8.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'campaign_post' Parameter4.3<= 1.8.11.8.2Patched before disclosure
24 Aug 2026FundEngine <= 1.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wfp_featured_video_url' Parameter6.4<= 1.8.11.8.2Patched before disclosure
19 Aug 2026FundEngine - Donation and Crowdfunding Platform <= 1.7.9 - Unauthenticated PHP Object Injection8.1<= 1.7.91.8.0Patched before disclosure
14 Aug 2026FundEngine - Donation and Crowdfunding Platform <= 1.7.9 - Unauthenticated PHP Object Injection8.1<= 1.7.91.8.03
27 Jul 2026FundEngine <= 1.7.8 - Missing Authorization4.3<= 1.7.81.7.9Patched before disclosure
8 Jul 2026FundEngine - Donation and Crowdfunding Platform <= 1.7.6 - Missing Authorization5.3<= 1.7.61.7.7Patched before disclosure
8 Aug 2025FundEngine <= 1.7.4 - Authenticated (Subscriber+) Local File Inclusion7.5<= 1.7.41.7.5Patched before disclosure
7 May 2025WP Fundraising Donation and Crowdfunding Platform <= 1.7.3 - Cross-Site Request Forgery4.3<= 1.7.31.7.4Patched before disclosure
31 Jul 2024FundEngine - Donation and Crowdfunding Platform <= 1.7.0 - Authenticated (Subscriber+) Privilege Escalation8.8<= 1.7.01.7.1n/a
14 May 2024WP Fundraising Donation and Crowdfunding Platform <= 1.6.4 - Missing Authorization5.3<= 1.6.41.7.0Patched before disclosure
11 May 2022WP Fundraising Donation and Crowdfunding Platform <= 1.4.2 - Unauthenticated SQL Injection9.8<= 1.4.21.5.029

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for FundEngine
4 May 202670
11 May 2026128
18 May 2026740
25 May 2026139
1 Jun 2026100
8 Jun 2026125
15 Jun 2026630
22 Jun 2026107
29 Jun 2026101
6 Jul 2026266
13 Jul 2026693
20 Jul 2026149
27 Jul 2026244
3 Aug 2026155
10 Aug 2026776
17 Aug 20261,247
24 Aug 2026267
31 Aug 2026182
7 Sep 2026153
14 Sep 2026164
21 Sep 2026169
28 Sep 2026176
5 Oct 2026178
12 Oct 2026221
19 Oct 2026237
26 Oct 2026250
2 Nov 202654

Weekly downloads over the last 4 weeks are 33% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version1.8.2
AuthorRoxnor
Added27 Aug 2019
Last updated20 Aug 2026
Active installs1,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagsdonate, donation, fundraising, crowdfunding, recurring donations

Other plugins by this author: ElementsKit Elementor Addons - Advanced Widgets & Templates Addons for Elementor, MetForm - Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor, ShopEngine - All-in-One Elementor WooCommerce Builder with eCommerce Templates & Woo Widgets, Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers, EmailKit - Email Customizer for WooCommerce & WP, Wp Social Login and Register Social Counter, GetGenie - AI SEO Assistant & Content Writer with Keyword Research, AEO & GEO, WP Ultimate Review, Dynamic Fields Engine - Custom post types, Custom fields, Meta fields, Taxonomies, Listing builder, Query builder and Relations, TableKit - WordPress Table Builder for Data Tables, WooCommerce Product Tables & Post Tables, ShopEngine Gutenberg WooCommerce Builder Blocks Addon - All in One WooCommerce Solution, Rox Appointment Booking - Event, Calendar & Appointment Scheduling

Questions

Is FundEngine still maintained?

Yes. Last release 20 Aug 2026, 12 releases in the last 24 months.

Who owns FundEngine, and has it changed hands?

Changed. New committer roxnor made a first commit on 13 Jul 2026.

Was FundEngine removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is FundEngine safe?

11 known vulnerabilities, all fixed (latest in 1.8.2). Not on the exploited list.

Is the latest FundEngine update safe to install?

Caution. Ownership change before 1.8.2: new committer roxnor made a first commit on 13 Jul 2026. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue