WPshop 2 - E-Commerce
Limited data: WPshop 2 - E-Commerce has under 1,000 active installs and less than 12 weeks of history, so we do not rate it yet.
Capped at 39 while a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 20 |
| Security | 5 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 9 Feb 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.23 Feb 2026Evidence
- WarningMNT-2Tested up to WordPress 6.8.12, 3 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
- WarningMNT-1No release in 17 months (last release 16 May 2025). Plan a replacement if the plugin is important to your site.16 May 2026Evidence
- InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 18 months ago
- Releases, 24 months
- 1
- Tested up to
- 6.8 vs 7.1
- Requires PHP
- 7.4.33 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 1 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 16 May 2025. Tested up to 6.8, 3 major versions behind WordPress 7.1.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 9 Feb 2026 | shop <= 2.6.1 - Unauthenticated Local File Inclusion | 8.1 | <= 2.6.1 | No fix | n/a |
| 6 May 2025 | WPshop 2 – E-Commerce 2.0.0 - 2.6.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover | 8.8 | 2.0.0 to 2.6.0 | 2.6.1 | 10 |
| 6 May 2025 | WPshop 2 – E-Commerce 2.0.0 - 2.6.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Key Generation | 5.4 | 2.0.0 to 2.6.0 | 2.6.1 | 11 |
| 9 Apr 2025 | WP shop <= 2.6.0 - Cross-Site Request Forgery to Arbitrary File Upload | 8.8 | <= 2.6.0 | Not affected | n/a |
| 9 Mar 2015 | WPshop 2 – E-Commerce < 1.3.9.6 - Arbitrary File Upload | 9.8 | < 1.3.9.6 | 1.3.9.6 | n/a |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.5 from 27 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 22 |
|---|---|
| 4 star | 2 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 3 |
Momentum
30+ active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 2.6.1 |
|---|---|
| Author | Agence web Eoxia - Montpellier |
| Added | 14 Jun 2011 |
| Last updated | 16 May 2025 |
| Active installs | 30+ |
| Requires WordPress | 4.4 |
| Tested up to | 6.8.12 |
| Requires PHP | 7.4.33 |
| Category | not stated |
| Tags | catalog, boutique, commerce, catalogue, e-commerce |
Other plugins by this author: EO Blocks, wpklikandpay, Backup release ovh, Wp Easy Survey, Annonces, Frais.pro, wpinvoice, wppaybox, Priseo - Price comparison for WPShop, ReedCRM
Questions
Is WPshop 2 - E-Commerce still maintained?
WPshop 2 - E-Commerce was last updated on 16 May 2025. Its Canary status is Limited data.
Is WPshop 2 - E-Commerce safe?
WPshop 2 - E-Commerce has 1 published vulnerability with no patched version. Its Canary status is Limited data.
Who owns WPshop 2 - E-Commerce?
The wordpress.org author is Agence web Eoxia - Montpellier. We have recorded no ownership change.
What can I use instead of WPshop 2 - E-Commerce?
We have no healthier plugin in the same category on record yet.