Skip to content
PluginCanary

Yoco Payments

by yocoadmin · 10,000+ active installs · Checked 5 Nov 2026
Healthy

Healthy: released 31 days ago, tested with WordPress 7.1, no open vulnerabilities.

95/ 100Healthy
Canary Score

Based on 3 of 5 areas

Capped at 95: not enough support or review data for a full score.

Sub-scores for Yoco Payments
Ownership100
Maintenance100
Security90
SupportNo data
ReputationNo data

How the score works

Active signals

Open issues right now, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

History: 1 past vulnerability, patched. Patched issues are listed in the Security record, not here.

Quick answers

Is Yoco Payments still maintained?
Yes. Last release 5 Oct 2026, 13 releases in the last 24 months. 5 Oct 2026 · wordpress.org
Who owns Yoco Payments, and has it changed hands?
No change recorded. Main committer yocoadmin since Feb 2020. 5 Nov 2026 · SVN log
Was Yoco Payments removed from wordpress.org?
No. Listed on wordpress.org as of 5 Nov 2026. 5 Nov 2026 · wordpress.org
Is Yoco Payments safe?
1 known vulnerability, fixed (latest in 3.9.1). Not on the exploited list. 6 Jan 2026 · Wordfence Intelligence
Is the latest Yoco Payments update safe to install?
No ownership change before 3.9.5. No one-star spike after it. 5 Oct 2026 · Release history

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master2 Dec 2019 to 2 Dec 2019, 1 commits
yocoadmin17 Feb 2020 to 5 Oct 2026, 117 commits

2 committers recorded. No ownership changes recorded since 2019.

Maintenance

Last release
31 days ago
Releases, 24 months
13
Tested up to
7.1 current
Requires PHP
7.4.0 supported 8.2+
Releases per quarter
Releases per quarter for Yoco Payments
Q1 20240
Q2 20243
Q3 20241
Q4 20242
Q1 20254
Q2 20251
Q3 20251
Q4 20251
Q1 20262
Q2 20263
Q3 20260
Q4 20261

Last release 5 Oct 2026. Tested with WordPress 7.1 (current).

Support

Resolved, last 2 months
n/a
Threads, last 2 months
0

Trend appears after 8 weekly snapshots.

Security record

1 vulnerability in 24 months, patched (latest fixed in 3.9.1).

Show 1 patched vulnerability
DateIssueCVSSAffectedFixed inDays to patch
6 Jan 2026Unauthenticated Arbitrary File Read7.5<= 3.9.03.9.11

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Reputation

Last 90 days: no reviews. Lifetime: 4.4.

Last 90 days vs lifetime average rating for Yoco Payments
Last 90 daysNo reviews
Lifetime4.4
Rating distribution
5 star36
4 star0
3 star1
2 star1
1 star5
Latest low reviews

Momentum

Active installs
10,000+
Downloads, last full week
753
Weekly downloads, last 26 complete weeks
Weekly downloads for Yoco Payments
4 May 2026160
11 May 2026447
18 May 2026448
25 May 2026364
1 Jun 2026364
8 Jun 2026344
15 Jun 2026301
22 Jun 2026275
29 Jun 2026280
6 Jul 2026288
13 Jul 2026277
20 Jul 2026265
27 Jul 2026258
3 Aug 2026323
10 Aug 2026319
17 Aug 2026273
24 Aug 2026271
31 Aug 2026292
7 Sep 2026307
14 Sep 2026347
21 Sep 2026302
28 Sep 2026326
5 Oct 20264,888
12 Oct 2026927
19 Oct 2026860
26 Oct 2026753

Weekly downloads over the last 4 weeks are 239% above the 26-week average.

Facts

Version
3.9.5
Author
yocoadmin
Added
17 Feb 2020
Last updated
5 Oct 2026
Active installs
10,000+
Requires WordPress
6.4.0
Tested up to
7.1.4
Requires PHP
7.4.0
Category
E-commerce & Shopping
Tags
woocommerce, payment gateway

Questions about Yoco Payments

Is Yoco Payments still maintained?

Yes. Last release 5 Oct 2026, 13 releases in the last 24 months.

Who owns Yoco Payments, and has it changed hands?

No change recorded. Main committer yocoadmin since Feb 2020.

Was Yoco Payments removed from wordpress.org?

No. Listed on wordpress.org as of 5 Nov 2026.

Is Yoco Payments safe?

1 known vulnerability, fixed (latest in 3.9.1). Not on the exploited list.

Is the latest Yoco Payments update safe to install?

No ownership change before 3.9.5. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 5 Nov 2026.Report a data issue