Zoho Flow - No-Code Workflow Automation
Healthy: vulnerability published 26 Oct 2026, fixed in 2.14.6.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 75 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 28 Aug 2020 to 28 Aug 2020, 1 commits |
|---|---|
| zohoflow | 31 Aug 2020 to 31 Oct 2026, 77 commits |
2 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 4 days ago
- Releases, 24 months
- 17
- Tested up to
- 7.1 current
- Requires PHP
- 7.0.0 supported 8.2+
| Q1 2024 | 2 |
|---|---|
| Q2 2024 | 3 |
| Q3 2024 | 5 |
| Q4 2024 | 5 |
| Q1 2025 | 6 |
| Q2 2025 | 3 |
| Q3 2025 | 1 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 2 |
| Q3 2026 | 0 |
| Q4 2026 | 2 |
Last release 31 Oct 2026. Tested with WordPress 7.1 (current).
Support
100% of 2 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 26 Oct 2026 | Zoho Flow – No-Code Workflow Automation <= 2.14.5 - Unauthenticated PHP Object Injection | 8.1 | <= 2.14.5 | 2.14.6 | 5 |
| 22 Sep 2025 | Zoho Flow <= 2.14.1 - Cross-Site Request Forgery | 4.3 | <= 2.14.1 | 2.14.2 | 0 |
| 10 Sep 2025 | Zoho Flow <= 2.14.1 - Cross-Site Request Forgery | 4.3 | <= 2.14.1 | 2.14.2 | 0 |
| 1 Apr 2025 | Zoho Flow <= 2.13.3 - Missing Authorization | 4.3 | <= 2.13.3 | 2.13.4 | 9 |
| 26 Sep 2024 | Zoho Flow for WordPress <= 2.8.0 - Authenticated (Administrator+) SQL Injection | 4.9 | <= 2.8.0 | 2.8.1 | 0 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 5.0 from 13 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 13 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Momentum
5,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 769 |
|---|---|
| 11 May 2026 | 648 |
| 18 May 2026 | 796 |
| 25 May 2026 | 403 |
| 1 Jun 2026 | 2,609 |
| 8 Jun 2026 | 620 |
| 15 Jun 2026 | 364 |
| 22 Jun 2026 | 359 |
| 29 Jun 2026 | 303 |
| 6 Jul 2026 | 612 |
| 13 Jul 2026 | 259 |
| 20 Jul 2026 | 268 |
| 27 Jul 2026 | 299 |
| 3 Aug 2026 | 349 |
| 10 Aug 2026 | 300 |
| 17 Aug 2026 | 336 |
| 24 Aug 2026 | 308 |
| 31 Aug 2026 | 298 |
| 7 Sep 2026 | 320 |
| 14 Sep 2026 | 400 |
| 21 Sep 2026 | 366 |
| 28 Sep 2026 | 326 |
| 5 Oct 2026 | 312 |
| 12 Oct 2026 | 2,577 |
| 19 Oct 2026 | 1,084 |
| 26 Oct 2026 | 3,309 |
| 2 Nov 2026 | 475 |
Weekly downloads over the last 4 weeks are 164% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 2.14.6 |
|---|---|
| Author | Zoho Flow |
| Added | 31 Aug 2020 |
| Last updated | 31 Oct 2026 |
| Active installs | 5,000+ |
| Requires WordPress | 5.0 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.0.0 |
| Category | E-commerce & Shopping |
| Tags | webhook, workflow, automation, integration, notification |
Questions
Is Zoho Flow - No-Code Workflow Automation still maintained?
Zoho Flow - No-Code Workflow Automation was last updated on 31 Oct 2026. Its Canary status is Healthy.
Is Zoho Flow - No-Code Workflow Automation safe?
Zoho Flow - No-Code Workflow Automation has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Zoho Flow - No-Code Workflow Automation?
The wordpress.org author is Zoho Flow. Recent committers: zohoflow, plugin-master. We have recorded no ownership change.
What can I use instead of Zoho Flow - No-Code Workflow Automation?
Plugins in the same category with a higher Canary Score: Post to Google My Business (Google Business Profile), AyeCode Connect, Automattic For Agencies Client, Metorik - Reports & Email Automation for WooCommerce, Base (formerly BaseLinker) - 300+ marketplaces, 150+ carriers & PIM & OMS & WMS in one.