PLUGIN SECURITY
Is Wp User Avatar safe?
Paid membership & LMS plugin. Sell courses, subscriptions & digital products, paywall content, and add login & registration forms and user profiles.
What this plugin does
- Slug:
wp-user-avatar - Author: properfraction
- 100000+ active installs
- 62/100 rating (938 reviews on wordpress.org)
- 15722298 all-time downloads
- On WordPress.org since 2013-01-14
courseecommercelmsmembershipUser Registration
Maintenance status
- Last updated: 2026-10-31 9:57am GMT
- Tested up to WordPress: 7.1.4
- Requires PHP: 8.0+
Known vulnerabilities
60 known CVEs on file for Wp User Avatar.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-123657 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.6 | Missing Authorization | Unknown | < 4.17.6 | 4.17.6 | 2026-11-11 | — |
| CVE-2026-123656 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.6 | Improper Access Control | Unknown | < 4.17.6 | 4.17.6 | 2026-11-11 | — |
| CVE-2026-123661 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] >= 4.16.13 - < 4.17.4 | Missing Authorization | Unknown | 4.16.13–4.17.4 | 4.17.4 | 2026-11-11 | — |
| CVE-2026-123659 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.6 | Incorrect Authorization | Medium 5.3 | < 4.17.6 | 4.17.6 | 2026-11-11 | — |
| CVE-2026-119473 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.18.0 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | Medium 4.3 | < 4.18.0 | 4.18.0 | 2026-11-07 | — |
| CVE-2026-39733 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.18.0 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | Medium 5.3 | < 4.18.0 | 4.18.0 | 2026-11-07 | — |
| CVE-2026-96518 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.4 | — | Medium 5.9 | < 4.17.4 | 4.17.4 | 2026-10-09 | — |
| CVE-2026-96337 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.4 | — | Medium 6.5 | < 4.17.4 | 4.17.4 | 2026-10-09 | — |
+ 64 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-92551 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 4.17.5 | 4.17.5 | 2026-10-02 | — |
| CVE-2026-92536 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.5 | Improper Control of Generation of Code ('Code Injection') | High 8.8 | < 4.17.5 | 4.17.5 | 2026-10-02 | — |
| CVE-2026-104003 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.6 | Improper Control of Generation of Code ('Code Injection') | Medium 5.4 | < 4.17.6 | 4.17.6 | 2026-10-02 | — |
| CVE-2026-66047 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.2 | — | High 8.1 | < 4.17.2 | 4.17.2 | 2026-08-31 | — |
| CVE-2026-85658 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.3 | Improper Control of Generation of Code ('Code Injection') | High 8.1 | < 4.17.3 | 4.17.3 | 2026-08-31 | — |
| CVE-2026-18385 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.0 | Improper Control of Generation of Code ('Code Injection') | Medium 5.4 | < 4.17.0 | 4.17.0 | 2026-08-15 | — |
| CVE-2026-19848 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.17.1 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') | Medium 6.5 | < 4.17.1 | 4.17.1 | 2026-08-15 | — |
| CVE-2026-13352 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.19 | Unrestricted Upload of File with Dangerous Type | High 8.8 | < 4.16.19 | 4.16.19 | 2026-07-16 | — |
| CVE-2026-10820 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.17 | Authorization Bypass Through User-Controlled Key | Unknown | < 4.16.17 | 4.16.17 | 2026-06-27 | — |
| CVE-2026-41556 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 4.16.14 | 4.16.14 | 2026-04-23 | — |
| CVE-2026-4949 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.13 | Missing Authorization | Medium 4.3 | < 4.16.13 | 4.16.13 | 2026-04-15 | — |
| CVE-2025-13642 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.8 | Improper Control of Generation of Code ('Code Injection') | Medium 5.4 | < 4.16.8 | 4.16.8 | 2025-12-08 | — |
| CVE-2024-13120 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.20 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 4.15.20 | 4.15.20 | 2025-01-23 | — |
| CVE-2024-13119 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.20 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 4.15.20 | 4.15.20 | 2025-01-23 | — |
| CVE-2024-13121 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.20 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Low 3.5 | < 4.15.20 | 4.15.20 | 2025-01-23 | — |
| CVE-2023-50882 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.13.3 | Missing Authorization | Medium 5.3 | < 4.13.3 | 4.13.3 | 2024-12-09 | — |
| CVE-2024-11083 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.19 | Exposure of Sensitive Information to an Unauthorized Actor | Medium 5.3 | < 4.15.19 | 4.15.19 | 2024-11-26 | — |
| CVE-2024-10517 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 4.15.15 | 4.15.15 | 2024-11-21 | — |
| CVE-2024-10518 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 4.15.15 | 4.15.15 | 2024-11-21 | — |
| CVE-2024-2861 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.9 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 4.15.9 | 4.15.9 | 2024-05-22 | — |
| CVE-2024-2867 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.5 | Improper Input Validation | Medium 5.4 | < 4.15.5 | 4.15.5 | 2024-04-11 | — |
| CVE-2024-3210 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.6 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 4.15.6 | 4.15.6 | 2024-04-09 | — |
| CVE-2024-1535 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 4.15.3 | 4.15.3 | 2024-03-12 | — |
| CVE-2024-1806 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 4.15.1 | 4.15.1 | 2024-02-23 | — |
| CVE-2024-1409 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 4.15.1 | 4.15.1 | 2024-02-22 | — |
| CVE-2024-1408 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 4.15.0 | 4.15.0 | 2024-02-19 | — |
| CVE-2024-1570 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 4.15.0 | 4.15.0 | 2024-02-19 | — |
| CVE-2024-1519 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.15.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 4.15.0 | 4.15.0 | 2024-02-19 | — |
| CVE-2024-1046 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.14.4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 4.14.4 | 4.14.4 | 2024-02-01 | — |
| CVE-2023-44150 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.13.3 | Exposure of Sensitive Information to an Unauthorized Actor | High 7.5 | < 4.13.3 | 4.13.3 | 2023-10-02 | — |
| CVE-2023-41954 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.13.2 | Improper Privilege Management | High 8.6 | < 4.13.2 | 4.13.2 | 2023-09-09 | — |
| CVE-2023-41953 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.13.2 | Missing Authorization | Medium 5.3 | < 4.13.2 | 4.13.2 | 2023-09-09 | — |
| — | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.11.0 | — | Unknown | < 4.11.0 | 4.11.0 | 2023-06-26 | — |
| — | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.11.0 | — | Unknown | < 4.11.0 | 4.11.0 | 2023-06-23 | — |
| CVE-2023-23830 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.5.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 4.5.5 | 4.5.5 | 2023-02-21 | — |
| CVE-2023-23820 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.5.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 4.5.5 | 4.5.5 | 2023-02-20 | — |
| CVE-2022-47444 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.5.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 4.5.5 | 4.5.5 | 2023-01-27 | — |
| CVE-2023-23996 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.5.4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.9 | < 4.5.4 | 4.5.4 | 2023-01-20 | — |
| CVE-2022-4698 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.5.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 4.5.1 | 4.5.1 | 2022-12-23 | — |
| CVE-2022-4697 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.5.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 4.5.1 | 4.5.1 | 2022-12-23 | — |
| CVE-2022-45083 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.4.0 | Deserialization of Untrusted Data | Medium 6.6 | < 4.4.0 | 4.4.0 | 2022-12-14 | — |
| — | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 3.2.16 | — | Unknown | < 3.2.16 | 3.2.16 | 2022-07-22 | — |
| CVE-2021-24954 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 3.2.3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 3.2.3 | 3.2.3 | 2021-11-15 | — |
| CVE-2021-24955 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 3.2.3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 3.2.3 | 3.2.3 | 2021-11-15 | — |
| CVE-2021-24522 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 3.1.11 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 3.1.11 | 3.1.11 | 2021-08-09 | — |
| CVE-2021-24450 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 3.1.8 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 3.1.8 | 3.1.8 | 2021-06-28 | — |
| CVE-2021-34621 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] >= 3.0.0 - <= 3.1.3 | Improper Privilege Management | Critical 9.8 | 3.0.0–3.1.4 | 3.1.4 | 2021-06-28 | — |
| CVE-2021-34622 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] >= 3.0.0 - <= 3.1.3 | Improper Privilege Management | High 8.8 | 3.0.0–3.1.4 | 3.1.4 | 2021-06-28 | — |
| CVE-2021-34623 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] >= 3.0.0 - <= 3.1.3 | Unrestricted Upload of File with Dangerous Type | Critical 9.8 | 3.0.0–3.1.4 | 3.1.4 | 2021-06-28 | — |
| CVE-2021-34624 | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] >= 3.0.0 - <= 3.1.3 | Unrestricted Upload of File with Dangerous Type | Critical 9.8 | 3.0.0–3.1.4 | 3.1.4 | 2021-06-28 | — |
| — | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.5 | Improper Control of Generation of Code ('Code Injection') | Medium 6.5 | < 4.16.5 | 4.16.5 | 0000-00-00 | — |
| — | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.12 | — | Unknown | < 4.16.12 | 4.16.12 | 0000-00-00 | — |
| — | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.12 | — | Unknown | < 4.16.12 | 4.16.12 | 0000-00-00 | — |
| — | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.12 | — | Unknown | < 4.16.12 | 4.16.12 | 0000-00-00 | — |
| — | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 4.16.18 | — | Unknown | < 4.16.18 | 4.16.18 | 0000-00-00 | — |
| — | ProfilePress – Paid Membership, Online Courses (LMS), Ecommerce, User Registration & Login Form, User Profile & Restrict Content [wp-user-avatar] < 3.1.11 | — | Unknown | < 3.1.11 | 3.1.11 | — | — |
| — | ProfilePress < 3.1.11 - Multiple Vulnerabilities | — | Unknown | < 3.1.11 | 3.1.11 | — | — |
| CVE-2023-41954 | ProfilePress < 4.13.2 - Limited Privilege Escalation via 'acceptable_defined_roles' | — | Unknown | < 4.13.2 | 4.13.2 | — | — |
| CVE-2023-41953 | ProfilePress < 4.13.2 Cross-Site Request Forgery via 'admin_notice' | — | Unknown | < 4.13.2 | 4.13.2 | — | — |
| CVE-2025-8878 | Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress < 4.16.5 - Unauthenticated Arbitrary Shortcode Execution | — | Unknown | < 4.16.5 | 4.16.5 | — | — |
| CVE-2026-3453 | ProfilePress < 4.16.12 - Subscriber+ Arbitrary Subscription Cancellation/Expiration | — | Unknown | < 4.16.12 | 4.16.12 | — | — |
| CVE-2026-3309 | Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress < 4.16.12 - Unauthenticated Arbitrary Shortcode Execution via Checkout Billing Fields | — | Unknown | < 4.16.12 | 4.16.12 | — | — |
| CVE-2026-3445 | ProfilePress < 4.16.12 - Subscriber+ Membership Payment Bypass | — | Unknown | < 4.16.12 | 4.16.12 | — | — |
| CVE-2026-12497 | ProfilePress < 4.16.18 - Unauthenticated Privilege Escalation via Registration Role Selection | — | Unknown | < 4.16.18 | 4.16.18 | — | — |
How to fix it
Update this plugin to the latest release from wordpress.org — each CVE above lists the exact release that fixed it ("Fixed in") when one is on file.
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- WooCommerce — 7000000+ active installs — 90/100 (4832)
- Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation — 1000000+ active installs — 86/100 (822) — max PHP 8.4
- WooCommerce PayPal Payments — 800000+ active installs — 58/100 (588) — max PHP 8.4
- Mailchimp for WooCommerce — 200000+ active installs — 80/100 (726) — max PHP 8.4
- WPML Multilingual & Multicurrency for WooCommerce — 100000+ active installs — 84/100 (454)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.