The read · 2026-08-31
One store engine, five thousand satellites
This isn't a competitive category. It's a supply chain with one factory at the end of it. WooCommerce holds 32% of the 21.8M installs across 5,544 tracked plugins, and almost everything else in the top ten exists to bolt something onto it: payments, product feeds, invoices, wishlists, swatches. When the top plugin is the platform the rest depend on, market share stops being a contest.
The incumbents mostly look well kept. WooCommerce shipped 21 days ago, and the specialist tools around it, the PDF invoice plugin and the cart abandonment recovery one, are on release cycles measured in days. There's one glaring exception. WooCommerce Legacy REST API still sits on 400K+ installs with a last release 585 days ago and a 2.19 star average. That's a deprecated bridge holding a huge installed base on a codebase nobody's touched in over a year, which is a slow problem rather than an urgent one.
Regulation is doing the growing
The most interesting movement this window has nothing to do with selling more. Two separate EU order withdrawal plugins climbed hard, one from 500+ to 5K+ installs and another appearing from nothing to 1K+, plus a French-language version of the same idea reaching 200+. Three unrelated authors racing up the same narrow function points to a compliance deadline pulling demand, likely a new EU refund button requirement. Nobody grows tenfold on a legal checkbox unless someone's being forced.
Beyond that, SureContact going from 800+ to 10K+ installs is the only broad climb worth naming. Meanwhile category downloads fell 19.3% over the same three months. Store owners are installing what they must and little else.
Openness, honestly read
At 2,840 downloads per plugin against an average health of 68, this looks open, and it mostly isn't. Almost every climber and faller is in the hundreds or low thousands of installs, so the churn happens far below where the installs live. Eight plugins left the directory in August, including a 1K-install Iranian SMS plugin closed 2026-08-20 with no reason recorded, and their absence barely registers. New entrants can win a niche here. They can't win the category.
One store engine, five thousand satellites
This isn't a competitive category. It's a supply chain with one factory at the end of it. WooCommerce holds 32% of the 21.8M installs across 5,544 tracked plugins, and almost everything else in the top ten exists to bolt something onto it: payments, product feeds, invoices, wishlists, swatches. When the top plugin is the platform the rest depend on, market share stops being a contest.
The incumbents mostly look well kept. WooCommerce shipped 21 days ago, and the specialist tools around it, the PDF invoice plugin and the cart abandonment recovery one, are on release cycles measured in days. There's one glaring exception. WooCommerce Legacy REST API still sits on 400K+ installs with a last release 585 days ago and a 2.19 star average. That's a deprecated bridge holding a huge installed base on a codebase nobody's touched in over a year, which is a slow problem rather than an urgent one.
Regulation is doing the growing
The most interesting movement this window has nothing to do with selling more. Two separate EU order withdrawal plugins climbed hard, one from 500+ to 5K+ installs and another appearing from nothing to 1K+, plus a French-language version of the same idea reaching 200+. Three unrelated authors racing up the same narrow function points to a compliance deadline pulling demand, likely a new EU refund button requirement. Nobody grows tenfold on a legal checkbox unless someone's being forced.
Beyond that, SureContact going from 800+ to 10K+ installs is the only broad climb worth naming. Meanwhile category downloads fell 19.3% over the same three months. Store owners are installing what they must and little else.
Openness, honestly read
At 2,840 downloads per plugin against an average health of 68, this looks open, and it mostly isn't. Almost every climber and faller is in the hundreds or low thousands of installs, so the churn happens far below where the installs live. Eight plugins left the directory in August, including a 1K-install Iranian SMS plugin closed 2026-08-20 with no reason recorded, and their absence barely registers. New entrants can win a niche here. They can't win the category.
