Accept Donations with PayPal & Stripe

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 74% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ acjohnson1985

   2.3y ago

   One of the recent updates (1.4.0 or 1.4.1) somehow cleared the live account (non-sandbox) merchant ID causing my site to have broken donations without notifying me… I restored from backup for now until I found a better solution…

   Read on wp.org ↗
2. ★★★★★ darleenac

   2.9y ago

   I tried for a few hours to deactivate this plugin and some of the ways I saw online seemed unsafe to me, so I didn’t do it. I found a plugin that will allow you to disable the plugin on pages that’s called “freesoul deactivate plugin“. It doesn’t actually delete the plugin though. I saw that this has been happening for a few years on old posts and no fix has been made. This should not be on wordpress plugins if you can’t remove it. I would report this plugin if I knew how. This topic was modified 2 years, 9 months ago by darleenac.

   Read on wp.org ↗
3. ★★★★★ milandimitrijevic

   3.1y ago

   Plug-in doesn’t work. Can’t deactivate. Can’t remove. Try something else.

   Read on wp.org ↗
4. ★★★★★ gregorytoscano

   3.2y ago

   I wanted to test this plugin to see if this is the one I wanted to go with and it worked as expected. I want to test out another donation solution and I can’t deactivate this plugin without getting a WordPress Critical Error prompt. No issues deactivating other plugins.

   Read on wp.org ↗
5. ★★★★★ agon024

   3.6y ago

   The plugin puts a DIV around the button form and doesn’t give you a way to add a class to it. Pretty simple to incorporate this. Posted the question on the support forum and after seven days still havn’t gotten a response. This topic was modified 3 years, 5 months ago by agon024.

   Read on wp.org ↗
6. ★★★★★ wunschbrunne

   4.8y ago

   Easy to set up and works like a charm.

   Read on wp.org ↗
7. ★★★★★ dareko

   7.3y ago

   The only improvement that would be helpful for multi-language sites is additional custom button(s). If there are more than one custom button (e.g. Custom1, Custom2) it would allow to prepare separate buttons for different languages in the same shape. I shouldn’t be huge job for you. Nevertheless great plugin. Good job. Thank you.

   Read on wp.org ↗
8. ★★★★★ AME Network

   7.8y ago

   Not only is the elusive “shortcode” nowhere to be found, the widget doesn’t display and neither does any widget under it. Wasted over an hour. $75 please! That’s what my time’s worth. This topic was modified 7 years, 8 months ago by AME Network.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.5.6 7/21/26 Security – Small security fix. 1.5.6
2. — Version 1.5.5 5/23/26 Change – Frontend Stripe button handler (assets/js/wpedon.js) rewritten in vanilla JavaScript. Functionality is unchanged. Fix – Resolved “Uncaught ReferenceError: jQuery is not defined” on the donation form when 1.5.5
3. — Version 1.5.4 1/28/26 Performance – Stripe JS assets are now only loaded when Stripe is connected. Fix – Stripe mode setting now saves correctly on the button edit page. Fix – PayPal debit/credit card payments now correctly redirect t 1.5.4
4. — Version 1.5.3 1/9/26 Fix – Various security improvements. 1.5.3
5. — Version 1.5.2 12/29/25 Security – Added validation to prevent open redirect vulnerability in Stripe checkout error handling. Fix – Fixed translation loading timing issue that caused warnings in WordPress 6.7+. 1.5.2
6. — Version 1.5.1 6/4/25 New – Added a horizontal alignment option on the buttons settings page in the Options section. This can also manually be passed by using the align attribute on the shortcode like [wpedon id=836 align=right] with p 1.5.1

9 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.4 Accept Donations with PayPal & Stripe <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2026-07-23 CVE-2026-65518 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5.5 Patched in 1.5.6
2. Medium · 4.7 Accept Donations with PayPal <= 1.5.2 - Unauthenticated Open Redirect ↗
   2025-12-25 CVE-2025-68602 URL Redirection to Untrusted Site ('Open Redirect') Affects <= 1.5.2 Patched in 1.5.3
3. Medium · 6.1 Accept Donations with PayPal <= 1.4.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting ↗
   2025-05-07 CVE-2025-47517 Cross-Site Request Forgery (CSRF) Affects <= 1.4.5 Patched in 1.5
4. Medium · 6.1 Accept Donations with PayPal & Stripe <= 1.4.4 - Reflected Cross-Site Scripting ↗
   2025-02-22 CVE-2024-13728 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.4.4 Patched in 1.4.5
5. Medium · 6.1 Accept Donations with PayPal <= 1.3 - Reflected Cross-Site Scripting via Page ↗
   2022-05-25 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3 Patched in 1.3.1
6. Medium · 6.5 Accept Donations with PayPal <= 1.3.3 - Arbitrary Post Deletion via Cross-Site Request Forgery ↗
   2021-12-09 CVE-2021-24989 Cross-Site Request Forgery (CSRF) Affects <= 1.3.3 Patched in 1.3.4
7. Medium · 4.8 Paypal Donation <= 1.3.1 - Admin+ Stored Cross-Site Scripting ↗
   2021-10-18 CVE-2021-24815 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.1 Patched in 1.3.2
8. Medium · 6.1 Paypal Donation <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting ↗
   2021-10-04 CVE-2021-24570 Cross-Site Request Forgery (CSRF) Affects <= 1.3 Patched in 1.3.1
9. High · 8.8 Accept Donations with PayPal <= 1.3.0 Cross-Site Request Forgery to Post Deletion ↗
   2021-10-04 CVE-2021-24572 Cross-Site Request Forgery (CSRF) Affects < 1.3.1 Patched in 1.3.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 1 language, 1 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-09-23 20K+ → 10K+ down after 916 days in tier
2. 2023-03-22 30K+ → 20K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Recurring PayPal Donations 800+ installs · 3.7★ · 3 shared tags C
• ActBlue Contributions 400+ installs · 3.7★ · 3 shared tags D
• WooCommerce PayPal Payments 800K+ installs · 2.9★ · 2 shared tags B
• GiveWP – Donation Plugin and Fundraising Platform 100K+ installs · 4.6★ · 2 shared tags A
• Donations via PayPal 20K+ installs · 4.4★ · 2 shared tags A
• Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) 10K+ installs · 4.8★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Accept Donations with PayPal & Stripe into a readme, a review or a deck. It updates itself.

Accept Donations with PayPal & Stripe: 10K+ active installs, 3.8★ (23 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/easy-paypal-donation