WCFM Marketplace – Multivendor Marketplace for WooCommerce

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ EjDeRizM

   3mo ago

   I have thoroughly tested WCFM Marketplace alongside its major competitors, and I can confidently say that this is by far the most advanced and feature-rich multivendor solution available for WooCommerce. The architectural logic, front-end manager capabilities, and overall layout are absolutely brilliant. Yes, like any massive plugin, it has a few minor workflow and keyboard localization bugs (such as input validation quirks on non-English layouts), but the core system is incredibly robust and scalable. As a developer who deeply appreciates this project, I have already manually translated the entire free suite into Turkish (100% completed). I am more than willing to provide this full Turkish language support to the development team whenever you are ready to natively integrate it into future releases. Keep up the spectacular work, guys! This plugin deserves more than 5 stars.

   Read on wp.org ↗
2. ★★★★★ drstephen1

   6mo ago

   Issued resolved! Hi guys, I am tired and frustrated of writing email to you. I paid for Unlimited Sites and Lifetime License. I have shared the PayPal paid invoice with you but you guys have refused to reinstall my deleted account. At this point, is this more of fraud?!Why would people want to buy lifetime license with you guys when you will just get to a point and delete the account? This topic was modified 5 months ago by drstephen1. This topic was modified 5 months ago by drstephen1.

   Read on wp.org ↗
3. ★★★★★ ohundred

   11mo ago

   This review is for the WCFM Marketplace. It’s a great plugin overall. It’s a very big plugin, with many features, and will take sometime to configure and test, but once done it will work quite successfully. WCLovers do actively update it as well, you can see that even on there WCFmmp facebook page, where updates are posted. If you have questions or concerns contact them as I typically do, be detailed with what you need, they will respond, just be a little patient. Thank you and keep up the good work! This topic was modified 10 months ago by ohundred.

   Read on wp.org ↗
4. ★★★★★ Lalit Jindal

   1.3y ago

   They will waste your time and won’t be helpful at all.

   Read on wp.org ↗
5. ★★★★★ Alaa Badr

   1.7y ago

   Great support and plugins

   Read on wp.org ↗
6. ★★★★★ jetjungle99

   1.8y ago

   Excellent assistance re-establishing my site after laptop being stolen and site pages deleted

   Read on wp.org ↗
7. ★★★★★ Tasos

   2.0y ago

   if you need a complete solution for multivendor marketplace this is it. very fast support with very kind people.

   Read on wp.org ↗
8. ★★★★★ fscarlata

   2.0y ago

   Good Marketplace Plugin. Only needs to improve the Bulk Edition of prices and Bulk import of Products.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.7.4 Updated – 27/06/2026 Security – Patched a Stored XSS vulnerability in the Media Manager. Security – Strengthened vendor shipping zone authorization to prevent cross-vendor shipping setting manipulation. Enhance – WordPre 3.7.4
2. — Version 3.7.3 Updated – 07/05/2026 Security – Patched a SQL Injection vulnerability in the Reviews Dashboard. Security – Patched an unauthenticated SQL Injection vulnerability in the Store List Map integration. 3.7.3
3. — Version 3.7.2 Updated – 25/04/2026 Enhance – PHP compatibility expanded: now supports versions 7.2–8.4 3.7.2
4. — Version 3.7.1 Updated – 07/02/2026 Fixed – PHP Fatal error: Uncaught Error: Call to undefined function wcfm_is_store_page. Fixed – Broken Access Control vulnerability reported by benzdeus, Credit goes to benzdeus for identifying this 3.7.1
5. — Version 3.7.0 Updated – 19/12/2025 Fixed – Refund logic division by zero issue. Enhance – WordPress 6.9+ compatibility check added Enhance – WooCommerce 10.4+ compatibility check added 3.7.0
6. — Version 3.6.17 Updated – 07/12/2025 Fixed – Notice: Function _load_textdomain_just_in_time was called incorrectly. Fixed – Minor bug fixes 3.6.17

10 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.4 WCFM Marketplace <= 3.8.0 - Insecure Direct Object Reference to Authenticated (Store vendor+) Cross-Vendor Review Deletion and Status Update ↗
   2026-08-17 CVE-2026-14196 Authorization Bypass Through User-Controlled Key Affects <= 3.8.0 Patched in 3.8.1
2. Medium · 6.4 WCFM Marketplace <= 3.7.3 - Authenticated (Vendor+) Stored Cross-Site Scripting via Attachment 'post_title' ↗
   2026-07-10 CVE-2026-12126 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.7.3 Patched in 3.7.4
3. Medium · 6.5 WCFM Marketplace – Multivendor Marketplace for WooCommerce <= 3.7.2 - Authenticated (Store vendor+) SQL Injection ↗
   2026-04-15 CVE-2025-63029 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.7.2 Patched in 3.7.3
4. Medium · 5.3 WCFM Marketplace <= 3.7.0 - Insecure Direct Object Reference to Unauthenticated Arbitrary Refund Request Creation ↗
   2026-02-09 CVE-2026-1722 Missing Authorization Affects <= 3.7.0 Patched in 3.7.1
5. Medium · 4.3 WCFM Marketplace <= 3.7.3 - Missing Authorization ↗
   2025-12-15 CVE-2025-64631 Missing Authorization Affects <= 3.7.3 Patched in 3.7.4
6. Medium · 6.1 WCFM Marketplace – Multivendor Marketplace for WooCommerce <= 3.6.11 - Reflected Cross-Site Scripting ↗
   2024-09-16 CVE-2024-44009 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.6.11 Patched in 3.6.12
7. Medium · 6.4 WCFM Marketplace <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2023-11-23 CVE-2023-4960 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.6.2 Patched in 3.6.3
8. Medium · 6.3 WCFM Marketplace <= 3.4.12 - Cross-Site Request Forgery ↗
   2023-04-05 CVE-2022-4936 Cross-Site Request Forgery (CSRF) Affects <= 3.4.12 Patched in 3.5.0
9. High · 8.8 WCFM Marketplace <= 3.4.11 - Missing Authorization ↗
   2023-04-05 CVE-2022-4935 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.4.11 Patched in 3.4.12
10. Critical · 9.8 WCFM - WooCommerce Multivendor Marketplace <= 3.4.11 - Unauthenticated SQL Injection ↗
    2021-11-22 CVE-2021-24849 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.4.11 Patched in 3.4.12

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 23 languages, 11 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-03-22 20K+ → 10K+ down after 973 days in tier
2. 2023-07-23 30K+ → 20K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• WCFM – Frontend Manager for WooCommerce 20K+ installs · 4.4★ · 3 shared tags A
• MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions 2K+ installs · 4.8★ · 3 shared tags A
• Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy 30K+ installs · 4.5★ · 2 shared tags A
• WCFM Membership – WooCommerce Memberships for Multivendor Marketplace 10K+ installs · 3.9★ · 2 shared tags B
• WCFM – WCFM Marketplace integrate Elementor 1K+ installs · 3.7★ · 2 shared tags D
• MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution 700+ installs · 4.6★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for WCFM Marketplace – Multivendor Marketplace for WooCommerce into a readme, a review or a deck. It updates itself.

WCFM Marketplace – Multivendor Marketplace for WooCommerce: 10K+ active installs, 4.6★ (448 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/wc-multivendor-marketplace