Simple Shopping Cart

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 49% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

1. ★★★★★ sebigbos

   5mo ago

   ….and the support is really great!

   Read on wp.org ↗
2. ★★★★★ davidargence

   5mo ago

   Very easy plugin for persons who wish to test an e-commerce. Special thanks to the support team for reactivity and efficience !

   Read on wp.org ↗
3. ★★★★★ funckytown

   5mo ago

   Its ease of use and numerous settings make it, in my modest opinion, the best shopping cart for WordPress. A huge thank you! I saw my first TRS80 in 1984

   Read on wp.org ↗
4. ★★★★★ Mike K.

   6mo ago

   Very easy to work with. Perfect plugin.

   Read on wp.org ↗
5. ★★★★★ Anonymous

   8mo ago

   When logging into PayPal is a real hassle because coordinating with a client for codes, it’s great to have this simple method of adding a new virtual product or updating the cost of an old one right on your WordPress site. Also, the new PayPal buttons are not always an improvement on the way the ‘old’ ones worked or looked.

   Read on wp.org ↗
6. ★★★★★ edwardsmark

   1.3y ago

   this plugin does prolly 99% of the work for you its so simple and easy. we insisted on using Stripe opposed to the evil PayPal.i am guessing we had a successful “test” transaction in under 15 minutes. this is VERY IMPRESSIVE.

   Read on wp.org ↗
7. ★★★★★ patriciaburnette2018

   1.3y ago

   Really Easy to use Plugin!!! When I start making money LOL I’ll buy it 🙂

   Read on wp.org ↗
8. ★★★★★ dizplay

   1.4y ago

   in super velocità si riesce a metter su un ecommerce con pagamento paypal.. assurdamente facile, nonostante le funzionalità principali ci siano tutte.Un ottimo lavoro, davvero complimenti.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 5.3.0 Updated the language translation POT file. Updated the unique Cart ID generating code to use a more robust method. 5.3.0
2. — Version 5.2.9 Added more disable funding options in the settings menu of the PayPal PPCP checkout. 5.2.9
3. — Version 5.2.8 The deprecated PayPal Smart Checkout menu tab has been removed. If you were using it, switch to the new PayPal Checkout option. See the setup guide PayPal API connection related message updated to be more clear and infor 5.2.8
4. — Version 5.2.7 Added a new settings option that can be used to specify the default PayPal locale for the PayPal Commerce Platform Checkout option. A small CSS update in the orders menu for WordPress 7.0. 5.2.7
5. — Version 5.2.6 Added output escaping to the new PayPal API settings interface fields. 5.2.6
6. — Version 5.2.5 Improved the Stripe post-checkout handling code to prevent a potential issue with some server configurations. Added output escaping to the ‘wpsc_display_product’ shortcode parameters. 5.2.5

12 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 Simple Shopping Cart <= 5.2.9 - Unauthenticated Insecure Direct Object Reference ↗
   2026-06-02 CVE-2026-48868 Authorization Bypass Through User-Controlled Key Affects <= 5.2.9 Patched in 5.3.0
2. Medium · 6.4 Simple Shopping Cart <= 5.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpsc_display_product' Shortcode ↗
   2026-04-03 CVE-2026-0552 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 5.2.4 Patched in 5.2.5
3. Medium · 6.4 WordPress Simple PayPal Shopping Cart <= 5.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2025-04-30 CVE-2025-3890 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 5.1.3 Patched in 5.1.4
4. Medium · 5.3 WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference via 'quantity' ↗
   2025-04-30 CVE-2025-3889 Authorization Bypass Through User-Controlled Key Affects <= 5.1.3 Patched in 5.1.4
5. Medium · 6.5 WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference ↗
   2025-04-30 CVE-2025-3874 Authorization Bypass Through User-Controlled Key Affects <= 5.1.3 Patched in 5.1.4
6. High · 7.5 WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Product Price Manipulation ↗
   2025-04-22 CVE-2025-3530 External Control of Assumed-Immutable Web Parameter Affects <= 5.1.2 Patched in 5.1.3
7. High · 8.2 WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Information Exposure via file_url Parameter ↗
   2025-04-22 CVE-2025-3529 Insertion of Sensitive Information Into Sent Data Affects <= 5.1.2 Patched in 5.1.3
8. Medium · 6.4 WordPress Simple Shopping Cart <= 5.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-12-23 CVE-2024-12622 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 5.0.7 Patched in 5.0.8
9. Medium · 4.4 WordPress Simple Shopping Cart <= 4.7.1 - Authenticated(Administrator+) Stored Cross-Site Scripting ↗
   2024-01-26 CVE-2023-6497 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.7.1 Patched in 4.7.2
10. Medium · 5.3 WP Simple Shopping Cart <= 4.6.3 - Information Disclosure ↗
    2023-03-16 CVE-2023-1431 Exposure of Sensitive Information to an Unauthorized Actor Affects 4.6.3 Patched in 4.6.4
11. Medium · 6.4 WordPress Simple PayPal Shopping Cart <= 4.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
    2022-12-27 CVE-2022-4672 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.6.1 Patched in 4.6.2
12. Medium · 4.7 WordPress Simple PayPal Shopping Cart < 3.6 - Cross-Site Request Forgery ↗
    2014-08-01 CVE-2013-2705 Cross-Site Request Forgery (CSRF) Affects < 3.6 Patched in 3.6

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 47 languages, 2 at 90% or more

Plus 23 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2024-07-03 20K+ → 10K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• WooCommerce 7M+ installs · 4.5★ · 4 shared tags A
• TI WooCommerce Wishlist 100K+ installs · 4.7★ · 2 shared tags A
• Menu Cart for WooCommerce 80K+ installs · 4.5★ · 2 shared tags A
• Ecwid by Lightspeed Ecommerce Shopping Cart 20K+ installs · 4.5★ · 2 shared tags A
• Easy PayPal & Stripe Buy Now Button 10K+ installs · 4.3★ · 2 shared tags A
• FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler 8K+ installs · 4.3★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Simple Shopping Cart into a readme, a review or a deck. It updates itself.

Simple Shopping Cart: 10K+ active installs, 4.6★ (215 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/wordpress-simple-paypal-shopping-cart