WP Crowdfunding

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. The recent download trend is too spiky to read.

17 of the last 24 four- and five-star reviews came from accounts created within a month of posting the review, and 9 of those landed between 2020-03-16 and 2020-04-14.

Registering a wp.org account just to leave a review is common and often entirely legitimate. The share here is unusually high for the sample, so it's worth keeping in mind while reading the reviews.

1. ★★★★★ apridinata

   1.9y ago

   please make the “back campaign” button renameable

   Read on wp.org ↗
2. ★★★★★ IILLC

   4.2y ago

   If you want to use this plugin straight out of the box without modifications it is OK. But if you want to customize it, forget it. There is very little user friendly things to customize in admin. If you are a coder, there are no hooks, few short codes, poor documentation, and strange integration with woo. None of the woo mods I used actually worked with the plugin because it uses its own templates and overrides that doesn’t include woo tie ins. As an example if you get the extra tabs plugin or discussions one it will not work. It ties into the billing system somewhat but it is did not live up to hype of being fully integrated and functional with Woo because it is most definitely not. Rewards were limited and couldn’t be variables (like if you want to have shirts in your campaign). Support was slow and poor. I tried for a month to get this thing to work. Going back and forth from support (1/10) gave a response that was helpful. Documentation is light. I scrapped this whole plugin and just went with woo, woo mods, and a bit of php. So if you want to use the features they have and not change anything. Go for it. If you want to create a customized crowdfunding solution for your client. Skip it and just use woo and it’s mods. Maybe a few Advanced Custom Fields. You will get a much better result that is supported well and reliable.

   Read on wp.org ↗
3. ★★★★★ perdy001

   4.3y ago

   Best theme provider with the best support

   Read on wp.org ↗
4. ★★★★★ tribofficial

   4.4y ago

   I inquired about a clarification on the system and they got back to me right away! The support for the system modification was perfectly done and very helpful. It was the best support I have ever had. We look forward to working with you again in the future.

   Read on wp.org ↗
5. ★★★★★ atechg

   5.0y ago

   Purchased a pro lifetime license – big mistake. Months and months without critical bug fixes. Support very slow to respond. No real development.

   Read on wp.org ↗
6. ★★★★★ oliongnichs

   5.6y ago

   The team are quick to help and offer clear instructions to get you back on track

   Read on wp.org ↗
7. ★★★★★ Uvas Bailén

   5.7y ago

   Muy bueno el pluing, solo que el coste es muy elevado cuando es para una campaña personal.

   Read on wp.org ↗
8. ★★★★★ gabevargas

   5.7y ago

   Their support team went above and beyond in helping me with my questions. I have had a great experience with their customer service team. Thanks guys, keep it up!

   Read on wp.org ↗

17 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 WP Crowdfunding < 2.2.1 - Unauthenticated Insecure Direct Object Reference ↗
   2026-08-14 CVE-2026-73189 Authorization Bypass Through User-Controlled Key Affects < 2.2.1 Patched in 2.2.1
2. Medium · 4.3 WP Crowdfunding < 2.2.1 - Missing Authorization ↗
   2026-08-14 CVE-2026-14857 Missing Authorization Affects < 2.2.1 Patched in 2.2.1
3. Medium · 4.3 Crowdfunding <= 2.2.0 - Missing Authorization ↗
   2026-08-10 CVE-2026-14859 Improper Access Control Affects <= 2.2.0 Patched in 2.2.1
4. Medium · 4.3 Crowdfunding <= 2.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Order Data Disclosure ↗
   2026-08-10 CVE-2026-14858 Authorization Bypass Through User-Controlled Key Affects <= 2.2.0 Patched in 2.2.1
5. Medium · 6.4 WP Crowdfunding <= 2.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-04-01 CVE-2025-31892 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.15 Patched in 2.1.16
6. Medium · 5.3 WP Crowdfunding <= 2.1.14 - Missing Authorization to Authenticated (Subscriber+) Post Content Download ↗
   2025-03-11 CVE-2025-1508 Missing Authorization Affects <= 2.1.14 Patched in 2.1.15
7. Medium · 4.3 WP Crowdfunding <= 2.1.12 - Missing Authorization to Authenticated (Subscriber+) WooCommerce Installation ↗
   2024-12-12 CVE-2024-11911 Missing Authorization Affects <= 2.1.12 Patched in 2.1.13
8. Medium · 6.4 WP Crowdfunding <= 2.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-12-12 CVE-2024-11910 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.15 Patched in 2.1.16
9. Medium · 6.4 WP Crowdfunding <= 2.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcf_donate Shortcode ↗
   2024-10-25 CVE-2024-10117 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.11 Patched in 2.1.12
10. Medium · 4.3 WP Crowdfunding <= 2.1.10 - Missing Authorization to Authenticated (Subscriber+) to Enable/Disable Addons ↗
    2024-08-26 CVE-2024-43937 Missing Authorization Affects <= 2.1.10 Patched in 2.1.11
11. Medium · 6.4 WP Crowdfunding <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2023-12-22 CVE-2023-50859 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.6 Patched in 2.1.7
12. Medium · 4.4 WP Crowdfunding <= 2.1.9 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2023-12-22 CVE-2023-6163 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.9 Patched in 2.1.10
13. Medium · 6.1 WP Crowdfunding <= 2.1.8 - Reflected Cross-Site Scripting ↗
    2023-12-13 CVE-2023-6161 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.8 Patched in 2.1.9
14. Medium · 4.4 WP Crowdfunding <= 2.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2023-11-28 CVE-2023-5757 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.7 Patched in 2.1.8
15. Medium · 6.1 WP Crowdfunding <= 2.1.6 - Reflected Cross-Site Scripting via postid ↗
    2023-11-07 CVE-2023-47532 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.6 Patched in 2.1.7
16. Medium · 4.3 WP Crowdfunding <= 2.1.5 - Cross-Site Request Forgery ↗
    2023-09-08 Cross-Site Request Forgery (CSRF) Affects <= 2.1.5 Patched in 2.1.6
17. Medium · 4.3 WP Crowdfunding <= 2.1.4 - Missing Authorization via settings_reset ↗
    2023-09-05 CVE-2023-41870 Missing Authorization Affects <= 2.1.4 Patched in 2.1.5

Automated install-time checks, tested on PHP 8.1.12 · WP 6.8.2

Translated into 24 languages, 6 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-06-24 3K+ → 2K+ down after 382 days in tier
2. 2025-06-07 4K+ → 3K+ down after 2 days in tier
3. 2025-06-05 3K+ → 4K+ up after 1 days in tier
4. 2025-06-04 4K+ → 3K+ down after 4 days in tier
5. 2025-05-31 3K+ → 4K+ up after 1 days in tier
6. 2025-05-30 4K+ → 3K+ down after 2 days in tier
7. 2025-05-28 3K+ → 4K+ up after 2 days in tier
8. 2025-05-26 4K+ → 3K+ down after 1 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• D DonatePress – Donation, Crowdfunding and Fundraising Platform — installs · 4.0★ · 3 shared tags D
• GiveWP – Donation Plugin and Fundraising Platform 100K+ installs · 4.6★ · 2 shared tags A
• Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) 10K+ installs · 4.8★ · 2 shared tags A
• FundEngine – Donation and Crowdfunding Platform 1K+ installs · 4.1★ · 2 shared tags B
• Crowdfundly 500+ installs · 3.9★ · 2 shared tags D
• FundPress – WordPress Donation Plugin 200+ installs · 3.9★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for WP Crowdfunding into a readme, a review or a deck. It updates itself.

WP Crowdfunding: 2K+ active installs, 4.4★ (89 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/wp-crowdfunding