WP Crowdfunding

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

42 searches this plugin appeared in over the last 90 days, 13 listed. 29 left out as unrelated or noise (years, numbers, stray words). 1 of its tags isn't in the top 24 for their own search.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 4 months ago; the previous band took 13 months to cross, which places it about 66% of the way through.

17 of the last 24 four- and five-star reviews came from accounts created within a month of posting the review, and 9 of those landed between 2020-03-16 and 2020-04-14.

Registering a wp.org account just to leave a review is common and often entirely legitimate. The share here is unusually high for the sample, so it's worth keeping in mind while reading the reviews.

1. ★★★★★ apridinata

   2.0y ago

   please make the “back campaign” button renameable

   Read on wp.org ↗
2. ★★★★★ IILLC

   4.4y ago

   If you want to use this plugin straight out of the box without modifications it is OK. But if you want to customize it, forget it. There is very little user friendly things to customize in admin. If you are a coder, there are no hooks, few short codes, poor documentation, and strange integration with woo. None of the woo mods I used actually worked with the plugin because it uses its own templates and overrides that doesn’t include woo tie ins. As an example if you get the extra tabs plugin or discussions one it will not work. It ties into the billing system somewhat but it is did not live up to hype of being fully integrated and functional with Woo because it is most definitely not. Rewards were limited and couldn’t be variables (like if you want to have shirts in your campaign). Support was slow and poor. I tried for a month to get this thing to work. Going back and forth from support (1/10) gave a response that was helpful. Documentation is light. I scrapped this whole plugin and just went with woo, woo mods, and a bit of php. So if you want to use the features they have and not change anything. Go for it. If you want to create a customized crowdfunding solution for your client. Skip it and just use woo and it’s mods. Maybe a few Advanced Custom Fields. You will get a much better result that is supported well and reliable.

   Read on wp.org ↗
3. ★★★★★ perdy001

   4.4y ago

   Best theme provider with the best support

   Read on wp.org ↗
4. ★★★★★ tribofficial

   4.6y ago

   I inquired about a clarification on the system and they got back to me right away! The support for the system modification was perfectly done and very helpful. It was the best support I have ever had. We look forward to working with you again in the future.

   Read on wp.org ↗
5. ★★★★★ atechg

   5.2y ago

   Purchased a pro lifetime license – big mistake. Months and months without critical bug fixes. Support very slow to respond. No real development.

   Read on wp.org ↗
6. ★★★★★ oliongnichs

   5.8y ago

   The team are quick to help and offer clear instructions to get you back on track

   Read on wp.org ↗
7. ★★★★★ Uvas Bailén

   5.9y ago

   Muy bueno el pluing, solo que el coste es muy elevado cuando es para una campaña personal.

   Read on wp.org ↗
8. ★★★★★ gabevargas

   5.9y ago

   Their support team went above and beyond in helping me with my questions. I have had a great experience with their customer service team. Thanks guys, keep it up!

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.2.2 Fix : Resolved SQL injection vulnerability in campaign reward order counting. Fix : Sanitized reward pledge amounts and item limits so non-numeric values cannot be stored. Fix : Escaped user-generated output in the dashb 2.2.2
2. — Version 2.2.1 Fix : Resolved authorization issues in campaign updates, order details, and frontend campaign submission. Fix : Resolved issue where campaign featured images and embedded videos were not displaying on the single campaign 2.2.1
3. — Version 2.2.0 New : Introduced migration support from WP Crowdfunding to Growfund. =2.1.17= Fix : Remove social share support for abandoned domains =2.1.16= Fix : Stored cross-site scripting issue resolved. Fix : Cf User registration 2.2.0
4. — Version 2.1.4 Fix: Blank donation was listed as a Reward Fix: Resolved the issue with editing Gallery images Fix: Resolved a Shortcode issue Fix: Fixed the display of Reward year when the site language is not English Fix: Resolved som 2.1.4
5. — Version 2.1.3 Update: The User Experience of Social Share Settings is improved Update: The License Mechanism is improved Fix: On the Dashboard, the Graph was not showing result of the last day when searched between a date range Fix: O 2.1.3
6. — Version 2.0.9 Fix: Translation issues Fix: Reward remains enabled on the frontend cf-campaign-form even after disabling it Update: JS and CSS minified 2.0.9

All 19 disclosed vulnerabilities are patched in the current version (2.2.2). Sites still on an older version should update.

1. Patched Medium · 6.4 WP Crowdfunding <= 2.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'first_name' Parameter ↗
   2026-09-08 CVE-2026-19945 Improper Neutralization of Input During Web Page Generation Affects <= 2.2.1 Patched in 2.2.2
2. Patched Medium · 4.9 WP Crowdfunding <= 2.2.1 - Authenticated (Shop Manager+) SQL Injection via 'wpneo_reward' Post Meta ↗
   2026-09-08 CVE-2026-19944 Improper Neutralization of Special Elements used in an SQL Command Affects <= 2.2.1 Patched in 2.2.2
3. Patched Medium · 4.3 WP Crowdfunding < 2.2.1 - Unauthenticated Insecure Direct Object Reference ↗
   2026-08-14 CVE-2026-73189 Authorization Bypass Through User-Controlled Key Affects < 2.2.1 Patched in 2.2.1
4. Patched Medium · 4.3 WP Crowdfunding < 2.2.1 - Missing Authorization ↗
   2026-08-14 CVE-2026-14857 Missing Authorization Affects < 2.2.1 Patched in 2.2.1
5. Patched Medium · 4.3 Crowdfunding <= 2.2.0 - Missing Authorization ↗
   2026-08-10 CVE-2026-14859 Improper Access Control Affects <= 2.2.0 Patched in 2.2.1
6. Patched Medium · 4.3 Crowdfunding <= 2.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Order Data Disclosure ↗
   2026-08-10 CVE-2026-14858 Authorization Bypass Through User-Controlled Key Affects <= 2.2.0 Patched in 2.2.1
7. Patched Medium · 6.4 WP Crowdfunding <= 2.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-04-01 CVE-2025-31892 Improper Neutralization of Input During Web Page Generation Affects <= 2.1.15 Patched in 2.1.16
8. Patched Medium · 5.3 WP Crowdfunding <= 2.1.14 - Missing Authorization to Authenticated (Subscriber+) Post Content Download ↗
   2025-03-11 CVE-2025-1508 Missing Authorization Affects <= 2.1.14 Patched in 2.1.15
9. Patched Medium · 4.3 WP Crowdfunding <= 2.1.12 - Missing Authorization to Authenticated (Subscriber+) WooCommerce Installation ↗
   2024-12-12 CVE-2024-11911 Missing Authorization Affects <= 2.1.12 Patched in 2.1.13
10. Patched Medium · 6.4 WP Crowdfunding <= 2.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-12-12 CVE-2024-11910 Improper Neutralization of Input During Web Page Generation Affects <= 2.1.15 Patched in 2.1.16
11. Patched Medium · 6.4 WP Crowdfunding <= 2.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcf_donate Shortcode ↗
    2024-10-25 CVE-2024-10117 Improper Neutralization of Input During Web Page Generation Affects <= 2.1.11 Patched in 2.1.12
12. Patched Medium · 4.3 WP Crowdfunding <= 2.1.10 - Missing Authorization to Authenticated (Subscriber+) to Enable/Disable Addons ↗
    2024-08-26 CVE-2024-43937 Missing Authorization Affects <= 2.1.10 Patched in 2.1.11
13. Patched Medium · 6.4 WP Crowdfunding <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2023-12-22 CVE-2023-50859 Improper Neutralization of Input During Web Page Generation Affects <= 2.1.6 Patched in 2.1.7
14. Patched Medium · 4.4 WP Crowdfunding <= 2.1.9 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2023-12-22 CVE-2023-6163 Improper Neutralization of Input During Web Page Generation Affects <= 2.1.9 Patched in 2.1.10
15. Patched Medium · 6.1 WP Crowdfunding <= 2.1.8 - Reflected Cross-Site Scripting ↗
    2023-12-13 CVE-2023-6161 Improper Neutralization of Input During Web Page Generation Affects <= 2.1.8 Patched in 2.1.9
16. Patched Medium · 4.4 WP Crowdfunding <= 2.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2023-11-28 CVE-2023-5757 Improper Neutralization of Input During Web Page Generation Affects <= 2.1.7 Patched in 2.1.8
17. Patched Medium · 6.1 WP Crowdfunding <= 2.1.6 - Reflected Cross-Site Scripting via postid ↗
    2023-11-07 CVE-2023-47532 Improper Neutralization of Input During Web Page Generation Affects <= 2.1.6 Patched in 2.1.7
18. Patched Medium · 4.3 WP Crowdfunding <= 2.1.5 - Cross-Site Request Forgery ↗
    2023-09-08 Cross-Site Request Forgery Affects <= 2.1.5 Patched in 2.1.6
19. Patched Medium · 4.3 WP Crowdfunding <= 2.1.4 - Missing Authorization via settings_reset ↗
    2023-09-05 CVE-2023-41870 Missing Authorization Affects <= 2.1.4 Patched in 2.1.5

Automated install-time checks, tested on PHP 8.1.12 · WP 6.8.2

Translated into 24 languages, 4 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-06-24 3K+ → 2K+ down after 382 days in tier
2. 2025-06-07 4K+ → 3K+ down after 2 days in tier
3. 2025-06-05 3K+ → 4K+ up after 1 days in tier
4. 2025-06-04 4K+ → 3K+ down after 4 days in tier
5. 2025-05-31 3K+ → 4K+ up after 1 days in tier
6. 2025-05-30 4K+ → 3K+ down after 2 days in tier
7. 2025-05-28 3K+ → 4K+ up after 2 days in tier
8. 2025-05-26 4K+ → 3K+ down after 1 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for WP Crowdfunding into a readme, a review or a deck. It updates itself.

WP Crowdfunding: 2K+ active installs, 4.4★ (89 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/wp-crowdfunding