Shopping Cart & eCommerce Store

77 Quality Score

Active Installs

16/30

At roughly 4,000 active installs, this is a niche plugin that scores well relative to its size but is dwarfed by mainstream e-commerce solutions.

Update Freshness

25/25

Updated within the last update cycle and tested against WordPress 7.0, indicating the developer is actively shipping releases.

User Rating

14/15

A 90 out of 100 from 205 reviewers is a strong satisfaction signal, though the sample size is modest.

Support Health

8/15

Zero tracked support threads with a 0% resolution rate is a red flag, suggesting either very low support volume or that users are not getting help through the tracked channel.

WP Compatibility

15/15

Confirmed compatibility with WordPress 7.0 earns full marks on this dimension, even though the plugin does not publish minimum PHP or WordPress version requirements.

Scores higher than 52% of indexed plugins

About

A FREE WordPress eCommerce & WordPress Shopping Cart plugin that can sell products, subscriptions, downloads, services, donations, and much more o …

Active Installs 3k+

Rating ★★★★½ 4.5/5

Last Updated 2026-09-23 7:18pm GMT

Tested Up To 7.1.2

Requires PHP 7.3+

Security History

25 known vulnerabilities, all patched

8 High 17 Medium

Most recent: September 8, 2026

View details ▸

Shopping Cart & eCommerce Store <= 5.9.3 - Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX Action High

September 8, 2026 Patched in ["5.9.4"] CVE-2026-17553

Shopping Cart & eCommerce Store <= 5.9.2 - Authenticated (Administrator+) SQL Injection via 'product_order' Parameter Medium

August 31, 2026 Patched in ["5.9.3"] CVE-2026-17589

Shopping Cart & eCommerce Store <= 5.9.1 - Authenticated (Contributor+) SQL Injection Medium

July 2, 2026 Patched in ["5.9.2"] CVE-2026-57765

EasyCart <= 5.8.13 - Authenticated (Contributor+) SQL Injection Medium

February 27, 2026 Patched in ["5.8.14"] CVE-2026-32422

EasyCart <= 5.8.11 - Unauthenticated Information Exposure Medium

December 8, 2025 Patched in ["5.8.12"] CVE-2025-62997

Shopping Cart & eCommerce Store <= 5.7.8 - Missing Authorization to Order Updates Medium

January 7, 2025 Patched in ["5.7.9"] CVE-2024-12712

Shopping Cart & eCommerce Store <= 5.7.2 - Authenticated (Contributor+) SQL Injection via model_number Parameter High

August 19, 2024 Patched in ["5.7.3"] CVE-2024-7827

WP EasyCart <= 5.5.19 - Missing Authorization Medium

June 3, 2024 Patched in ["5.6.0"] CVE-2024-35667

Shopping Cart & eCommerce Store <= 5.6.4 - Sensitive Information Exposure Medium

May 10, 2024 Patched in ["5.6.5"] CVE-2024-4213

WP EasyCart <= 5.5.19 - Cross-Site Request Forgery Medium

April 12, 2024 Patched in ["5.6.0"] CVE-2024-32452

Shopping Cart & eCommerce Store <= 5.6.3 - Authenticated (Contributor+) SQL Injection High

April 11, 2024 Patched in ["5.6.4"] CVE-2024-3211

WP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby' High

June 8, 2023 Patched in ["5.4.11"] CVE-2023-3023

WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_activate_product Medium

May 27, 2023 Patched in ["5.4.9"] CVE-2023-2895

WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_duplicate_product Medium

May 27, 2023 Patched in ["5.4.9"] CVE-2023-2896

WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_deactivate_product Medium

May 27, 2023 Patched in ["5.4.9"] CVE-2023-2893

WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_deactivate_product Medium

May 27, 2023 Patched in ["5.4.9"] CVE-2023-2894

WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_delete_product Medium

May 27, 2023 Patched in ["5.4.9"] CVE-2023-2892

WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_delete_product Medium

May 27, 2023 Patched in ["5.4.9"] CVE-2023-2891

Shopping Cart & eCommerce Store <= 5.4.2 - Authenticated (Admin+) Local File Inclusion via import_file_url High

March 13, 2023 Patched in ["5.4.3"] CVE-2023-1124

Shopping Cart & eCommerce Store <= 5.2.6 - Cross-Site Request Forgery Medium

April 15, 2022 Patched in ["5.3.0"]

Shopping Cart & eCommerce Store <= 5.2.4 - Cross-Site Request Forgery to Settings Update Medium

March 28, 2022 Patched in ["5.2.5"]

Shopping Cart & eCommerce Store <= 5.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting High

August 18, 2021 Patched in ["5.1.5"] CVE-2021-34645

EasyCart 1.1.30 - 3.0.20 - Privilege Escalation High

February 26, 2015 Patched in ["3.0.21"] CVE-2015-2673

Shopping Cart & eCommerce Store < 3.0.16 - Arbitrary File Upload High

January 9, 2015 Patched in ["3.0.16"] CVE-2014-9308

EasyCart <= 2.0.5 - Sensitive Information Disclosure Medium

May 28, 2014 Patched in ["2.0.6"] CVE-2014-4942

What It Does

WP EasyCart is a full-featured WordPress shopping cart plugin that lets you sell physical products, digital downloads, subscriptions, services, and donations from a single interface. It bundles its own store front-end, checkout flow, and payment gateway integrations (including PayPal), so it can run as a standalone store rather than sitting on top of WooCommerce.

Who It's For

Small to mid-sized businesses that want a turnkey cart solution without building a WooCommerce site from scratch, particularly sellers who need built-in support for subscriptions, donations, or digital goods. It suits store owners who prefer a self-contained plugin over a larger ecosystem of extensions.

Who Should Skip It

Anyone running a high-volume store, a multi-vendor marketplace, or a site that depends on the vast WooCommerce extension library should skip this plugin, since 4,000 active installs and zero public support threads indicate a smaller community and fewer third-party integrations.

The Bottom Line

WP EasyCart delivers a solid, actively maintained all-in-one store experience with strong user ratings, and its overall quality score of 77.13 reflects real strengths. However, the small install base and absence of public support traffic mean buyers should be comfortable relying on documentation rather than a community forum before committing.

Related Plugins

WooCommerce 96/100

Pick WooCommerce if you want the largest e-commerce ecosystem, thousands of extensions, and the deepest community support in WordPress.

Payment Plugins for PayPal WooCommerce 91/100

Pick this if you already run WooCommerce and specifically need advanced PayPal checkout, subscriptions, or PayPal-hosted card processing.

Download Monitor 90/100

Pick Download Monitor if you only sell digital downloads and want a lighter cart experience focused on file delivery rather than full storefront features.

Mercado Pago payments for WooCommerce 88/100

Pick this if your store targets Latin American buyers and you need first-class Mercado Pago gateway support on top of WooCommerce.

Popup Builder & Popup Maker for WordPress – OptinMonster 87/100

Pick OptinMonster as a complement rather than a replacement, since it handles lead capture and conversion optimization that WP EasyCart does not cover.