Ko-fi Button · Security record
Is Ko-fi Button safe?
No known vulnerability affects the current version (1.4.1). 1 issue was found in earlier versions and fixed, the latest disclosed on Apr 25, 2023.
Checked 3 days ago against the WPVulnerability database, for version 1.4.1.
How it’s looked after
- Last release
- May 19, 2026 (5 months ago)
- Releases in the last year
- 3
- Tested up to
- WordPress 7.0.8
- Support resolved
- 1 of 1 threads in two months
- Active installs
- 5K+
1 known vulnerability
- 1 medium
None affects the current version.
Every known vulnerability in Ko-fi Button
Newest first, with any that affect the current version at the top.
Fixed in 1.3.3 · CVE-2023-2254 · Apr 25, 2023 · Wordfence
Questions about Ko-fi Button’s security
Is Ko-fi Button safe to use?
No known vulnerability affects its current version. Earlier versions had issues that are now fixed, so keep Ko-fi Button updated: most attacks target sites that haven’t updated.
Does Ko-fi Button have known security vulnerabilities?
None that affect the current version. WPVulnerability’s database lists 1 older issue, fixed in earlier versions, so keep Ko-fi Button up to date.
Is Ko-fi Button still maintained?
Yes. Its last release was 5 months ago. Its authors resolved 1 of the 1 support threads opened in the last two months.
Is Ko-fi Button compatible with the latest WordPress?
It’s tested up to WordPress 7.0.8, one version behind the current 7.1. Authors often update this line a few weeks after a release.
Hear about the next one first
Track your plugin on TrackWP and get an alert when a new vulnerability affecting it is published. Every plan has it, the free Starter too; Boost and FullCharge email it at once.
Start freeVulnerability data from WPVulnerability (CC0), which gathers records from CVE, Wordfence, Patchstack and WPScan. A clean record isn’t a guarantee: keep every plugin updated.