Ecwid by Lightspeed Ecommerce Shopping Cart

by Ecwid by Lightspeed Ecommerce Shopping Cart

80 Quality Score

Active Installs

19/30

With 20,000 active installs it is a well-known solution but sits in a niche well below dominant players like WooCommerce at 7,000,000 installs, reflecting its specialized cloud-cart positioning.

Update Freshness

25/25

The plugin was updated on 2026-02-13 and tested against WordPress 6.9.4, indicating active development that keeps pace with current core releases.

User Rating

14/15

A 90 out of 100 rating from 228 users indicates generally positive feedback, though the smaller review pool means individual opinions carry more weight than with mega-plugins.

Support Health

8/15

Only 1 support thread is recorded with a 0.0% resolution rate, which is a real concern for troubleshooting expectations, though many Ecwid users rely on the vendor's separate support channels.

WP Compatibility

15/15

Tested with WordPress 6.9.4 and requiring only WordPress 4.4 gives this plugin one of the broadest compatibility ranges of any ecommerce option in the directory.

Scores higher than 81% of indexed plugins

About

Powerful, easy to use ecommerce shopping cart for WordPress. Sell on Facebook and Instagram. iPhone & Android apps. Superb support.

Active Installs 20k+

Rating ★★★★½ 4.5/5

Last Updated 2026-08-08 11:23am GMT

Requires WordPress 4.4+

Tested Up To 7.0.4

Security History

14 known vulnerabilities, all patched

1 Critical 2 High 11 Medium

Most recent: August 14, 2026

View details ▸

Ecwid by Lightspeed Ecommerce Shopping Cart < 7.0.9 - Missing Authorization Medium

August 14, 2026 Patched in ["7.0.9"] CVE-2026-14332

Ecwid by Lightspeed Ecommerce Shopping Cart <= 7.0.7 - Authenticated (Subscriber+) Privilege Escalation via ec_store_admin_access High

February 14, 2026 Patched in ["7.0.8"] CVE-2026-1750

Ecwid Shopping Cart <= 7.0.5 - Missing Authorization Medium

January 19, 2026 Patched in ["7.0.6"] CVE-2026-24580

Ecwid Shopping Cart <= 7.0.6 - Missing Authorization Medium

January 12, 2026 Patched in ["7.0.7"] CVE-2026-24613

Ecwid Shopping Cart <= 7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

April 4, 2025 Patched in ["7.0.1"] CVE-2025-32195

Ecwid by Lightspeed Ecommerce Shopping Cart <= 6.12.27 - Cross-Site Request Forgery to Send Deactivation Message Medium

February 17, 2025 Patched in ["6.12.28"] CVE-2024-13795

Ecwid Ecommerce Shopping Cart <= 6.12.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode Medium

March 29, 2024 Patched in ["6.12.11"] CVE-2024-2456

Ecwid Ecommerce Shopping Cart <= 6.12.4 - Cross-Site Request Forgery Medium

November 28, 2023 Patched in ["6.12.5"] CVE-2023-51533

Ecwid Ecommerce Shopping Cart <= 6.12.3 - Missing Authorization on multiple functions Medium

November 7, 2023 Patched in ["6.12.4"]

Ecwid Shopping Cart <= 6.11.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Medium

March 17, 2023 Patched in ["6.11.5"] CVE-2023-24408

Ecwid Ecommerce Shopping Cart <= 6.11.3 - Cross Site Request Forgery Medium

January 27, 2023 Patched in ["6.11.4"] CVE-2023-24377

Ecwid Ecommerce Shopping Cart <= 6.10.23 - Cross-Site Request Forgery to Settings/Options Update High

July 11, 2022 Patched in ["6.10.24"] CVE-2022-2432

Ecwid Ecommerce Shopping Cart <= 6.10.22 - Insufficient Access Control on Multiple AJAX Actions Medium

July 9, 2022 Patched in ["6.10.23"]

Ecwid Ecommerce Shopping Cart <= 4.4.3 - Unauthenticated PHP Object injection Critical

August 8, 2016 Patched in ["4.4.4"]

What It Does

Ecwid by Lightspeed embeds a cloud-based ecommerce storefront directly into any WordPress site via a shortcode, letting merchants add products, payments, and shipping without setting up a separate platform. Inventory, orders, and product data sync automatically across the WordPress site, Facebook, Instagram, and the dedicated Ecwid mobile apps. The heavy lifting (catalog, checkout, PCI compliance, tax calculations) runs on Ecwid's servers rather than on the WordPress host.

Who It's For

This plugin suits small business owners who want to add a store to an existing WordPress site without migrating to a dedicated ecommerce platform like WooCommerce. It is particularly useful for sellers who care about selling on Facebook, Instagram, and mobile channels from the same product catalog, and for creators, craft sellers, and local shops that prefer a managed, hosted checkout over self-hosted cart infrastructure.

Who Should Skip It

If you need deep WordPress-native customization, full ownership of product data, or extensive third-party plugin and theme integrations, you are better off with WooCommerce. Developers and larger merchants who require on-premise checkout, custom checkout flows, or granular server-side control of transactions should also avoid this plugin since commerce runs on Ecwid's servers, not locally.

The Bottom Line

Ecwid by Lightspeed is a solid, actively maintained option for adding ecommerce to a WordPress site without the overhead of self-hosted cart infrastructure, scoring 80.26/100 overall. Its compatibility, ratings, and maintenance track record are strong, while support responsiveness within the WordPress.org forum is a genuine weak spot at 0.0% resolution. For most small merchants it is a sensible choice, but anyone needing deep WordPress integration or a true self-hosted solution will be happier with WooCommerce.

Related Plugins

WooCommerce 96/100

Choose WooCommerce when you need a fully self-hosted WordPress-native store with thousands of extensions and themes, and you are willing to manage hosting, security, and PCI scope yourself.

Download Monitor 90/100

Pick Download Monitor if you only sell digital downloads and do not need a full cart, checkout, and shipping system.

Mercado Pago payments for WooCommerce 88/100

Choose this when you already run WooCommerce and specifically need Mercado Pago payment gateway support in Latin American markets.

OptinMonster 87/100

OptinMonster is a different category (lead generation and email marketing) and only makes sense as a complement, not a replacement, for an actual storefront.

TI WooCommerce Wishlist 84/100

Use this as an add-on to WooCommerce if you specifically want wishlist and save-for-later functionality rather than a full shopping cart solution.