CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce
by MultiVendorX · page maintained by Raz Technologies · version 6.1.4 · verified
✕ Warning: 1 known vulnerability not patched in the current version. Not ranked until fixed.
Compatibility
- WooCommerce 11.1.2
- Partial— WC tested up to 11.0.1; current WooCommerce 11.1.2. Evidence: declared. Verified 23 Sept 2026 (v6.1.4).
- Declared by plugin ·
- WC tested up to 11.0.1; current WooCommerce 11.1.2
- HPOS (order tables)
- Yes— Declares HPOS compatible (woocommerce-catalog-enquiry/classes/CatalogX.php). Evidence: declared. Verified 23 Sept 2026 (v6.1.4).
- Declared by plugin ·
- Declares HPOS compatible (woocommerce-catalog-enquiry/classes/CatalogX.php)
- Cart & Checkout Blocks
- Not declared— No Cart/Checkout Blocks compatibility declaration in v6.1.4. Evidence: declared. Verified 23 Sept 2026 (v6.1.4).
- Declared by plugin ·
- No Cart/Checkout Blocks compatibility declaration in v6.1.4
- Activates on current stack
- Yes— Activation on WooCommerce 11.1.2 / WP 7.1.2 / PHP 8.3.33: ok. Evidence: tested. Verified 23 Sept 2026 (v6.1.4).
- Tested in our lab ·
- Activation on WooCommerce 11.1.2 / WP 7.1.2 / PHP 8.3.33: ok
“Declared” = read from the plugin's own code or header, not yet lab-tested. PHP compatibility is shown once our lab tests it.
Score breakdown — Request a quote
| Component | Measured | Weight | Points |
|---|---|---|---|
| Adoption | 5,000+ active installs · normalized 0.85 | 20 | 17.0 |
| Maintenance | Update recency 1, support 0.6 · normalized 0.69 | 15 | 10.4 |
| Momentum | +23% downloads, last 30 vs prior 30 days · normalized 0.90 | 20 | 17.9 |
| Performance | [object Object] · normalized 0.00 | 10 | 0.0 |
| Satisfaction | 4.15/5 from 60 ratings (category mean 4.266) · normalized 0.59 | 20 | 11.8 |
| Security | 7 known vulnerabilities in 36 months · normalized 0.10 | 15 | 1.4 |
| Total | 58.6 |
Lab results Tested
| Page | Server time | DB queries | Memory | Added JS + CSS | PHP warnings |
|---|---|---|---|---|---|
| Product (guest) | n/a | +240 | +872 KB | 3763.8 KB | 0 |
| Block cart (guest) | +65 ms | +227 | +874 KB | 3568.5 KB | 0 |
| Block checkout (guest) | +321 ms | +220 | +943 KB | 3568.5 KB | 0 |
| Shop (guest) | +129 ms | +251 | +890 KB | 3762.0 KB | 0 |
| Product (wholesale user) | +84 ms | +240 | +871 KB | 3763.8 KB | 0 |
Tested v6.1.4 on 23 Sept 2026 · WooCommerce 11.1.2, WordPress 7.1.2, PHP 8.3.33, Twenty Twenty-Five, HPOS on, small fixture (200 products). Plugin activated with default settings. How we test.
Features
- ✓ "Add to quote" button on product/shop — free version Documented
“Product enquiry and request-a-quote forms for customers.” — WordPress.org readme, 23 Sept 2026
- ✓ Replace or hide Add to cart — free version Documented
“Hide Add to Cart” — WordPress.org readme, 23 Sept 2026
- ✓ Hide price on quotable products — free version Documented
“Hide product prices.” — WordPress.org readme, 23 Sept 2026
- ✓ Custom quote form fields — paid version Documented
“Customize your inquiry form to match your brand and gather the most relevant information [PRO].” — WordPress.org readme, 23 Sept 2026
- ✓ Enable quotes per role/product/category — free version Documented
“Role-based catalog and pricing settings.” — WordPress.org readme, 23 Sept 2026
- ✓ Quote basket page — free version Documented
“Allow visitors to request a quote for individual or multiple products” — WordPress.org readme, 23 Sept 2026
- ✓ Hide prices — free version Documented
“Hide product prices.” — WordPress.org readme, 23 Sept 2026
- ✓ Hide add to cart — free version Documented
“Hide Add to Cart” — WordPress.org readme, 23 Sept 2026
- ✓ Rules for guests vs logged-in — free version Documented
“Create a private store by hiding prices and the add-to-cart button until users log in.” — WordPress.org readme, 23 Sept 2026
- ✓ Rules per role — free version Documented
“Role-based catalog and pricing settings.” — WordPress.org readme, 23 Sept 2026
- ✓ Custom text/button in place of price — free version Documented
“Replace Add-to-Cart button with a Custom Button.” — WordPress.org readme, 23 Sept 2026
- ✓ Product enquiry form — free version Documented
“Product enquiry and request-a-quote forms for customers.” — WordPress.org readme, 23 Sept 2026
Only features the vendor documents are listed; a missing feature may still exist.
WordPress.org data
| Active installs | 5,000+ |
|---|---|
| Rating | 4.2/5 (60 ratings) |
| Last updated | 1 Sept 2026 |
| WooCommerce tested up to | 11.0.1 |
| WordPress tested up to | 7.1.0 |
| Requires PHP | 8.0 |
| Support threads (2 months) | 0 opened, 0 resolved |
Source: WordPress.org, .
Weekly downloads (26 weeks)
Table
| Week of | Downloads |
|---|---|
| 30 Mar 2026 | 198 |
| 6 Apr 2026 | 200 |
| 13 Apr 2026 | 182 |
| 20 Apr 2026 | 155 |
| 27 Apr 2026 | 178 |
| 4 May 2026 | 148 |
| 11 May 2026 | 133 |
| 18 May 2026 | 140 |
| 25 May 2026 | 137 |
| 1 June 2026 | 146 |
| 8 June 2026 | 136 |
| 15 June 2026 | 146 |
| 22 June 2026 | 138 |
| 29 June 2026 | 139 |
| 6 July 2026 | 1,824 |
| 13 July 2026 | 341 |
| 20 July 2026 | 1,653 |
| 27 July 2026 | 368 |
| 3 Aug 2026 | 1,886 |
| 10 Aug 2026 | 377 |
| 17 Aug 2026 | 304 |
| 24 Aug 2026 | 1,730 |
| 31 Aug 2026 | 1,985 |
| 7 Sept 2026 | 491 |
| 14 Sept 2026 | 488 |
| 21 Sept 2026 | 155 |
Downloads include automatic updates, so release weeks spike.
Security history
| ID | Severity | Affected | Status in current version | Disclosed |
|---|---|---|---|---|
| CVE-2026-81792 | high (CVSS 7.3) | <= 6.1.4 | ✕ Not patched | |
| CVE-2026-79621 | medium (CVSS 5.3) | < 6.1.3 | ✓ Patched | |
| CVE-2024-25929 | medium (CVSS 4.3) | <= 5.0.5 | ✓ Patched | |
| CVE-2023-5348 | high (CVSS 7.2) | <= 5.0.2 | ✓ Patched | |
| CVE-2023-50899 | medium (CVSS 6.5) | < 5.0.3 | ✓ Patched | |
| WF-e881ba2f-0e88-4c7b-aa0d-84e816019db9 | medium (CVSS 4.3) | < 5.0.3 | ✓ Patched | |
| CVE-2017-18592 | critical (CVSS 9.8) | <= 3.0.5 | ✓ Patched |
Vulnerability data: Wordfence Intelligence(each ID links to its record). Copyright 2012-2026 Defiant Inc. Licensed under the Wordfence Intelligence Terms and Conditions. CVE records: Copyright 1999-2026 The MITRE Corporation. Cross-checked with NVD.
Change log
- SecurityCatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce <= 6.1.4 - Unauthenticated Privilege Escalation — not patched in CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce 6.1.4 (Wordfence).
- RankCatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce moved from #2 to #9 in Catalog mode / hide prices.
- RankCatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce moved from #2 to #7 in Request a quote.
Installed versions
5.0: 29.7% · 6.1: 29.0% · 6.0: 14.5% · 4.0: 14.3% (WordPress.org, 23 Sept 2026)