Multiple code quality and security issues identified.
9
Plugins Audited
97
Issues Found
0
Issues Fixed
0
Installs Protected
Latest Audit · Breaking
WooCommerce Has 31 Security Findings.
With 7,000,000 active installations, this plugin has been flagged by our automated security audit pipeline.
Our automated audit pipeline — Semgrep and AI analysis — found 31 security issues in WooCommerce by Automattic.
Recent Audits
View All →`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users.
AI Summary: Multiple Confirmed High-Severity Vulnerabilities — SQL Injection, CSRF, and XSS
`Echo`ing user input risks cross-site scripting vulnerability. You should use `htmlentities()` when showing data to users.
SSL peer verification conditionally disabled during SugarSync uploads
Multiple code quality and security issues identified.
YouTube API Key Exposed to All Frontend Visitors via wp_localize_script
XSS: $idea_id Interpolated Unescaped in HTML Heredoc