AI Checkout for WooCommerce Security & Risk Analysis

wordpress.org/plugins/ai-checkout-for-woocommerce

Enable ChatGPT Instant Checkout for your WooCommerce store using OpenAI Agentic Commerce Protocol.

0 active installs v1.0.0 PHP 8.0+ WP 5.8+ Updated Jan 6, 2026
chatgptcheckoutopenaistripewoocommerce
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is AI Checkout for WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

AI Checkout for WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The ai-checkout-for-woocommerce plugin v1.0.0 exhibits a strong security posture based on the provided static analysis and vulnerability history. A significant strength is the complete absence of unescaped output and critical or high-severity taint flows, indicating robust data handling and a lack of easily exploitable injection vulnerabilities. The plugin also demonstrates good security practices with a high percentage of SQL queries utilizing prepared statements and a comprehensive number of nonce and capability checks across its AJAX handlers and other entry points. The zero recorded CVEs, with no unpatched vulnerabilities, further reinforces this positive security assessment.

Vulnerabilities
None known

AI Checkout for WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

AI Checkout for WooCommerce Release Timeline

v1.0.0Current
Code Analysis
Analyzed Mar 17, 2026

AI Checkout for WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
5
51 prepared
Unescaped Output
2
533 escaped
Nonce Checks
28
Capability Checks
26
File Operations
1
External Requests
9
Bundled Libraries
0

SQL Query Safety

91% prepared56 total queries

Output Escaping

100% escaped535 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

3 flows
handle_save_test_webhook (src\Admin\ApplicationWizard.php:445)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

AI Checkout for WooCommerce Attack Surface

Entry Points9
Unprotected0

AJAX Handlers 9

authwp_ajax_carticy_ai_checkout_regenerate_api_keysrc\Admin\AdminHandler.php:48
authwp_ajax_carticy_ai_checkout_regenerate_webhook_secretsrc\Admin\AdminHandler.php:49
authwp_ajax_carticy_ai_checkout_test_webhooksrc\Admin\AdminHandler.php:50
authwp_ajax_carticy_ai_checkout_run_conformance_testssrc\Admin\ApplicationWizard.php:73
authwp_ajax_carticy_ai_checkout_enable_robots_filtersrc\Admin\ApplicationWizard.php:76
authwp_ajax_carticy_ai_checkout_save_test_resultssrc\Admin\ApplicationWizard.php:79
authwp_ajax_carticy_ai_checkout_preview_product_feedsrc\Admin\ProductFeedManager.php:60
authwp_ajax_carticy_ai_checkout_regenerate_feedsrc\Admin\ProductFeedManager.php:61
authwp_ajax_carticy_ai_checkout_recalculate_qualitysrc\Admin\ProductFeedManager.php:62
WordPress Hooks 40
actionbefore_woocommerce_initcarticy-ai-checkout-for-woocommerce.php:67
actionadmin_noticescarticy-ai-checkout-for-woocommerce.php:98
actionadmin_noticescarticy-ai-checkout-for-woocommerce.php:120
actionadmin_noticescarticy-ai-checkout-for-woocommerce.php:152
actionplugins_loadedcarticy-ai-checkout-for-woocommerce.php:189
actionadmin_menusrc\Admin\AdminHandler.php:39
actionadmin_enqueue_scriptssrc\Admin\AdminHandler.php:40
actionadmin_initsrc\Admin\AdminHandler.php:41
actionadmin_post_carticy_ai_checkout_refresh_ip_rangessrc\Admin\AdminHandler.php:42
actionin_admin_headersrc\Admin\AdminHandler.php:45
filtermanage_woocommerce_page_wc-orders_columnssrc\Admin\AdminHandler.php:54
actionmanage_woocommerce_page_wc-orders_custom_columnsrc\Admin\AdminHandler.php:55
filtermanage_edit-shop_order_columnssrc\Admin\AdminHandler.php:58
actionmanage_shop_order_posts_custom_columnsrc\Admin\AdminHandler.php:59
actionadmin_noticessrc\Admin\AdminNotices.php:40
actionadmin_initsrc\Admin\AdminNotices.php:41
actionadmin_enqueue_scriptssrc\Admin\AnalyticsDashboard.php:48
actionadmin_post_carticy_ai_checkout_wizard_save_stepsrc\Admin\ApplicationWizard.php:63
actionadmin_post_carticy_ai_checkout_wizard_navigatesrc\Admin\ApplicationWizard.php:64
actionadmin_post_carticy_ai_checkout_wizard_resetsrc\Admin\ApplicationWizard.php:65
actionadmin_post_carticy_ai_checkout_wizard_toggle_test_modesrc\Admin\ApplicationWizard.php:68
actionadmin_post_carticy_ai_checkout_wizard_save_test_webhooksrc\Admin\ApplicationWizard.php:69
actionadmin_post_carticy_ai_checkout_wizard_save_securitysrc\Admin\ApplicationWizard.php:70
actionadmin_initsrc\Admin\LogsViewer.php:84
actionadd_meta_boxessrc\Admin\ProductFeedManager.php:65
actionsave_post_productsrc\Admin\ProductFeedManager.php:66
actionadmin_enqueue_scriptssrc\Admin\ProductFeedManager.php:69
actionrest_api_initsrc\Init.php:350
filtercron_schedulessrc\Init.php:353
actionsave_post_productsrc\Init.php:356
actionwoocommerce_update_productsrc\Init.php:357
actionwoocommerce_delete_productsrc\Init.php:358
actioncarticy_ai_checkout_refresh_product_feedsrc\Init.php:361
actioncarticy_ai_checkout_cleanup_sessionssrc\Init.php:364
actioncarticy_ai_checkout_update_openai_ipssrc\Init.php:367
filterwc_stripe_generate_create_intent_requestsrc\Init.php:370
filterrobots_txtsrc\Init.php:373
actioncarticy_ai_checkout_order_createdsrc\Init.php:378
actionwoocommerce_order_status_changedsrc\Init.php:379
actionwoocommerce_stripe_process_webhooksrc\Init.php:382

Scheduled Events 4

carticy_ai_checkout_refresh_product_feed
carticy_ai_checkout_cleanup_sessions
carticy_ai_checkout_update_openai_ips
carticy_ai_checkout_update_openai_ips
Maintenance & Trust

AI Checkout for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 6, 2026
PHP min version8.0
Downloads180

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

AI Checkout for WooCommerce Developer Profile

carticy

2 plugins · 100 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect AI Checkout for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/ai-checkout-for-woocommerce/assets/css/admin.css/wp-content/plugins/ai-checkout-for-woocommerce/assets/js/admin.js

HTML / DOM Fingerprints

Data Attributes
data-carticy-ai-checkout-regenerate-api-keydata-carticy-ai-checkout-refresh-ip-ranges
JS Globals
carticyAiCheckoutAdmin
REST Endpoints
/wp-json/carticy-ai-checkout/v1/api-key/regenerate/wp-json/carticy-ai-checkout/v1/ip-ranges/refresh
FAQ

Frequently Asked Questions about AI Checkout for WooCommerce