C4D Woo Carousel Security & Risk Analysis

wordpress.org/plugins/c4d-woo-carousel

Create carousel slider for product

10 active installs v2.0.0 PHP + WP 3.3+ Updated Mar 14, 2017
animationscarouselproduct-carouselthemewoocommerce
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is C4D Woo Carousel Safe to Use in 2026?

Generally Safe

Score 85/100

C4D Woo Carousel has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9yr ago
Risk Assessment

The "c4d-woo-carousel" plugin v2.0.0 exhibits a mixed security posture. On the positive side, the plugin demonstrates good practices by avoiding dangerous functions, conducting all SQL queries using prepared statements, and performing no file operations or external HTTP requests. The absence of recorded vulnerabilities in its history suggests a diligent approach to security maintenance. However, significant concerns arise from the static analysis. The plugin exposes two AJAX handlers without any authentication or capability checks, creating a substantial attack surface that could be exploited by unauthenticated users. Furthermore, a concerning 31% of output escaping indicates that a notable portion of dynamically generated content may not be properly sanitized, potentially leading to cross-site scripting (XSS) vulnerabilities if user-supplied data is involved in these outputs.

Key Concerns

  • Unprotected AJAX handlers
  • Insufficient output escaping
  • Lack of nonce checks on AJAX
  • Lack of capability checks on AJAX
Vulnerabilities
None known

C4D Woo Carousel Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

C4D Woo Carousel Release Timeline

v2.0.0Current
v1.0.0
Code Analysis
Analyzed Apr 16, 2026

C4D Woo Carousel Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
18
8 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

31% escaped26 total outputs
Attack Surface
2 unprotected

C4D Woo Carousel Attack Surface

Entry Points3
Unprotected2

AJAX Handlers 2

authwp_ajax_c4d_woo_carouselc4d-woo-carousel.php:15
noprivwp_ajax_c4d_woo_carouselc4d-woo-carousel.php:16

Shortcodes 1

[c4d_woo_carousel] c4d-woo-carousel.php:127
WordPress Hooks 2
actionwp_enqueue_scriptsc4d-woo-carousel.php:14
filterplugin_row_metac4d-woo-carousel.php:17
Maintenance & Trust

C4D Woo Carousel Maintenance & Trust

Maintenance Signals

WordPress version tested3.5.2
Last updatedMar 14, 2017
PHP min version
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

C4D Woo Carousel Developer Profile

coffee4dev

26 plugins · 470 total installs

84
trust score
Avg Security Score
86/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect C4D Woo Carousel

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/c4d-woo-carousel/assets/default.css/wp-content/plugins/c4d-woo-carousel/assets/default.js/wp-content/plugins/c4d-woo-carousel/libs/owl-carousel/owl.carousel.css/wp-content/plugins/c4d-woo-carousel/libs/owl-carousel/owl.theme.css/wp-content/plugins/c4d-woo-carousel/libs/owl-carousel/owl.carousel.js
Script Paths
/wp-content/plugins/c4d-woo-carousel/assets/default.js/wp-content/plugins/c4d-woo-carousel/libs/owl-carousel/owl.carousel.js

HTML / DOM Fingerprints

CSS Classes
c4d-woo-carousel__notic4d-woo-carousel_item
JS Globals
c4d_woo_carousel
Shortcode Output
[c4d-woo-carousel][c4d-woo-aci-image][c4d-woo-aci-color][c4d-woo-compare-button]
FAQ

Frequently Asked Questions about C4D Woo Carousel