C4D Woo Wishlist Security & Risk Analysis

wordpress.org/plugins/c4d-woo-wishlist

Add quickview button for product.

10 active installs v2.0.3 PHP + WP 4.0+ Updated Jul 24, 2018
e-commerceecommerce-wishlistproductsshopshop-wishlist
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is C4D Woo Wishlist Safe to Use in 2026?

Generally Safe

Score 85/100

C4D Woo Wishlist has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7yr ago
Risk Assessment

The c4d-woo-wishlist plugin v2.0.3 exhibits a mixed security posture. On the positive side, it demonstrates good practices by not using dangerous functions, exclusively employing prepared statements for SQL queries, and having a low rate of unescaped output. The absence of file operations, external HTTP requests, and a history of known vulnerabilities or critical taint flows is also reassuring. However, a significant concern arises from its attack surface, with 4 out of 6 entry points lacking any authentication checks. This opens the door to potential unauthorized actions if these endpoints can be triggered by unauthenticated users. While no specific vulnerabilities are immediately apparent from the provided data, the lack of capability checks and nonce checks on these unprotected AJAX handlers significantly increases the risk of privilege escalation or data manipulation if a vulnerability were to exist within them.

Key Concerns

  • 4 AJAX handlers without auth checks
  • No nonce checks on AJAX handlers
  • No capability checks on AJAX handlers
Vulnerabilities
None known

C4D Woo Wishlist Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

C4D Woo Wishlist Release Timeline

v2.0.0
v1.0.0
Code Analysis
Analyzed Apr 16, 2026

C4D Woo Wishlist Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
4
16 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

80% escaped20 total outputs
Attack Surface
4 unprotected

C4D Woo Wishlist Attack Surface

Entry Points6
Unprotected4

AJAX Handlers 4

authwp_ajax_c4d_woo_wishlist_cartc4d-woo-wishlist.php:15
noprivwp_ajax_c4d_woo_wishlist_cartc4d-woo-wishlist.php:16
authwp_ajax_c4d_woo_delete_user_metac4d-woo-wishlist.php:17
noprivwp_ajax_c4d_woo_delete_user_metac4d-woo-wishlist.php:18

Shortcodes 2

[c4d-woo-wishlist-cart] c4d-woo-wishlist.php:20
[c4d-woo-wishlist-button] c4d-woo-wishlist.php:21
WordPress Hooks 3
actionwp_enqueue_scriptsc4d-woo-wishlist.php:14
actionc4d-plugin-manager-sectionc4d-woo-wishlist.php:19
filterplugin_row_metac4d-woo-wishlist.php:22
Maintenance & Trust

C4D Woo Wishlist Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29
Last updatedJul 24, 2018
PHP min version
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

C4D Woo Wishlist Developer Profile

coffee4dev

26 plugins · 470 total installs

84
trust score
Avg Security Score
86/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect C4D Woo Wishlist

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/c4d-woo-wishlist/assets/default.css/wp-content/plugins/c4d-woo-wishlist/assets/default.js
Script Paths
/wp-content/plugins/c4d-woo-wishlist/assets/default.js
Version Parameters
c4d-woo-wishlist/assets/default.css?ver=c4d-woo-wishlist/assets/default.js?ver=

HTML / DOM Fingerprints

CSS Classes
c4d-woo-wishlist-cartc4d-woo-wishlist-cart__iconc4d-woo-wishlist-cart__listc4d-woo-wishlist-button
Data Attributes
data-id
JS Globals
c4d_woo_wishlist
Shortcode Output
<div class="c4d-woo-wishlist-cart"><div class="c4d-woo-wishlist-cart__icon"><span class="number"><span class="text">
FAQ

Frequently Asked Questions about C4D Woo Wishlist