Canada Post Shipping For WooCommerce Security & Risk Analysis

wordpress.org/plugins/canada-post-shipping-for-woocommerce

Add Canada Post as a shipping option for your customers

2K active installs v2.9.20 PHP + WP 3.0.1+ Updated Feb 21, 2026
canada-postcanada-post-shippingcanada-post-woocommerceshippingwoocommerce
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Canada Post Shipping For WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

Canada Post Shipping For WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

This plugin exhibits a generally strong security posture based on the provided static analysis. The absence of identified dangerous functions, raw SQL queries, file operations, and external HTTP requests in the immediate code review is a positive indicator. Furthermore, the lack of any recorded vulnerabilities or CVEs suggests a history of responsible development and maintenance, or at least a lack of exploitation attempts or discoveries to date.

However, the analysis does highlight some areas for caution. The presence of unescaped output, even if only a portion of the total, can represent a potential cross-site scripting (XSS) vector if the data being output is user-controlled. Additionally, the complete lack of nonce checks and capability checks across all identified entry points (though there are zero identified) is a significant concern. If any entry points were to be discovered or introduced in future versions, their unprotected nature would immediately expose the site to potential CSRF or unauthorized action vulnerabilities.

In conclusion, while the plugin currently appears to be secure due to its limited attack surface and clean vulnerability history, the identified potential for unescaped output and the absence of crucial security checks like nonces and capability checks warrant attention. These factors, if not addressed, could pose risks if the plugin's attack surface expands or if vulnerabilities are discovered in the future.

Key Concerns

  • Unescaped output present
  • No nonce checks on entry points
  • No capability checks on entry points
Vulnerabilities
None known

Canada Post Shipping For WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Canada Post Shipping For WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
2 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
2
Bundled Libraries
0

Output Escaping

67% escaped3 total outputs
Attack Surface

Canada Post Shipping For WooCommerce Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 3
filterwoocommerce_shipping_methodscanada-post-shipping-for-woocommerce.php:36
actionwoocommerce_shipping_initcanada-post-shipping-for-woocommerce.php:37
actionbefore_woocommerce_initcanada-post-shipping-for-woocommerce.php:41
Maintenance & Trust

Canada Post Shipping For WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 21, 2026
PHP min version
Downloads79K

Community Trust

Rating88/100
Number of ratings33
Active installs2K
Developer Profile

Canada Post Shipping For WooCommerce Developer Profile

smallfishes

2 plugins · 4K total installs

89
trust score
Avg Security Score
93/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Canada Post Shipping For WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/canada-post-shipping-for-woocommerce/assets/js/admin.js/wp-content/plugins/canada-post-shipping-for-woocommerce/assets/js/frontend.js/wp-content/plugins/canada-post-shipping-for-woocommerce/assets/css/admin.css/wp-content/plugins/canada-post-shipping-for-woocommerce/assets/css/frontend.css
Script Paths
/wp-content/plugins/canada-post-shipping-for-woocommerce/assets/js/admin.js/wp-content/plugins/canada-post-shipping-for-woocommerce/assets/js/frontend.js
Version Parameters
canada-post-shipping-for-woocommerce/assets/js/admin.js?ver=canada-post-shipping-for-woocommerce/assets/js/frontend.js?ver=canada-post-shipping-for-woocommerce/assets/css/admin.css?ver=canada-post-shipping-for-woocommerce/assets/css/frontend.css?ver=

HTML / DOM Fingerprints

CSS Classes
canada-post-shipping-for-woocommerce-admin-settingscanada-post-shipping-for-woocommerce-frontend-shipping
Data Attributes
data-shipping-method-id='canada_post_shipping_for_woocommerce_shipping_method'
FAQ

Frequently Asked Questions about Canada Post Shipping For WooCommerce