Category Tools for WooCommerce Security & Risk Analysis

wordpress.org/plugins/category-tools-for-woocommerce

Category Tools for WooCommerce simplifies bulk category management, allowing you to add, remove, copy, and move products between categories efficientl …

100 active installs v1.0.2 PHP 7.2+ WP 6.0+ Updated Apr 2, 2025
bulk-actionscategoriesproduct-managementwoocommerce
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Category Tools for WooCommerce Safe to Use in 2026?

Generally Safe

Score 92/100

Category Tools for WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The "category-tools-for-woocommerce" plugin version 1.0.2 exhibits a strong security posture based on the provided static analysis. The plugin demonstrates good security practices by implementing nonce checks and capability checks for its entry points, which are both vital for preventing common web attacks. The absence of dangerous functions, external HTTP requests, and file operations further strengthens its security profile. Notably, all SQL queries are properly prepared, and the vast majority of output is correctly escaped, minimizing risks related to injection and cross-site scripting (XSS). The complete lack of known vulnerabilities in its history is also a very positive indicator.

Key Concerns

  • High percentage of properly escaped output
  • 100% of SQL queries use prepared statements
  • Nonce checks implemented on entry points
  • Capability checks implemented on entry points
  • No dangerous functions identified
  • No file operations identified
  • No external HTTP requests identified
  • No known CVEs in vulnerability history
  • No unsanitized taint flows identified
Vulnerabilities
None known

Category Tools for WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Category Tools for WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
5
49 escaped
Nonce Checks
6
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

91% escaped54 total outputs
Data Flows
All sanitized

Data Flow Analysis

5 flows
render_category_selection_page (includes\class-ctfw-admin.php:153)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Category Tools for WooCommerce Attack Surface

Entry Points2
Unprotected0

AJAX Handlers 2

authwp_ajax_ctfw_dismiss_review_noticeincludes\class-ctfw-admin.php:16
authwp_ajax_ctfw_category_actionincludes\class-ctfw-category-actions.php:15
WordPress Hooks 11
actionadmin_noticescategory-tools-for-woocommerce.php:22
actionplugins_loadedcategory-tools-for-woocommerce.php:66
actionadmin_enqueue_scriptsincludes\class-ctfw-admin.php:13
actionadmin_menuincludes\class-ctfw-admin.php:14
actionadmin_noticesincludes\class-ctfw-admin.php:15
filterproduct_cat_row_actionsincludes\class-ctfw-admin.php:18
filterbulk_actions-edit-productincludes\class-ctfw-bulk-actions.php:13
filterhandle_bulk_actions-edit-productincludes\class-ctfw-bulk-actions.php:14
actionadmin_post_ctfw_process_add_categoryincludes\class-ctfw-category-actions.php:13
actionadmin_post_ctfw_process_remove_categoryincludes\class-ctfw-category-actions.php:14
actionplugins_loadedincludes\class-ctfw-loader.php:53
Maintenance & Trust

Category Tools for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedApr 2, 2025
PHP min version7.2
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs100
Developer Profile

Category Tools for WooCommerce Developer Profile

Ilker Kilic

1 plugin · 100 total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Category Tools for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/category-tools-for-woocommerce/assets/css/ctfw-admin.css/wp-content/plugins/category-tools-for-woocommerce/assets/js/ctfw-admin.js
Script Paths
/wp-content/plugins/category-tools-for-woocommerce/assets/js/ctfw-admin.js
Version Parameters
category-tools-for-woocommerce/assets/css/ctfw-admin.css?ver=category-tools-for-woocommerce/assets/js/ctfw-admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
ctfw-category-actionctfw-review-notice
Data Attributes
data-term-iddata-action-type
JS Globals
ctfw_datactfw_review_nonce
FAQ

Frequently Asked Questions about Category Tools for WooCommerce