CheckView – Form & Checkout Testing Security & Risk Analysis

wordpress.org/plugins/checkview

CheckView automates WordPress form and WooCommerce testing, monitoring key flows to catch failures early before they cost you leads or sales everyday.

1K active installs v2.0.30 PHP 7.0.0+ WP 5.0.1+ Updated Feb 6, 2026
form-monitoringform-testingsite-monitoringwoocommerce-testingwordpress-testing
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is CheckView – Form & Checkout Testing Safe to Use in 2026?

Generally Safe

Score 100/100

CheckView – Form & Checkout Testing has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The 'checkview' plugin v2.0.30 presents a mixed security posture. On the positive side, it has no recorded historical vulnerabilities (CVEs), and its code generally employs good practices like using prepared statements for the vast majority of SQL queries and properly escaping a high percentage of output. The absence of bundled libraries is also a strength, as it prevents issues related to outdated or vulnerable dependencies.

However, significant concerns arise from the static analysis. The plugin exposes three AJAX handlers that lack authentication checks, creating a direct attack vector for unauthorized actions. Additionally, the taint analysis revealed two high-severity flows with unsanitized paths, indicating potential for code injection or other severe vulnerabilities if these paths are triggered by user-supplied input. The significant number of file operations (8) in conjunction with unsanitized paths warrants further investigation, as it could lead to arbitrary file operations.

While the lack of historical vulnerabilities is reassuring, it doesn't negate the immediate risks identified in the current version's code. The plugin's strengths in SQL and output handling are overshadowed by the clear vulnerabilities in its AJAX endpoints and taint analysis. Therefore, a cautious approach is recommended until these identified issues are addressed.

Key Concerns

  • Unprotected AJAX handlers
  • High severity unsanitized taint flows
  • Significant number of file operations
  • Limited capability checks identified
Vulnerabilities
None known

CheckView – Form & Checkout Testing Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

CheckView – Form & Checkout Testing Code Analysis

Dangerous Functions
0
Raw SQL Queries
4
80 prepared
Unescaped Output
23
84 escaped
Nonce Checks
4
Capability Checks
1
File Operations
8
External Requests
5
Bundled Libraries
0

SQL Query Safety

95% prepared84 total queries

Output Escaping

79% escaped107 total outputs
Data Flows
2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths
checkview_get_option_data_handler (includes\checkview-functions.php:1113)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
3 unprotected

CheckView – Form & Checkout Testing Attack Surface

Entry Points25
Unprotected3

AJAX Handlers 3

authwp_ajax_checkview_get_statusincludes\checkview-functions.php:1095
noprivwp_ajax_checkview_get_statusincludes\checkview-functions.php:1099
authwp_ajax_checkview_update_cacheincludes\class-checkview.php:334

REST API Routes 22

GET/wp-json/checkview/v1/forms/formslistincludes\API\class-checkview-api.php:40
GET/wp-json/checkview/v1/forms/registerformtestincludes\API\class-checkview-api.php:54
GET/wp-json/checkview/v1/forms/formstestresultsincludes\API\class-checkview-api.php:81
GET/wp-json/checkview/v1/forms/deleteformstestincludes\API\class-checkview-api.php:99
GET/wp-json/checkview/v1/store/ordersincludes\API\class-checkview-api.php:117
GET/wp-json/checkview/v1/store/orderincludes\API\class-checkview-api.php:144
GET/wp-json/checkview/v1/store/productsincludes\API\class-checkview-api.php:162
GET/wp-json/checkview/v1/store/shippingdetailsincludes\API\class-checkview-api.php:183
GET/wp-json/checkview/v1/store/deleteordersincludes\API\class-checkview-api.php:198
GET/wp-json/checkview/v1/store/activegatewaysincludes\API\class-checkview-api.php:216
GET/wp-json/checkview/v1/store/cartdetailsincludes\API\class-checkview-api.php:231
GET/wp-json/checkview/v1/store/createtestcustomerincludes\API\class-checkview-api.php:246
GET/wp-json/checkview/v1/store/gettestcustomerincludes\API\class-checkview-api.php:261
GET/wp-json/checkview/v1/verifytestuserincludes\API\class-checkview-api.php:275
GET/wp-json/checkview/v1/deletetestuserincludes\API\class-checkview-api.php:290
GET/wp-json/checkview/v1/store/getstorelocationsincludes\API\class-checkview-api.php:304
GET/wp-json/checkview/v1/store/getstoretestproductincludes\API\class-checkview-api.php:319
GET/wp-json/checkview/v1/site-infoincludes\API\class-checkview-api.php:334
GET/wp-json/checkview/v1/plugin-versionincludes\API\class-checkview-api.php:349
GET/wp-json/checkview/v1/get-logsincludes\API\class-checkview-api.php:366
GET/wp-json/checkview/v1/checkview-statusincludes\API\class-checkview-api.php:380
GET/wp-json/checkview/v1/set-statusincludes\API\class-checkview-api.php:397
WordPress Hooks 155
actionwpadmin\class-checkview-admin.php:58
actioncheckview_nonce_cleanup_cronadmin\class-checkview-admin.php:63
filterall_pluginsadmin\class-checkview-admin.php:68
filterdebug_informationadmin\class-checkview-admin.php:73
filterplugin_row_metaadmin\class-checkview-admin.php:82
filterrest_authentication_errorsadmin\class-checkview-admin.php:88
filterrest_post_dispatchadmin\class-checkview-admin.php:93
actionplugins_loadedcheckview.php:110
actionbefore_woocommerce_initcheckview.php:117
actionsend_headersincludes\checkview-functions.php:999
actioninitincludes\checkview-functions.php:1040
filtercron_schedulesincludes\checkview-functions.php:1057
actioncheckview_delete_table_cron_hookincludes\checkview-functions.php:1093
filterhcap_activateincludes\checkview-helper-functions.php:79
filterhcap_whitelist_ipincludes\checkview-helper-functions.php:110
actiongform_loadedincludes\checkview-helper-functions.php:127
filterwpforms_load_providersincludes\checkview-helper-functions.php:129
filterwpforms_integrations_availableincludes\checkview-helper-functions.php:152
filterperfmatters_rest_api_exceptionsincludes\checkview-helper-functions.php:186
filteritsec_white_ipsincludes\checkview-helper-functions.php:196
filterip_lockout_default_whitelist_ipincludes\checkview-helper-functions.php:222
actioninitincludes\class-checkview.php:89
actionwp_enqueue_scriptsincludes\class-checkview.php:90
actionrest_api_initincludes\class-checkview.php:270
actionadmin_post_checkview_admin_logs_settingsincludes\class-checkview.php:318
actionadmin_footer_textincludes\class-checkview.php:323
actionadmin_post_checkview_admin_advance_settingsincludes\class-checkview.php:328
actionadmin_enqueue_scriptsincludes\class-checkview.php:340
actionadmin_enqueue_scriptsincludes\class-checkview.php:346
actionadmin_menuincludes\class-checkview.php:352
actionadmin_noticesincludes\class-checkview.php:359
actionsave_postincludes\class-checkview.php:365
actioninitincludes\class-checkview.php:377
actionupgrader_process_completeincludes\class-checkview.php:384
actionpre_option_require_name_emailincludes\class-checkview.php:408
filterwpcf7_mail_componentsincludes\formhelpers\class-checkview-cf7-helper.php:45
actionwpcf7_before_send_mailincludes\formhelpers\class-checkview-cf7-helper.php:55
actioncfdb7_after_save_dataincludes\formhelpers\class-checkview-cf7-helper.php:65
filterwpcf7_spamincludes\formhelpers\class-checkview-cf7-helper.php:74
filterwpcf7_skip_spam_checkincludes\formhelpers\class-checkview-cf7-helper.php:82
filterwpcf7_submission_has_disallowed_wordsincludes\formhelpers\class-checkview-cf7-helper.php:88
filtercfturnstile_whitelistedincludes\formhelpers\class-checkview-cf7-helper.php:94
filterakismet_get_api_keyincludes\formhelpers\class-checkview-cf7-helper.php:99
filterhcap_activateincludes\formhelpers\class-checkview-cf7-helper.php:106
filterwpcf7_flamingo_submit_ifincludes\formhelpers\class-checkview-cf7-helper.php:110
filterwpcf7_posted_data_select*includes\formhelpers\class-checkview-cf7-helper.php:120
filterwpcf7_posted_data_selectincludes\formhelpers\class-checkview-cf7-helper.php:123
filterfluentform/email_toincludes\formhelpers\class-checkview-fluent-forms-helper.php:54
filterfluentform/email_template_headerincludes\formhelpers\class-checkview-fluent-forms-helper.php:61
filterfluentform/email_toincludes\formhelpers\class-checkview-fluent-forms-helper.php:71
actionfluentform/submission_insertedincludes\formhelpers\class-checkview-fluent-forms-helper.php:79
filterfluentform/has_recaptchaincludes\formhelpers\class-checkview-fluent-forms-helper.php:86
filterfluentform/has_hcaptchaincludes\formhelpers\class-checkview-fluent-forms-helper.php:92
filterfluentform/has_turnstileincludes\formhelpers\class-checkview-fluent-forms-helper.php:97
filterfluentform/akismet_check_spamincludes\formhelpers\class-checkview-fluent-forms-helper.php:102
filtercfturnstile_whitelistedincludes\formhelpers\class-checkview-fluent-forms-helper.php:108
filterfluentform/recaptcha_v3_ref_scoreincludes\formhelpers\class-checkview-fluent-forms-helper.php:114
filterhcap_activateincludes\formhelpers\class-checkview-fluent-forms-helper.php:123
filterakismet_get_api_keyincludes\formhelpers\class-checkview-fluent-forms-helper.php:126
filterfluentform/global_notification_active_typesincludes\formhelpers\class-checkview-fluent-forms-helper.php:133
filterfluentform/honeypot_statusincludes\formhelpers\class-checkview-fluent-forms-helper.php:141
filterfluentform/token_based_spam_protection_statusincludes\formhelpers\class-checkview-fluent-forms-helper.php:147
filterfluentform/disable_captchaincludes\formhelpers\class-checkview-fluent-forms-helper.php:153
filterfluentform/rendering_field_html_input_checkboxincludes\formhelpers\class-checkview-fluent-forms-helper.php:159
filterfluentform/rendering_field_html_terms_and_conditionincludes\formhelpers\class-checkview-fluent-forms-helper.php:165
filterfluentform/rendering_field_html_gdpr_agreementincludes\formhelpers\class-checkview-fluent-forms-helper.php:171
filterfluentform/rendering_field_html_input_radioincludes\formhelpers\class-checkview-fluent-forms-helper.php:177
filterfrm_to_emailincludes\formhelpers\class-checkview-formidable-helper.php:46
filterfrm_email_headerincludes\formhelpers\class-checkview-formidable-helper.php:57
actionfrm_after_create_entryincludes\formhelpers\class-checkview-formidable-helper.php:67
filterfrm_fields_in_formincludes\formhelpers\class-checkview-formidable-helper.php:77
filterakismet_get_api_keyincludes\formhelpers\class-checkview-formidable-helper.php:87
filterfrm_fields_to_validateincludes\formhelpers\class-checkview-formidable-helper.php:93
filtercfturnstile_whitelistedincludes\formhelpers\class-checkview-formidable-helper.php:103
filterfrm_run_honeypotincludes\formhelpers\class-checkview-formidable-helper.php:109
filterfrm_custom_trigger_actionincludes\formhelpers\class-checkview-formidable-helper.php:115
filterforminator_form_get_admin_email_recipientsincludes\formhelpers\class-checkview-forminator-helper.php:46
filterforminator_mailer_headersincludes\formhelpers\class-checkview-forminator-helper.php:57
actionforminator_custom_form_submit_before_set_fieldsincludes\formhelpers\class-checkview-forminator-helper.php:67
filterakismet_get_api_keyincludes\formhelpers\class-checkview-forminator-helper.php:77
filterforminator_spam_protectionincludes\formhelpers\class-checkview-forminator-helper.php:83
filtercfturnstile_whitelistedincludes\formhelpers\class-checkview-forminator-helper.php:89
filterforminator_invalid_captcha_messageincludes\formhelpers\class-checkview-forminator-helper.php:95
filterforminator_is_addons_feature_enabledincludes\formhelpers\class-checkview-forminator-helper.php:101
filtergform_pre_send_emailincludes\formhelpers\class-checkview-gforms-helper.php:45
filtergform_postmark_emailincludes\formhelpers\class-checkview-gforms-helper.php:55
filtergform_sendgrid_emailincludes\formhelpers\class-checkview-gforms-helper.php:66
filtergform_addon_pre_process_feedsincludes\formhelpers\class-checkview-gforms-helper.php:78
filtergfpdf_pdf_configincludes\formhelpers\class-checkview-gforms-helper.php:88
filtergf_zero_spam_check_key_fieldincludes\formhelpers\class-checkview-gforms-helper.php:99
actiongform_after_submissionincludes\formhelpers\class-checkview-gforms-helper.php:109
filtercfturnstile_whitelistedincludes\formhelpers\class-checkview-gforms-helper.php:119
filtergform_pre_renderincludes\formhelpers\class-checkview-gforms-helper.php:125
filtergform_pre_validationincludes\formhelpers\class-checkview-gforms-helper.php:131
filtergform_admin_pre_renderincludes\formhelpers\class-checkview-gforms-helper.php:137
filtergform_pre_submission_filterincludes\formhelpers\class-checkview-gforms-helper.php:143
filterhcap_activateincludes\formhelpers\class-checkview-gforms-helper.php:148
filterakismet_get_api_keyincludes\formhelpers\class-checkview-gforms-helper.php:153
actionninja_forms_after_submissionincludes\formhelpers\class-checkview-ninja-forms-helper.php:45
filterakismet_get_api_keyincludes\formhelpers\class-checkview-ninja-forms-helper.php:55
filterninja_forms_form_fieldsincludes\formhelpers\class-checkview-ninja-forms-helper.php:61
filterninja_forms_validate_fieldsincludes\formhelpers\class-checkview-ninja-forms-helper.php:70
filtercfturnstile_whitelistedincludes\formhelpers\class-checkview-ninja-forms-helper.php:79
filterninja_forms_action_recaptcha__verify_responseincludes\formhelpers\class-checkview-ninja-forms-helper.php:85
filterninja_forms_action_email_sendincludes\formhelpers\class-checkview-ninja-forms-helper.php:92
filterninja_forms_submission_actionsincludes\formhelpers\class-checkview-ninja-forms-helper.php:104
filterwpforms_frontend_form_dataincludes\formhelpers\class-checkview-wpforms-helper.php:49
filterwpforms_process_before_form_dataincludes\formhelpers\class-checkview-wpforms-helper.php:51
filterwpforms_frontend_captcha_apiincludes\formhelpers\class-checkview-wpforms-helper.php:53
filterwpforms_frontend_recaptcha_disableincludes\formhelpers\class-checkview-wpforms-helper.php:55
filterwpforms_process_bypass_captchaincludes\formhelpers\class-checkview-wpforms-helper.php:58
actionwpforms_process_completeincludes\formhelpers\class-checkview-wpforms-helper.php:73
filterwpforms_mailcheck_enabledincludes\formhelpers\class-checkview-wpforms-helper.php:88
filterwpforms_entry_email_attsincludes\formhelpers\class-checkview-wpforms-helper.php:95
filtercfturnstile_whitelistedincludes\formhelpers\class-checkview-wpforms-helper.php:105
filterhcap_activateincludes\formhelpers\class-checkview-wpforms-helper.php:112
filterakismet_get_api_keyincludes\formhelpers\class-checkview-wpforms-helper.php:115
filterwpforms_frontend_form_dataincludes\formhelpers\class-checkview-wpforms-helper.php:121
filterwpforms_process_before_form_dataincludes\formhelpers\class-checkview-wpforms-helper.php:131
actionwsf_submit_post_completeincludes\formhelpers\class-checkview-wsf-helper.php:45
filterakismet_get_api_keyincludes\formhelpers\class-checkview-wsf-helper.php:55
filtercfturnstile_whitelistedincludes\formhelpers\class-checkview-wsf-helper.php:61
filterwsf_action_email_toincludes\formhelpers\class-checkview-wsf-helper.php:68
filterwsf_pre_renderincludes\formhelpers\class-checkview-wsf-helper.php:79
filterwsf_config_meta_keysincludes\formhelpers\class-checkview-wsf-helper.php:89
filterwsf_action_post_doincludes\formhelpers\class-checkview-wsf-helper.php:96
filterwsf_action_email_headersincludes\formhelpers\class-checkview-wsf-helper.php:103
actionadmin_initincludes\woocommercehelper\class-checkview-woo-automated-testing.php:85
actiontrashed_postincludes\woocommercehelper\class-checkview-woo-automated-testing.php:92
actionafter_delete_postincludes\woocommercehelper\class-checkview-woo-automated-testing.php:100
actiontemplate_redirectincludes\woocommercehelper\class-checkview-woo-automated-testing.php:105
actionwp_headincludes\woocommercehelper\class-checkview-woo-automated-testing.php:111
filterwpseo_exclude_from_sitemap_by_post_idsincludes\woocommercehelper\class-checkview-woo-automated-testing.php:117
filterwp_sitemaps_posts_query_argsincludes\woocommercehelper\class-checkview-woo-automated-testing.php:123
filterpublicize_should_publicize_published_postincludes\woocommercehelper\class-checkview-woo-automated-testing.php:129
filterwoocommerce_webhook_should_deliverincludes\woocommercehelper\class-checkview-woo-automated-testing.php:135
filterwoocommerce_email_recipient_new_orderincludes\woocommercehelper\class-checkview-woo-automated-testing.php:143
filterwoocommerce_email_recipient_failed_orderincludes\woocommercehelper\class-checkview-woo-automated-testing.php:151
actioncheckview_delete_orders_actionincludes\woocommercehelper\class-checkview-woo-automated-testing.php:158
actioncheckview_rotate_user_credentialsincludes\woocommercehelper\class-checkview-woo-automated-testing.php:165
filterwoocommerce_registration_errorsincludes\woocommercehelper\class-checkview-woo-automated-testing.php:172
filterwoocommerce_can_reduce_order_stockincludes\woocommercehelper\class-checkview-woo-automated-testing.php:189
filterwoocommerce_prevent_adjust_line_item_product_stockincludes\woocommercehelper\class-checkview-woo-automated-testing.php:197
filterpre_wp_mailincludes\woocommercehelper\class-checkview-woo-automated-testing.php:362
filterpre_wp_mailincludes\woocommercehelper\class-checkview-woo-automated-testing.php:388
filterpublicize_should_publicize_published_postincludes\woocommercehelper\class-checkview-woo-automated-testing.php:485
filteroption_woocommerce_stripe_settingsincludes\woocommercehelper\class-checkview-woo-automated-testing.php:582
filterwc_stripe_modeincludes\woocommercehelper\class-checkview-woo-automated-testing.php:594
filterwoocommerce_payment_gatewaysincludes\woocommercehelper\class-checkview-woo-automated-testing.php:609
actionwoocommerce_blocks_loadedincludes\woocommercehelper\class-checkview-woo-automated-testing.php:618
filtercfturnstile_whitelistedincludes\woocommercehelper\class-checkview-woo-automated-testing.php:624
filteroption_cfturnstile_selected_payment_methodsincludes\woocommercehelper\class-checkview-woo-automated-testing.php:635
filterwoocommerce_product_is_visibleincludes\woocommercehelper\class-checkview-woo-automated-testing.php:650
actionwoocommerce_order_status_changedincludes\woocommercehelper\class-checkview-woo-automated-testing.php:673
actionwoocommerce_blocks_payment_method_type_registrationincludes\woocommercehelper\class-checkview-woo-automated-testing.php:792

Scheduled Events 4

checkview_nonce_cleanup_cron
checkview_delete_orders_action
checkview_delete_table_cron_hook
checkview_rotate_user_credentials
Maintenance & Trust

CheckView – Form & Checkout Testing Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 6, 2026
PHP min version7.0.0
Downloads25K

Community Trust

Rating100/100
Number of ratings8
Active installs1K
Developer Profile

CheckView – Form & Checkout Testing Developer Profile

CheckView

1 plugin · 1K total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect CheckView – Form & Checkout Testing

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/checkview/admin/assets/css/checkview-admin.css/wp-content/plugins/checkview/admin/assets/css/checkview-swal2.css/wp-content/plugins/checkview/admin/assets/js/checkview-admin.js
Script Paths
https://cdn.jsdelivr.net/npm/sweetalert2@9
Version Parameters
checkview-admin.css?ver=checkview-admin.js?ver=checkview-swal2.css?ver=sweetalert2@9

HTML / DOM Fingerprints

CSS Classes
checkview-settings-page
HTML Comments
<!-- CheckView admin page -->
Data Attributes
data-cv-form-iddata-cv-test-iddata-cv-test-nonce
JS Globals
checkview_ajax_objCheckView
REST Endpoints
/wp-json/checkview/v1/get_all_forms/wp-json/checkview/v1/get_form_details/wp-json/checkview/v1/start_test/wp-json/checkview/v1/get_test_results/wp-json/checkview/v1/delete_test/wp-json/checkview/v1/save_settings
Shortcode Output
[checkview_form_tester][checkview_test_results]
FAQ

Frequently Asked Questions about CheckView – Form & Checkout Testing