CodeShop Amazon Affiliate Security & Risk Analysis
wordpress.org/plugins/codeshop-amazon-affiliateCodeShop Amazon Affiliate plugin to setup a complete amazon shop solution. Simple & fast, also monetize your Wordpress posts.
Is CodeShop Amazon Affiliate Safe to Use in 2026?
Generally Safe
Score 85/100CodeShop Amazon Affiliate has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.
The "codeshop-amazon-affiliate" v3.1.0 plugin exhibits a generally good security posture with a significant number of protective measures in place. The absence of known CVEs and a clean vulnerability history are positive indicators. Static analysis reveals that all identified entry points (AJAX handlers, shortcodes) are protected by nonce and capability checks, and the plugin avoids dangerous functions, file operations, and external HTTP requests. All SQL queries utilize prepared statements, which is a strong defense against SQL injection. However, a concerning finding is the low percentage of properly escaped output (26%). This indicates a significant risk of Cross-Site Scripting (XSS) vulnerabilities, where unescaped data displayed to users could be manipulated to inject malicious scripts. While the taint analysis found no unsanitized paths, the high number of unescaped outputs creates a substantial attack surface for XSS.
Key Concerns
- Low percentage of properly escaped output
CodeShop Amazon Affiliate Security Vulnerabilities
CodeShop Amazon Affiliate Code Analysis
Output Escaping
Data Flow Analysis
CodeShop Amazon Affiliate Attack Surface
AJAX Handlers 5
Shortcodes 1
WordPress Hooks 22
Maintenance & Trust
CodeShop Amazon Affiliate Maintenance & Trust
Maintenance Signals
Community Trust
CodeShop Amazon Affiliate Alternatives
WooCommerce
woocommerce
Everything you need to launch an online store in days and keep it growing for years. From your first sale to millions in revenue, Woo is with you.
Ecwid by Lightspeed Ecommerce Shopping Cart
ecwid-shopping-cart
Powerful, easy to use ecommerce shopping cart for WordPress. Sell on Facebook and Instagram. iPhone & Android apps. Superb support.
Shopping Cart & eCommerce Store
wp-easycart
A FREE WordPress eCommerce & WordPress Shopping Cart plugin that can sell products, subscriptions, downloads, services, donations, and much more o …
Shop Page WP
shop-page-wp
Create an affiliate shop page on your website. Simple to setup and add products to start making money from affiliate links on your blog.
Premium Packages – Sell Digital Products Securely
wpdm-premium-packages
Premium Packages is a free, full-featured WordPress eCommerce plugin to sell digital products easily and securely.
CodeShop Amazon Affiliate Developer Profile
2 plugins · 20 total installs
How We Detect CodeShop Amazon Affiliate
Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.
Asset Fingerprints
/wp-content/plugins/codeshop-amazon-affiliate/admin/css/codeshop-styles.css/wp-content/plugins/codeshop-amazon-affiliate/admin/js/amazon-product-shop.js/wp-content/plugins/codeshop-amazon-affiliate/public/images/loader.gif/wp-content/plugins/codeshop-amazon-affiliate/admin/js/amazon-product-shop.jscodeshop-amazon-affiliate/admin/css/codeshop-styles.css?ver=codeshop-amazon-affiliate/admin/js/amazon-product-shop.js?ver=HTML / DOM Fingerprints
<!--
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
as published by the Free Software Foundation; either version 2
of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
Copyright 2017 codeapple.net
-->caaps_metabox_script_obj