Custom Checkbox Ultimate for WooCommerce Security & Risk Analysis

wordpress.org/plugins/custom-checkbox-ultimate-for-woocommerce

Add customizable checkbox options on WooCommerce product pages for additional services and charges.

0 active installs v1.3 PHP 7.2+ WP 6.3+ Updated Mar 30, 2025
additional-servicescheckboxcustomizable-optionse-commercewoocommerce
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Custom Checkbox Ultimate for WooCommerce Safe to Use in 2026?

Generally Safe

Score 92/100

Custom Checkbox Ultimate for WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The plugin "custom-checkbox-ultimate-for-woocommerce" v1.3 exhibits a strong security posture based on the provided static analysis. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events significantly limits the plugin's attack surface. Furthermore, the code analysis reveals no dangerous functions, no unsanitized taint flows, and all SQL queries utilize prepared statements, which are excellent security practices. The majority of output is properly escaped and file operations are absent. The vulnerability history is also clean, with no known CVEs, indicating a low historical risk. However, a notable concern is the relatively low percentage of properly escaped outputs (86%) and a single capability check. While the number of unescaped outputs might be small, any unescaped output, even if not critical, can potentially lead to vulnerabilities like XSS if user-controlled data is involved. The limited number of capability checks also warrants attention, as it suggests that some functionality might not be adequately protected by role-based access controls.

Key Concerns

  • Unescaped output detected
  • Limited capability checks
Vulnerabilities
None known

Custom Checkbox Ultimate for WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Custom Checkbox Ultimate for WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
13
80 escaped
Nonce Checks
3
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

86% escaped93 total outputs
Attack Surface

Custom Checkbox Ultimate for WooCommerce Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 19
actionadmin_menucustom-checkbox-ultimate-for-woocommerce.php:31
filterwoocommerce_add_cart_item_dataincludes\class-icwcu-cart.php:8
filterwoocommerce_add_cart_item_dataincludes\class-icwcu-cart.php:9
filterwoocommerce_get_item_dataincludes\class-icwcu-cart.php:10
actionwoocommerce_before_calculate_totalsincludes\class-icwcu-cart.php:12
actionwoocommerce_before_calculate_totalsincludes\class-icwcu-cart.php:13
actionwoocommerce_after_calculate_totalsincludes\class-icwcu-cart.php:16
actionwoocommerce_after_calculate_totalsincludes\class-icwcu-cart.php:17
actionadd_meta_boxesincludes\class-icwcu-meta-box.php:8
actionsave_postincludes\class-icwcu-meta-box.php:9
actionadmin_enqueue_scriptsincludes\class-icwcu-meta-box.php:10
actionwoocommerce_before_add_to_cart_buttonincludes\class-icwcu-meta-box.php:11
actionwoocommerce_checkout_create_order_line_itemincludes\class-icwcu-order.php:8
actionwoocommerce_checkout_create_order_line_itemincludes\class-icwcu-order.php:9
actionadmin_initincludes\class-icwcu-settings.php:21
actionwp_enqueue_scriptsincludes\class-icwcu-settings.php:22
actionadmin_enqueue_scriptsincludes\enqueue.php:14
actionwp_enqueue_scriptsincludes\enqueue.php:21
actionadmin_enqueue_scriptsincludes\enqueue.php:42
Maintenance & Trust

Custom Checkbox Ultimate for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedMar 30, 2025
PHP min version7.2
Downloads506

Community Trust

Rating100/100
Number of ratings1
Active installs0
Developer Profile

Custom Checkbox Ultimate for WooCommerce Developer Profile

Sandy

10 plugins · 1K total installs

90
trust score
Avg Security Score
94/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Custom Checkbox Ultimate for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/custom-checkbox-ultimate-for-woocommerce/assets/css/icwcu-admin-styling.css/wp-content/plugins/custom-checkbox-ultimate-for-woocommerce/assets/css/icwcu-services-style.css
Version Parameters
icwcu-custom-svg-iconicwcu-custom-services-styleicwcu-admin-style

HTML / DOM Fingerprints

CSS Classes
icwcu_custom_services_meta_box
Data Attributes
name="icwcu_custom_servicesradio"name="icwcu_custom_services"data-product-id
JS Globals
ICWCU_PLUGIN_VERSION
FAQ

Frequently Asked Questions about Custom Checkbox Ultimate for WooCommerce