Does Custom Wishlist have any unpatched vulnerabilities?

No. All known vulnerabilities in Custom Wishlist have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Custom Wishlist compatible with WordPress 4.2.39?

According to WordPress.org data, Custom Wishlist 1.0.0 has been tested up to WordPress 4.2.39. Check the plugin's changelog for the latest compatibility information.

How often is Custom Wishlist updated?

Custom Wishlist was last updated on Aug 3, 2015. Frequent updates are generally a positive security signal.

What is Custom Wishlist's security score?

Custom Wishlist has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Custom Wishlist Security & Risk Analysis

wordpress.org/plugins/custom-wishlist

Create wishlists with custom post types

30 active installs v1.0.0 PHP + WP 4.0+ Updated Aug 3, 2015

custom-post-typefreewishlist

A · Safe

CVEs total0

Unpatched0

Last CVENever

Download

Safety Verdict

Is Custom Wishlist Safe to Use in 2026?

Generally Safe

Score 85/100

Custom Wishlist has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10yr ago

Risk Assessment

The "custom-wishlist" plugin v1.0.0 exhibits a mixed security posture. While it has no recorded historical vulnerabilities or dangerous code signals, the static analysis reveals significant areas for concern. The plugin has a notable attack surface with one unprotected AJAX handler, indicating a potential entry point for unauthenticated attackers. Furthermore, the low percentage of properly escaped output (17%) suggests a high risk of cross-site scripting (XSS) vulnerabilities, as user-supplied data is likely being rendered without adequate sanitization.

Key Concerns

Unprotected AJAX handler
Low percentage of properly escaped output
No nonce checks
No capability checks

Vulnerabilities

None known

Custom Wishlist Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

Custom Wishlist Code Analysis

Dangerous Functions

Raw SQL Queries

1 prepared

Unescaped Output

1 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

33% prepared3 total queries

Output Escaping

17% escaped6 total outputs

Attack Surface

1 unprotected

Custom Wishlist Attack Surface

Entry Points3

Unprotected1

AJAX Handlers 1

authwp_ajax_cwl-addtowishlistcustom-wishlist.php:46

Shortcodes 2

[cwl_button] custom-wishlist.php:67

[cwl_wishlist] custom-wishlist.php:70

WordPress Hooks 4

actionwp_enqueue_scriptscustom-wishlist.php:43

actionwp_headcustom-wishlist.php:55

actionplugins_loadedcustom-wishlist.php:58

actiondelete_postcustom-wishlist.php:64

Maintenance & Trust

Custom Wishlist Maintenance & Trust

Maintenance Signals

WordPress version tested4.2.39

Last updatedAug 3, 2015

PHP min version

Downloads2K

Community Trust

Rating100/100

Number of ratings1

Active installs30

Alternatives

Custom Wishlist Alternatives

WP Blog and Widgets

wp-blog-and-widgets

A quick, easy way to add a Blog custom post type, Blog widget to WordPress. Also, work with the Gutenberg shortcode block.

8K 1 CVE

Custom Post Type UI

custom-post-type-ui

Admin UI for creating custom content types like post types and taxonomies

1.0M 4 CVEs

Meta Box

meta-box

Meta Box plugin is a powerful, professional developer toolkit to create custom meta boxes and custom fields for your custom post types in WordPress.

500K 6 CVEs

YITH WooCommerce Wishlist

yith-woocommerce-wishlist

YITH WooCommerce Wishlist add all Wishlist features to your website. Needs WooCommerce to work. WooCommerce 10.6.x compatible.

500K 6 CVEs

Intuitive Custom Post Order

intuitive-custom-post-order

Intuitively reorder Posts, Pages, Custom Post Types, Taxonomies, and Sites with a simple drag-and-drop interface.

400K 4 CVEs

Developer Profile

Custom Wishlist Developer Profile

Alan Cesarini

4 plugins · 60 total installs

trust score

Avg Security Score

84/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Custom Wishlist

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/custom-wishlist/assets/css/styles.css/wp-content/plugins/custom-wishlist/assets/js/main.js

Version Parameters

custom-wishlist/assets/js/main.js?ver=custom-wishlist/assets/css/styles.css?ver=

HTML / DOM Fingerprints

CSS Classes

cwl-wishlist

JS Globals

cwl_ajaxurlcwl_msg_okcwl_msg_ko

Shortcode Output

<div class="cwl-wishlist"><h2>My wishlist<h2>My wishlist

FAQ