Does Doctor Subs have any unpatched vulnerabilities?

No. All known vulnerabilities in Doctor Subs have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Doctor Subs compatible with WordPress 6.9.4?

According to WordPress.org data, Doctor Subs 1.2.4 has been tested up to WordPress 6.9.4. Check the plugin's changelog for the latest compatibility information.

Is Doctor Subs compatible with PHP 7.4+?

Doctor Subs requires PHP 7.4 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Doctor Subs updated?

Doctor Subs was last updated on Dec 3, 2025. Frequent updates are generally a positive security signal.

What is Doctor Subs's security score?

Doctor Subs has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Doctor Subs Security & Risk Analysis

wordpress.org/plugins/doctor-subs

Diagnose and fix WooCommerce subscription issues with a 3-step troubleshooting tool. Detects skipped payments, failed renewals, and payment problems.

0 active installs v1.2.4 PHP 7.4+ WP 5.0+ Updated Dec 3, 2025

diagnosticspayment-issuessubscriptionstroubleshootingwoocommerce

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Doctor Subs Safe to Use in 2026?

Generally Safe

Score 100/100

Doctor Subs has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago

Risk Assessment

The doctor-subs plugin v1.2.4 demonstrates several strong security practices. Notably, it exhibits 100% output escaping, indicating that user-generated content displayed on the frontend or backend is properly sanitized, mitigating XSS risks. Furthermore, 93% of its SQL queries utilize prepared statements, which is a significant defense against SQL injection vulnerabilities. The absence of file operations and external HTTP requests reduces the attack surface in those areas. The plugin also includes nonce checks and capability checks, which are essential for verifying user authentication and authorization.

Key Concerns

AJAX handlers without auth checks

Vulnerabilities

None known

Doctor Subs Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 17, 2026

Doctor Subs Code Analysis

Dangerous Functions

Raw SQL Queries

14 prepared

Unescaped Output

14 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

93% prepared15 total queries

Output Escaping

100% escaped14 total outputs

Attack Surface

2 unprotected

Doctor Subs Attack Surface

Entry Points2

Unprotected2

AJAX Handlers 2

authwp_ajax_wcst_analyze_subscriptionincludes\class-ajax-handler.php:29

authwp_ajax_wcst_search_subscriptionsincludes\class-ajax-handler.php:30

WordPress Hooks 8

actionadmin_noticesdoctor-subs.php:128

actionplugins_loadeddoctor-subs.php:191

actionbefore_woocommerce_initdoctor-subs.php:198

actionadmin_menuincludes\class-admin.php:28

actionadmin_enqueue_scriptsincludes\class-admin.php:29

filterwoocommerce_subscription_list_table_column_status_contentincludes\class-admin.php:31

actioninitincludes\class-plugin.php:83

actionadmin_initincludes\class-plugin.php:84

Maintenance & Trust

Doctor Subs Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4

Last updatedDec 3, 2025

PHP min version7.4

Downloads126

Community Trust

Rating0/100

Number of ratings0

Active installs0

Alternatives

Doctor Subs Alternatives

Subscriptions for WooCommerce

subscriptions-for-woocommerce

100

With WooCommerce Subscription, turn your physical or online store into a WooCommerce product subscription store and avail recurring revenue.

10K No CVEs

Pledged Plugins Secure Gateway for Authorize.net and WooCommerce

woo-authorize-net-gateway-aim

100

Authorize.net payment gateway integration for WooCommerce to accept credit cards directly on WordPress e-commerce websites.

10K No CVEs

Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers

woocommerce-exporter

Export WooCommerce products, orders, customers, categories, tags, subscriptions & more into formatted files like CSV, XML, Excel 2007, XLS, XLSX.

7K 9 CVEs

Pay with Vipps and MobilePay for WooCommerce

woo-vipps

100

Official Vipps MobilePay payment plugin for WooCommerce.

5K 1 CVE

Quickpay for WooCommerce

woocommerce-quickpay

100

Integrates your Quickpay payment gateway into your WooCommerce installation.

4K No CVEs

Developer Profile

Doctor Subs Developer Profile

David

3 plugins · 20 total installs

trust score

Avg Security Score

100/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Doctor Subs

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/doctor-subs/admin/css/admin-styles.css/wp-content/plugins/doctor-subs/admin/js/admin-scripts.js/wp-content/plugins/doctor-subs/public/css/public-styles.css/wp-content/plugins/doctor-subs/public/js/public-scripts.js

Script Paths

/wp-content/plugins/doctor-subs/admin/js/admin-scripts.js/wp-content/plugins/doctor-subs/public/js/public-scripts.js

Version Parameters

wcst-admin-styles?ver=wcst-admin-scripts?ver=wcst-public-styles?ver=wcst-public-scripts?ver=

HTML / DOM Fingerprints

CSS Classes

wcst-admin-wrapperwcst-diagnostic-wrapperwcst-no-subscriptions-messagewcst-subscription-data-tablewcst-timeline-event

Data Attributes

data-subscription-id

JS Globals

wcst_admin_paramswcst_public_params

Shortcode Output

<div id="doctor-subs-app"></div>

FAQ