ELEX WooCommerce Product Price Custom Text (Before & After Text) and Discount Security & Risk Analysis

wordpress.org/plugins/elex-product-price-custom-text-before-after-text-and-discount-for-woocommerce

Add a text before and after the product price both globally and individually. Also, apply a quick discount for your products.

2K active installs v4.1.9 PHP + WP 3.0.1+ Updated Feb 11, 2026
before-after-textwoocommerce-discountswoocommerce-dynamic-pricing
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is ELEX WooCommerce Product Price Custom Text (Before & After Text) and Discount Safe to Use in 2026?

Generally Safe

Score 100/100

ELEX WooCommerce Product Price Custom Text (Before & After Text) and Discount has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

This plugin exhibits a generally good security posture, with no recorded vulnerabilities or critical findings in the static analysis. The absence of known CVEs and unpatched vulnerabilities is a strong positive indicator. The plugin also demonstrates good practice by implementing nonce checks on all identified AJAX handlers, which significantly mitigates the risk of CSRF attacks. Furthermore, the taint analysis revealed no unsanitized flows, indicating that user-supplied data is likely being handled safely.

However, there are a few areas that warrant attention. The most significant concern is the complete lack of capability checks on the AJAX handlers. This means that any authenticated user, regardless of their role or permissions, can potentially trigger these handlers, which could lead to unintended actions if the handlers themselves have sensitive operations. Additionally, the analysis shows that 100% of the SQL queries are not using prepared statements, which opens the door to potential SQL injection vulnerabilities, especially if any of the data processed by these queries originates from user input. While no specific SQL injection was found in the taint analysis, the pattern of raw SQL queries is a significant risk. The limited output escaping (64%) also presents a moderate risk of XSS vulnerabilities, although no critical instances were flagged.

In conclusion, the plugin has strengths in its lack of historical vulnerabilities and robust nonce implementation. However, the absence of capability checks and the widespread use of raw SQL queries represent significant security risks that should be addressed to improve its overall security. The moderate level of output escaping also warrants review.

Key Concerns

  • No capability checks on AJAX handlers
  • SQL queries not using prepared statements
  • Low percentage of properly escaped output
Vulnerabilities
None known

ELEX WooCommerce Product Price Custom Text (Before & After Text) and Discount Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

ELEX WooCommerce Product Price Custom Text (Before & After Text) and Discount Release Timeline

v4.1.9Current
v4.1.8
v4.1.7
v4.1.6
v4.1.5
v4.1.4
v4.1.3
v4.1.2
v4.1.1
v4.1.0
v4.0.1
v4.0.0
v3.0.0
v2.1.0
v2.0.9
v2.0.8
v2.0.7
v2.0.6
v2.0.5
v2.0.4
Code Analysis
Analyzed Mar 16, 2026

ELEX WooCommerce Product Price Custom Text (Before & After Text) and Discount Code Analysis

Dangerous Functions
0
Raw SQL Queries
18
0 prepared
Unescaped Output
58
104 escaped
Nonce Checks
15
Capability Checks
0
File Operations
0
External Requests
1
Bundled Libraries
1

Bundled Libraries

Select2

SQL Query Safety

0% prepared18 total queries

Output Escaping

64% escaped162 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

4 flows
elex_ppct_update_settings (includes\elex-ppct-discount-woocommerce-setting.php:368)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

ELEX WooCommerce Product Price Custom Text (Before & After Text) and Discount Attack Surface

Entry Points4
Unprotected0

AJAX Handlers 4

authwp_ajax_search_products_by_nameincludes\SettingsController.php:17
authwp_ajax_search_products_by_categoryincludes\SettingsController.php:18
authwp_ajax_search_products_by_tagincludes\SettingsController.php:19
authwp_ajax_search_user_roleincludes\SettingsController.php:20
WordPress Hooks 35
actionbefore_woocommerce_initelex-woocommerce-product-price-custom-text-discount.php:96
actionadmin_menuincludes\class-ppct-init-handler.php:28
actioninitincludes\class-ppct-init-handler.php:29
filterwoocommerce_settings_tabs_arrayincludes\elex-ppct-discount-woocommerce-setting.php:15
filterwoocommerce_sections_elex_ppct_discountincludes\elex-ppct-discount-woocommerce-setting.php:16
actionwoocommerce_settings_tabs_elex_ppct_discountincludes\elex-ppct-discount-woocommerce-setting.php:56
actionwoocommerce_admin_field_elex_ppct_page_typeincludes\elex-ppct-discount-woocommerce-setting.php:57
actionwoocommerce_admin_field_product_categories_typeincludes\elex-ppct-discount-woocommerce-setting.php:58
actionwoocommerce_update_options_elex_ppct_discountincludes\elex-ppct-discount-woocommerce-setting.php:367
filterwoocommerce_product_data_tabsincludes\elex-ppct-woocmmerce-variation-settings.php:7
actionwoocommerce_admin_field_elex_ppct_custom_fields_suffix_checkboxincludes\elex-ppct-woocmmerce-variation-settings.php:8
actionwoocommerce_product_data_panelsincludes\elex-ppct-woocmmerce-variation-settings.php:53
actionwoocommerce_process_product_metaincludes\elex-ppct-woocmmerce-variation-settings.php:208
actionwoocommerce_product_after_variable_attributesincludes\elex-ppct-woocmmerce-variation-settings.php:252
actionwoocommerce_save_product_variationincludes\elex-ppct-woocmmerce-variation-settings.php:415
actionppct_settings_tab_faqsincludes\HelpAndSupport\HelpAndSupportController.php:13
actionppct_settings_tab_ticketincludes\HelpAndSupport\HelpAndSupportController.php:14
actionadmin_initincludes\HelpAndSupport\HelpAndSupportController.php:15
actionppct_settings_tab_generalincludes\SettingsController.php:11
actionppct_settings_tab_customizationincludes\SettingsController.php:12
filterppct_settings_saving_generalincludes\SettingsController.php:13
filterppct_settings_saving_customizationincludes\SettingsController.php:14
filterwoocommerce_product_get_priceincludes\SettingsController.php:23
filterwoocommerce_product_variation_get_priceincludes\SettingsController.php:26
filterwoocommerce_get_price_htmlincludes\SettingsController.php:28
filterwoocommerce_cart_item_priceincludes\SettingsController.php:35
filterwoocommerce_checkout_cart_item_quantityincludes\SettingsController.php:38
actionplugins_loadedincludes\SettingsController.php:41
actionadmin_initincludes\SettingsController.php:42
filterwoocommerce_product_get_regular_priceincludes\SettingsController.php:920
filterwoocommerce_product_get_priceincludes\SettingsController.php:921
filterwoocommerce_product_variation_get_regular_priceincludes\SettingsController.php:922
filterwoocommerce_product_variation_get_priceincludes\SettingsController.php:923
actionadmin_noticesreview_and_troubleshoot_notify\review-and-troubleshoot-notify-class.php:20
actionadmin_initreview_and_troubleshoot_notify\review-and-troubleshoot-notify-class.php:21
Maintenance & Trust

ELEX WooCommerce Product Price Custom Text (Before & After Text) and Discount Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 11, 2026
PHP min version
Downloads53K

Community Trust

Rating92/100
Number of ratings10
Active installs2K
Developer Profile

ELEX WooCommerce Product Price Custom Text (Before & After Text) and Discount Developer Profile

ELEXtensions

22 plugins · 28K total installs

87
trust score
Avg Security Score
98/100
Avg Patch Time
58 days
View full developer profile
Detection Fingerprints

How We Detect ELEX WooCommerce Product Price Custom Text (Before & After Text) and Discount

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/elex-product-price-custom-text-before-after-text-and-discount-for-woocommerce/assets/js/select2-min.js/wp-content/plugins/elex-product-price-custom-text-before-after-text-and-discount-for-woocommerce/assets/css/select-2-min.css/wp-content/plugins/elex-product-price-custom-text-before-after-text-and-discount-for-woocommerce/assets/js/req_script.js/wp-content/plugins/elex-product-price-custom-text-before-after-text-and-discount-for-woocommerce/assets/js/popper.js/wp-content/plugins/elex-product-price-custom-text-before-after-text-and-discount-for-woocommerce/assets/js/bootstrap.js/wp-content/plugins/elex-product-price-custom-text-before-after-text-and-discount-for-woocommerce/assets/js/fontawesome.js/wp-content/plugins/elex-product-price-custom-text-before-after-text-and-discount-for-woocommerce/assets/js/settings.js/wp-content/plugins/elex-product-price-custom-text-before-after-text-and-discount-for-woocommerce/assets/css/app.css+2 more
Script Paths
select2-min.jsselect-2-min.cssreq_script.jspopper.jsbootstrap.jsfontawesome.js+2 more
Version Parameters
/assets/js/select2-min.js?ver=/assets/css/select-2-min.css?ver=/assets/js/req_script.js?ver=/assets/js/popper.js?ver=/assets/js/bootstrap.js?ver=/assets/js/fontawesome.js?ver=/assets/js/settings.js?ver=/assets/css/app.css?ver=

HTML / DOM Fingerprints

CSS Classes
elex_ppct_suffix_tdelex_ppct_main
Data Attributes
name="elex_ppct_custom_fields_suffix_checkbox_name"name="elex_ppct_custom_fields_prefix_checkbox_name"name="elex_ppct_custom_fields_prefix_name"
JS Globals
elex_ppct_ajax_obj
Shortcode Output
<b>Product Price Custom Text & Discount</b>
FAQ

Frequently Asked Questions about ELEX WooCommerce Product Price Custom Text (Before & After Text) and Discount