Does Etsy Shop have any unpatched vulnerabilities?

No. All known vulnerabilities in Etsy Shop have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Etsy Shop compatible with WordPress 6.8.5?

According to WordPress.org data, Etsy Shop 3.1 has been tested up to WordPress 6.8.5. Check the plugin's changelog for the latest compatibility information.

How often is Etsy Shop updated?

Etsy Shop was last updated on Jan 6, 2026. Frequent updates are generally a positive security signal.

What is Etsy Shop's security score?

Etsy Shop has a WP-Safety security score of 97/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Etsy Shop Security & Risk Analysis

wordpress.org/plugins/etsy-shop

Plugin that allow you to insert Etsy Shop sections in pages or posts using the bracket/shortcode method.

4K active installs v3.1 PHP + WP 5.0+ Updated Jan 6, 2026

bracketetsyetsy-listingshoppingshortcode

A · Safe

CVEs total3

Unpatched0

Last CVESep 1, 2025

Plugin page Download

Safety Verdict

Is Etsy Shop Safe to Use in 2026?

Generally Safe

Score 97/100

Etsy Shop has a strong security track record. Known vulnerabilities have been patched promptly.

3 known CVEsLast CVE: Sep 1, 2025Updated 2mo ago

Risk Assessment

The Etsy Shop plugin v3.1 presents a mixed security posture. On the positive side, the static analysis reveals a small attack surface with no apparent unprotected entry points. The absence of dangerous functions, file operations, and critical/high severity taint flows is also encouraging. However, significant concerns arise from the handling of SQL queries and output escaping. With 100% of SQL queries not using prepared statements, there is a substantial risk of SQL injection vulnerabilities. Furthermore, only 25% of output escaping is properly implemented, leaving a high probability of cross-site scripting (XSS) vulnerabilities.

Key Concerns

SQL queries not using prepared statements
Low percentage of output escaping
Previous XSS and CSRF vulnerabilities
Medium severity vulnerabilities in history

Vulnerabilities

Etsy Shop Security Vulnerabilities

CVEs by Year

2 CVEs in 2023

2023

1 CVE in 2025

2025

Patched Has unpatched

Severity Breakdown

Medium

3 total CVEs

CVE-2025-9115medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Etsy Shop <= 3.0.6 - Reflected Cross-Site Scripting

Sep 1, 2025 Patched in 3.0.7 (25d)

CVE-2023-5470medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Etsy Shop <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Oct 11, 2023 Patched in 3.0.5 (104d)

CVE-2023-25975medium · 5.4Cross-Site Request Forgery (CSRF)

Etsy Shop <= 3.0.3 - Cross-Site Request Forgery to Plugin Settings Update

Feb 22, 2023 Patched in 3.0.4 (335d)

Code Analysis

Analyzed Mar 16, 2026

Etsy Shop Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

6 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

0% prepared1 total queries

Output Escaping

25% escaped24 total outputs

Data Flows

All sanitized

Data Flow Analysis

2 flows

etsy_shop_options_page (etsy-shop.php:501)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

Etsy Shop Attack Surface

Entry Points2

Unprotected0

AJAX Handlers 1

authwp_ajax_etsy_shop_delete_cacheetsy-shop.php:474

Shortcodes 1

[etsy-shop] etsy-shop.php:227

WordPress Hooks 6

actionplugins_loadedetsy-shop.php:45

filterplugin_action_linksetsy-shop.php:48

actionwp_print_stylesetsy-shop.php:436

actionadmin_menuetsy-shop.php:446

actionadmin_enqueue_scriptsetsy-shop.php:499

actionadmin_noticesetsy-shop.php:783

Maintenance & Trust

Etsy Shop Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5

Last updatedJan 6, 2026

PHP min version

Downloads160K

Community Trust

Rating80/100

Number of ratings30

Active installs4K

Alternatives

Etsy Shop Alternatives

Easy Digital Downloads – Additional Shortcodes

edd-additional-shortcodes

Add powerful conditional page content support to WordPress based on Easy Digital Downloads conditions.

400 No CVEs

Literal Shortcode

literal-shortcode

100

Adds a shortcode for the literal display of other shortcodes, html tags, or characters in post or page text.

10 No CVEs

Easy Cart

easy-cart

100

A simple shopping cart using shortcodes. You designate a page with slug /cart and add [easy_cart/] shortcode

0 No CVEs

WooCommerce

woocommerce

Everything you need to launch an online store in days and keep it growing for years. From your first sale to millions in revenue, Woo is with you.

7.0M 42 CVEs

WP Shortcodes Plugin — Shortcodes Ultimate

shortcodes-ultimate

A comprehensive collection of visual components for your site

400K 32 CVEs

Developer Profile

Etsy Shop Developer Profile

fsheedy

1 plugin · 4K total installs

trust score

Avg Security Score

97/100

Avg Patch Time

155 days

View full developer profile

Detection Fingerprints

How We Detect Etsy Shop

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/etsy-shop/css/etsy-shop.css/wp-content/plugins/etsy-shop/js/etsy-shop.js

Script Paths

/wp-content/plugins/etsy-shop/js/etsy-shop.js

Version Parameters

etsy-shop/css/etsy-shop.css?ver=etsy-shop/js/etsy-shop.js?ver=

HTML / DOM Fingerprints

CSS Classes

etsy-shop-listing-containeretsy-shop-listing

HTML Comments

<!-- etsy_shop_cache

Shortcode Output

<div class="etsy-shop-listing-container"><div class="etsy-shop-listing">

FAQ