Free Shipping Bar for WooCommerce – Progress Indicator, Popup & Alerts Security & Risk Analysis

wordpress.org/plugins/free-shipping-notification-woocommerce

Free shipping bar will show a notification bar/popup on your website with a free shipping progress bar that will inform users how much they should buy …

200 active installs v2.2.77 PHP + WP 3.0.1+ Updated Mar 6, 2026
free-shipping-barnotification-baroffer-barpromotion-barwoocommerce-notification-bar
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Free Shipping Bar for WooCommerce – Progress Indicator, Popup & Alerts Safe to Use in 2026?

Generally Safe

Score 100/100

Free Shipping Bar for WooCommerce – Progress Indicator, Popup & Alerts has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 28d ago
Risk Assessment

The "free-shipping-notification-woocommerce" plugin v2.2.77 exhibits a generally good security posture, adhering to several best practices. The code utilizes prepared statements for all SQL queries and demonstrates excellent output escaping, with 99% of outputs being properly escaped. The absence of known CVEs and a clean vulnerability history are significant strengths, suggesting a mature and well-maintained codebase. However, there are notable security concerns primarily related to its attack surface. The plugin exposes two AJAX handlers, and critically, both lack authentication checks. This presents a direct pathway for unauthenticated attackers to interact with the plugin's functionality, potentially leading to unexpected behavior or further exploitation if the AJAX actions themselves have inherent vulnerabilities not immediately apparent in the static analysis.

Key Concerns

  • Two AJAX handlers without authentication checks
  • Flow with unsanitized paths (Taint Analysis)
Vulnerabilities
None known

Free Shipping Bar for WooCommerce – Progress Indicator, Popup & Alerts Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Free Shipping Bar for WooCommerce – Progress Indicator, Popup & Alerts Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
6 prepared
Unescaped Output
5
335 escaped
Nonce Checks
2
Capability Checks
0
File Operations
0
External Requests
1
Bundled Libraries
0

SQL Query Safety

100% prepared6 total queries

Output Escaping

99% escaped340 total outputs
Data Flows
1 unsanitized

Data Flow Analysis

14 flows1 with unsanitized paths
handle_tracker_action (admin\class-analytics.php:75)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
2 unprotected

Free Shipping Bar for WooCommerce – Progress Indicator, Popup & Alerts Attack Surface

Entry Points2
Unprotected2

AJAX Handlers 2

noprivwp_ajax_get_cart_fsnwpublic\class-pisol-fsnw-message.php:20
authwp_ajax_get_cart_fsnwpublic\class-pisol-fsnw-message.php:21
WordPress Hooks 35
actionadmin_enqueue_scriptsadmin\class-analytics.php:34
actionadmin_footer-plugins.phpadmin\class-analytics.php:35
actionadmin_noticesadmin\class-analytics.php:38
actionadmin_initadmin\class-pisol-fsnw-admin.php:25
actionwoocommerce_initadmin\class-pisol-fsnw-cart-checkout.php:25
actioninitadmin\class-pisol-fsnw-control.php:23
actionwoocommerce_initadmin\class-pisol-fsnw-design.php:25
actionadmin_menuadmin\class-pisol-fsnw-menu.php:13
actionadmin_enqueue_scriptsadmin\class-pisol-fsnw-menu.php:16
actionwoocommerce_initadmin\class-pisol-fsnw-message.php:25
actionwoocommerce_initadmin\class-pisol-fsnw-option.php:25
actionwoocommerce_initadmin\class-pisol-fsnw-popup.php:25
actionpisol_custom_field_fsnw_textareaincludes\class-customfield.php:19
actionplugins_loadedincludes\class-pisol-fsnw.php:68
actionadmin_enqueue_scriptsincludes\class-pisol-fsnw.php:77
actionadmin_enqueue_scriptsincludes\class-pisol-fsnw.php:78
actionwp_enqueue_scriptsincludes\class-pisol-fsnw.php:87
actionwp_enqueue_scriptsincludes\class-pisol-fsnw.php:88
actionadmin_noticesincludes\compatible-plugin-message.php:22
actionadmin_enqueue_scriptsincludes\conflict-fixer.php:6
actionadmin_footerincludes\pisol.class.form.php:445
actionafter_plugin_row_free-shipping-notification-woocommerce-pro/pisol-fsnw.phpincludes\Pro_Warning.php:17
actionadmin_noticesincludes\review.php:107
actionadmin_noticespisol-fsnw.php:41
actionbefore_woocommerce_initpisol-fsnw.php:54
filterwoocommerce_update_order_review_fragmentspublic\class-cart-checkout-progress.php:36
actionwoocommerce_blocks_loadedpublic\class-cart-checkout-progress.php:39
filterbody_classpublic\class-cart-checkout-progress.php:41
actionwp_enqueue_scriptspublic\class-cart-checkout-progress.php:43
actionwc_ajax_get_cart_fsnwpublic\class-pisol-fsnw-message.php:22
actionwp_footerpublic\class-pisol-fsnw-message.php:23
actionwp_enqueue_scriptspublic\class-pisol-fsnw-message.php:24
actionwp_enqueue_scriptspublic\class-pisol-fsnw-message.php:25
actioninitpublic\class-pisol-fsnw-public.php:17
actionadmin_initpublic\class-pisol-fsnw-public.php:18
Maintenance & Trust

Free Shipping Bar for WooCommerce – Progress Indicator, Popup & Alerts Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 6, 2026
PHP min version
Downloads64K

Community Trust

Rating96/100
Number of ratings18
Active installs200
Developer Profile

Free Shipping Bar for WooCommerce – Progress Indicator, Popup & Alerts Developer Profile

PI Web Solution

30 plugins · 93K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
235 days
View full developer profile
Detection Fingerprints

How We Detect Free Shipping Bar for WooCommerce – Progress Indicator, Popup & Alerts

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/free-shipping-notification-woocommerce/admin/css/pisol-fsnw-admin.css/wp-content/plugins/free-shipping-notification-woocommerce/admin/css/bootstrap.css/wp-content/plugins/free-shipping-notification-woocommerce/admin/js/pisol-fsnw-admin.js/wp-content/plugins/free-shipping-notification-woocommerce/admin/js/pisol-quick-save.js
Script Paths
/wp-content/plugins/free-shipping-notification-woocommerce/admin/js/pisol-fsnw-admin.js/wp-content/plugins/free-shipping-notification-woocommerce/admin/js/pisol-quick-save.js
Version Parameters
free-shipping-notification-woocommerce/admin/css/pisol-fsnw-admin.css?ver=free-shipping-notification-woocommerce/admin/css/bootstrap.css?ver=free-shipping-notification-woocommerce/admin/js/pisol-fsnw-admin.js?ver=free-shipping-notification-woocommerce/admin/js/pisol-quick-save.js?ver=

HTML / DOM Fingerprints

CSS Classes
pisol-containerpisol-rowbootstrap-wrapper
HTML Comments
<!-- Makes sure that the plugin is not loaded before the woocommerce plugin is activated -->
Data Attributes
id="pisol-fsnw-notification"
JS Globals
PISOL_FSNW_VERSIONPISOL_FSNW_DELETE_SETTINGPI_FSNW_BUY_URLPI_FSNW_PRICE
FAQ

Frequently Asked Questions about Free Shipping Bar for WooCommerce – Progress Indicator, Popup & Alerts