WP-Safety

HM Product Catalog Security & Risk Analysis

wordpress.org/plugins/hm-product-catalog

Create an affiliate product page and display product information in a details page.

10 active installs v1.7.2 PHP 7.2+ WP 5.2+ Updated Dec 7, 2023
affiliateamazonamazon-affiliatescatalogstore
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is HM Product Catalog Safe to Use in 2026?

Generally Safe

Score 85/100

HM Product Catalog has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2yr ago
Risk Assessment

The "hm-product-catalog" v1.7.2 plugin exhibits a generally good security posture with several positive indicators. The absence of known CVEs and a clean vulnerability history over time are strong signs of a well-maintained and secure plugin. Static analysis also reveals positive practices such as 100% of SQL queries using prepared statements and a high percentage of properly escaped output. Furthermore, the limited attack surface, with only one shortcode and no unprotected AJAX handlers or REST API routes, is commendable.

Key Concerns

  • Use of unserialize() function
  • Flow with unsanitized path detected
Vulnerabilities
None known

HM Product Catalog Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

HM Product Catalog Release Timeline

v1.7.1
v1.7
v1.6
v1.5
v1.4
v1.3
v1.2
v1.1
v1.0
Code Analysis
Analyzed Apr 16, 2026

HM Product Catalog Code Analysis

Dangerous Functions
3
Raw SQL Queries
0
2 prepared
Unescaped Output
8
78 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Dangerous Functions Found

unserialize$wphpcGeneralSettings = stripslashes_deep( unserialize( get_option('wphpc_general_settings') ) );admin/view/wphpc-admin-settings.php:17
unserialize$wphpcGeneralSettings = stripslashes_deep( unserialize( get_option('wphpc_general_settings') ) );front/view/loop.php:6
unserialize$wphpcGeneralSettings = stripslashes_deep( unserialize( get_option('wphpc_general_settings') ) );front/view/single.php:12

SQL Query Safety

100% prepared2 total queries

Output Escaping

91% escaped86 total outputs
Data Flows · Security
1 unsanitized

Data Flow Analysis

1 flows1 with unsanitized paths
<wphpc-admin-settings> (admin/view/wphpc-admin-settings.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

HM Product Catalog Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[hm_product_catalog] front/cls-hmpc-front.php:66
WordPress Hooks 13
filterplugin_row_metahm-product-catalog.php:43
filtermanage_products_posts_columnshm-product-catalog.php:51
actionmanage_products_posts_custom_columnhm-product-catalog.php:64
filtermanage_edit-products_sortable_columnshm-product-catalog.php:73
actionplugins_loadedinc/cls-hmpc-master.php:16
actionadmin_enqueue_scriptsinc/cls-hmpc-master.php:36
actioninitinc/cls-hmpc-master.php:37
actioninitinc/cls-hmpc-master.php:38
actionadd_meta_boxesinc/cls-hmpc-master.php:39
actionsave_postinc/cls-hmpc-master.php:40
actionadmin_menuinc/cls-hmpc-master.php:41
actionwp_enqueue_scriptsinc/cls-hmpc-master.php:47
filtersingle_templateinc/cls-hmpc-master.php:48
Maintenance & Trust

HM Product Catalog Maintenance & Trust

Maintenance Signals

WordPress version tested6.4.8
Last updatedDec 7, 2023
PHP min version7.2
Downloads4K

Community Trust

Rating84/100
Number of ratings5
Active installs10
Alternatives

HM Product Catalog Alternatives

Shop Page WP

Shop Page WP

shop-page-wp

A
92

Create an affiliate shop page on your website. Simple to setup and add products to start making money from affiliate links on your blog.

3K 1 CVE
ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin

ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin

thirstyaffiliates

A
95

🔗 Affiliate link management & cloaker tool. Easily manage, shrink and track your affiliate links in WordPress. 🔥

30K 5 CVEs
Affiliate Product Ads for Amazon

Affiliate Product Ads for Amazon

affiliate-product-ads-for-amazon-associates

A
92

Display Amazon Product Advertising product ads automatically on WordPress Post Pages

100 No CVEs
CodeShop Amazon Affiliate

CodeShop Amazon Affiliate

codeshop-amazon-affiliate

A
85

CodeShop Amazon Affiliate plugin to setup a complete amazon shop solution. Simple & fast, also monetize your Wordpress posts.

10 No CVEs
HT Slider Range for Amazon affiliates

HT Slider Range for Amazon affiliates

slider-range-htapps

A
85

HT Slider Range for Amazon affiliates

10 No CVEs
Developer Profile

HM Product Catalog Developer Profile

Hossni Mubarak

14 plugins · 8K total installs

76
trust score
Avg Security Score
95/100
Avg Patch Time
136 days
View full developer profile
Detection Fingerprints

How We Detect HM Product Catalog

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/hm-product-catalog/assets/css/wphpc-admin.css/wp-content/plugins/hm-product-catalog/assets/js/wphpc-admin.js
Script Paths
/wp-content/plugins/hm-product-catalog/assets/js/wphpc-admin.js
Version Parameters
hm-product-catalog/assets/css/wphpc-admin.css?ver=hm-product-catalog/assets/js/wphpc-admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
cls-hmpc-main-content
HTML Comments
<!-- Donate us --><!-- Product Details -->
Data Attributes
data-wphpc-ajax-urldata-wphpc-add-to-cart-url
JS Globals
window.wphpc_product_variationwindow.wphpc_product_image
Shortcode Output
[wphpc_products][wphpc_categories][wphpc_single_product]
FAQ

Frequently Asked Questions about HM Product Catalog