JSM Show Order Metadata for WooCommerce HPOS Security & Risk Analysis

wordpress.org/plugins/jsm-show-order-meta

Show WooCommerce order metadata in a metabox when editing HPOS orders - a great tool for debugging issues with HPOS order metadata.

700 active installs v4.8.0 PHP 7.4.33+ WP 6.0+ Updated Mar 11, 2026
custom-fieldsinspectormetadataorderswoocommerce
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is JSM Show Order Metadata for WooCommerce HPOS Safe to Use in 2026?

Generally Safe

Score 100/100

JSM Show Order Metadata for WooCommerce HPOS has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 23d ago
Risk Assessment

Based on the provided static analysis and vulnerability history, the "jsm-show-order-meta" plugin version 4.8.0 exhibits a strong security posture. The code analysis reveals no identified attack surface, no dangerous functions, and all SQL queries, if any, are handled with prepared statements. Furthermore, all output is properly escaped, and there are no file operations or external HTTP requests. The absence of any recorded vulnerabilities, including critical or high-severity ones, further reinforces this positive assessment. The plugin appears to be developed with security best practices in mind, prioritizing the protection of user data and system integrity.

Vulnerabilities
None known

JSM Show Order Metadata for WooCommerce HPOS Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

JSM Show Order Metadata for WooCommerce HPOS Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

JSM Show Order Metadata for WooCommerce HPOS Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
actioninitjsm-show-order-meta.php:50
actioninitjsm-show-order-meta.php:51
Maintenance & Trust

JSM Show Order Metadata for WooCommerce HPOS Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 11, 2026
PHP min version7.4.33
Downloads7K

Community Trust

Rating100/100
Number of ratings2
Active installs700
Developer Profile

JSM Show Order Metadata for WooCommerce HPOS Developer Profile

JS Morisset

31 plugins · 33K total installs

93
trust score
Avg Security Score
99/100
Avg Patch Time
12 days
View full developer profile
Detection Fingerprints

How We Detect JSM Show Order Metadata for WooCommerce HPOS

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/jsm-show-order-meta/jsm-show-order-meta.php/wp-content/plugins/jsm-show-order-meta/lib/config.php/wp-content/plugins/jsm-show-order-meta/lib/classes/jsm-som-order.php/wp-content/plugins/jsm-show-order-meta/lib/classes/jsm-som-script.php
Script Paths
/wp-content/plugins/jsm-show-order-meta/jsm-show-order-meta.php

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about JSM Show Order Metadata for WooCommerce HPOS