Does Lootly Loyalty & Rewards have any unpatched vulnerabilities?

No published vulnerabilities and no findings under coordinated disclosure as of the latest data update. Always keep the plugin updated to the latest version.

Is Lootly Loyalty & Rewards compatible with WordPress 6.6.5?

According to WordPress.org data, Lootly Loyalty & Rewards 1.43 has been tested up to WordPress 6.6.5. Check the plugin's changelog for the latest compatibility information.

Is Lootly Loyalty & Rewards compatible with PHP 5.6+?

Lootly Loyalty & Rewards requires PHP 5.6 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Lootly Loyalty & Rewards updated?

Lootly Loyalty & Rewards was last updated on Dec 3, 2025. Frequent updates are generally a positive security signal.

What is Lootly Loyalty & Rewards's security score?

Lootly Loyalty & Rewards has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Lootly Loyalty & Rewards Security & Risk Analysis

wordpress.org/plugins/lootly-for-woocommerce

Version 1.43 Lootly helps you build relationships with customers by rewarding them for interacting with your store or for driving referral sales.

10 active installs v1.43 PHP 5.6+ WP 3.7.1+ Updated Dec 3, 2025

lootlyloyaltyreferralsrewardsvip-program

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Lootly Loyalty & Rewards Safe to Use in 2026?

Generally Safe

Score 100/100

Lootly Loyalty & Rewards has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 5mo ago

Risk Assessment

The 'lootly-for-woocommerce' plugin version 1.43 presents a generally positive security posture based on the static analysis. The complete absence of identified vulnerabilities in its history, combined with a lack of critical or high-severity taint flows, suggests a well-maintained and secure codebase. The plugin also demonstrates good security practices such as using prepared statements for all SQL queries and implementing capability checks.

Key Concerns

Low output escaping coverage
External HTTP requests

Vulnerabilities

None known

Lootly Loyalty & Rewards Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Version History

Lootly Loyalty & Rewards Release Timeline

v1.38

v1.36

v1.21

v1.20

v1.19

v1.18

v1.17

v1.16

v1.15

v1.14

v1.13

v1.11

v1.10

v1.8

v1.7

v1.6

v1.5

v1.4

v1.3

v1.0

Code Analysis

Analyzed Mar 16, 2026

Lootly Loyalty & Rewards Code Analysis

Dangerous Functions

Raw SQL Queries

3 prepared

Unescaped Output

13 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

100% prepared3 total queries

Output Escaping

52% escaped25 total outputs

Attack Surface

Lootly Loyalty & Rewards Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 26

actionadmin_menuclasses\Admin.php:37

actionwoocommerce_coupon_options_usage_restrictionclasses\Admin.php:38

actionwoocommerce_coupon_options_saveclasses\Admin.php:39

actionwoocommerce_order_status_changedclasses\api\Events.php:36

actionwoocommerce_after_order_object_saveclasses\api\Events.php:37

actionwoocommerce_add_to_cartclasses\api\Events.php:38

actionwoocommerce_calculate_totalsclasses\api\Events.php:39

actionwoocommerce_removed_couponclasses\api\Events.php:40

actionuser_registerclasses\api\Events.php:41

actionwoocommerce_refund_createdclasses\api\Events.php:42

actionprofile_updateclasses\api\Events.php:43

actionwp_loginclasses\api\Events.php:44

actionrender_block_woocommerce/cart-line-items-blockclasses\CartWidget.php:36

actionwoocommerce_before_cart_collateralsclasses\CartWidget.php:37

actionparse_requestclasses\rest\Router.php:39

actionrest_api_initclasses\rest\Router.php:40

actionwp_footerclasses\Widget.php:35

filterplugin_row_metalootly-woocommerce.php:48

actionplugins_loadedlootly-woocommerce.php:50

actionwp_enqueue_scriptslootly-woocommerce.php:52

actionwp_enqueue_scriptslootly-woocommerce.php:53

actionadmin_enqueue_scriptslootly-woocommerce.php:54

actionadmin_enqueue_scriptslootly-woocommerce.php:55

actionwoocommerce_coupon_is_validlootly-woocommerce.php:56

actionwoocommerce_coupon_is_valid_for_productlootly-woocommerce.php:57

actionwoocommerce_coupon_validate_minimum_amountlootly-woocommerce.php:58

Maintenance & Trust

Lootly Loyalty & Rewards Maintenance & Trust

Maintenance Signals

WordPress version tested6.6.5

Last updatedDec 3, 2025

PHP min version5.6

Downloads6K

Community Trust

Rating100/100

Number of ratings1

Active installs10

Alternatives

Lootly Loyalty & Rewards Alternatives

Loyalty Points Rewards and Referral for WooCommerce – WPLoyalty

wployalty

100

Create WooCommerce points and rewards program with WPLoyalty to increase customer loyalty and boost sales. Reward customers to drive repeat purchases.

3K No CVEs

MyRewards

woorewards

Free top-rated points and rewards program to retain your customers, grow your sales and get new customers.

2K 3 CVEs

RewardsWP – Loyalty Points & Referral Program for WooCommerce

rewardswp

Turn customers into brand advocates with loyalty points and referral programs for WooCommerce and Easy Digital Downloads.

100 1 CVE

Lynked Loyalty

lynked-loyalty

100

Lynked Loyalty's Woocommerce plugin lets businesses integrate our rewards system both online and in-store, offering a seamless and modern loyalty …

0 No CVEs

ReferralYard

referralyard

ReferralYard helps you build relationships with customers by rewarding them for driving referral sales.

0 No CVEs

Developer Profile

Lootly Loyalty & Rewards Developer Profile

ryanlootly

1 plugin · 10 total installs

trust score

Avg Security Score

100/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Lootly Loyalty & Rewards

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/lootly-for-woocommerce/assets/css/styles.css/wp-content/plugins/lootly-for-woocommerce/assets/css/admin-styles.css/wp-content/plugins/lootly-for-woocommerce/assets/js/widget.js/wp-content/plugins/lootly-for-woocommerce/assets/js/cart-widget.js

Script Paths

https://lootly.io/js/integrations/common/script.js

Version Parameters

lootly-styles?ver=lootly-admin-styles?ver=lootly-widget-js?ver=1lootly-cart-widget-script?ver=1.0.13

HTML / DOM Fingerprints

CSS Classes

lootly-widget-container

Data Attributes

data-lootly-widgetdata-lootly-cart

JS Globals

lootly_options

REST Endpoints

/wp-json/lootly/v1/cart/add/wp-json/lootly/v1/cart/update/wp-json/lootly/v1/cart/delete/wp-json/lootly/v1/cart/get/wp-json/lootly/v1/points/add/wp-json/lootly/v1/points/subtract/wp-json/lootly/v1/points/get

Shortcode Output

[lootly_widget][lootly_referral_widget][lootly_points_widget]

FAQ