WP-Safety

MandrakeCRM – CRM & AI Marketing Automation Security & Risk Analysis

wordpress.org/plugins/mandrakecrm

CRM, automations, campaigns & analytics for WooCommerce. Charges per order, not per contact. Unlimited contacts. Free 7-day trial.

0 active installs v3.13 PHP 7.4+ WP 6.0+ Updated Mar 13, 2026
abandoned-cartcrmemail-marketingmarketing-automationwoocommerce
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is MandrakeCRM – CRM & AI Marketing Automation Safe to Use in 2026?

Generally Safe

Score 100/100

MandrakeCRM – CRM & AI Marketing Automation has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The mandrakecrm plugin, version 3.13, exhibits a generally good security posture based on the provided static analysis. It demonstrates strong adherence to secure coding practices, with 100% of outputs properly escaped and a high percentage (88%) of SQL queries using prepared statements. Furthermore, all identified entry points, including AJAX handlers, appear to have authentication checks, and there are no shortcodes or REST API routes to consider. The absence of known CVEs and a clean vulnerability history indicates a lack of publicly discovered security flaws.

Key Concerns

  • Flow with unsanitized path
  • One file operation detected
  • External HTTP requests detected
Vulnerabilities
None known

MandrakeCRM – CRM & AI Marketing Automation Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

MandrakeCRM – CRM & AI Marketing Automation Release Timeline

v3.13Current
Code Analysis
Analyzed Mar 17, 2026

MandrakeCRM – CRM & AI Marketing Automation Code Analysis

Dangerous Functions
0
Raw SQL Queries
2
14 prepared
Unescaped Output
0
35 escaped
Nonce Checks
4
Capability Checks
5
File Operations
1
External Requests
7
Bundled Libraries
0

SQL Query Safety

88% prepared16 total queries

Output Escaping

100% escaped35 total outputs
Data Flows · Security
1 unsanitized

Data Flow Analysis

5 flows1 with unsanitized paths
<class-mandrakecrm-abandoned-cart> (includes\class-mandrakecrm-abandoned-cart.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

MandrakeCRM – CRM & AI Marketing Automation Attack Surface

Entry Points5
Unprotected0

AJAX Handlers 5

authwp_ajax_mandrakecrm_save_abandoned_cart_fieldincludes\class-mandrakecrm-abandoned-cart.php:116
noprivwp_ajax_mandrakecrm_save_abandoned_cart_fieldincludes\class-mandrakecrm-abandoned-cart.php:117
authwp_ajax_mandrakecrm_verify_tokenincludes\class-mandrakecrm-admin.php:36
authwp_ajax_mandrakecrm_save_settingsincludes\class-mandrakecrm-admin.php:37
authwp_ajax_mandrakecrm_disconnect_integrationincludes\class-mandrakecrm-admin.php:38
WordPress Hooks 45
filtercron_schedulesincludes\class-mandrakecrm-abandoned-cart.php:80
actionupdate_option_mandrakecrm_abandoned_cartincludes\class-mandrakecrm-abandoned-cart.php:96
actionwoocommerce_add_to_cartincludes\class-mandrakecrm-abandoned-cart.php:109
actionwoocommerce_cart_item_removedincludes\class-mandrakecrm-abandoned-cart.php:110
actionwoocommerce_cart_item_restoredincludes\class-mandrakecrm-abandoned-cart.php:111
actionwoocommerce_after_cart_item_quantity_updateincludes\class-mandrakecrm-abandoned-cart.php:112
actionwoocommerce_cart_updatedincludes\class-mandrakecrm-abandoned-cart.php:113
actionwoocommerce_checkout_order_processedincludes\class-mandrakecrm-abandoned-cart.php:120
actiontemplate_redirectincludes\class-mandrakecrm-abandoned-cart.php:124
actionwp_enqueue_scriptsincludes\class-mandrakecrm-abandoned-cart.php:127
actionmandrakecrm_process_abandoned_cartsincludes\class-mandrakecrm-abandoned-cart.php:130
actionmandrakecrm_cleanup_abandoned_cartsincludes\class-mandrakecrm-abandoned-cart.php:133
actionadmin_menuincludes\class-mandrakecrm-admin.php:31
actionadmin_menuincludes\class-mandrakecrm-admin.php:32
actionadmin_enqueue_scriptsincludes\class-mandrakecrm-admin.php:33
actionwp_before_admin_bar_renderincludes\class-mandrakecrm-admin.php:34
actionwp_enqueue_scriptsincludes\class-mandrakecrm-admin.php:35
actionadmin_initincludes\class-mandrakecrm-admin.php:39
actionadmin_noticesincludes\class-mandrakecrm-admin.php:40
actionwoocommerce_review_order_before_submitincludes\class-mandrakecrm-checkout.php:46
actionwoocommerce_checkout_create_orderincludes\class-mandrakecrm-checkout.php:47
actionwoocommerce_admin_order_data_after_billing_addressincludes\class-mandrakecrm-checkout.php:48
actionwoocommerce_emailincludes\class-mandrakecrm-emails.php:62
actionwoocommerce_order_status_pending_to_processing_notificationincludes\class-mandrakecrm-emails.php:66
actionwoocommerce_order_status_pending_to_completed_notificationincludes\class-mandrakecrm-emails.php:67
actionwoocommerce_order_status_pending_to_on-hold_notificationincludes\class-mandrakecrm-emails.php:68
actionwoocommerce_order_status_failed_to_on-hold_notificationincludes\class-mandrakecrm-emails.php:69
actionwoocommerce_order_status_completed_notificationincludes\class-mandrakecrm-emails.php:70
actionwoocommerce_order_status_refunded_notificationincludes\class-mandrakecrm-emails.php:71
actionwoocommerce_created_customerincludes\class-mandrakecrm-emails.php:74
actionwoocommerce_new_customer_note_notificationincludes\class-mandrakecrm-emails.php:75
actionwoocommerce_reset_password_notificationincludes\class-mandrakecrm-emails.php:78
filterretrieve_password_messageincludes\class-mandrakecrm-emails.php:81
actionwoocommerce_order_status_changedincludes\class-mandrakecrm-emails.php:84
filterwp_mailincludes\class-mandrakecrm-emails.php:213
actioninitincludes\class-mandrakecrm-utm.php:71
actionwoocommerce_checkout_create_orderincludes\class-mandrakecrm-utm.php:72
actionwoocommerce_admin_order_data_after_billing_addressincludes\class-mandrakecrm-utm.php:73
actionwp_enqueue_scriptsincludes\class-mandrakecrm-widget.php:37
filterscript_loader_tagincludes\class-mandrakecrm-widget.php:73
actionbefore_woocommerce_initmandrakecrm.php:46
actionadmin_noticesmandrakecrm.php:70
actionwp_enqueue_scriptsmandrakecrm.php:137
actionplugins_loadedmandrakecrm.php:139
actionmandrakecrm_daily_syncmandrakecrm.php:210

Scheduled Events 7

mandrakecrm_process_abandoned_carts
mandrakecrm_cleanup_abandoned_carts
mandrakecrm_process_abandoned_carts
mandrakecrm_cleanup_abandoned_carts
mandrakecrm_process_abandoned_carts
mandrakecrm_cleanup_abandoned_carts
mandrakecrm_daily_sync
Maintenance & Trust

MandrakeCRM – CRM & AI Marketing Automation Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 13, 2026
PHP min version7.4
Downloads98

Community Trust

Rating0/100
Number of ratings0
Active installs0
Alternatives

MandrakeCRM – CRM & AI Marketing Automation Alternatives

MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics

MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics

makewebbetter-hubspot-for-woocommerce

A
98

Integrate WooCommerce with HubSpot’s free CRM, abandoned cart tracking, email marketing, marketing automation, analytics & more.

7K 1 CVE
Zoho Campaigns

Zoho Campaigns

zoho-campaigns

A
95

Zoho Campaigns

4K 4 CVEs
Constant Contact + WooCommerce

Constant Contact + WooCommerce

constant-contact-woocommerce

A
99

Add products to your list emails and sync your contacts.

1K 1 CVE
Benchmark Email for WooCommerce

Benchmark Email for WooCommerce

woo-benchmark-email

A
100

Connects WooCommerce with Benchmark Email - syncing customers and abandoned carts.

200 No CVEs
EngageBay WooCommerce Addon

EngageBay WooCommerce Addon

engagebay-woocommerce-addon

A
92

Automate your eCommerce with WooCommerce + EngageBay — run smart campaigns, boost engagement, and personalize messaging to grow your business faster.

40 No CVEs
Developer Profile

MandrakeCRM – CRM & AI Marketing Automation Developer Profile

MandrakeCRM

1 plugin · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect MandrakeCRM – CRM & AI Marketing Automation

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/mandrakecrm/assets/css/checkout.css
Version Parameters
mandrakecrm/assets/css/checkout.css?ver=

HTML / DOM Fingerprints

CSS Classes
mandrakecrm-checkout-optin-wrapper
Data Attributes
data-mandrakecrm-abandoned-cart-tracked
JS Globals
MANDRAKECRM_SETTINGSMANDRAKECRM_USER_IDMANDRAKECRM_CART_ID
Shortcode Output
[mandrakecrm_optin]
FAQ

Frequently Asked Questions about MandrakeCRM – CRM & AI Marketing Automation