MasterAI Store Builder Security & Risk Analysis

wordpress.org/plugins/masterai-store-builder

Launch your professional WooCommerce store in 5 minutes with industry-specific templates and a streamlined setup wizard.

0 active installs v1.0.0 PHP 7.4+ WP 5.8+ Updated Feb 26, 2026
builderonboardingstorewizardwoocommerce
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is MasterAI Store Builder Safe to Use in 2026?

Generally Safe

Score 100/100

MasterAI Store Builder has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The masterai-store-builder v1.0.0 plugin exhibits a generally positive security posture, with strong adherence to secure coding practices in most areas. The plugin demonstrates excellent utilization of prepared statements for SQL queries, with 100% of them being properly sanitized. Furthermore, output escaping is almost perfect, with 99% of outputs being properly handled, significantly mitigating the risk of cross-site scripting (XSS) vulnerabilities. The presence of 18 nonce checks and 17 capability checks indicates a good understanding of WordPress security mechanisms for protecting actions.

Key Concerns

  • AJAX handlers without authentication checks
  • Flows with unsanitized paths
Vulnerabilities
None known

MasterAI Store Builder Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

MasterAI Store Builder Release Timeline

v1.0.0Current
Code Analysis
Analyzed Mar 17, 2026

MasterAI Store Builder Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
2
263 escaped
Nonce Checks
18
Capability Checks
17
File Operations
2
External Requests
3
Bundled Libraries
0

Output Escaping

99% escaped265 total outputs
Data Flows · Security
2 unsanitized

Data Flow Analysis

13 flows2 with unsanitized paths
save_settings (includes\class-masterai-admin.php:896)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
2 unprotected

MasterAI Store Builder Attack Surface

Entry Points19
Unprotected2

AJAX Handlers 18

authwp_ajax_masterai_builder_save_wizard_stepincludes\class-masterai-ajax.php:37
authwp_ajax_masterai_builder_install_templateincludes\class-masterai-ajax.php:38
authwp_ajax_masterai_builder_get_industry_previewincludes\class-masterai-ajax.php:39
authwp_ajax_masterai_builder_remove_demo_contentincludes\class-masterai-ajax.php:42
authwp_ajax_masterai_builder_install_demo_contentincludes\class-masterai-ajax.php:43
authwp_ajax_masterai_builder_reset_wizardincludes\class-masterai-ajax.php:44
authwp_ajax_masterai_builder_save_gemini_keyincludes\class-masterai-ajax.php:47
authwp_ajax_masterai_builder_generate_productincludes\class-masterai-ajax.php:48
authwp_ajax_masterai_builder_save_product_imageincludes\class-masterai-ajax.php:49
authwp_ajax_masterai_builder_generate_legal_pagesincludes\class-masterai-ajax.php:50
authwp_ajax_masterai_builder_toggle_industrial_filterincludes\class-masterai-ajax.php:53
authwp_ajax_masterai_builder_generate_store_descriptionincludes\class-masterai-ajax.php:54
authwp_ajax_masterai_builder_fetch_exchange_ratesincludes\class-masterai-ajax.php:57
authwp_ajax_masterai_builder_upload_themeincludes\class-masterai-onboarding.php:57
authwp_ajax_masterai_builder_save_wizard_stepincludes\class-masterai-onboarding.php:58
authwp_ajax_masterai_builder_install_templateincludes\class-masterai-onboarding.php:59
authwp_ajax_masterai_builder_get_overlay_eventsincludes\class-masterai-order-overlay.php:53
noprivwp_ajax_masterai_builder_get_overlay_eventsincludes\class-masterai-order-overlay.php:54

Shortcodes 1

[masterai_order_overlay] includes\class-masterai-order-overlay.php:46
WordPress Hooks 17
actionadmin_menuincludes\class-masterai-admin.php:36
actionadmin_menuincludes\class-masterai-admin.php:37
actionadmin_enqueue_scriptsincludes\class-masterai-admin.php:38
actionwp_enqueue_scriptsincludes\class-masterai-industrial-filter.php:25
actionwoocommerce_before_shop_loopincludes\class-masterai-industrial-filter.php:26
actionwoocommerce_product_queryincludes\class-masterai-industrial-filter.php:27
actionadmin_menuincludes\class-masterai-onboarding.php:55
actionadmin_initincludes\class-masterai-onboarding.php:56
actionwoocommerce_order_status_processingincludes\class-masterai-order-overlay.php:49
actionwoocommerce_order_status_completedincludes\class-masterai-order-overlay.php:50
actionwp_enqueue_scriptsincludes\class-masterai-theme-customizer.php:20
actioncustomize_registerincludes\class-masterai-theme-customizer.php:21
actionmasterai_builder_deferred_install_demo_contentmasterai-store-builder.php:72
actionplugins_loadedmasterai-store-builder.php:74
actionadmin_noticesmasterai-store-builder.php:75
actionbefore_woocommerce_initmasterai-store-builder.php:78
actionadmin_noticesmasterai-store-builder.php:134

Scheduled Events 1

masterai_builder_deferred_install_demo_content
Maintenance & Trust

MasterAI Store Builder Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 26, 2026
PHP min version7.4
Downloads221

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

MasterAI Store Builder Developer Profile

masterai

2 plugins · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect MasterAI Store Builder

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/masterai-store-builder/assets/css/admin.css/wp-content/plugins/masterai-store-builder/assets/js/admin.js/wp-content/plugins/masterai-store-builder/assets/js/vendor/vue.min.js/wp-content/plugins/masterai-store-builder/assets/js/vendor/vue-resource.min.js/wp-content/plugins/masterai-store-builder/assets/js/onboarding.js
Script Paths
/wp-content/plugins/masterai-store-builder/assets/js/admin.js/wp-content/plugins/masterai-store-builder/assets/js/vendor/vue.min.js/wp-content/plugins/masterai-store-builder/assets/js/vendor/vue-resource.min.js/wp-content/plugins/masterai-store-builder/assets/js/onboarding.js
Version Parameters
masterai-store-builder/assets/css/admin.css?ver=masterai-store-builder/assets/js/admin.js?ver=masterai-store-builder/assets/js/vendor/vue.min.js?ver=masterai-store-builder/assets/js/vendor/vue-resource.min.js?ver=masterai-store-builder/assets/js/onboarding.js?ver=

HTML / DOM Fingerprints

CSS Classes
masterai-setup-noticemasterai-dashboardmasterai-wizard-wrappermasterai-setup-progress-barmasterai-setup-stepsmasterai-setup-stepmasterai-setup-step-activemasterai-setup-step-completed
HTML Comments
<!-- Main MasterAI Class --><!-- Single instance of the class --><!-- Main Instance --><!-- Constructor -->+23 more
Data Attributes
data-noncedata-actiondata-template-iddata-theme-slugdata-wizard-step
JS Globals
MasterAI_Admin_VarsMasterAI_Onboarding_VarsVueVueResource
REST Endpoints
/wp-json/masterai-builder/v1/settings/wp-json/masterai-builder/v1/templates/wp-json/masterai-builder/v1/install-template/wp-json/masterai-builder/v1/import-demo-content
FAQ

Frequently Asked Questions about MasterAI Store Builder