Notify for WooCommerce Security & Risk Analysis

wordpress.org/plugins/notify-for-woocommerce

Notify for WooCommerce adds the ability to send SMS notifications for every status of the order.

10 active installs v1.1 PHP 5.6+ WP 3.0.1+ Updated Jun 29, 2021
notificationssmssms-marketingsms-notificationswoocommerce
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Notify for WooCommerce Safe to Use in 2026?

Generally Safe

Score 85/100

Notify for WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4yr ago
Risk Assessment

The "notify-for-woocommerce" v1.1 plugin exhibits a strong security posture based on the provided static analysis. The absence of any identified dangerous functions, raw SQL queries, file operations, or unescaped output (with one minor exception) suggests robust coding practices aimed at preventing common vulnerabilities. The external HTTP request is a potential area for further investigation but without context, it's difficult to assess its risk. The plugin also has a clean vulnerability history with no recorded CVEs, further reinforcing its current security standing.

Key Concerns

  • One external HTTP request observed
  • One output not properly escaped
Vulnerabilities
None known

Notify for WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Notify for WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
20 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
1
Bundled Libraries
0

Output Escaping

95% escaped21 total outputs
Attack Surface

Notify for WooCommerce Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 8
actionplugins_loadedincludes\class-notify-for-woocommerce.php:141
actionadmin_enqueue_scriptsincludes\class-notify-for-woocommerce.php:156
actionadmin_enqueue_scriptsincludes\class-notify-for-woocommerce.php:157
actionadmin_menuincludes\class-notify-for-woocommerce.php:159
actionadmin_initincludes\class-notify-for-woocommerce.php:160
actionwoocommerce_order_status_changedincludes\class-notify-for-woocommerce.php:162
actionwp_enqueue_scriptsincludes\class-notify-for-woocommerce.php:176
actionwp_enqueue_scriptsincludes\class-notify-for-woocommerce.php:177
Maintenance & Trust

Notify for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested5.7.15
Last updatedJun 29, 2021
PHP min version5.6
Downloads948

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Notify for WooCommerce Developer Profile

notifybiz

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Notify for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/notify-for-woocommerce/assets/css/notify-for-woocommerce-public.css/wp-content/plugins/notify-for-woocommerce/assets/js/notify-for-woocommerce-public.js
Script Paths
/wp-content/plugins/notify-for-woocommerce/assets/js/notify-for-woocommerce-public.js
Version Parameters
notify-for-woocommerce/assets/css/notify-for-woocommerce-public.css?ver=notify-for-woocommerce/assets/js/notify-for-woocommerce-public.js?ver=

HTML / DOM Fingerprints

CSS Classes
nfw-form-settings-wrappernfw-content-wrappernfw-input-settings-wrapper
HTML Comments
<!-- This file is part of the Notify for WooCommerce plugin. --><!-- Settings page of the plugin -->
Data Attributes
data-nfw-plugin-slugdata-nfw-plugin-suffix
JS Globals
window.NotifyForWooCommercenfw_obj
FAQ

Frequently Asked Questions about Notify for WooCommerce