Notify WooSMS Security & Risk Analysis

wordpress.org/plugins/notify-woosms

WooCommerce order status sms notifications plugin for Bangladeshi SMS service providers.

10 active installs v2.0 PHP 5.2.4+ WP 4.6+ Updated Oct 25, 2020
bangladeshnotifysmswoocommercewoosms
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Notify WooSMS Safe to Use in 2026?

Generally Safe

Score 85/100

Notify WooSMS has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 5yr ago
Risk Assessment

The notify-woosms v2.0 plugin exhibits a seemingly strong security posture based on the provided static analysis and vulnerability history. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events, along with zero known CVEs, suggests a low attack surface and a history of security diligence. Furthermore, all SQL queries are reported as using prepared statements, which is a critical security best practice for preventing SQL injection vulnerabilities. The lack of external file operations also reduces potential risks.

Key Concerns

  • All output is unescaped
  • No nonce checks implemented
  • No capability checks implemented
Vulnerabilities
None known

Notify WooSMS Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Notify WooSMS Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
12
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
3
Bundled Libraries
0

Output Escaping

0% escaped12 total outputs
Attack Surface

Notify WooSMS Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 6
actionadmin_print_stylesadmin.php:6
actionadmin_menuadmin.php:8
actionadmin_initadmin.php:9
actionwoocommerce_new_orderwoocommerce.php:19
actionwoocommerce_order_status_processingwoocommerce.php:33
actionwoocommerce_order_status_completedwoocommerce.php:47
Maintenance & Trust

Notify WooSMS Maintenance & Trust

Maintenance Signals

WordPress version tested5.4.19
Last updatedOct 25, 2020
PHP min version5.2.4
Downloads1K

Community Trust

Rating100/100
Number of ratings1
Active installs10
Developer Profile

Notify WooSMS Developer Profile

Solayman Haider

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Notify WooSMS

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/notify-woosms/css/style.css

HTML / DOM Fingerprints

Data Attributes
name='notify_woosms_settings[notify_woosms_enable_sms]'name='notify_woosms_settings[notify_woosms_select_provider]'name='notify_woosms_settings[notify_woosms_api_key]'name='notify_woosms_settings[notify_woosms_api_user_name]'name='notify_woosms_settings[notify_woosms_api_password]'name='notify_woosms_settings[notify_woosms_api_mask]'+6 more
FAQ

Frequently Asked Questions about Notify WooSMS