Does Order Attachment for Woocommerce have any unpatched vulnerabilities?

No. All known vulnerabilities in Order Attachment for Woocommerce have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Order Attachment for Woocommerce compatible with WordPress 5.3.21?

According to WordPress.org data, Order Attachment for Woocommerce 3.0 has been tested up to WordPress 5.3.21. Check the plugin's changelog for the latest compatibility information.

How often is Order Attachment for Woocommerce updated?

Order Attachment for Woocommerce was last updated on Jan 24, 2020. Frequent updates are generally a positive security signal.

What is Order Attachment for Woocommerce's security score?

Order Attachment for Woocommerce has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Order Attachment for Woocommerce Security & Risk Analysis

wordpress.org/plugins/order-attachment-for-woocommerce

This is a simple plugin which helps you to attached the files on your customer orders.

100 active installs v3.0 PHP + WP 4.0+ Updated Jan 24, 2020

attachmentordersphoeniixxwoocommercewoocommerce-orders

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Order Attachment for Woocommerce Safe to Use in 2026?

Generally Safe

Score 85/100

Order Attachment for Woocommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 6yr ago

Risk Assessment

The "order-attachment-for-woocommerce" plugin v3.0 presents a generally strong security posture based on the provided static analysis. The complete absence of AJAX handlers, REST API routes, shortcodes, and cron events significantly limits the potential attack surface. Furthermore, the code signals indicate good practices such as the exclusive use of prepared statements for SQL queries and the presence of nonce checks. The plugin also avoids dangerous functions, file operations, and external HTTP requests, all of which are positive indicators.

Key Concerns

Poor output escaping for critical data
Missing capability checks for some entry points

Vulnerabilities

None known

Order Attachment for Woocommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

Order Attachment for Woocommerce Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

8 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

18% escaped45 total outputs

Data Flows

All sanitized

Data Flow Analysis

1 flows

<phoen_attachment_setting> (includes\phoen_attachment_setting.php:0)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

Order Attachment for Woocommerce Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 6

actionadmin_menuplugin.php:32

actionadmin_headplugin.php:110

actionadd_meta_boxesplugin.php:128

actionpost_edit_form_tagplugin.php:202

actionsave_post_shop_orderplugin.php:206

actionwoocommerce_account_view-order_endpointplugin.php:268

Maintenance & Trust

Order Attachment for Woocommerce Maintenance & Trust

Maintenance Signals

WordPress version tested5.3.21

Last updatedJan 24, 2020

PHP min version

Downloads10K

Community Trust

Rating60/100

Number of ratings4

Active installs100

Alternatives

Order Attachment for Woocommerce Alternatives

Sequential Order Numbers for WooCommerce

woocommerce-sequential-order-numbers

100

This plugin extends WooCommerce by setting sequential order numbers for new orders.

10K No CVEs

WC Order Test

woo-order-test

100

Test your WooCommerce order process in seconds to ensure your checkout works correctly.

7K No CVEs

GSheetConnector for WC

wc-gsheetconnector

Google Sheet Integration for WooCommerce Plugin, Addon plugin of WooCommerce - Helps to send the orders directly to Google Sheets in a real-time.

3K 3 CVEs

Dashify: WooCommerce admin dashboard theme

dashify

100

A modern design and UI for the WooCommerce admin. Manage, search, and navigate orders faster. Make the WordPress admin dashboard ecommerce-focused.

1K No CVEs

Order Status History for WooCommerce

order-status-history-for-woocommerce

100

Speed up your daily processing of orders by getting to know more about who's ordering. Themed order status color swatches, Reports, CSV, free.

1K No CVEs

Developer Profile

Order Attachment for Woocommerce Developer Profile

Phoeniixx

25 plugins · 5K total installs

trust score

Avg Security Score

87/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Order Attachment for Woocommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/order-attachment-for-woocommerce/assets/css/admin_jquery_css_backend.css

HTML / DOM Fingerprints

CSS Classes

phoen_new_Attachmentphoe-file-data-boxwoo-nav-tab-wrapper

Data Attributes

data-attachment_namedata-order_iddata-namedata-gallery_upload_url

JS Globals

phoen_woo_order_Attachment

FAQ