Order Barcode for WC Security & Risk Analysis

wordpress.org/plugins/order-barcode-for-wc

Order Barcode for WC is a plugin you can add for your ecommerce site. You can use for your business.

10 active installs v0.1.1 PHP 7.0+ WP 5.2+ Updated Jan 10, 2024
barcodebarcode-scanorder-barcodeorderbarcodeqrcode
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Order Barcode for WC Safe to Use in 2026?

Generally Safe

Score 85/100

Order Barcode for WC has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2yr ago
Risk Assessment

The order-barcode-for-wc plugin version 0.1.1 exhibits a mixed security posture. While it demonstrates good practices in some areas, such as using prepared statements for all SQL queries and having a high percentage of properly escaped output, significant concerns exist regarding its attack surface and authorization mechanisms. The presence of one AJAX handler without any authentication or capability checks presents a direct vulnerability. This unprotected entry point could potentially be exploited by unauthenticated users, leading to unintended actions or information disclosure, depending on the functionality it exposes.

The vulnerability history is clean, with no known CVEs or past vulnerabilities. This is a positive sign, suggesting that the plugin has not been a target for significant security flaws in the past. However, the lack of past vulnerabilities does not negate the immediate risks identified in the static analysis. The taint analysis also reports no flows, which is good, but it analyzed zero flows in total, so this metric is not conclusive.

In conclusion, the plugin has strengths in its handling of SQL and output escaping, which are fundamental security practices. Nevertheless, the critical absence of authorization checks on its AJAX endpoint is a severe weakness that significantly elevates its risk profile. This oversight needs immediate attention to prevent potential exploitation.

Key Concerns

  • Unprotected AJAX handler
  • Missing nonce checks on AJAX
  • Missing capability checks on AJAX
Vulnerabilities
None known

Order Barcode for WC Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Order Barcode for WC Release Timeline

No version history available.
Code Analysis
Analyzed Apr 16, 2026

Order Barcode for WC Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
21 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

95% escaped22 total outputs
Attack Surface
1 unprotected

Order Barcode for WC Attack Surface

Entry Points1
Unprotected1

AJAX Handlers 1

authwp_ajax_actions-valueinc/order-barcode-class.php:10
WordPress Hooks 10
actionwp_enqueue_scriptsinc/order-barcode-class.php:7
actionadmin_enqueue_scriptsinc/order-barcode-class.php:8
actionadmin_menuinc/order-barcode-class.php:9
actionwoocommerce_order_details_after_order_tableinc/order-barcode-class.php:11
actionwoocommerce_admin_order_data_after_shipping_addressinc/order-barcode-class.php:12
actionwoocommerce_before_thankyouinc/order-barcode-class.php:13
actionwoocommerce_email_customer_detailsinc/order-barcode-class.php:14
actionadmin_noticesorder-barcode-for-wc.php:53
actionplugins_loadedorder-barcode-for-wc.php:57
filterplugin_row_metaorder-barcode-for-wc.php:74
Maintenance & Trust

Order Barcode for WC Maintenance & Trust

Maintenance Signals

WordPress version tested6.3.8
Last updatedJan 10, 2024
PHP min version7.0
Downloads739

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Order Barcode for WC Developer Profile

Sadekur Rahman

3 plugins · 10 total installs

85
trust score
Avg Security Score
87/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Order Barcode for WC

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/order-barcode-for-wc/css/main.css/wp-content/plugins/order-barcode-for-wc/css/adminmain.css/wp-content/plugins/order-barcode-for-wc/js/main.js/wp-content/plugins/order-barcode-for-wc/js/print.min.js/wp-content/plugins/order-barcode-for-wc/js/admin-main.js/wp-content/plugins/order-barcode-for-wc/js/iris.min.js/wp-content/plugins/order-barcode-for-wc/js/cp-active.js
Script Paths
/wp-content/plugins/order-barcode-for-wc/js/main.js/wp-content/plugins/order-barcode-for-wc/js/print.min.js/wp-content/plugins/order-barcode-for-wc/js/admin-main.js/wp-content/plugins/order-barcode-for-wc/js/iris.min.js/wp-content/plugins/order-barcode-for-wc/js/cp-active.js
Version Parameters
order-barcode-for-wc/css/main.css?ver=order-barcode-for-wc/css/adminmain.css?ver=order-barcode-for-wc/js/main.js?ver=order-barcode-for-wc/js/print.min.js?ver=order-barcode-for-wc/js/admin-main.js?ver=order-barcode-for-wc/js/iris.min.js?ver=order-barcode-for-wc/js/cp-active.js?ver=

HTML / DOM Fingerprints

CSS Classes
woocommerce customs
Data Attributes
name="barcod_colours"id="barcod_colours"class="color-picker"
JS Globals
ORDERBARCODEADMINADORDERBARCODE
FAQ

Frequently Asked Questions about Order Barcode for WC