Order Manager Security & Risk Analysis

wordpress.org/plugins/order-manager

Adds order controls for posts and terms

30 active installs v1.1.0 PHP 7.1.0+ WP 5.2+ Updated Oct 14, 2024
order-managerpost-ordersort-postssort-termsterm-order
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Order Manager Safe to Use in 2026?

Generally Safe

Score 92/100

Order Manager has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The "order-manager" plugin version 1.1.0 demonstrates a strong security posture based on the provided static analysis and vulnerability history. The absence of any identified attack surface entry points, dangerous functions, file operations, or external HTTP requests is a significant strength. Furthermore, the complete reliance on prepared statements for SQL queries and a high percentage of properly escaped output indicate good development practices in preventing common injection and cross-site scripting vulnerabilities. The presence of nonce and capability checks, though limited in number, shows an awareness of securing sensitive operations.

Key Concerns

  • Limited nonce and capability checks observed
  • Some outputs are not properly escaped
Vulnerabilities
None known

Order Manager Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Order Manager Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
3
32 escaped
Nonce Checks
4
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

91% escaped35 total outputs
Attack Surface

Order Manager Attack Surface

Entry Points0
Unprotected0
Maintenance & Trust

Order Manager Maintenance & Trust

Maintenance Signals

WordPress version tested6.6.5
Last updatedOct 14, 2024
PHP min version7.1.0
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs30
Developer Profile

Order Manager Developer Profile

Doug Wollison

7 plugins · 1K total installs

87
trust score
Avg Security Score
90/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Order Manager

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/order-manager/css/admin.css/wp-content/plugins/order-manager/js/jquery.mjs.nestedSortable.js/wp-content/plugins/order-manager/js/admin.js
Script Paths
/wp-content/plugins/order-manager/js/jquery.mjs.nestedSortable.js/wp-content/plugins/order-manager/js/admin.js
Version Parameters
order-manager/css/admin.css?ver=order-manager/js/jquery.mjs.nestedSortable.js?ver=order-manager/js/admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
ordermanager-post-orderordermanager-term-orderordermanager-taxonomy-fields
HTML Comments
<!-- order-manager-post-order-wrap --><!-- order-manager-term-order-wrap --><!-- order-manager-taxonomy-field -->
Data Attributes
data-ordermanager-post-typedata-ordermanager-taxonomydata-ordermanager-term-id
JS Globals
ordermanagerL10n
FAQ

Frequently Asked Questions about Order Manager