WP All Export – Product Export Add-On for WooCommerce Security & Risk Analysis

wordpress.org/plugins/product-export-for-woocommerce

Drag & drop to export products to CSV, Excel, or XML files of any format. Supports variations, images, attributes, brands, and more with powerful …

10K active installs v1.0.5 PHP 7.4+ WP 5.0+ Updated Jan 30, 2026
csv-exportexport-productsexport-woocommerce-productsproduct-exportwoocommerce-product-export
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WP All Export – Product Export Add-On for WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

WP All Export – Product Export Add-On for WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The plugin "product-export-for-woocommerce" v1.0.5 exhibits a generally strong security posture with no known vulnerabilities or critical taint flows. The static analysis reveals an extremely small attack surface with zero entry points identified as unprotected. Code quality appears high, with a significant majority of outputs properly escaped and most SQL queries utilizing prepared statements. The absence of file operations and external HTTP requests further reduces potential attack vectors. However, two instances of the `unserialize` function are flagged as potentially dangerous. While the lack of nonce or capability checks on any identified entry points isn't immediately alarming given the zero attack surface, it's a practice that warrants attention if the attack surface were to expand in future versions. The plugin's clean vulnerability history is a positive indicator of its security maintenance.

Key Concerns

  • Dangerous function: unserialize used
  • No nonce checks on entry points
  • No capability checks on entry points
Vulnerabilities
None known

WP All Export – Product Export Add-On for WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

WP All Export – Product Export Add-On for WooCommerce Code Analysis

Dangerous Functions
2
Raw SQL Queries
1
4 prepared
Unescaped Output
2
25 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Dangerous Functions Found

unserialize$result[$i][$k] = unserialize($v);models\model\list.php:94
unserialize$result[$k] = unserialize($v);models\model\record.php:41

SQL Query Safety

80% prepared5 total queries

Output Escaping

93% escaped27 total outputs
Attack Surface

WP All Export – Product Export Add-On for WooCommerce Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
actionadmin_initwpae-woocommerce-product-add-on.php:153
actioninitwpae-woocommerce-product-add-on.php:154
Maintenance & Trust

WP All Export – Product Export Add-On for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 30, 2026
PHP min version7.4
Downloads117K

Community Trust

Rating94/100
Number of ratings23
Active installs10K
Developer Profile

WP All Export – Product Export Add-On for WooCommerce Developer Profile

WP All Import

22 plugins · 207K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
1036 days
View full developer profile
Detection Fingerprints

How We Detect WP All Export – Product Export Add-On for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/product-export-for-woocommerce/assets/css/bootstrap.css/wp-content/plugins/product-export-for-woocommerce/assets/css/bootstrap-theme.css/wp-content/plugins/product-export-for-woocommerce/assets/js/bootstrap.js/wp-content/plugins/product-export-for-woocommerce/assets/js/bootstrap-theme.js/wp-content/plugins/product-export-for-woocommerce/assets/js/vendor/bootstrap/js/bootstrap.min.js/wp-content/plugins/product-export-for-woocommerce/assets/js/vendor/bootstrap/css/bootstrap.min.css/wp-content/plugins/product-export-for-woocommerce/assets/js/vendor/bootstrap/css/bootstrap-theme.min.css/wp-content/plugins/product-export-for-woocommerce/assets/js/vendor/bootstrap/js/bootstrap.js+5 more
Script Paths
/wp-content/plugins/product-export-for-woocommerce/assets/js/bootstrap.js/wp-content/plugins/product-export-for-woocommerce/assets/js/bootstrap-theme.js/wp-content/plugins/product-export-for-woocommerce/assets/js/vendor/bootstrap/js/bootstrap.min.js/wp-content/plugins/product-export-for-woocommerce/assets/js/vendor/bootstrap/js/bootstrap.js/wp-content/plugins/product-export-for-woocommerce/assets/js/vendor/bootstrap/js/bootstrap-theme.js/wp-content/plugins/product-export-for-woocommerce/assets/js/vendor/bootstrap/js/npm.js+2 more
Version Parameters
product-export-for-woocommerce/assets/css/bootstrap.css?ver=product-export-for-woocommerce/assets/css/bootstrap-theme.css?ver=product-export-for-woocommerce/assets/js/bootstrap.js?ver=product-export-for-woocommerce/assets/js/bootstrap-theme.js?ver=product-export-for-woocommerce/assets/js/vendor/bootstrap/js/bootstrap.min.js?ver=product-export-for-woocommerce/assets/js/vendor/bootstrap/css/bootstrap.min.css?ver=product-export-for-woocommerce/assets/js/vendor/bootstrap/css/bootstrap-theme.min.css?ver=product-export-for-woocommerce/assets/js/vendor/bootstrap/js/bootstrap.js?ver=product-export-for-woocommerce/assets/js/vendor/bootstrap/js/bootstrap-theme.js?ver=product-export-for-woocommerce/assets/js/vendor/bootstrap/js/npm.js?ver=product-export-for-woocommerce/assets/js/vendor/bootstrap/js/bootstrap.bundle.min.js?ver=product-export-for-woocommerce/assets/js/vendor/bootstrap/js/bootstrap.bundle.js?ver=product-export-for-woocommerce/assets/css/frontend.css?ver=

HTML / DOM Fingerprints

CSS Classes
pmwpe_formpmwpe_export_form
HTML Comments
<!-- Plugin root dir with forward slashes as directory separator regardless of actuall DIRECTORY_SEPARATOR value --><!-- Plugin root url for referencing static content --><!-- Plugin prefix for making names unique (be aware that this variable is used in conjuction with naming convention, i.e. in order to change it one must not only modify this constant but also rename all constants, classes and functions which names composed using this prefix) --><!-- Main plugin file, Introduces MVC pattern -->+12 more
Data Attributes
data-pmwpe-toggledata-pmwpe-targetdata-pmwpe-dismiss
JS Globals
PMWPE_ROOT_DIRPMWPE_ROOT_URLPMWPE_PREFIXPMWPE_VERSIONPMWPE_EDITIONpmwpe_autoloader_instance
FAQ

Frequently Asked Questions about WP All Export – Product Export Add-On for WooCommerce