Product Lister for Etsy Security & Risk Analysis

wordpress.org/plugins/product-lister-etsy

Product Lister for Etsy allows user to sync their WooCommerce store and its products to the Etsy Marketplace.

90 active installs v3.1.2 PHP 5.6+ WP 4.7+ Updated Mar 14, 2024
etsyupload-productswoocommerce
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Product Lister for Etsy Safe to Use in 2026?

Generally Safe

Score 85/100

Product Lister for Etsy has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2yr ago
Risk Assessment

The product-lister-etsy v3.1.2 plugin exhibits a mixed security posture. While it demonstrates good practices like a high percentage of prepared SQL statements and proper output escaping, it has significant vulnerabilities in its attack surface. The plugin exposes 5 AJAX handlers, with a concerning 4 of them lacking authentication checks. Furthermore, taint analysis reveals 5 high-severity flows with unsanitized paths, indicating potential for injection vulnerabilities if these flows are reachable and exploitable. The absence of any recorded CVEs or past vulnerabilities is a positive sign, suggesting a generally well-maintained codebase. However, the identified attack surface and taint analysis issues represent a substantial risk that outweighs the lack of historical vulnerabilities. Improvements in authentication for AJAX handlers and thorough sanitization of tainted data are critical to enhancing the plugin's security.

Key Concerns

  • High severity taint flows
  • AJAX handlers without auth checks
  • Unsanitized paths in taint flows
Vulnerabilities
None known

Product Lister for Etsy Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Product Lister for Etsy Code Analysis

Dangerous Functions
0
Raw SQL Queries
1
12 prepared
Unescaped Output
29
410 escaped
Nonce Checks
22
Capability Checks
0
File Operations
12
External Requests
0
Bundled Libraries
0

SQL Query Safety

92% prepared13 total queries

Output Escaping

93% escaped439 total outputs
Data Flows
8 unsanitized

Data Flow Analysis

20 flows8 with unsanitized paths
renderHTML (admin\template\view\class-ced-view-products.php:385)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
4 unprotected

Product Lister for Etsy Attack Surface

Entry Points5
Unprotected4

AJAX Handlers 5

authwp_ajax_ced_etsy_update_inventoryadmin\class-etsy-integration-admin.php:61
noprivwp_ajax_ced_etsy_update_inventoryadmin\class-etsy-integration-admin.php:62
authwp_ajax_ced_etsy_sync_existing_productsadmin\class-etsy-integration-admin.php:64
noprivwp_ajax_ced_etsy_sync_existing_productsadmin\class-etsy-integration-admin.php:65
authwp_ajax_ced_etsy_load_more_logsadmin\class-etsy-integration-admin.php:67
WordPress Hooks 24
actionced_show_connected_accountsadmin\class-etsy-integration-admin.php:58
actionced_show_connected_accounts_detailsadmin\class-etsy-integration-admin.php:59
actionadmin_footeradmin\class-etsy-integration-admin.php:73
actionadmin_noticesincludes\ced-etsy-core-functions.php:113
actionplugins_loadedincludes\class-etsy-integration.php:133
actionadmin_enqueue_scriptsincludes\class-etsy-integration.php:145
actionadmin_enqueue_scriptsincludes\class-etsy-integration.php:146
actionadmin_headincludes\class-etsy-integration.php:147
actionadmin_menuincludes\class-etsy-integration.php:154
filterced_sales_channels_listincludes\class-etsy-integration.php:155
filterced_marketplaces_logged_arrayincludes\class-etsy-integration.php:156
filtercron_schedulesincludes\class-etsy-integration.php:157
actionwoocommerce_product_after_variable_attributesincludes\class-etsy-integration.php:176
filterwoocommerce_product_data_tabsincludes\class-etsy-integration.php:178
actionwoocommerce_process_product_metaincludes\class-etsy-integration.php:180
actionwoocommerce_save_product_variationincludes\class-etsy-integration.php:182
filterwoocommerce_product_data_panelsincludes\class-etsy-integration.php:184
actionsave_postincludes\class-etsy-integration.php:186
actionced_etsy_inventory_scheduler_job_includes\class-etsy-integration.php:199
actionced_etsy_sync_existing_products_job_includes\class-etsy-integration.php:200
actionced_sales_channel_include_templateincludes\class-etsy-integration.php:201
actionbefore_woocommerce_initproduct-lister-etsy.php:126
actionadmin_noticesproduct-lister-etsy.php:140
actionadmin_initproduct-lister-etsy.php:142
Maintenance & Trust

Product Lister for Etsy Maintenance & Trust

Maintenance Signals

WordPress version tested6.4.8
Last updatedMar 14, 2024
PHP min version5.6
Downloads8K

Community Trust

Rating72/100
Number of ratings5
Active installs90
Developer Profile

Product Lister for Etsy Developer Profile

cedcommerce

21 plugins · 5K total installs

67
trust score
Avg Security Score
83/100
Avg Patch Time
204 days
View full developer profile
Detection Fingerprints

How We Detect Product Lister for Etsy

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/product-lister-etsy/assets/css/style.css/wp-content/plugins/product-lister-etsy/assets/js/main.js/wp-content/plugins/product-lister-etsy/assets/css/ced-etsy-common.css/wp-content/plugins/product-lister-etsy/assets/css/ced-etsy-admin.css
Script Paths
/wp-content/plugins/product-lister-etsy/assets/js/main.js
Version Parameters
/wp-content/plugins/product-lister-etsy/assets/css/style.css?ver=/wp-content/plugins/product-lister-etsy/assets/js/main.js?ver=/wp-content/plugins/product-lister-etsy/assets/css/ced-etsy-common.css?ver=/wp-content/plugins/product-lister-etsy/assets/css/ced-etsy-admin.css?ver=

HTML / DOM Fingerprints

CSS Classes
ced_etsy_trademark_noticeced_configuration_plugin_main
HTML Comments
<!-- The term 'Etsy' is a trademark of Etsy, Inc. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc. -->
Data Attributes
data-ced_etsy_shop_name
JS Globals
ced_etsy_params
FAQ

Frequently Asked Questions about Product Lister for Etsy