Frequently Bought Together for LearnDash Security & Risk Analysis

wordpress.org/plugins/saffire-frequently-bought-together-learndash

Frequently Bought Together for LearnDash is a plugin that allows you to display a section that shows courses most usually bought together with the cou …

10 active installs v2.1.1 PHP 7.2+ WP 5.3+ Updated Unknown
bundlescoursescross-sellslearndashupsells
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Frequently Bought Together for LearnDash Safe to Use in 2026?

Generally Safe

Score 100/100

Frequently Bought Together for LearnDash has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

The plugin "saffire-frequently-bought-together-learndash" v2.1.1 exhibits a generally strong security posture based on the provided static analysis and vulnerability history. A key strength is the absence of any recorded vulnerabilities (CVEs) or known issues, indicating a history of stable and secure development. Furthermore, the code shows good practices in handling SQL queries, exclusively using prepared statements, and the taint analysis reveals no concerning flows, which is a significant positive sign. The plugin also demonstrates awareness of WordPress security standards with the inclusion of nonce and capability checks.

Key Concerns

  • 100% of output not properly escaped
  • 25% of output not properly escaped
  • Only 2 capability checks for 4 AJAX handlers
  • Only 3 nonce checks for 4 AJAX handlers
Vulnerabilities
None known

Frequently Bought Together for LearnDash Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Frequently Bought Together for LearnDash Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
8 prepared
Unescaped Output
31
91 escaped
Nonce Checks
3
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
1

Bundled Libraries

Select2

SQL Query Safety

100% prepared8 total queries

Output Escaping

75% escaped122 total outputs
Attack Surface

Frequently Bought Together for LearnDash Attack Surface

Entry Points4
Unprotected0

AJAX Handlers 4

authwp_ajax_ldfbt_free_cartinclude\ldfbt-process-add-cart.php:7
noprivwp_ajax_ldfbt_free_cartinclude\ldfbt-process-add-cart.php:8
authwp_ajax_ldfbt_updateinclude\ldfbt-setting-functions.php:171
noprivwp_ajax_ldfbt_updateinclude\ldfbt-setting-functions.php:172
WordPress Hooks 17
actionlearndash_settings_sections_initinclude\ldfbt-class-setting-fields.php:438
actionin_admin_footerinclude\ldfbt-class-setting-fields.php:446
actionlearndash_settings_page_initinclude\ldfbt-class-setting-page.php:27
actionlearndash_settings_pages_initinclude\ldfbt-class-setting-page.php:45
actionlearndash-course-content-list-afterinclude\ldfbt-frequently-bought-widget.php:7
actionadmin_noticesinclude\ldfbt-setting-functions.php:155
actionadmin_noticesinclude\ldfbt-setting-functions.php:205
actionadd_meta_boxesinclude\ldfbt-widget-metabox.php:148
actionsave_post_sfwd-coursesinclude\ldfbt-widget-metabox.php:170
actionadd_meta_boxesinclude\ldfbt-widget-metabox.php:233
actionadmin_noticessaffire-frequently-bought-together-learndash.php:58
actionplugins_loadedsaffire-frequently-bought-together-learndash.php:62
actionplugins_loadedsaffire-frequently-bought-together-learndash.php:83
actioninitsaffire-frequently-bought-together-learndash.php:98
actionadmin_enqueue_scriptssaffire-frequently-bought-together-learndash.php:112
actioninitsaffire-frequently-bought-together-learndash.php:155
actionbefore_woocommerce_initsaffire-frequently-bought-together-learndash.php:177
Maintenance & Trust

Frequently Bought Together for LearnDash Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedUnknown
PHP min version7.2
Downloads2K

Community Trust

Rating100/100
Number of ratings1
Active installs10
Developer Profile

Frequently Bought Together for LearnDash Developer Profile

SaffireTech

7 plugins · 850 total installs

93
trust score
Avg Security Score
99/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Frequently Bought Together for LearnDash

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/saffire-frequently-bought-together-learndash/assets/css/sweetalert2.min.css/wp-content/plugins/saffire-frequently-bought-together-learndash/assets/js/select2.min.js/wp-content/plugins/saffire-frequently-bought-together-learndash/assets/js/ldfbt-backend.js/wp-content/plugins/saffire-frequently-bought-together-learndash/assets/css/ldfbt-courses-style.css/wp-content/plugins/saffire-frequently-bought-together-learndash/assets/css/font-awesome.min.css/wp-content/plugins/saffire-frequently-bought-together-learndash/assets/css/select2.min.css/wp-content/plugins/saffire-frequently-bought-together-learndash/assets/js/ldfbt-frequent-courses.js/wp-content/plugins/saffire-frequently-bought-together-learndash/assets/js/sweetalert2.all.min.js
Script Paths
/wp-content/plugins/saffire-frequently-bought-together-learndash/assets/js/select2.min.js/wp-content/plugins/saffire-frequently-bought-together-learndash/assets/js/ldfbt-backend.js/wp-content/plugins/saffire-frequently-bought-together-learndash/assets/js/ldfbt-frequent-courses.js/wp-content/plugins/saffire-frequently-bought-together-learndash/assets/js/sweetalert2.all.min.js
Version Parameters
saffire-frequently-bought-together-learndash/assets/css/sweetalert2.min.css?ver=saffire-frequently-bought-together-learndash/assets/js/select2.min.js?ver=saffire-frequently-bought-together-learndash/assets/js/ldfbt-backend.js?ver=saffire-frequently-bought-together-learndash/assets/css/ldfbt-courses-style.css?ver=saffire-frequently-bought-together-learndash/assets/css/font-awesome.min.css?ver=saffire-frequently-bought-together-learndash/assets/css/select2.min.css?ver=saffire-frequently-bought-together-learndash/assets/js/ldfbt-frequent-courses.js?ver=saffire-frequently-bought-together-learndash/assets/js/sweetalert2.all.min.js?ver=

HTML / DOM Fingerprints

CSS Classes
ldfbt_pro_alert_titleldfbt_pro_alert_sub_titleldfbt_popup_point1ldfbt_popup_point2ldfbt_popup_point3ldfbt_popup_point4ldfbt_popup_point5ldfbt_popup_title+5 more
Data Attributes
ldfbt_data
JS Globals
ldfbt_data
FAQ

Frequently Asked Questions about Frequently Bought Together for LearnDash