WP-Safety

SF Autosuggest Product Search Security & Risk Analysis

wordpress.org/plugins/sf-autosuggest-product-search

The plugin adds the functionality to use an autosuggest search for Woocommerce.

20 active installs v2.0.2 PHP 7.0+ WP 3.8.8+ Updated Jan 22, 2026
ecommerceproductssearchwoocommercewoocommerce-search
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is SF Autosuggest Product Search Safe to Use in 2026?

Generally Safe

Score 100/100

SF Autosuggest Product Search has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The 'sf-autosuggest-product-search' plugin v2.0.2 exhibits a mixed security posture. On the positive side, it demonstrates good practices by using prepared statements for all SQL queries and has no recorded vulnerabilities (CVEs). The absence of taint analysis findings and dangerous functions suggests a clean codebase in those regards. However, significant concerns arise from the attack surface. With 3 out of 5 entry points lacking authentication checks, this plugin presents a substantial risk of unauthorized access and manipulation.

Key Concerns

  • Unprotected AJAX handlers
  • Low output escaping coverage
  • Missing capability checks
  • Single nonce check for 5 entry points
Vulnerabilities
None known

SF Autosuggest Product Search Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

SF Autosuggest Product Search Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
4 prepared
Unescaped Output
15
32 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
1
Bundled Libraries
0

SQL Query Safety

100% prepared4 total queries

Output Escaping

68% escaped47 total outputs
Attack Surface
3 unprotected

SF Autosuggest Product Search Attack Surface

Entry Points5
Unprotected3

AJAX Handlers 4

authwp_ajax_delete_sf_pa_transientclasses\AdminClass.php:11
authwp_ajax_sf_deactivation_reasonclasses\FeedbackClass.php:11
authwp_ajax_sf_pa_searchsf_products_autosuggest.php:47
noprivwp_ajax_sf_pa_searchsf_products_autosuggest.php:48

Shortcodes 1

[sf_pa_search] sf_products_autosuggest.php:80
WordPress Hooks 8
actionadmin_initclasses\AdminClass.php:9
actionadmin_menuclasses\AdminClass.php:10
actioninitclasses\AdminClass.php:12
actionadmin_footer-plugins.phpclasses\FeedbackClass.php:10
filterpre_get_postsclasses\ResultsPageClass.php:13
actionwp_enqueue_scriptssf_products_autosuggest.php:34
actionadmin_enqueue_scriptssf_products_autosuggest.php:44
actionbefore_woocommerce_initsf_products_autosuggest.php:83
Maintenance & Trust

SF Autosuggest Product Search Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 22, 2026
PHP min version7.0
Downloads2K

Community Trust

Rating100/100
Number of ratings1
Active installs20
Alternatives

SF Autosuggest Product Search Alternatives

WooSearch

WooSearch

woosearch

A
85

WooSearch is a search plugin which provides real-time ajax product search based on WooCommerce.

60 No CVEs
JC Ajax Search for WooCommerce

JC Ajax Search for WooCommerce

jc-ajax-search-for-woocommerce

A
85

JC Ajax Search for WooCommerce allows you to create search forms with different settings to search for products without refreshing the page

0 No CVEs
Ivory Search – WordPress Search Plugin

Ivory Search – WordPress Search Plugin

add-search-to-menu

A
95

Advanced WordPress custom search plugin. Provides Search Form Customizer, WooCommerce Search, AJAX Search & Live Search support!

100K 11 CVEs
FiboSearch – Ajax Search for WooCommerce

FiboSearch – Ajax Search for WooCommerce

ajax-search-for-woocommerce

A
96

The most popular WooCommerce product search plugin. Gives your users a well-designed advanced AJAX search bar with live search suggestions.

100K 3 CVEs
Relevanssi – A Better Search

Relevanssi – A Better Search

relevanssi

B
82

Relevanssi replaces the default search with a partial-match search that sorts results by relevance. It also indexes comments and shortcode content.

100K 17 CVEs
Developer Profile

SF Autosuggest Product Search Developer Profile

simonefontana

1 plugin · 20 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect SF Autosuggest Product Search

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/sf-autosuggest-product-search/assets/css/sf_pa.css/wp-content/plugins/sf-autosuggest-product-search/assets/js/sf_pa.js/wp-content/plugins/sf-autosuggest-product-search/assets/js/sf_pa_admin.js/wp-content/plugins/sf-autosuggest-product-search/assets/css/sf_pa_admin.css/wp-content/plugins/sf-autosuggest-product-search/assets/img/loading.gif
Script Paths
/wp-content/plugins/sf-autosuggest-product-search/assets/js/sf_pa.js/wp-content/plugins/sf-autosuggest-product-search/assets/js/sf_pa_admin.js

HTML / DOM Fingerprints

CSS Classes
sf_pa_search_input_containersf_pa_loadersf_pa_autosuggest_all_res
Data Attributes
id="sf_pa_search_input"class="search-field"name="s"
JS Globals
sf_pa_ajax_object
REST Endpoints
/wp-json/sf_products_autosuggest/v1/search
Shortcode Output
<div class="sf_pa_search_input_container"><input type="search" id="sf_pa_search_input" class="search-field"<img class="sf_pa_loader" src="<style>.sf_pa_autosuggest_all_res
FAQ

Frequently Asked Questions about SF Autosuggest Product Search