WP-Safety

Shipbubble – Shipping Automation for Woocommerce Security & Risk Analysis

wordpress.org/plugins/shipbubble

[youtube https://www.youtube.com/watch?v=eGxMxB0QbXc]

80 active installs v2.10.4 PHP 5.6+ WP 4.0+ Updated Dec 22, 2025
deliverieslogisticsmultiple-courierspost-purchase-experienceshipping-rates
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Shipbubble – Shipping Automation for Woocommerce Safe to Use in 2026?

Generally Safe

Score 100/100

Shipbubble – Shipping Automation for Woocommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The "shipbubble" v2.10.4 plugin exhibits a generally good security posture based on the provided static analysis. All identified entry points, including AJAX handlers, are protected by either nonce or capability checks, which is a strong indicator of robust authentication and authorization practices. The plugin also demonstrates excellent SQL query hygiene, utilizing prepared statements exclusively. Furthermore, the absence of unsanitized paths in taint analysis and a clean vulnerability history with no recorded CVEs contribute to a positive security outlook.

Key Concerns

  • Usage of 'unserialize' function
  • Output escaping is not fully implemented
Vulnerabilities
None known

Shipbubble – Shipping Automation for Woocommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Shipbubble – Shipping Automation for Woocommerce Release Timeline

v2.10.4Current
v2.10.3
v2.10.2
v2.10.1
v2.10
v2.9.2
v2.9.1
v2.9
Code Analysis
Analyzed Mar 16, 2026

Shipbubble – Shipping Automation for Woocommerce Code Analysis

Dangerous Functions
6
Raw SQL Queries
0
0 prepared
Unescaped Output
25
131 escaped
Nonce Checks
7
Capability Checks
9
File Operations
0
External Requests
9
Bundled Libraries
0

Dangerous Functions Found

unserialize$shipmentPayload = unserialize(shipbubble_get_order_meta($orderId, 'shipbubble_shipment_details'));admin\woocommerce\async-create-shipment.php:42
unserialize$checkoutPayload = unserialize(shipbubble_get_order_meta($orderId, 'sb_shipment_meta'));admin\woocommerce\async-create-shipment.php:49
unserialize$shipmentDetailsArray = unserialize($serializedShipment);admin\woocommerce\orders.php:63
unserializereturn is_string($str) && ($str == serialize(false) || @unserialize($str) !== false);includes\core-methods.php:411
unserialize$shipmentMeta = unserialize(shipbubble_get_order_meta($order_id, 'sb_shipment_meta'));shipbubble.php:369
unserialize$shipmentDetailsArray = unserialize(shipbubble_get_order_meta($order_id, 'shipbubble_shipment_detailshipbubble.php:383

Output Escaping

84% escaped156 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

4 flows
shipbubble_initiate_order_shipment (admin\woocommerce\async-create-shipment.php:31)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Shipbubble – Shipping Automation for Woocommerce Attack Surface

Entry Points9
Unprotected0

AJAX Handlers 9

authwp_ajax_initiate_order_shipmentadmin\woocommerce\async-create-shipment.php:90
authwp_ajax_initiate_validate_sender_addressadmin\woocommerce\async-validate-address.php:92
authwp_ajax_shipbubble_switch_modeadmin\woocommerce\async-validate-address.php:126
authwp_ajax_shipbubble_toggle_local_pickupadmin\woocommerce\async-validate-address.php:152
authwp_ajax_validate_api_keysadmin\wordpress\async-validate-auth.php:68
authwp_ajax_request_shipping_ratespublic\async-checkout-couriers.php:125
noprivwp_ajax_request_shipping_ratespublic\async-checkout-couriers.php:126
authwp_ajax_shipbubble_request_pickup_addresspublic\async-checkout-couriers.php:155
noprivwp_ajax_shipbubble_request_pickup_addresspublic\async-checkout-couriers.php:156
WordPress Hooks 54
actionadmin_menuadmin\settings\settings-menu.php:4
actionadmin_enqueue_scriptsadmin\settings\settings-menu.php:66
actionadmin_enqueue_scriptsadmin\woocommerce\async-create-shipment.php:27
actionadmin_enqueue_scriptsadmin\woocommerce\enqueue-styles.php:21
actionwoocommerce_admin_order_data_after_billing_addressadmin\woocommerce\orders.php:5
filtermanage_edit-shop_order_columnsadmin\woocommerce\orders.php:134
actionmanage_shop_order_posts_custom_columnadmin\woocommerce\orders.php:155
filteris_protected_metaadmin\woocommerce\orders.php:204
filteris_protected_metaadmin\woocommerce\orders.php:210
filteris_protected_metaadmin\woocommerce\orders.php:216
filteris_protected_metaadmin\woocommerce\orders.php:222
filteris_protected_metaadmin\woocommerce\orders.php:228
actionadd_meta_boxesadmin\woocommerce\orders.php:239
actionwoocommerce_admin_order_data_after_billing_addressadmin\woocommerce\orders.php:310
actionwoocommerce_shipping_initadmin\woocommerce\shipping-settings.php:218
filterwoocommerce_shipping_methodsadmin\woocommerce\shipping-settings.php:226
filterwoocommerce_generate_shipbubble_switch_htmladmin\woocommerce\shipping-settings.php:228
actionadmin_menuadmin\wordpress\settings-menu.php:40
actionadmin_initadmin\wordpress\settings-register.php:73
filterwfacp_show_shipping_optionsincludes\compatibilities.php:4
filterwfacp_show_shipping_package_nameincludes\compatibilities.php:5
filterwfacp_display_shipping_content_at_topincludes\compatibilities.php:6
actionwfacp_before_process_checkout_template_loaderincludes\compatibilities.php:8
actionwfacp_after_checkout_page_foundincludes\compatibilities.php:9
actionwfacp_internal_cssincludes\compatibilities.php:11
actionwfacp_before_shipping_calculator_fieldincludes\compatibilities.php:18
actionwfacp_after_shipping_calculator_fieldincludes\compatibilities.php:22
actionwp_enqueue_scriptspublic\async-checkout-couriers.php:16
actionwoocommerce_checkout_before_order_reviewpublic\woocommerce\checkout.php:3
actionwp_footerpublic\woocommerce\checkout.php:122
filterwoocommerce_package_ratespublic\woocommerce\checkout.php:248
actionwoocommerce_checkout_update_order_reviewpublic\woocommerce\checkout.php:340
actionwp_enqueue_scriptspublic\woocommerce\enqueue-styles.php:21
actionplugins_loadedshipbubble.php:106
actionadmin_initshipbubble.php:159
filterplugin_action_linksshipbubble.php:168
filterwoocommerce_package_ratesshipbubble.php:172
filterwoocommerce_shipping_packagesshipbubble.php:194
filterwoocommerce_cart_shipping_packagesshipbubble.php:195
filterwoocommerce_order_button_htmlshipbubble.php:208
actionwoocommerce_checkout_update_order_metashipbubble.php:227
actionwoocommerce_thankyoushipbubble.php:342
actionwoocommerce_order_status_pending_to_processingshipbubble.php:343
actionwoocommerce_before_checkout_processshipbubble.php:411
actionwoocommerce_checkout_order_processedshipbubble.php:412
actionwp_enqueue_scriptsshipbubble.php:495
actionadmin_enqueue_scriptsshipbubble.php:496
actionbefore_woocommerce_initshipbubble.php:498
actionadmin_initshipbubble.php:506
actionall_admin_noticesshipbubble.php:520
filterwoocommerce_shipping_methodsshipbubble.php:540
actionwoocommerce_shipping_initshipbubble.php:604
filterwoocommerce_shipping_methodsshipbubble.php:613
actionadmin_initshipbubble.php:615
Maintenance & Trust

Shipbubble – Shipping Automation for Woocommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedDec 22, 2025
PHP min version5.6
Downloads4K

Community Trust

Rating100/100
Number of ratings1
Active installs80
Alternatives

Shipbubble – Shipping Automation for Woocommerce Alternatives

Cyke Logistics

Cyke Logistics

cyke-logistics

A
92

Cyke official Woocommerce Plugin. Send delivery orders to your service provider right after any purchase on your website.

10 No CVEs
Ship Quik shipping

Ship Quik shipping

ship-quik

A
92

Ship-Quik: Simplifying Shipping, Saving Time

0 No CVEs
Printful Integration for WooCommerce

Printful Integration for WooCommerce

printful-shipping-for-woocommerce

A
98

Grow your store with the top print-on-demand dropshipping plugin

50K 2 CVEs
WC Hide Shipping Methods

WC Hide Shipping Methods

wc-hide-shipping-methods

A
100

This plugin automatically hides all other shipping methods when "Free Shipping" is available, while allowing you to retain "Local Picku …

20K No CVEs
Shiprocket

Shiprocket

shiprocket

B
78

Auto Sync your Woocommerce store orders & ship them at lowest shipping rates. Automate your shipping, save time & money.

10K 1 unpatched
Developer Profile

Shipbubble – Shipping Automation for Woocommerce Developer Profile

shipbubble

1 plugin · 80 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Shipbubble – Shipping Automation for Woocommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/shipbubble/public/css/checkout.css/wp-content/plugins/shipbubble/public/css/styles.css/wp-content/plugins/shipbubble/public/js/checkout.js/wp-content/plugins/shipbubble/public/js/shipbubble-api.js/wp-content/plugins/shipbubble/public/js/shipbubble-checkout-api.js/wp-content/plugins/shipbubble/public/js/shipbubble-couriers.js/wp-content/plugins/shipbubble/public/js/shipbubble-package-info.js/wp-content/plugins/shipbubble/public/js/shipbubble-shipping.js
Script Paths
/wp-content/plugins/shipbubble/public/js/shipbubble-couriers.js/wp-content/plugins/shipbubble/public/js/shipbubble-checkout-api.js/wp-content/plugins/shipbubble/public/js/shipbubble-package-info.js/wp-content/plugins/shipbubble/public/js/shipbubble-shipping.js/wp-content/plugins/shipbubble/public/js/checkout.js/wp-content/plugins/shipbubble/public/js/shipbubble-api.js
Version Parameters
shipbubble/style.css?ver=shipbubble/checkout.css?ver=shipbubble/shipbubble-shipping.js?ver=shipbubble/shipbubble-couriers.js?ver=shipbubble/shipbubble-package-info.js?ver=shipbubble/shipbubble-checkout-api.js?ver=shipbubble/shipbubble-api.js?ver=shipbubble/checkout.js?ver=

HTML / DOM Fingerprints

CSS Classes
shipbubble-checkout-couriersshipbubble-package-infoshipbubble-shipping-optionsshipbubble-shipping-method-label
Data Attributes
data-shipbubble-courier-listdata-shipbubble-shipping-pricedata-shipbubble-extra-chargesdata-shipbubble-api-key
JS Globals
shipbubble_couriersshipbubble_checkout_apishipbubble_package_infoshipbubble_shippingshipbubble_checkoutshipbubble_api
REST Endpoints
/wp-json/shipbubble/v1/get_couriers/wp-json/shipbubble/v1/validate_address/wp-json/shipbubble/v1/create_shipment
FAQ

Frequently Asked Questions about Shipbubble – Shipping Automation for Woocommerce