Shoppable Social Media Galleries by Sauce Security & Risk Analysis

wordpress.org/plugins/shop-feed-for-instagram-by-snapppt

What is Sauce?

2K active installs v1.2.1 PHP + WP 2.8.0+ Updated Nov 29, 2024
instagramsocial-commercesocial-mediasocial-prooftiktok
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Shoppable Social Media Galleries by Sauce Safe to Use in 2026?

Generally Safe

Score 92/100

Shoppable Social Media Galleries by Sauce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The "shop-feed-for-instagram-by-snapppt" plugin v1.2.1 exhibits a generally good security posture, with no known vulnerabilities or critical issues identified in the provided data. The code analysis shows a positive adherence to security best practices, such as the absence of dangerous functions, the consistent use of prepared statements for all SQL queries, and no identified file operations or external HTTP requests. The lack of recorded vulnerabilities in its history further strengthens this impression, suggesting a history of stable and secure development. However, a significant concern arises from the presence of an unprotected REST API route, which represents a potential entry point for attackers. Additionally, only 50% of output is properly escaped, leaving room for potential Cross-Site Scripting (XSS) vulnerabilities if user-supplied data is involved in the unescaped outputs.

Key Concerns

  • Unprotected REST API route
  • Half of output not properly escaped
Vulnerabilities
None known

Shoppable Social Media Galleries by Sauce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Shoppable Social Media Galleries by Sauce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
2
2 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
1

Bundled Libraries

TinyMCE

Output Escaping

50% escaped4 total outputs
Attack Surface
1 unprotected

Shoppable Social Media Galleries by Sauce Attack Surface

Entry Points2
Unprotected1

REST API Routes 1

GET/wp-json/sauce/v1/versionsnapppt.php:58

Shortcodes 1

[snapppt_embed] snapppt-frontend.php:32
WordPress Hooks 8
actioninitsnapppt-frontend.php:34
actionwoocommerce_thankyousnapppt-frontend.php:75
actionadmin_noticessnapppt-notice.php:46
actionadmin_initsnapppt-notice.php:60
actionadmin_initsnapppt.php:42
actionrest_api_initsnapppt.php:64
actionadmin_initsnapppt.php:88
filterwoocommerce_general_settingssnapppt.php:89
Maintenance & Trust

Shoppable Social Media Galleries by Sauce Maintenance & Trust

Maintenance Signals

WordPress version tested6.6.5
Last updatedNov 29, 2024
PHP min version
Downloads141K

Community Trust

Rating78/100
Number of ratings39
Active installs2K
Developer Profile

Shoppable Social Media Galleries by Sauce Developer Profile

Sauce

1 plugin · 2K total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Shoppable Social Media Galleries by Sauce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/shop-feed-for-instagram-by-snapppt/snapppt-notice.php/wp-content/plugins/shop-feed-for-instagram-by-snapppt/snapppt-frontend.php
Script Paths
https://app.addsauce.com/widgets/widget_loader/
Version Parameters
shop-feed-for-instagram-by-snapppt/snapppt.php?ver=

HTML / DOM Fingerprints

CSS Classes
snapppt-widget
HTML Comments
<!-- Sauce conversion code -->
Data Attributes
embed_typeaccount_id
JS Globals
window.snapppt_order_numberwindow.snapppt_order_totalwindow.snapppt_order_currencywindow.snapppt_accountwindow.snapppt_platform
REST Endpoints
/wp-json/sauce/v1/version
Shortcode Output
[snapppt_embed embed_type="grid"]
FAQ

Frequently Asked Questions about Shoppable Social Media Galleries by Sauce