WP-Safety

ShopMagic Abandoned Cart Recovery for WooCommerce Security & Risk Analysis

wordpress.org/plugins/shopmagic-abandoned-carts

Allows saving customer details on partial WooCommerce purchases and sending abandoned cart emails.

3K active installs v2.2.35 PHP 7.4+ WP 5.0+ Updated Mar 7, 2026
abandoned-cartabandoned-cart-emailabandoned-cartscart-abandonmentcart-recovery
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is ShopMagic Abandoned Cart Recovery for WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

ShopMagic Abandoned Cart Recovery for WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 27d ago
Risk Assessment

The shopmagic-abandoned-carts plugin v2.2.35 exhibits a generally strong security posture based on the provided static analysis. It demonstrates good practices by implementing nonce checks and capability checks on its entry points, and a high percentage of its SQL queries utilize prepared statements. Furthermore, the absence of critical or high-severity taint flows and file operations suggests a well-secured codebase against common injection and file manipulation attacks. The lack of any recorded historical vulnerabilities further bolsters this assessment.

Key Concerns

  • Potential for unescaped output
  • SQL queries not fully using prepared statements
Vulnerabilities
None known

ShopMagic Abandoned Cart Recovery for WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

ShopMagic Abandoned Cart Recovery for WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
2
11 prepared
Unescaped Output
12
34 escaped
Nonce Checks
5
Capability Checks
4
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

85% prepared13 total queries

Output Escaping

74% escaped46 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
processAjaxNoticeDismiss (vendor_prefixed\wp-notice\src\WPDesk\Notice\AjaxHandler.php:72)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

ShopMagic Abandoned Cart Recovery for WooCommerce Attack Surface

Entry Points1
Unprotected0

AJAX Handlers 1

authwp_ajax_wpdesk_notice_dismissvendor_prefixed\wp-notice\src\WPDesk\Notice\AjaxHandler.php:42
WordPress Hooks 42
filtershopmagic/core/statistics/top_statssrc\Admin\Statistics.php:19
actionshopmagic/carts/abandoned_cartsrc\Event\AbandonedCartEvent.php:109
actionwpsrc\Frontend\CartRestore.php:77
actionwpsrc\Frontend\ExitIntent.php:48
actionwp_print_footer_scriptssrc\Frontend\ExitIntent.php:59
actionwp_enqueue_scriptssrc\Frontend\ExitIntent.php:60
actionshopmagic/core/cron/one_minutesrc\HookEmitter\CartAbandoner.php:41
actionwoocommerce_add_to_cartsrc\Interceptor\CartInterceptor.php:67
actionwoocommerce_applied_couponsrc\Interceptor\CartInterceptor.php:68
actionwoocommerce_removed_couponsrc\Interceptor\CartInterceptor.php:69
actionwoocommerce_cart_item_removedsrc\Interceptor\CartInterceptor.php:70
actionwoocommerce_cart_item_restoredsrc\Interceptor\CartInterceptor.php:71
actionwoocommerce_before_cart_item_quantity_zerosrc\Interceptor\CartInterceptor.php:72
actionwoocommerce_after_cart_item_quantity_updatesrc\Interceptor\CartInterceptor.php:73
actionshopmagic/core/customer_interceptor/changedsrc\Interceptor\CartInterceptor.php:74
actionwoocommerce_after_calculate_totalssrc\Interceptor\CartInterceptor.php:76
actionwp_loginsrc\Interceptor\CartInterceptor.php:78
actionwpsrc\Interceptor\CartInterceptor.php:79
actionshutdownsrc\Interceptor\CartInterceptor.php:81
actionwoocommerce_checkout_order_processedsrc\Interceptor\CartInterceptor.php:83
actionwoocommerce_order_status_changedsrc\Interceptor\CartInterceptor.php:88
actionshopmagic/core/customer/merge_guestsrc\Interceptor\CartMergeOnUserRegistration.php:40
filtershopmagic/core/placeholder/products_ordered/templatessrc\Placeholder\CartItems.php:34
actionshopmagic/core/initialized/v2src\Plugin.php:45
actionshopmagic/core/rest/initsrc\Plugin.php:88
actionadmin_enqueue_scriptsvendor_prefixed\wp-builder\src\Plugin\AbstractPlugin.php:148
actionwp_enqueue_scriptsvendor_prefixed\wp-builder\src\Plugin\AbstractPlugin.php:149
actionadmin_enqueue_scriptsvendor_prefixed\wp-notice\src\WPDesk\Notice\AjaxHandler.php:41
actionadmin_noticesvendor_prefixed\wp-notice\src\WPDesk\Notice\Notice.php:144
actionadmin_footervendor_prefixed\wp-notice\src\WPDesk\Notice\Notice.php:145
filterwp_autoloader_loader_loaders_to_loadvendor_prefixed\wp-plugin-flow-common\src\Initialization\PluginDisablerByFileTrait.php:45
filterwp_autoloader_loader_loaders_to_createvendor_prefixed\wp-plugin-flow-common\src\Initialization\PluginDisablerByFileTrait.php:46
actionplugins_loadedvendor_prefixed\wp-plugin-flow-common\src\Initialization\Simple\SimplePaidStrategy.php:58
actionplugins_loadedvendor_prefixed\wp-plugin-flow-common\src\PluginBootstrap.php:81
actionbefore_woocommerce_initvendor_prefixed\wp-plugin-flow-common\src\PluginBootstrap.php:88
actionactivated_pluginvendor_prefixed\wp-plugin-flow-common\src\PluginBootstrap.php:102
filterdoing_it_wrong_trigger_errorvendor_prefixed\wp-plugin-flow-common\src\PluginBootstrap.php:123
actionadmin_enqueue_scriptsvendor_prefixed\wp-wpdesk-tracker\src\PSR\WPDesk\Tracker\Assets.php:28
actionadmin_menuvendor_prefixed\wp-wpdesk-tracker\src\PSR\WPDesk\Tracker\OptInPage.php:35
actionadmin_initvendor_prefixed\wp-wpdesk-tracker\src\PSR\WPDesk\Tracker\OptInPage.php:36
actionadmin_noticesvendor_prefixed\wp-wpdesk-tracker\src\PSR\WPDesk\Tracker\OptOut.php:28
filterplugin_row_metavendor_prefixed\wp-wpdesk-tracker\src\PSR\WPDesk\Tracker\PluginActionLinks.php:36
Maintenance & Trust

ShopMagic Abandoned Cart Recovery for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 7, 2026
PHP min version7.4
Downloads95K

Community Trust

Rating100/100
Number of ratings4
Active installs3K
Alternatives

ShopMagic Abandoned Cart Recovery for WooCommerce Alternatives

CartBounty – Save and recover abandoned carts for WooCommerce

CartBounty – Save and recover abandoned carts for WooCommerce

woo-save-abandoned-carts

A
99

Save abandoned carts and send automated abandoned cart recovery messages. Get more leads, reduce cart abandonment, and increase sales.

10K 1 CVE
Abandoned Cart Recovery for WooCommerce

Abandoned Cart Recovery for WooCommerce

woo-abandoned-cart-recovery

A
100

A simple, effective solution to capture abandoned carts and auto-send reminders. Track logs and generate reports on carts, emails, and more

4K 1 CVE
Abandoned Cart Reports For WooCommerce

Abandoned Cart Reports For WooCommerce

wc-abandoned-carts-by-small-fish-analytics

A
85

A simple plugin to see how many carts and which products your customers are abandoning

2K No CVEs
Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD

Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD

cart-lift

A
99

Track abandoned carts and send automated, customizable abandoned cart recovery emails. Get more leads, reduce cart abandonment, and increase revenue.

1K 2 CVEs
Recapture for Easy Digital Downloads

Recapture for Easy Digital Downloads

recapture-for-edd

A
100

Recapture is the easiest and most effective way to recover abandoned carts and do email marketing for your Easy Digital Downloads (EDD) store in WordP …

700 No CVEs
Developer Profile

ShopMagic Abandoned Cart Recovery for WooCommerce Developer Profile

wpdesk

23 plugins · 127K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
135 days
View full developer profile
Detection Fingerprints

How We Detect ShopMagic Abandoned Cart Recovery for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/shopmagic-abandoned-carts/js/exit-intent.min.css/wp-content/plugins/shopmagic-abandoned-carts/js/exit-intent.min.js
Version Parameters
shopmagic-abandoned-carts/js/exit-intent.min.css?ver=shopmagic-abandoned-carts/js/exit-intent.min.js?ver=

HTML / DOM Fingerprints

CSS Classes
shopmagic-exit-intent-modal
HTML Comments
<!-- wp:paragraph --><!-- /wp:paragraph --><!-- wp:heading --><!-- /wp:heading -->+10 more
Data Attributes
data-shopmagic-email-fielddata-shopmagic-submit-button
JS Globals
SMAbandonedCarts
REST Endpoints
/wp-json/shopmagic/v1/settings/get-products
FAQ

Frequently Asked Questions about ShopMagic Abandoned Cart Recovery for WooCommerce