ShoppingFeed Security & Risk Analysis

wordpress.org/plugins/shopping-feed

WordPress connection Controller Plugin for ShoppingFeed - Sell on Amazon, Ebay, Google, and 1000's of international marketplaces

70 active installs v7.1.0 PHP 7.3+ WP 5.7+ Updated Nov 12, 2025
import-ordersmarketplaceproducts-feedshoppingfeedwoocommerce
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is ShoppingFeed Safe to Use in 2026?

Generally Safe

Score 100/100

ShoppingFeed has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The shopping-feed plugin v7.1.0 demonstrates a strong security posture based on the provided static analysis. The absence of any identified entry points (AJAX handlers, REST API routes, shortcodes, cron events) significantly reduces the plugin's attack surface. Furthermore, the analysis indicates a low risk of direct code injection or data manipulation vulnerabilities, with no dangerous functions, no unsanitized paths in taint analysis, and all SQL queries utilizing prepared statements. The plugin also exhibits good practices in output escaping, nonce checks, and capability checks, suggesting developers have implemented robust security measures.

Vulnerabilities
None known

ShoppingFeed Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

ShoppingFeed Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
1 prepared
Unescaped Output
10
184 escaped
Nonce Checks
6
Capability Checks
7
File Operations
13
External Requests
0
Bundled Libraries
1

Bundled Libraries

Guzzle

SQL Query Safety

100% prepared1 total queries

Output Escaping

95% escaped194 total outputs
Data Flows
All sanitized

Data Flow Analysis

1 flows
<Options> (src\Admin\Options.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

ShoppingFeed Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 61
actionsf_add_metassrc\Addons\Inventory\Marketplaces\Amazon.php:15
actionsf_add_metassrc\Addons\Inventory\Marketplaces\Cdiscount.php:15
actionsf_add_metassrc\Addons\Inventory\Marketplaces\FulfilledByChannel.php:12
actionsf_add_metassrc\Addons\Inventory\Marketplaces\MonoMono.php:15
actionsf_show_metassrc\Addons\Marketplaces\Marketplaces.php:38
actionsf_add_metassrc\Addons\Marketplaces\Types\AmazonBusiness.php:16
actionsf_add_metassrc\Addons\Marketplaces\Types\AmazonPrime.php:16
actionsf_add_metassrc\Addons\Marketplaces\Types\Zalando.php:16
actionsf_after_order_add_itemsrc\Addons\Plugins\ChainedProductsPlugin\ChainedProducts.php:19
actionsf_add_metassrc\Addons\Plugins\MondialRelayWordpressPlugin\MondialRelayWordpress.php:27
filtersf_all_shipping_methodssrc\Addons\Plugins\WoocommerceGlsPlugin\WoocommerceGls.php:16
actionsf_set_shipping_method_and_colis_numbersrc\Addons\Shipping\Marketplaces\Cdiscount.php:16
actionsf_set_shipping_method_and_colis_numbersrc\Addons\Shipping\Marketplaces\Rdc.php:12
actionsf_add_metassrc\Addons\Shipping\Shipping.php:34
actionsf_show_metassrc\Addons\Shipping\Shipping.php:35
actionadd_meta_boxessrc\Admin\Metabox.php:21
actionadmin_noticessrc\Admin\Notices.php:17
actionadmin_noticessrc\Admin\Notices.php:18
actionadmin_enqueue_scriptssrc\Admin\Notices.php:19
actionadmin_menusrc\Admin\Options.php:81
actionadmin_initsrc\Admin\Options.php:98
actionadmin_initsrc\Admin\Options.php:107
actionadmin_initsrc\Admin\Options.php:126
actionadmin_initsrc\Admin\Options.php:167
actionadmin_action_updatesrc\Admin\Options.php:172
actionwoocommerce_update_productsrc\Admin\WoocommerceActions.php:40
actionsf_update_product_datasrc\Admin\WoocommerceActions.php:41
actionwoocommerce_updated_product_stocksrc\Admin\WoocommerceActions.php:44
actionsf_update_product_stocksrc\Admin\WoocommerceActions.php:45
actionsf_generate_feed_actionsrc\Admin\WoocommerceActions.php:48
actionsf_sync_orderssrc\Admin\WoocommerceActions.php:93
actionsf_get_orders_action_customsrc\Admin\WoocommerceActions.php:105
actionsf_acknowledge_remain_ordersrc\Admin\WoocommerceActions.php:120
actionsf_migrate_single_actionsrc\Admin\WoocommerceActions.php:132
filtershopping_feed_extra_variation_attributessrc\Admin\WoocommerceFilters.php:26
filterwoocommerce_can_reduce_order_stocksrc\Admin\WoocommerceFilters.php:56
filterwoocommerce_email_enabled_new_ordersrc\Admin\WoocommerceFilters.php:72
filterwoocommerce_email_enabled_cancelled_ordersrc\Admin\WoocommerceFilters.php:73
filterwoocommerce_email_enabled_customer_completed_ordersrc\Admin\WoocommerceFilters.php:74
filterwoocommerce_email_enabled_customer_invoicesrc\Admin\WoocommerceFilters.php:75
filterwoocommerce_email_enabled_customer_notesrc\Admin\WoocommerceFilters.php:76
filterwoocommerce_email_enabled_customer_on_hold_ordersrc\Admin\WoocommerceFilters.php:77
filterwoocommerce_email_enabled_customer_processing_ordersrc\Admin\WoocommerceFilters.php:78
filterwoocommerce_email_enabled_customer_refunded_ordersrc\Admin\WoocommerceFilters.php:79
filterwoocommerce_email_enabled_failed_ordersrc\Admin\WoocommerceFilters.php:80
actionsf_feed_generation_partsrc\Feed\FeedBuilder\FeedBuilderBase.php:112
actionsf_feed_generation_combine_feed_partssrc\Feed\FeedBuilder\FeedBuilderBase.php:113
actionsf_feed_generation_part_pllsrc\Feed\FeedBuilder\FeedBuilderPolylang.php:141
actionsf_feed_generation_combine_feed_parts_pllsrc\Feed\FeedBuilder\FeedBuilderPolylang.php:142
actionsf_feed_generation_part_wpmlsrc\Feed\FeedBuilder\FeedBuilderWpml.php:146
actionsf_feed_generation_combine_feed_parts_wpmlsrc\Feed\FeedBuilder\FeedBuilderWpml.php:147
filterwoocommerce_order_data_store_cpt_get_orders_querysrc\Query\Query.php:28
actioninitsrc\ShoppingFeed.php:124
actionwoocommerce_payment_gatewayssrc\ShoppingFeed.php:144
actionadmin_noticessrc\ShoppingFeed.php:169
actionadmin_noticessrc\ShoppingFeed.php:185
actionadmin_noticessrc\ShoppingFeed.php:286
actionadmin_noticessrc\ShoppingFeed.php:300
actioninitsrc\Url\Rewrite.php:26
filterquery_varssrc\Url\Rewrite.php:29
actionparse_requestsrc\Url\Rewrite.php:32
Maintenance & Trust

ShoppingFeed Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedNov 12, 2025
PHP min version7.3
Downloads10K

Community Trust

Rating74/100
Number of ratings3
Active installs70
Developer Profile

ShoppingFeed Developer Profile

ShoppingFeeder

2 plugins · 370 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect ShoppingFeed

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/shopping-feed/assets/css/notice.css
Version Parameters
shopping-feed/assets/css/notice.css?ver=

HTML / DOM Fingerprints

CSS Classes
sf__noticesf__notice--startsf__notice__titlesf__notice__subtitle
HTML Comments
TODO: CHECK ALL CREDENTIALS
Data Attributes
data-option-type="sf_account_options"data-option-type="sf_feed_options"data-option-type="sf_shipping_options"data-option-type="sf_orders_options"
JS Globals
ShoppingFeed_API_Settings
REST Endpoints
/wp-json/shopping-feed/v1/settings
FAQ

Frequently Asked Questions about ShoppingFeed