Smart Product Badges for WooCommerce Security & Risk Analysis

wordpress.org/plugins/smart-product-badges-for-woocommerce

Add product badges to WooCommerce automatically. Sale, New, Low Stock badges with smart rules. Works with block themes. Free, no coding needed.

0 active installs v1.2.0 PHP 8.0+ WP 6.0+ Updated Apr 1, 2026
badgesproduct-badgessale-badgewoocommercewoocommerce-badges
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Smart Product Badges for WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

Smart Product Badges for WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The smart-product-badges-for-woocommerce plugin version 1.2.0 exhibits a strong security posture based on the provided static analysis. The absence of dangerous functions, the use of prepared statements for all SQL queries, and 100% output escaping indicate robust coding practices. Furthermore, the plugin effectively utilizes nonce and capability checks for its single AJAX entry point, and there are no REST API routes, shortcodes, or cron events that could expand the attack surface.

The taint analysis shows no detected flows with unsanitized paths, which is a significant positive indicator. The plugin's history is also clean, with zero recorded CVEs across all severities. This clean history, coupled with the positive static analysis findings, suggests that the developers prioritize security. However, even with these positive indicators, it's important to acknowledge that static analysis has its limitations. A deeper dive into the logic of the AJAX handler might reveal subtle issues not caught by these automated checks.

In conclusion, this version of the plugin appears to be well-secured, with no apparent vulnerabilities identified through the provided static analysis and historical data. The developers have implemented essential security measures correctly. While no deductions are warranted based on the current data, ongoing monitoring and regular security audits are always recommended for any plugin.

Vulnerabilities
None known

Smart Product Badges for WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Smart Product Badges for WooCommerce Release Timeline

v1.2.0Current
v1.0.0
Code Analysis
Analyzed Apr 16, 2026

Smart Product Badges for WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
5 prepared
Unescaped Output
0
94 escaped
Nonce Checks
2
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared5 total queries

Output Escaping

100% escaped94 total outputs
Attack Surface

Smart Product Badges for WooCommerce Attack Surface

Entry Points1
Unprotected0

AJAX Handlers 1

authwp_ajax_spbfw_dismiss_noticeincludes/Admin/Pro_Upsell.php:22
WordPress Hooks 28
actionadd_meta_boxes_spbfw_badgeincludes/Admin/Badge_Edit.php:21
actionsave_post_spbfw_badgeincludes/Admin/Badge_Edit.php:22
actionadmin_head-edit.phpincludes/Admin/Badge_Edit.php:23
actionadmin_enqueue_scriptsincludes/Admin/Badge_Edit.php:24
actionadmin_noticesincludes/Admin/Pro_Upsell.php:20
actionadmin_enqueue_scriptsincludes/Admin/Pro_Upsell.php:21
actioninitincludes/Badge_Manager.php:36
actionadmin_enqueue_scriptsincludes/Badge_Manager.php:39
actionadmin_noticesincludes/Badge_Manager.php:40
actionwp_enqueue_scriptsincludes/Rendering/Hooks/Assets_Hooks.php:13
actioninitincludes/Rendering/Hooks/Assets_Hooks.php:16
actionwp_enqueue_scriptsincludes/Rendering/Hooks/Assets_Hooks.php:17
filterwoocommerce_blocks_product_grid_item_htmlincludes/Rendering/Hooks/Blocks_Hooks.php:25
filterrender_block_woocommerce/product-imageincludes/Rendering/Hooks/Blocks_Hooks.php:26
filterpre_render_blockincludes/Rendering/Hooks/Blocks_Hooks.php:27
actionwoocommerce_update_productincludes/Rendering/Hooks/Cache_Hooks.php:22
actionwoocommerce_product_set_stockincludes/Rendering/Hooks/Cache_Hooks.php:23
actionsave_post_spbfw_badgeincludes/Rendering/Hooks/Cache_Hooks.php:24
filterpost_thumbnail_htmlincludes/Rendering/Hooks/Fallback_Hooks.php:22
filterwoocommerce_single_product_image_thumbnail_htmlincludes/Rendering/Hooks/Gallery_Hooks.php:23
actionwoocommerce_before_shop_loop_itemincludes/Rendering/Hooks/Loop_Hooks.php:25
actionwoocommerce_after_shop_loop_itemincludes/Rendering/Hooks/Loop_Hooks.php:26
filterwoocommerce_product_loop_startincludes/Rendering/Hooks/Loop_Hooks.php:27
actionadmin_noticessmart-product-badges-for-woocommerce.php:28
actionbefore_woocommerce_initsmart-product-badges-for-woocommerce.php:67
actionplugins_loadedsmart-product-badges-for-woocommerce.php:77
actionadmin_noticessmart-product-badges-for-woocommerce.php:79
actionadmin_noticessmart-product-badges-for-woocommerce.php:90
Maintenance & Trust

Smart Product Badges for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedApr 1, 2026
PHP min version8.0
Downloads322

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Smart Product Badges for WooCommerce Developer Profile

cartengine

1 plugin · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Smart Product Badges for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/smart-product-badges-for-woocommerce/assets/css/admin.css/wp-content/plugins/smart-product-badges-for-woocommerce/assets/js/admin.js
Script Paths
/wp-content/plugins/smart-product-badges-for-woocommerce/assets/js/admin.js
Version Parameters
smart-product-badges-for-woocommerce/assets/css/admin.css?ver=smart-product-badges-for-woocommerce/assets/js/admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
spbfw-upsell-notice
Data Attributes
data-nonce
JS Globals
spbfw_dismiss_notice
FAQ

Frequently Asked Questions about Smart Product Badges for WooCommerce