Does StackCommerce Connect have any unpatched vulnerabilities?

No. All known vulnerabilities in StackCommerce Connect have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is StackCommerce Connect compatible with WordPress 4.8.28?

According to WordPress.org data, StackCommerce Connect 1.6.8 has been tested up to WordPress 4.8.28. Check the plugin's changelog for the latest compatibility information.

How often is StackCommerce Connect updated?

StackCommerce Connect was last updated on May 17, 2018. Frequent updates are generally a positive security signal.

What is StackCommerce Connect's security score?

StackCommerce Connect has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

StackCommerce Connect Security & Risk Analysis

wordpress.org/plugins/stackcommerce-connect

The Connect plugin by StackCommerce connects your WordPress CMS to the StackCommerce Articles repository.

10 active installs v1.6.8 PHP + WP 4.4+ Updated May 17, 2018

articlescontentecommercepublishersstackcommerce

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is StackCommerce Connect Safe to Use in 2026?

Generally Safe

Score 85/100

StackCommerce Connect has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7yr ago

Risk Assessment

The stackcommerce-connect v1.6.8 plugin exhibits a generally strong security posture based on the static analysis. The complete absence of AJAX handlers, REST API routes, shortcodes, and cron events with exploitable entry points is a significant positive. Furthermore, the code demonstrates good development practices by utilizing prepared statements for all SQL queries and properly escaping a high percentage of its output. The plugin also correctly implements capability checks, indicating a conscious effort to restrict access to sensitive functionalities.

Key Concerns

No nonce checks implemented
Limited capability checks

Vulnerabilities

None known

StackCommerce Connect Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 17, 2026

StackCommerce Connect Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

46 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

94% escaped49 total outputs

Attack Surface

StackCommerce Connect Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 12

actionadmin_noticesincludes\class-stackcommerce-wp-maintenance.php:25

actionadmin_noticesincludes\class-stackcommerce-wp-maintenance.php:53

filterquery_varsincludes\class-stackcommerce-wp.php:35

actionadmin_enqueue_scriptsincludes\class-stackcommerce-wp.php:38

actionadmin_enqueue_scriptsincludes\class-stackcommerce-wp.php:39

actionadmin_initincludes\class-stackcommerce-wp.php:78

actionadmin_menuincludes\class-stackcommerce-wp.php:79

actionparse_requestincludes\class-stackcommerce-wp.php:102

actionadmin_enqueue_scriptsincludes\class-stackcommerce-wp.php:137

actionadmin_enqueue_scriptsincludes\class-stackcommerce-wp.php:138

actionwp_headincludes\class-stackcommerce-wp.php:168

actionadmin_noticesstackcommerce-connect.php:111

Maintenance & Trust

StackCommerce Connect Maintenance & Trust

Maintenance Signals

WordPress version tested4.8.28

Last updatedMay 17, 2018

PHP min version

Downloads6K

Community Trust

Rating0/100

Number of ratings0

Active installs10

Alternatives

StackCommerce Connect Alternatives

Automatik Blog

automatik-blog

A plugin for integration with Automatik Blog, allowing automated publishing of SEO-optimized articles via REST API.

1K No CVEs

GetAutoSEO AI Tool

getautoseo-ai-content-publisher

100

Automate your SEO content creation and publishing with AI-powered tools. Generate high-quality articles and publish directly to WordPress.

700 No CVEs

Kafkai – AI Writer Plugin

kafkai

Plugin to generate and import articles from Kafkai. Learn more in the Help Article

400 No CVEs

Dynamic Post

dynamic-post

Dynamic Post will automatically publish free articles or syndicate articles to your blog once a month.

100 1 unpatched

Visibility Control for WooCommerce

visibility-control-for-woocommerce

100

Visibility Control for WooCommerce helps you hide or show messages, menu and content for specific criterion anywhere on your WordPress page.

100 No CVEs

Developer Profile

StackCommerce Connect Developer Profile

stackcommerce

2 plugins · 20 total installs

trust score

Avg Security Score

85/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect StackCommerce Connect

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/stackcommerce-connect/dist/styles/stackcommerce-wp.css/wp-content/plugins/stackcommerce-connect/dist/scripts/stackcommerce-wp.min.js

Script Paths

https://cdnjs.cloudflare.com/ajax/libs/select2/3.5.4/select2.min.csshttps://cdnjs.cloudflare.com/ajax/libs/select2/3.5.4/select2.min.js

Version Parameters

stackcommerce-wp.css?ver=1.3.0stackcommerce-wp.min.js?ver=1.3.0

HTML / DOM Fingerprints

JS Globals

SCWP_NAME

REST Endpoints

/wp-json/stackcommerce-connect

FAQ