Stokro – Simple Stock Management Plugin Security & Risk Analysis

wordpress.org/plugins/stokro

A lightweight and easy-to-use stock management plugin for WordPress. Manage unlimited products, track stock in/out, get low stock reports, and calcula …

0 active installs v1.0.1 PHP 7.4+ WP 5.0+ Updated Unknown
inventoryprofit-calculationstock-instock-managerstock-out
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Stokro – Simple Stock Management Plugin Safe to Use in 2026?

Generally Safe

Score 100/100

Stokro – Simple Stock Management Plugin has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

The static analysis of the "stokro" v1.0.1 plugin reveals a generally strong security posture. The plugin exhibits excellent practices in output escaping, with 100% of outputs properly escaped. Furthermore, the vast majority of SQL queries (88%) utilize prepared statements, significantly mitigating the risk of SQL injection vulnerabilities. The absence of file operations and external HTTP requests also reduces the potential attack surface. The plugin also correctly implements a nonce check, which is a fundamental security measure for preventing CSRF attacks.

Key Concerns

  • Capability checks are absent
  • Bundled library Select2 is outdated
Vulnerabilities
None known

Stokro – Simple Stock Management Plugin Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Stokro – Simple Stock Management Plugin Code Analysis

Dangerous Functions
0
Raw SQL Queries
3
23 prepared
Unescaped Output
0
99 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
1

Bundled Libraries

Select2

SQL Query Safety

88% prepared26 total queries

Output Escaping

100% escaped99 total outputs
Attack Surface

Stokro – Simple Stock Management Plugin Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 4
actionadmin_menusrc\AdminMenu.php:24
filterparent_filesrc\AdminMenu.php:25
actionadmin_enqueue_scriptssrc\AssetManager.php:20
actioninitsrc\Database.php:17
Maintenance & Trust

Stokro – Simple Stock Management Plugin Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedUnknown
PHP min version7.4
Downloads226

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Stokro – Simple Stock Management Plugin Developer Profile

SoftXpo

2 plugins · 70 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Stokro – Simple Stock Management Plugin

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/stokro/assets/css//wp-content/plugins/stokro/assets/js/
Script Paths
/wp-content/plugins/stokro/assets/js/
Version Parameters
stokro/assets/css/stokro/assets/js/

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Stokro – Simple Stock Management Plugin