Storage for Woo via S3-Compatible Security & Risk Analysis

wordpress.org/plugins/storage-for-woo-via-s3-compatible

Enable secure cloud storage and delivery of your WooCommerce digital products through S3-Compatible storage.

0 active installs v1.1.0 PHP 7.4+ WP 5.8+ Updated Feb 24, 2026
amazoncloud-storagedigital-downloadss3woocommerce
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Storage for Woo via S3-Compatible Safe to Use in 2026?

Generally Safe

Score 100/100

Storage for Woo via S3-Compatible has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "storage-for-woo-via-s3-compatible" v1.1.0 plugin exhibits a generally strong security posture based on the provided static analysis. The absence of any known CVEs, unpatched vulnerabilities, or recorded common vulnerability types in its history is a significant positive indicator. The code also demonstrates good practices such as 100% of SQL queries using prepared statements and 100% of outputs being properly escaped, which are crucial for preventing common web application attacks. The presence of nonce and capability checks on its entry points further strengthens its security.

Key Concerns

  • Flows with unsanitized paths detected
  • File operations present
Vulnerabilities
None known

Storage for Woo via S3-Compatible Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Storage for Woo via S3-Compatible Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
74 escaped
Nonce Checks
3
Capability Checks
3
File Operations
1
External Requests
0
Bundled Libraries
1

Bundled Libraries

Guzzle

Output Escaping

100% escaped74 total outputs
Data Flows
4 unsanitized

Data Flow Analysis

4 flows4 with unsanitized paths
ajaxGetLibrary (includes\class-media-library.php:37)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Storage for Woo via S3-Compatible Attack Surface

Entry Points2
Unprotected0

AJAX Handlers 2

authwp_ajax_wcs3_get_libraryincludes\class-media-library.php:31
authwp_ajax_wcs3_ajax_uploadincludes\class-s3-uploader.php:25
WordPress Hooks 14
filterwoocommerce_settings_tabs_arrayincludes\class-admin-settings.php:23
actionwoocommerce_settings_tabs_wcs3_s3includes\class-admin-settings.php:24
actionwoocommerce_update_options_wcs3_s3includes\class-admin-settings.php:25
actionadmin_enqueue_scriptsincludes\class-admin-settings.php:28
actionadmin_noticesincludes\class-admin-settings.php:31
actionadmin_noticesincludes\class-main-plugin.php:28
actionadmin_enqueue_scriptsincludes\class-media-library.php:23
actionadmin_footerincludes\class-media-library.php:28
filterwoocommerce_file_download_pathincludes\class-s3-downloader.php:23
filterwoocommerce_downloadable_file_existsincludes\class-s3-downloader.php:26
filterkses_allowed_protocolsincludes\class-s3-downloader.php:29
actionadmin_post_wcs3_uploadincludes\class-s3-uploader.php:22
actionplugins_loadedstorage-for-woo-via-s3-compatible.php:44
actionadmin_noticesstorage-for-woo-via-s3-compatible.php:47
Maintenance & Trust

Storage for Woo via S3-Compatible Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 24, 2026
PHP min version7.4
Downloads260

Community Trust

Rating100/100
Number of ratings1
Active installs0
Developer Profile

Storage for Woo via S3-Compatible Developer Profile

mohammadr3z

9 plugins · 51K total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Storage for Woo via S3-Compatible

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/storage-for-woo-via-s3-compatible/assets/css/admin-style.css/wp-content/plugins/storage-for-woo-via-s3-compatible/assets/js/admin-script.js/wp-content/plugins/storage-for-woo-via-s3-compatible/assets/js/s3-upload-script.js
Script Paths
/wp-content/plugins/storage-for-woo-via-s3-compatible/assets/js/admin-script.js/wp-content/plugins/storage-for-woo-via-s3-compatible/assets/js/s3-upload-script.js
Version Parameters
storage-for-woo-via-s3-compatible/assets/css/admin-style.css?ver=storage-for-woo-via-s3-compatible/assets/js/admin-script.js?ver=storage-for-woo-via-s3-compatible/assets/js/s3-upload-script.js?ver=

HTML / DOM Fingerprints

CSS Classes
wcs3-credential
Data Attributes
name="wcs3_endpoint"name="wcs3_access_key"name="wcs3_secret_key"name="wcs3_bucket"name="wcs3_link_expiration_time"
FAQ

Frequently Asked Questions about Storage for Woo via S3-Compatible