SUBRE – Product Subscription for WooCommerce – Recurring Payments Security & Risk Analysis

wordpress.org/plugins/subre-product-subscription-for-woo

Convert WooCommerce simple products(physical or downloadable/virtual) to subscription products and allow recurring payments

200 active installs v1.0.10 PHP 7.0+ WP 5.0+ Updated Jan 21, 2026
recurringsign-upsubscribesubscriptionwoocommerce
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is SUBRE – Product Subscription for WooCommerce – Recurring Payments Safe to Use in 2026?

Generally Safe

Score 100/100

SUBRE – Product Subscription for WooCommerce – Recurring Payments has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The "subre-product-subscription-for-woo" plugin version 1.0.10 exhibits a strong security posture based on the static analysis. The plugin demonstrates excellent adherence to WordPress security best practices by utilizing prepared statements for all its SQL queries and properly escaping the vast majority (95%) of its outputs. The absence of dangerous functions, file operations, and critical or high severity taint flows further reinforces this positive assessment. Furthermore, the plugin incorporates a healthy number of nonce and capability checks, indicating a conscious effort to protect its entry points. The vulnerability history is also remarkably clean, with no recorded CVEs, suggesting a stable and secure development process. The only notable observation is the presence of two external HTTP requests, which, while not inherently insecure, warrant attention to ensure they are handled securely and do not expose sensitive data or introduce vulnerabilities.

Overall, this plugin appears to be well-developed from a security perspective. The focus on prepared statements and output escaping, coupled with a clean vulnerability history, paints a picture of a reliable component. The limited attack surface and the lack of exploitable code signals are significant strengths. While the external HTTP requests are a minor point to monitor, they do not detract significantly from the plugin's otherwise robust security profile. It's recommended to continue this diligent approach to security in future updates.

Key Concerns

  • External HTTP requests present
Vulnerabilities
None known

SUBRE – Product Subscription for WooCommerce – Recurring Payments Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

SUBRE – Product Subscription for WooCommerce – Recurring Payments Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
23
480 escaped
Nonce Checks
14
Capability Checks
7
File Operations
0
External Requests
2
Bundled Libraries
1

Bundled Libraries

Select2

SQL Query Safety

100% prepared2 total queries

Output Escaping

95% escaped503 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
hide_notices (includes\support.php:431)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

SUBRE – Product Subscription for WooCommerce – Recurring Payments Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 138
filterplugin_action_links_subre-product-subscription-for-woo/subre-product-subscription-for-woo.phpadmin\admin.php:9
actioninitadmin\admin.php:13
filterwc_order_statusesadmin\order-edit.php:12
filterwoocommerce_prevent_adjust_line_item_product_stockadmin\order-edit.php:13
actionadd_meta_boxesadmin\order-edit.php:17
actionadmin_enqueue_scriptsadmin\order-edit.php:18
filterwc_order_statusesadmin\order-edit.php:106
filterwoocommerce_register_shop_order_post_statusesadmin\order-list.php:9
filtermanage_edit-shop_order_columnsadmin\order-list.php:10
actionmanage_shop_order_posts_custom_columnadmin\order-list.php:11
actionadmin_enqueue_scriptsadmin\order-list.php:12
actionadmin_initadmin\settings.php:11
actionadmin_menuadmin\settings.php:12
actionadmin_enqueue_scriptsadmin\settings.php:13
filterwc_order_statusesadmin\subscription-edit.php:10
filterwp_insert_post_dataadmin\subscription-edit.php:11
actionadd_meta_boxesadmin\subscription-edit.php:12
filterwoocommerce_order_actionsadmin\subscription-edit.php:13
actionwoocommerce_process_shop_order_metaadmin\subscription-edit.php:14
actionwoocommerce_process_shop_order_metaadmin\subscription-edit.php:15
filterpost_updated_messagesadmin\subscription-edit.php:16
actionwp_insert_post_dataadmin\subscription-edit.php:17
actionadmin_enqueue_scriptsadmin\subscription-edit.php:18
actionadmin_initadmin\subscription-edit.php:20
filterwc_order_is_editableadmin\subscription-edit.php:22
filterredirect_post_locationadmin\subscription-edit.php:222
filterredirect_post_locationadmin\subscription-edit.php:234
actioncurrent_screenadmin\subscription-list.php:10
actioncheck_ajax_refereradmin\subscription-list.php:11
filtermanage_subre_subscription_posts_columnsadmin\subscription-list.php:12
actionmanage_subre_subscription_posts_custom_columnadmin\subscription-list.php:13
actionadmin_enqueue_scriptsadmin\subscription-list.php:14
filterpost_row_actionsadmin\subscription-list.php:15
filterbulk_actions-edit-subre_subscriptionadmin\subscription-list.php:16
actionadmin_enqueue_scriptsadmin\subscription-product.php:8
filterproduct_type_optionsadmin\subscription-product.php:9
actionwoocommerce_product_options_pricingadmin\subscription-product.php:10
actionwoocommerce_process_product_meta_simpleadmin\subscription-product.php:11
actionsubre_subscription_parent_order_payment_completecompat\curcy.php:14
actionsubre_new_renewal_order_createdcompat\curcy.php:18
filterwoocommerce_cart_item_pricefrontend\cart.php:18
filterwoocommerce_order_button_textfrontend\cart.php:19
filterwoocommerce_cart_item_subtotalfrontend\cart.php:20
actionwoocommerce_before_calculate_totalsfrontend\cart.php:22
actionwoocommerce_calculate_totalsfrontend\cart.php:23
actionwoocommerce_after_calculate_totalsfrontend\cart.php:24
actionwoocommerce_cart_calculate_feesfrontend\cart.php:25
actioninitfrontend\cart.php:26
filterwoocommerce_product_get_pricefrontend\cart.php:48
actionwoocommerce_before_checkout_processfrontend\checkout.php:14
actionwoocommerce_checkout_order_processedfrontend\checkout.php:15
actionwoocommerce_payment_completefrontend\checkout.php:16
actionwoocommerce_order_status_completedfrontend\checkout.php:17
actionwoocommerce_order_status_processingfrontend\checkout.php:18
filterwoocommerce_checkout_registration_enabledfrontend\checkout.php:19
filterwoocommerce_checkout_registration_requiredfrontend\checkout.php:20
actionwp_enqueue_scriptsfrontend\checkout.php:21
actioninitfrontend\my-account.php:22
actionwp_enqueue_scriptsfrontend\my-account.php:23
filterwoocommerce_account_menu_itemsfrontend\my-account.php:24
filterwoocommerce_account_menu_item_classesfrontend\my-account.php:25
actionwoocommerce_order_details_after_order_tablefrontend\my-account.php:37
actionsubre_subscription_details_after_order_tablefrontend\my-account.php:104
actionsubre_after_subscription_detailsfrontend\my-account.php:105
actionwoocommerce_my_account_my_orders_column_subre-payment-duefrontend\my-account.php:229
actionwoocommerce_my_account_my_orders_column_subre-expirefrontend\my-account.php:233
actionwoocommerce_my_account_my_orders_column_subre-totalfrontend\my-account.php:237
actionwoocommerce_my_account_my_orders_column_subre-statusfrontend\my-account.php:241
filterwoocommerce_my_account_my_orders_queryfrontend\my-account.php:246
filterwoocommerce_account_orders_columnsfrontend\my-account.php:247
filterwoocommerce_get_view_order_urlfrontend\my-account.php:248
filterwoocommerce_my_account_my_orders_actionsfrontend\my-account.php:249
filterwoocommerce_get_endpoint_urlfrontend\my-account.php:250
filterwoocommerce_get_endpoint_urlfrontend\my-account.php:361
filterwoocommerce_get_price_htmlfrontend\product.php:14
filterwoocommerce_product_add_to_cart_textfrontend\product.php:15
filterwoocommerce_product_single_add_to_cart_textfrontend\product.php:16
filtersubre_frontend_product_trial_periodfrontend\product.php:17
actionbefore_woocommerce_payfrontend\renewal.php:15
actionafter_woocommerce_payfrontend\renewal.php:16
filterwoocommerce_order_needs_paymentfrontend\renewal.php:34
filterwoocommerce_add_errorfrontend\renewal.php:70
filterwoocommerce_add_errorfrontend\renewal.php:78
filterwoocommerce_pay_order_button_textfrontend\renewal.php:84
actionbefore_woocommerce_pay_formfrontend\renewal.php:85
filterwoocommerce_available_payment_gatewaysfrontend\renewal.php:86
actionsubre_automatic_subscription_renew_scheduledincludes\emails\class-wc-email-auto-renewal-reminder.php:34
actionsubre_subscription_status_changed_to_cancelledincludes\emails\class-wc-email-customer-subscription-cancelled.php:34
actionsubre_subscription_status_changed_to_expiredincludes\emails\class-wc-email-customer-subscription-expired.php:34
actionsubre_manual_subscription_renew_scheduledincludes\emails\class-wc-email-manual-renewal-reminder.php:34
actionsubre_subscription_status_changed_to_cancelledincludes\emails\class-wc-email-subscription-cancelled.php:35
actionsubre_subscription_status_changed_to_expiredincludes\emails\class-wc-email-subscription-expired.php:35
actionsubre_subscription_parent_order_payment_completeincludes\payment\paypal-payments.php:9
actionsubre_new_renewal_order_createdincludes\payment\paypal-payments.php:13
actionsubre_renewal_order_payment_dueincludes\payment\stripe.php:15
actionsubre_renewal_order_payment_stripe_failedincludes\payment\stripe.php:17
actionsubre_subscription_parent_order_payment_completeincludes\payment\stripe.php:18
actionsubre_new_renewal_order_createdincludes\payment\stripe.php:19
filterwc_stripe_idempotency_keyincludes\payment\stripe.php:161
filterwc_stripe_should_save_payment_methodincludes\payment\stripe_cc.php:14
actionsubre_renewal_order_payment_dueincludes\payment\stripe_cc.php:15
actionsubre_renewal_order_payment_stripe_cc_failedincludes\payment\stripe_cc.php:16
actionsubre_subscription_parent_order_payment_completeincludes\payment\stripe_cc.php:17
actionsubre_new_renewal_order_createdincludes\payment\stripe_cc.php:18
actionwp_loadedincludes\subscription-actions.php:8
actionwp_loadedincludes\subscription-actions.php:9
actionsubre_subscription_status_changed_to_cancelledincludes\subscription-actions.php:10
actionsubre_cancel_a_subscriptionincludes\subscription-actions.php:11
actionsubre_awaiting_cancel_subscriptionincludes\subscription-actions.php:12
filterwoocommerce_email_classesincludes\subscription-email.php:11
filterwoocommerce_template_directoryincludes\subscription-email.php:12
actionwoocommerce_email_before_order_tableincludes\subscription-email.php:13
actionwoocommerce_email_after_order_tableincludes\subscription-email.php:14
actionwoocommerce_register_post_typeincludes\subscription-order.php:11
filterwc_order_statusesincludes\subscription-order.php:12
filterwoocommerce_can_reduce_order_stockincludes\subscription-order.php:13
actionwoocommerce_order_status_changedincludes\subscription-order.php:14
actionsubre_view_subscriptionincludes\subscription-order.php:15
filterwoocommerce_order_is_download_permittedincludes\subscription-order.php:16
filterwoocommerce_get_price_htmlincludes\subscription-product-helper.php:60
actioninitincludes\subscription-schedule.php:11
actionsubre_schedule_subscription_renewals_and_expirationincludes\subscription-schedule.php:12
actionsubre_overdue_subscriptions_checkincludes\subscription-schedule.php:13
actionsubre_process_renewal_orderincludes\subscription-schedule.php:14
actionsubre_expire_a_subscriptionincludes\subscription-schedule.php:15
actionadmin_enqueue_scriptsincludes\support.php:32
actionadmin_noticesincludes\support.php:33
actionadmin_initincludes\support.php:34
actionadmin_menuincludes\support.php:35
filterplugin_row_metaincludes\support.php:37
actionadmin_initincludes\support.php:39
actionadmin_bar_menuincludes\support.php:41
actionadmin_noticesincludes\support.php:52
actionadmin_footerincludes\support.php:669
actionadmin_bar_menuincludes\support.php:807
actionadmin_noticesincludes\support.php:953
actionplugins_loadedsubre-product-subscription-for-woo.php:34
actionbefore_woocommerce_initsubre-product-subscription-for-woo.php:35
Maintenance & Trust

SUBRE – Product Subscription for WooCommerce – Recurring Payments Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 21, 2026
PHP min version7.0
Downloads6K

Community Trust

Rating100/100
Number of ratings4
Active installs200
Developer Profile

SUBRE – Product Subscription for WooCommerce – Recurring Payments Developer Profile

VillaTheme

58 plugins · 167K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
214 days
View full developer profile
Detection Fingerprints

How We Detect SUBRE – Product Subscription for WooCommerce – Recurring Payments

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/subre-product-subscription-for-woo/assets/css/admin-subscription-statuses.css/wp-content/plugins/subre-product-subscription-for-woo/assets/css/admin-subscription-statuses.min.css
Version Parameters
subre-product-subscription-for-woo/assets/css/admin-subscription-statuses.css?ver=subre-product-subscription-for-woo/assets/css/admin-subscription-statuses.min.css?ver=

HTML / DOM Fingerprints

CSS Classes
subre-related-subscriptions-table
Data Attributes
data-subre_subscription_id
JS Globals
SUBRE_PRODUCT_SUBSCRIPTION_FOR_WOO_DATA
FAQ

Frequently Asked Questions about SUBRE – Product Subscription for WooCommerce – Recurring Payments