Subscription for Woocommerce Security & Risk Analysis

wordpress.org/plugins/subscription-for-woocommerce

The plugin helps you to create the subscription plan for your products.

10 active installs v2.4 PHP + WP 4.0+ Updated Feb 3, 2020
phoeniixxproduct-subscriptionsubscriptionwoocommercewoocommerce-subscription
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Subscription for Woocommerce Safe to Use in 2026?

Generally Safe

Score 85/100

Subscription for Woocommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 6yr ago
Risk Assessment

The static analysis of the 'subscription-for-woocommerce' plugin, despite its unknown version, reveals a generally positive security posture with no immediate critical vulnerabilities detected. The absence of dangerous functions, raw SQL queries, file operations, and external HTTP requests are strong indicators of good coding practices. The presence of nonce checks is also a positive sign for input validation. However, the low percentage of properly escaped output (24%) is a significant concern, suggesting a high risk of Cross-Site Scripting (XSS) vulnerabilities in user-facing elements. While there's no recorded vulnerability history, this is not a guarantee of future security. The lack of capability checks on the identified cron event also presents a potential area of concern, depending on the event's functionality.

Key Concerns

  • Low percentage of properly escaped output (24%)
  • No capability checks on cron events
Vulnerabilities
None known

Subscription for Woocommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Subscription for Woocommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
32
10 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

24% escaped42 total outputs
Attack Surface

Subscription for Woocommerce Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 22
actionwp_loadedincludes\phoen_cron.php:3
actionphoen_prosub_mail_cron_hookincludes\phoen_cron.php:5
filterwoocommerce_product_add_to_cart_textincludes\phoen_prosub_frontend.php:177
filterwoocommerce_product_single_add_to_cart_textincludes\phoen_prosub_frontend.php:179
actionwoocommerce_after_shop_loop_item_titleincludes\phoen_prosub_frontend.php:195
actionwoocommerce_single_product_summaryincludes\phoen_prosub_frontend.php:197
actioninitincludes\phoen_prosub_frontend.php:326
filterwoocommerce_cart_item_priceincludes\phoen_prosub_frontend.php:328
filterwoocommerce_get_price_htmlincludes\phoen_prosub_frontend.php:330
filterwoocommerce_cart_item_subtotalincludes\phoen_prosub_frontend.php:332
filterwoocommerce_checkout_item_subtotalincludes\phoen_prosub_frontend.php:334
filterwoocommerce_order_formatted_line_subtotalincludes\phoen_prosub_frontend.php:336
actionwoocommerce_checkout_order_processedincludes\phoen_prosub_frontend.php:338
filterwoocommerce_add_cart_item_dataincludes\phoen_prosub_frontend.php:341
actionwoocommerce_process_product_metaincludes\phoen_prosub_product_panel.php:88
actionwoocommerce_product_options_general_product_dataincludes\phoen_prosub_product_panel.php:91
actioninitincludes\phoen_subscription_panel.php:4
actionadd_meta_boxesincludes\phoen_subscription_panel.php:45
actionadmin_menuphoen_prosub_main.php:81
actionadmin_headphoen_prosub_main.php:107
actionadmin_noticesphoen_prosub_main.php:165
actionadmin_initphoen_prosub_main.php:185

Scheduled Events 1

phoen_prosub_mail_cron_hook
Maintenance & Trust

Subscription for Woocommerce Maintenance & Trust

Maintenance Signals

WordPress version tested5.3.21
Last updatedFeb 3, 2020
PHP min version
Downloads7K

Community Trust

Rating66/100
Number of ratings3
Active installs10
Developer Profile

Subscription for Woocommerce Developer Profile

Phoeniixx

25 plugins · 5K total installs

85
trust score
Avg Security Score
87/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Subscription for Woocommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/subscription-for-woocommerce/assets/css/phoen_prosub_backend.css

HTML / DOM Fingerprints

CSS Classes
phoen_rewpts_order_report_table_divphoen_rewpts_user_reward_point_tr
HTML Comments
/* ** Plugin Name: Subscription For Woocommerce ** Plugin URI: http://www.phoeniixx.com/ ** Description: The plugin helps you to create the subscription plan for your products. ** Version: 2.4 ** Author: phoeniixx ** Text Domain:phoen-prosub ** Author URI: http://www.phoeniixx.com/ ** License: GPLv2 or later ** License URI: http://www.gnu.org/licenses/gpl-2.0.html ** WC requires at least: 2.6.0 ** WC tested up to: 3.9.1 */ /* $gen_settings= get_post_meta($post->ID,'phoen_prosub_productbase_value', true); $price_is_per = isset($gen_settings['price_is_per'])?$gen_settings['price_is_per']:''; $max_length = isset($gen_settings['max_length'])?$gen_settings['max_length']:''; $no_days = isset($gen_settings['no_days'])?$gen_settings['no_days']:''; $subscribe = isset($gen_settings['subscribe'])?$gen_settings['subscribe']:''; *//* Check that the user hasn't already clicked to ignore the message *//* If user clicks to ignore the notice, add that to their user meta */
FAQ

Frequently Asked Questions about Subscription for Woocommerce