SudoMock Product Customizer Security & Risk Analysis

wordpress.org/plugins/sudomock-product-customizer

Connect WooCommerce products to the SudoMock PSD rendering engine. Customers upload artwork, preview it on your PSD mockups, and buy.

0 active installs v1.0.0 PHP 7.4+ WP 6.0+ Updated Mar 26, 2026
custom-productsmockup-generatorprint-on-demandproduct-customizerproduct-personalization
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is SudoMock Product Customizer Safe to Use in 2026?

Generally Safe

Score 100/100

SudoMock Product Customizer has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The sudomock-product-customizer plugin v1.0.0 exhibits a strong security posture based on the provided static analysis. All identified entry points, including AJAX handlers and shortcodes, appear to be protected by authorization checks, and no direct unauthenticated access points were found. The code demonstrates excellent adherence to secure coding practices, with 100% of SQL queries using prepared statements and all output properly escaped. The absence of dangerous functions, file operations, and vulnerabilities in taint analysis further reinforces this positive assessment. The plugin also has no recorded vulnerability history, which is a significant strength.

Key Concerns

  • External HTTP requests can be a vector for SSRF or data leakage.
  • The plugin makes 3 external HTTP requests, which can introduce risks if not hand
Vulnerabilities
None known

SudoMock Product Customizer Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

SudoMock Product Customizer Release Timeline

v1.0.0Current
Code Analysis
Analyzed Apr 16, 2026

SudoMock Product Customizer Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
8 prepared
Unescaped Output
2
413 escaped
Nonce Checks
14
Capability Checks
12
File Operations
0
External Requests
3
Bundled Libraries
0

SQL Query Safety

100% prepared8 total queries

Output Escaping

100% escaped415 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

2 flows
render_products_tab (includes/class-sudomock-admin.php:696)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

SudoMock Product Customizer Attack Surface

Entry Points16
Unprotected0

AJAX Handlers 15

authwp_ajax_sudomock_save_api_keyincludes/class-sudomock-admin.php:29
authwp_ajax_sudomock_disconnectincludes/class-sudomock-admin.php:30
authwp_ajax_sudomock_list_mockupsincludes/class-sudomock-admin.php:31
authwp_ajax_sudomock_map_productincludes/class-sudomock-admin.php:32
authwp_ajax_sudomock_unmap_productincludes/class-sudomock-admin.php:33
authwp_ajax_sudomock_get_studio_configincludes/class-sudomock-admin.php:34
authwp_ajax_sudomock_save_studio_configincludes/class-sudomock-admin.php:35
authwp_ajax_sudomock_submit_supportincludes/class-sudomock-admin.php:36
authwp_ajax_sudomock_dismiss_onboardingincludes/class-sudomock-admin.php:37
authwp_ajax_sudomock_dismiss_credits_warningincludes/class-sudomock-admin.php:38
authwp_ajax_sudomock_generate_galleryincludes/class-sudomock-admin.php:39
authwp_ajax_sudomock_create_sessionincludes/class-sudomock-storefront.php:51
noprivwp_ajax_sudomock_create_sessionincludes/class-sudomock-storefront.php:52
authwp_ajax_sudomock_add_to_cartincludes/class-sudomock-storefront.php:55
noprivwp_ajax_sudomock_add_to_cartincludes/class-sudomock-storefront.php:56

Shortcodes 1

[sudomock_button] includes/class-sudomock-storefront.php:48
WordPress Hooks 28
actionadmin_menuincludes/class-sudomock-admin.php:26
actionadmin_initincludes/class-sudomock-admin.php:27
actionadmin_enqueue_scriptsincludes/class-sudomock-admin.php:28
actionwoocommerce_blocks_loadedincludes/class-sudomock-blocks.php:37
filterwoocommerce_get_item_dataincludes/class-sudomock-cart.php:27
filterwoocommerce_cart_item_thumbnailincludes/class-sudomock-cart.php:30
actionwoocommerce_checkout_create_order_line_itemincludes/class-sudomock-cart.php:33
filterwoocommerce_add_cart_item_dataincludes/class-sudomock-cart.php:36
actioncustomize_registerincludes/class-sudomock-customizer.php:66
actioncustomize_preview_initincludes/class-sudomock-customizer.php:67
actionwoocommerce_checkout_create_order_line_itemincludes/class-sudomock-order.php:34
actionwoocommerce_after_order_itemmetaincludes/class-sudomock-order.php:42
actionadmin_initincludes/class-sudomock-privacy.php:32
filterwp_privacy_personal_data_exportersincludes/class-sudomock-privacy.php:33
filterwp_privacy_personal_data_erasersincludes/class-sudomock-privacy.php:34
filterwoocommerce_product_data_tabsincludes/class-sudomock-product.php:34
actionwoocommerce_product_data_panelsincludes/class-sudomock-product.php:35
actionwoocommerce_process_product_metaincludes/class-sudomock-product.php:36
actionadmin_enqueue_scriptsincludes/class-sudomock-product.php:39
actionwp_enqueue_scriptsincludes/class-sudomock-storefront.php:59
actionadmin_noticessudomock-product-customizer.php:98
actioninitsudomock-product-customizer.php:125
actionwoocommerce_loadedsudomock-product-customizer.php:144
actionadmin_noticessudomock-product-customizer.php:148
actionbefore_woocommerce_initsudomock-product-customizer.php:151
filterplugin_row_metasudomock-product-customizer.php:157
actioninitsudomock-product-customizer.php:172
actionplugins_loadedsudomock-product-customizer.php:314
Maintenance & Trust

SudoMock Product Customizer Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 26, 2026
PHP min version7.4
Downloads73

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

SudoMock Product Customizer Developer Profile

sudomock

1 plugin · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect SudoMock Product Customizer

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/sudomock-product-customizer/assets/css/sudomock-admin.css/wp-content/plugins/sudomock-product-customizer/assets/js/sudomock-admin.js/wp-content/plugins/sudomock-product-customizer/assets/css/sudomock-customizer.css/wp-content/plugins/sudomock-product-customizer/assets/js/sudomock-customizer.js/wp-content/plugins/sudomock-product-customizer/assets/css/sudomock-storefront.css/wp-content/plugins/sudomock-product-customizer/assets/js/sudomock-storefront.js/wp-content/plugins/sudomock-product-customizer/assets/js/sudomock-cart.js/wp-content/plugins/sudomock-product-customizer/assets/js/sudomock-blocks.js
Script Paths
/wp-content/plugins/sudomock-product-customizer/assets/js/sudomock-admin.js/wp-content/plugins/sudomock-product-customizer/assets/js/sudomock-customizer.js/wp-content/plugins/sudomock-product-customizer/assets/js/sudomock-storefront.js/wp-content/plugins/sudomock-product-customizer/assets/js/sudomock-cart.js/wp-content/plugins/sudomock-product-customizer/assets/js/sudomock-blocks.js
Version Parameters
sudomock-product-customizer/assets/css/sudomock-admin.css?ver=sudomock-product-customizer/assets/js/sudomock-admin.js?ver=sudomock-product-customizer/assets/css/sudomock-customizer.css?ver=sudomock-product-customizer/assets/js/sudomock-customizer.js?ver=sudomock-product-customizer/assets/css/sudomock-storefront.css?ver=sudomock-product-customizer/assets/js/sudomock-storefront.js?ver=sudomock-product-customizer/assets/js/sudomock-cart.js?ver=sudomock-product-customizer/assets/js/sudomock-blocks.js?ver=

HTML / DOM Fingerprints

CSS Classes
sudomock-customizersudomock-product-customizer-wrappersudomock-add-to-cart-button
Data Attributes
data-sudomock-product-iddata-sudomock-mockup-id
JS Globals
SudoMockCustomizerConfigSudoMockAdminSudoMockStorefrontSudoMockCartSudoMockBlocks
REST Endpoints
/wp-json/sudomock/v1/save-customization/wp-json/sudomock/v1/get-customization
Shortcode Output
[sudomock_customizer_button]
FAQ

Frequently Asked Questions about SudoMock Product Customizer