WP-Safety

Sync Engine – Intercom Integration for WordPress & WooCommerce Security & Risk Analysis

wordpress.org/plugins/sync-engine-for-intercom

Sync WordPress and WooCommerce users, events, tags, and customer data with Intercom in real time.

0 active installs v2.0.1 PHP 8.2+ WP 6.0+ Updated Jan 31, 2026
intercomintercom-integrationuser-syncwoocommerce-intercomwordpress-intercom
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Sync Engine – Intercom Integration for WordPress & WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

Sync Engine – Intercom Integration for WordPress & WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The "sync-engine-for-intercom" v2.0.1 plugin exhibits a generally strong security posture based on the provided static analysis. The absence of any AJAX handlers, REST API routes, shortcodes, or cron events without proper authentication and permission checks significantly limits the potential attack surface. Furthermore, the code demonstrates excellent practices with 100% of SQL queries using prepared statements and 100% of outputs being properly escaped, mitigating risks associated with injection and cross-site scripting vulnerabilities. The plugin also implements a good number of nonce and capability checks, further hardening its entry points.

Key Concerns

  • Bundled library: Guzzle
Vulnerabilities
None known

Sync Engine – Intercom Integration for WordPress & WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Sync Engine – Intercom Integration for WordPress & WooCommerce Release Timeline

v2.0.1Current
Code Analysis
Analyzed Mar 17, 2026

Sync Engine – Intercom Integration for WordPress & WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
1767 escaped
Nonce Checks
16
Capability Checks
16
File Operations
9
External Requests
1
Bundled Libraries
1

Bundled Libraries

Guzzle

Output Escaping

100% escaped1768 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

13 flows
ajax_save_credentials (includes\admin\handlers\class-connection-handler.php:49)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Sync Engine – Intercom Integration for WordPress & WooCommerce Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 25
actionadmin_enqueue_scriptsincludes\admin\class-admin-assets.php:38
actionadmin_enqueue_scriptsincludes\admin\class-admin-assets.php:39
actionadmin_menuincludes\admin\class-admin-menu.php:38
actionadmin_headincludes\admin\class-admin-menu.php:39
actionadmin_initincludes\admin\class-admin-settings-registration.php:38
actionwoocommerce_loadedincludes\sync\class-event-sync.php:134
actionuser_registerincludes\sync\class-event-sync.php:152
actionwp_loginincludes\sync\class-event-sync.php:154
actionwp_logoutincludes\sync\class-event-sync.php:156
actionprofile_updateincludes\sync\class-event-sync.php:159
actionwoocommerce_new_orderincludes\sync\class-event-sync.php:176
actionwoocommerce_update_orderincludes\sync\class-event-sync.php:179
actionwoocommerce_process_shop_order_metaincludes\sync\class-event-sync.php:182
actionsave_post_shop_orderincludes\sync\class-event-sync.php:184
actionwoocommerce_order_status_completedincludes\sync\class-event-sync.php:186
actionwoocommerce_add_to_cartincludes\sync\class-event-sync.php:189
actionuser_registerincludes\sync\class-user-sync.php:101
actionprofile_updateincludes\sync\class-user-sync.php:104
actionwoocommerce_created_customerincludes\sync\class-user-sync.php:108
actionwoocommerce_update_customerincludes\sync\class-user-sync.php:109
actionbefore_woocommerce_initsync-engine-for-intercom.php:149
actionadmin_initsync-engine-for-intercom.php:150
actionwp_footersync-engine-for-intercom.php:166
actionadmin_noticessync-engine-for-intercom.php:338
actionadmin_noticessync-engine-for-intercom.php:343
Maintenance & Trust

Sync Engine – Intercom Integration for WordPress & WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 31, 2026
PHP min version8.2
Downloads229

Community Trust

Rating100/100
Number of ratings1
Active installs0
Alternatives

Sync Engine – Intercom Integration for WordPress & WooCommerce Alternatives

Intercom

Intercom

intercom

A
92

Official Intercom WordPress plugin: Engage visitors in real time, power growth with AI, and convert leads into loyal customers.

6K No CVEs
SCIM User Sync/Provisioning

SCIM User Sync/Provisioning

scim-user-provisioning

A
100

SCIM User Sync & User Provisioning. Create, delete, update users & automated user sync from Azure AD, Okta, Google Apps & many IDPs into WordPress.

200 No CVEs
User Sync

User Sync

user-sync

A
99

User sync for WordPress plugin enables automated user sync from WP to Salesforce, Zoom, Tableau, and remote user sync from multiple WordPress sites

200 1 CVE
User Sync for Azure AD / Azure B2C

User Sync for Azure AD / Azure B2C

user-sync-for-azure-office365

A
100

Create Business Directory and Bi-Directional User Synchronization with Azure AD, Azure B2C and Office 365. CPT,Taxonomies supported.

90 No CVEs
Multisite User Sync

Multisite User Sync

multisite-user-sync

A
85

Multisite User Sync will automatically synchronize users to all sites in multisite. Roles of users will be same on everysite.

50 No CVEs
Developer Profile

Sync Engine – Intercom Integration for WordPress & WooCommerce Developer Profile

RippleStep

3 plugins · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Sync Engine – Intercom Integration for WordPress & WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/sync-engine-for-intercom/assets/css/admin-styles.css/wp-content/plugins/sync-engine-for-intercom/assets/js/admin-scripts.js/wp-content/plugins/sync-engine-for-intercom/assets/js/connection-settings.js/wp-content/plugins/sync-engine-for-intercom/assets/js/user-sync-settings.js/wp-content/plugins/sync-engine-for-intercom/assets/js/event-sync-settings.js/wp-content/plugins/sync-engine-for-intercom/assets/js/logs-viewer.js/wp-content/plugins/sync-engine-for-intercom/assets/js/support-tools.js
Script Paths
/wp-content/plugins/sync-engine-for-intercom/assets/js/admin-scripts.js/wp-content/plugins/sync-engine-for-intercom/assets/js/connection-settings.js/wp-content/plugins/sync-engine-for-intercom/assets/js/user-sync-settings.js/wp-content/plugins/sync-engine-for-intercom/assets/js/event-sync-settings.js/wp-content/plugins/sync-engine-for-intercom/assets/js/logs-viewer.js/wp-content/plugins/sync-engine-for-intercom/assets/js/support-tools.js
Version Parameters
sync-engine-for-intercom/assets/css/admin-styles.css?ver=sync-engine-for-intercom/assets/js/admin-scripts.js?ver=sync-engine-for-intercom/assets/js/connection-settings.js?ver=sync-engine-for-intercom/assets/js/user-sync-settings.js?ver=sync-engine-for-intercom/assets/js/event-sync-settings.js?ver=sync-engine-for-intercom/assets/js/logs-viewer.js?ver=sync-engine-for-intercom/assets/js/support-tools.js?ver=

HTML / DOM Fingerprints

CSS Classes
rpplstp-iws-admin-sectionrpplstp-iws-settings-fieldrpplstp-iws-connection-statusrpplstp-iws-logs-tablerpplstp-iws-support-buttons
Data Attributes
data-sync-engine-for-intercom-settings
JS Globals
RPPLSTP_IWS_AJAX_URLRPPLSTP_IWS_NONCERPPLSTP_IWS_IntercomChatWidgetSettings
FAQ

Frequently Asked Questions about Sync Engine – Intercom Integration for WordPress & WooCommerce