Does Sync Engine for Intercom – Sync Users, Orders & Events have any unpatched vulnerabilities?

No published vulnerabilities and no findings under coordinated disclosure as of the latest data update. Always keep the plugin updated to the latest version.

Is Sync Engine for Intercom – Sync Users, Orders & Events compatible with WordPress 7.0.2?

According to WordPress.org data, Sync Engine for Intercom – Sync Users, Orders & Events 2.0.3 has been tested up to WordPress 7.0.2. Check the plugin's changelog for the latest compatibility information.

Is Sync Engine for Intercom – Sync Users, Orders & Events compatible with PHP 8.2+?

Sync Engine for Intercom – Sync Users, Orders & Events requires PHP 8.2 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

What is Sync Engine for Intercom – Sync Users, Orders & Events's security score?

Sync Engine for Intercom – Sync Users, Orders & Events has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Sync Engine for Intercom – Sync Users, Orders & Events Security

Safety Verdict

Is Sync Engine for Intercom – Sync Users, Orders & Events Safe to Use in 2026?

Generally Safe

Score 100/100

Sync Engine for Intercom – Sync Users, Orders & Events has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago

Risk Assessment

The "sync-engine-for-intercom" v2.0.1 plugin exhibits a generally strong security posture based on the provided static analysis. The absence of any AJAX handlers, REST API routes, shortcodes, or cron events without proper authentication and permission checks significantly limits the potential attack surface. Furthermore, the code demonstrates excellent practices with 100% of SQL queries using prepared statements and 100% of outputs being properly escaped, mitigating risks associated with injection and cross-site scripting vulnerabilities. The plugin also implements a good number of nonce and capability checks, further hardening its entry points.

Key Concerns

Bundled library: Guzzle

Vulnerabilities

None known

Sync Engine for Intercom – Sync Users, Orders & Events Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Version History

Sync Engine for Intercom – Sync Users, Orders & Events Release Timeline

v2.3.0

v2.0.1

Code Analysis

Analyzed Mar 17, 2026

Sync Engine for Intercom – Sync Users, Orders & Events Code Analysis

Dangerous Functions

0

Raw SQL Queries

0

0 prepared

Unescaped Output

1

1767 escaped

Nonce Checks

16

Capability Checks

16

File Operations

9

External Requests

1

Bundled Libraries

1

Bundled Libraries

Guzzle

Output Escaping

100% escaped1768 total outputs

Data Flows · Security

All sanitized

Data Flow Analysis

13 flows

ajax_save_credentials (includes\admin\handlers\class-connection-handler.php:49)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

Sync Engine for Intercom – Sync Users, Orders & Events Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 25

actionadmin_enqueue_scriptsincludes\admin\class-admin-assets.php:38

actionadmin_enqueue_scriptsincludes\admin\class-admin-assets.php:39

actionadmin_menuincludes\admin\class-admin-menu.php:38

actionadmin_headincludes\admin\class-admin-menu.php:39

actionadmin_initincludes\admin\class-admin-settings-registration.php:38

actionwoocommerce_loadedincludes\sync\class-event-sync.php:134

actionuser_registerincludes\sync\class-event-sync.php:152

actionwp_loginincludes\sync\class-event-sync.php:154

actionwp_logoutincludes\sync\class-event-sync.php:156

actionprofile_updateincludes\sync\class-event-sync.php:159

actionwoocommerce_new_orderincludes\sync\class-event-sync.php:176

actionwoocommerce_update_orderincludes\sync\class-event-sync.php:179

actionwoocommerce_process_shop_order_metaincludes\sync\class-event-sync.php:182

actionsave_post_shop_orderincludes\sync\class-event-sync.php:184

actionwoocommerce_order_status_completedincludes\sync\class-event-sync.php:186

actionwoocommerce_add_to_cartincludes\sync\class-event-sync.php:189

actionuser_registerincludes\sync\class-user-sync.php:101

actionprofile_updateincludes\sync\class-user-sync.php:104

actionwoocommerce_created_customerincludes\sync\class-user-sync.php:108

actionwoocommerce_update_customerincludes\sync\class-user-sync.php:109

actionbefore_woocommerce_initsync-engine-for-intercom.php:149

actionadmin_initsync-engine-for-intercom.php:150

actionwp_footersync-engine-for-intercom.php:166

actionadmin_noticessync-engine-for-intercom.php:338

actionadmin_noticessync-engine-for-intercom.php:343

Maintenance & Trust

Sync Engine for Intercom – Sync Users, Orders & Events Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2

Last updatedJul 19, 2026

PHP min version8.2

Downloads449

Community Trust

Rating100/100

Number of ratings1

Active installs30

Alternatives

Sync Engine for Intercom – Sync Users, Orders & Events Alternatives

Intercom

intercom

A

92

Official Intercom WordPress plugin: Engage visitors in real time, power growth with AI, and convert leads into loyal customers.

6K No CVEs

SCIM User Sync/Provisioning

scim-user-provisioning

A

100

SCIM User Sync & User Provisioning. Create, delete, update users & automated user sync from Azure AD, Okta, Google Apps & many IDPs into WordPress.

200 No CVEs

User Sync

user-sync

A

99

User sync for WordPress plugin enables automated user sync from WP to Salesforce, Zoom, Tableau, and remote user sync from multiple WordPress sites

200 1 CVE

User Sync for Azure AD / Azure B2C

user-sync-for-azure-office365

A

100

Create Business Directory and Bi-Directional User Synchronization with Azure AD, Azure B2C and Office 365. CPT,Taxonomies supported.

70 No CVEs

Multisite User Sync

multisite-user-sync

A

85

Multisite User Sync will automatically synchronize users to all sites in multisite. Roles of users will be same on everysite.

40 No CVEs

Developer Profile

Sync Engine for Intercom – Sync Users, Orders & Events Developer Profile

RippleStep

3 plugins · 60 total installs

94

trust score

Avg Security Score

100/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Sync Engine for Intercom – Sync Users, Orders & Events

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/sync-engine-for-intercom/assets/css/admin-styles.css/wp-content/plugins/sync-engine-for-intercom/assets/js/admin-scripts.js/wp-content/plugins/sync-engine-for-intercom/assets/js/connection-settings.js/wp-content/plugins/sync-engine-for-intercom/assets/js/user-sync-settings.js/wp-content/plugins/sync-engine-for-intercom/assets/js/event-sync-settings.js/wp-content/plugins/sync-engine-for-intercom/assets/js/logs-viewer.js/wp-content/plugins/sync-engine-for-intercom/assets/js/support-tools.js

Script Paths

/wp-content/plugins/sync-engine-for-intercom/assets/js/admin-scripts.js/wp-content/plugins/sync-engine-for-intercom/assets/js/connection-settings.js/wp-content/plugins/sync-engine-for-intercom/assets/js/user-sync-settings.js/wp-content/plugins/sync-engine-for-intercom/assets/js/event-sync-settings.js/wp-content/plugins/sync-engine-for-intercom/assets/js/logs-viewer.js/wp-content/plugins/sync-engine-for-intercom/assets/js/support-tools.js

Version Parameters

sync-engine-for-intercom/assets/css/admin-styles.css?ver=sync-engine-for-intercom/assets/js/admin-scripts.js?ver=sync-engine-for-intercom/assets/js/connection-settings.js?ver=sync-engine-for-intercom/assets/js/user-sync-settings.js?ver=sync-engine-for-intercom/assets/js/event-sync-settings.js?ver=sync-engine-for-intercom/assets/js/logs-viewer.js?ver=sync-engine-for-intercom/assets/js/support-tools.js?ver=

HTML / DOM Fingerprints

CSS Classes

rpplstp-iws-admin-sectionrpplstp-iws-settings-fieldrpplstp-iws-connection-statusrpplstp-iws-logs-tablerpplstp-iws-support-buttons

Data Attributes

data-sync-engine-for-intercom-settings

JS Globals

RPPLSTP_IWS_AJAX_URLRPPLSTP_IWS_NONCERPPLSTP_IWS_IntercomChatWidgetSettings

FAQ

Sync Engine for Intercom – Sync Users, Orders & Events Security & Risk Analysis

Is Sync Engine for Intercom – Sync Users, Orders & Events Safe to Use in 2026?

Generally Safe

Key Concerns

Sync Engine for Intercom – Sync Users, Orders & Events Security Vulnerabilities

Sync Engine for Intercom – Sync Users, Orders & Events Release Timeline

Sync Engine for Intercom – Sync Users, Orders & Events Code Analysis

Bundled Libraries

Output Escaping

Data Flow Analysis

Sync Engine for Intercom – Sync Users, Orders & Events Attack Surface

Sync Engine for Intercom – Sync Users, Orders & Events Maintenance & Trust

Maintenance Signals

Community Trust

Sync Engine for Intercom – Sync Users, Orders & Events Alternatives

Intercom

SCIM User Sync/Provisioning

User Sync

User Sync for Azure AD / Azure B2C

Multisite User Sync

Sync Engine for Intercom – Sync Users, Orders & Events Developer Profile

How We Detect Sync Engine for Intercom – Sync Users, Orders & Events

Asset Fingerprints

HTML / DOM Fingerprints

Frequently Asked Questions about Sync Engine for Intercom – Sync Users, Orders & Events