Ultimate Site Builder by PNX Uin88 for Woocommerce Security & Risk Analysis

wordpress.org/plugins/ultimate-site-builder-by-pnx-uin88-for-woocommerce

UIN88.com:大量Woocommerce+DIVI模板助您快速搭建专业Woocommerce独立网

0 active installs v2.0.2 PHP 7.1+ WP 5.3+ Updated Unknown
divi-woocommercepnxwoocommercewoocommerce-buildupwoocommerce-template
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Ultimate Site Builder by PNX Uin88 for Woocommerce Safe to Use in 2026?

Generally Safe

Score 100/100

Ultimate Site Builder by PNX Uin88 for Woocommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

The plugin "ultimate-site-builder-by-pnx-uin88-for-woocommerce" v2.0.2 exhibits a generally good security posture based on the static analysis. The absence of known CVEs and a lack of critical findings in taint analysis are positive indicators. The plugin utilizes prepared statements for all SQL queries, which is a strong defense against SQL injection vulnerabilities. It also implements nonce checks on its entry points.

However, there are areas of concern that warrant attention. The analysis indicates that 50% of output operations are not properly escaped, leaving potential for cross-site scripting (XSS) vulnerabilities. Additionally, the plugin performs several file operations and external HTTP requests, which could be exploited if not handled securely. The complete absence of capability checks on the identified entry points is a significant weakness, as it suggests that unauthorized users might be able to trigger these AJAX actions without proper authorization, even though the entry points themselves are currently protected by other means (implied by 0 unprotected entry points).

While the plugin has no historical vulnerabilities and a low attack surface, the unescaped output and lack of capability checks present exploitable risks. The strengths lie in its SQL handling and nonce implementation, but the identified weaknesses in output sanitization and authorization require mitigation.

Key Concerns

  • 50% of output operations not properly escaped
  • 0 capability checks on entry points
Vulnerabilities
None known

Ultimate Site Builder by PNX Uin88 for Woocommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Ultimate Site Builder by PNX Uin88 for Woocommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
7
7 escaped
Nonce Checks
2
Capability Checks
0
File Operations
7
External Requests
2
Bundled Libraries
0

Output Escaping

50% escaped14 total outputs
Data Flows
4 unsanitized

Data Flow Analysis

4 flows4 with unsanitized paths
ultimate_site_builder_by_pnx_uin88_for_woocommerce_download (includes\class-ultimate-site-builder-by-pnx-uin88-for-woocommerce-ajax.php:29)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Ultimate Site Builder by PNX Uin88 for Woocommerce Attack Surface

Entry Points2
Unprotected0

AJAX Handlers 2

authwp_ajax_ultimate_site_builder_by_pnx_uin88_for_woocommerce_downloadincludes\class-ultimate-site-builder-by-pnx-uin88-for-woocommerce-ajax.php:20
authwp_ajax_ultimate_site_builder_by_pnx_uin88_for_woocommerce_logoutincludes\class-ultimate-site-builder-by-pnx-uin88-for-woocommerce-ajax.php:23
WordPress Hooks 2
actionplugins_loadedultimate-site-builder-by-pnx-uin88-for-woocommerce.php:29
actionadmin_menuultimate-site-builder-by-pnx-uin88-for-woocommerce.php:35
Maintenance & Trust

Ultimate Site Builder by PNX Uin88 for Woocommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.5.8
Last updatedUnknown
PHP min version7.1
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Ultimate Site Builder by PNX Uin88 for Woocommerce Developer Profile

PNX Software

2 plugins · 70 total installs

91
trust score
Avg Security Score
96/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Ultimate Site Builder by PNX Uin88 for Woocommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/ultimate-site-builder-by-pnx-uin88-for-woocommerce/assets/js/admin/ultimate-site-builder-by-pnx-uin88-for-woocommerce-admin.js/wp-content/plugins/ultimate-site-builder-by-pnx-uin88-for-woocommerce/assets/css/admin/ultimate-site-builder-by-pnx-uin88-for-woocommerce-admin.css
Script Paths
/wp-content/plugins/ultimate-site-builder-by-pnx-uin88-for-woocommerce/assets/js/admin/ultimate-site-builder-by-pnx-uin88-for-woocommerce-admin.js
Version Parameters
ultimate-site-builder-by-pnx-uin88-for-woocommerce/assets/js/admin/ultimate-site-builder-by-pnx-uin88-for-woocommerce-admin.js?ver=1.0

HTML / DOM Fingerprints

JS Globals
ultimate_site_builder_by_pnx_uin88_for_woocommerce_context
REST Endpoints
/wp-json/api/getUser/wp-json/api/getTemplate
FAQ

Frequently Asked Questions about Ultimate Site Builder by PNX Uin88 for Woocommerce