UniVoucher For WooCommerce Security & Risk Analysis

wordpress.org/plugins/univoucher-for-woocommerce

Integrate UniVoucher crypto gift cards with WooCommerce. Sell blockchain-based gift cards or reward customers based on order rules.

0 active installs v1.5.4 PHP 7.4+ WP 5.0+ Updated Jan 29, 2026
blockchaincryptocryptocurrencygift-cardsvouchers
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is UniVoucher For WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

UniVoucher For WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The plugin 'univoucher-for-woocommerce' v1.5.4 exhibits a generally strong security posture, with excellent practices in SQL query handling and output escaping. The vast majority of SQL queries utilize prepared statements, and nearly all output is properly escaped, significantly reducing the risk of common injection and cross-site scripting vulnerabilities. The absence of known CVEs and a clean vulnerability history further bolster this positive assessment, suggesting a mature and well-maintained codebase. However, there are notable concerns regarding the attack surface. A significant number of AJAX handlers and REST API routes lack proper authentication or permission checks, presenting potential entry points for unauthorized actions. The presence of unsanitized paths in taint analysis, particularly those with high severity, indicates a risk of path traversal or insecure file operations if not handled with extreme care. While the plugin has strengths, these unprotected entry points and the taint analysis findings warrant attention to prevent exploitation.

Key Concerns

  • AJAX handlers without auth checks
  • REST API routes without permission callbacks
  • High severity taint flows
  • Unsanitized paths in taint analysis
Vulnerabilities
None known

UniVoucher For WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

UniVoucher For WooCommerce Release Timeline

v1.5.4Current
v1.5.3
v1.5.2
v1.5.1
v1.5
v1.4.9
v1.4.8
v1.4.7
v1.4.6
v1.4.5
v1.4.4
v1.4.3
v1.4.2
v1.4.1
v1.4
v1.3.7
v1.3.6
v1.3.5
v1.3.4
v1.3.3
Code Analysis
Analyzed Apr 16, 2026

UniVoucher For WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
124 prepared
Unescaped Output
10
1832 escaped
Nonce Checks
57
Capability Checks
38
File Operations
3
External Requests
12
Bundled Libraries
0

SQL Query Safety

100% prepared124 total queries

Output Escaping

99% escaped1842 total outputs
Data Flows · Security
9 unsanitized

Data Flow Analysis

22 flows9 with unsanitized paths
ajax_validate_single_card (includes/admin/class-univoucher-wc-add-cards-page.php:635)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
5 unprotected

UniVoucher For WooCommerce Attack Surface

Entry Points40
Unprotected5

AJAX Handlers 36

authwp_ajax_univoucher_get_productsincludes/admin/class-univoucher-wc-add-cards-page.php:49
authwp_ajax_univoucher_get_product_settingsincludes/admin/class-univoucher-wc-add-cards-page.php:50
authwp_ajax_univoucher_validate_single_cardincludes/admin/class-univoucher-wc-add-cards-page.php:51
authwp_ajax_univoucher_add_cardsincludes/admin/class-univoucher-wc-add-cards-page.php:52
authwp_ajax_univoucher_test_api_keyincludes/admin/class-univoucher-wc-admin-settings.php:59
authwp_ajax_univoucher_get_content_templatesincludes/admin/class-univoucher-wc-admin-settings.php:60
authwp_ajax_univoucher_find_missing_cardsincludes/admin/class-univoucher-wc-admin-tools.php:49
authwp_ajax_univoucher_sync_single_productincludes/admin/class-univoucher-wc-admin-tools.php:50
authwp_ajax_univoucher_sync_all_productsincludes/admin/class-univoucher-wc-admin-tools.php:51
authwp_ajax_univoucher_process_csvincludes/admin/class-univoucher-wc-csv-handler.php:49
authwp_ajax_univoucher_get_templatesincludes/admin/class-univoucher-wc-image-templates.php:50
authwp_ajax_univoucher_get_fontsincludes/admin/class-univoucher-wc-image-templates.php:51
authwp_ajax_univoucher_test_image_generationincludes/admin/class-univoucher-wc-image-templates.php:52
authwp_ajax_univoucher_get_custom_resourcesincludes/admin/class-univoucher-wc-image-templates.php:53
authwp_ajax_univoucher_upload_resourceincludes/admin/class-univoucher-wc-image-templates.php:54
authwp_ajax_univoucher_delete_resourceincludes/admin/class-univoucher-wc-image-templates.php:55
authwp_ajax_univoucher_get_wallet_infoincludes/admin/class-univoucher-wc-internal-wallet.php:50
authwp_ajax_univoucher_get_wallet_addressincludes/admin/class-univoucher-wc-internal-wallet.php:51
authwp_ajax_univoucher_check_allowanceincludes/admin/class-univoucher-wc-internal-wallet.php:52
authwp_ajax_univoucher_estimate_gasincludes/admin/class-univoucher-wc-internal-wallet.php:53
authwp_ajax_univoucher_create_cards_internalincludes/admin/class-univoucher-wc-internal-wallet.php:54
authwp_ajax_univoucher_get_card_for_editincludes/admin/class-univoucher-wc-inventory-page.php:511
authwp_ajax_univoucher_update_cardincludes/admin/class-univoucher-wc-inventory-page.php:512
authwp_ajax_univoucher_bulk_actionincludes/admin/class-univoucher-wc-inventory-page.php:513
authwp_ajax_univoucher_get_token_infoincludes/admin/class-univoucher-wc-product-fields.php:80
authwp_ajax_univoucher_generate_imageincludes/admin/class-univoucher-wc-product-fields.php:83
authwp_ajax_univoucher_toggle_promotionincludes/admin/class-univoucher-wc-promotions-page.php:46
authwp_ajax_univoucher_promotions_get_token_infoincludes/admin/class-univoucher-wc-promotions-page.php:47
authwp_ajax_univoucher_search_productsincludes/admin/class-univoucher-wc-promotions-page.php:48
authwp_ajax_univoucher_search_categoriesincludes/admin/class-univoucher-wc-promotions-page.php:49
authwp_ajax_univoucher_delete_gift_cardincludes/class-univoucher-wc-gift-card-manager.php:57
authwp_ajax_univoucher_assign_product_cardsincludes/class-univoucher-wc-order-manager.php:76
authwp_ajax_univoucher_unassign_cardincludes/class-univoucher-wc-order-manager.php:77
authwp_ajax_univoucher_check_order_assignmentincludes/class-univoucher-wc-order-manager.php:80
authwp_ajax_univoucher_dismiss_noticeincludes/class-univoucher-wc-promotion-notices.php:70
noprivwp_ajax_univoucher_dismiss_noticeincludes/class-univoucher-wc-promotion-notices.php:71

REST API Routes 3

POST/wp-json/univoucher/v1/callbackunivoucher-for-woocommerce.php:412
POST/wp-json/univoucher/v1/promotion-callbackunivoucher-for-woocommerce.php:419
POST/wp-json/univoucher/v1/promotion-cancel-callbackunivoucher-for-woocommerce.php:426

Shortcodes 1

[univoucher_unredeemed_promotion] includes/class-univoucher-wc-promotion-notices.php:67
WordPress Hooks 60
filterwoocommerce_admin_stock_htmlincludes/admin/class-univoucher-wc-admin-products.php:46
actionadmin_enqueue_scriptsincludes/admin/class-univoucher-wc-admin-products.php:49
actionadmin_enqueue_scriptsincludes/admin/class-univoucher-wc-admin-tools.php:52
actionadmin_menuincludes/admin/class-univoucher-wc-admin.php:68
actionadmin_initincludes/admin/class-univoucher-wc-admin.php:69
actionadmin_enqueue_scriptsincludes/admin/class-univoucher-wc-admin.php:70
actionadmin_enqueue_scriptsincludes/admin/class-univoucher-wc-image-templates.php:56
filterwoocommerce_product_data_tabsincludes/admin/class-univoucher-wc-product-fields.php:65
actionwoocommerce_product_data_panelsincludes/admin/class-univoucher-wc-product-fields.php:68
actionwoocommerce_process_product_metaincludes/admin/class-univoucher-wc-product-fields.php:71
actionwoocommerce_process_product_metaincludes/admin/class-univoucher-wc-product-fields.php:74
actionadmin_enqueue_scriptsincludes/admin/class-univoucher-wc-product-fields.php:77
actionadmin_enqueue_scriptsincludes/admin/class-univoucher-wc-promotional-cards-page.php:44
actionadmin_enqueue_scriptsincludes/admin/class-univoucher-wc-promotions-page.php:45
actionwoocommerce_after_checkout_validationincludes/class-univoucher-wc-cart-limits.php:48
filterwoocommerce_store_api_product_quantity_limitincludes/class-univoucher-wc-cart-limits.php:53
filterwoocommerce_quantity_input_maxincludes/class-univoucher-wc-cart-limits.php:55
filterwoocommerce_add_to_cart_validationincludes/class-univoucher-wc-cart-limits.php:57
actionwoocommerce_order_details_before_order_tableincludes/class-univoucher-wc-lmfwc-integration.php:63
actionwoocommerce_email_after_order_tableincludes/class-univoucher-wc-lmfwc-integration.php:64
actionlmfwc_email_order_license_keysincludes/class-univoucher-wc-lmfwc-integration.php:65
filterlmfwc_get_customer_license_keysincludes/class-univoucher-wc-lmfwc-integration.php:68
filterlmfwc_get_all_customer_license_keysincludes/class-univoucher-wc-lmfwc-integration.php:69
filterlmfwc_get_customer_license_keysincludes/class-univoucher-wc-lmfwc-integration.php:72
filterwoocommerce_order_actionsincludes/class-univoucher-wc-lmfwc-integration.php:75
actionwoocommerce_order_details_before_order_tableincludes/class-univoucher-wc-order-manager.php:61
actionwoocommerce_order_details_after_order_tableincludes/class-univoucher-wc-order-manager.php:63
actionwoocommerce_admin_order_items_after_line_itemsincludes/class-univoucher-wc-order-manager.php:67
actionwoocommerce_admin_order_items_after_line_itemsincludes/class-univoucher-wc-order-manager.php:70
actionwoocommerce_order_status_completedincludes/class-univoucher-wc-order-manager.php:73
filterwoocommerce_order_item_needs_processingincludes/class-univoucher-wc-order-manager.php:83
actionadmin_enqueue_scriptsincludes/class-univoucher-wc-order-manager.php:86
actionwp_enqueue_scriptsincludes/class-univoucher-wc-order-manager.php:89
actionwoocommerce_order_details_before_order_tableincludes/class-univoucher-wc-order-manager.php:92
actionwoocommerce_product_options_inventory_product_dataincludes/class-univoucher-wc-product-manager.php:51
actionadmin_enqueue_scriptsincludes/class-univoucher-wc-product-manager.php:52
actionadmin_enqueue_scriptsincludes/class-univoucher-wc-product-manager.php:55
actionsave_postincludes/class-univoucher-wc-product-manager.php:58
actionbulk_edit_postsincludes/class-univoucher-wc-product-manager.php:61
actionwoocommerce_product_duplicateincludes/class-univoucher-wc-product-manager.php:64
actionbefore_delete_postincludes/class-univoucher-wc-product-manager.php:67
actionwoocommerce_account_contentincludes/class-univoucher-wc-promotion-notices.php:58
actionwoocommerce_before_thankyouincludes/class-univoucher-wc-promotion-notices.php:61
actionwoocommerce_order_details_before_order_tableincludes/class-univoucher-wc-promotion-notices.php:64
actionwp_enqueue_scriptsincludes/class-univoucher-wc-promotion-notices.php:74
actionwoocommerce_order_status_completedincludes/class-univoucher-wc-promotion-processor.php:57
filterwp_mail_content_typeincludes/class-univoucher-wc-promotion-processor.php:854
actionwoocommerce_reduce_order_item_stockincludes/class-univoucher-wc-stock-manager.php:124
actionwoocommerce_restore_order_item_stockincludes/class-univoucher-wc-stock-manager.php:125
actionwoocommerce_saved_order_itemsincludes/class-univoucher-wc-stock-manager.php:126
actionwoocommerce_restock_refunded_itemincludes/class-univoucher-wc-stock-manager.php:127
actionwoocommerce_order_status_completedincludes/class-univoucher-wc-stock-manager.php:130
actionwoocommerce_delete_orderincludes/class-univoucher-wc-stock-manager.php:133
actionplugins_loadedunivoucher-for-woocommerce.php:135
actionadmin_noticesunivoucher-for-woocommerce.php:136
actionbefore_woocommerce_initunivoucher-for-woocommerce.php:137
actioninitunivoucher-for-woocommerce.php:138
actionrest_api_initunivoucher-for-woocommerce.php:144
actionupgrader_process_completeunivoucher-for-woocommerce.php:147
actionadmin_noticesunivoucher-for-woocommerce.php:275
Maintenance & Trust

UniVoucher For WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 29, 2026
PHP min version7.4
Downloads690

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

UniVoucher For WooCommerce Developer Profile

UniVoucher

1 plugin · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect UniVoucher For WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/univoucher-for-woocommerce/assets/css/univoucher-wc-checkout.css/wp-content/plugins/univoucher-for-woocommerce/assets/css/univoucher-wc-admin.css/wp-content/plugins/univoucher-for-woocommerce/assets/js/univoucher-wc-admin.js/wp-content/plugins/univoucher-for-woocommerce/assets/js/univoucher-wc-checkout.js
Script Paths
/wp-content/plugins/univoucher-for-woocommerce/assets/js/univoucher-wc-admin.js/wp-content/plugins/univoucher-for-woocommerce/assets/js/univoucher-wc-checkout.js
Version Parameters
univoucher-for-woocommerce/assets/css/univoucher-wc-checkout.css?ver=univoucher-for-woocommerce/assets/css/univoucher-wc-admin.css?ver=univoucher-for-woocommerce/assets/js/univoucher-wc-admin.js?ver=univoucher-for-woocommerce/assets/js/univoucher-wc-checkout.js?ver=

HTML / DOM Fingerprints

CSS Classes
univoucher_wc_admin_noticeunivoucher-wc-checkout-wrapperunivoucher-wc-product-fields
HTML Comments
<!-- UniVoucher For WooCommerce --><!-- Start UniVoucher WC Checkout --><!-- End UniVoucher WC Checkout -->
Data Attributes
data-uv-wc-product-iddata-uv-wc-gift-card-option
JS Globals
UnivoucherWCOptionsUnivoucherWCCheckoutConfig
REST Endpoints
/wp-json/univoucher-wc/v1/webhook
Shortcode Output
[univoucher_wc_gift_card_form][univoucher_wc_checkout_form]
FAQ

Frequently Asked Questions about UniVoucher For WooCommerce