WP-Safety

Upsellar Security & Risk Analysis

wordpress.org/plugins/upsellar

AI-Powered Product Recommendations.

0 active installs v1.0.2 PHP 7.4+ WP 6.3+ Updated Jan 11, 2025
cross-sellrecommendationsup-sellupsellarwoocommerce
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Upsellar Safe to Use in 2026?

Generally Safe

Score 92/100

Upsellar has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The "upsellar" v1.0.2 plugin demonstrates a generally strong security posture based on the provided static analysis. The absence of known vulnerabilities in its history and the clean taint analysis, with no flows containing unsanitized paths or critical/high severity issues, are significant strengths. The plugin also makes good use of security best practices, including 100% prepared SQL statements, a high rate of proper output escaping (91%), and the presence of nonce checks for all identified AJAX handlers. Furthermore, all AJAX handlers have capability checks, indicating a good understanding of access control.

Key Concerns

  • File operations detected
  • External HTTP requests detected
  • Minor unescaped output detected
Vulnerabilities
None known

Upsellar Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Upsellar Release Timeline

v1.0.2Current
Code Analysis
Analyzed Mar 17, 2026

Upsellar Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
10
99 escaped
Nonce Checks
4
Capability Checks
3
File Operations
1
External Requests
5
Bundled Libraries
0

Output Escaping

91% escaped109 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

2 flows
upsellar_handle_fetch_upsellar_blocks (src\Engine\Blocks\UpsellarBlockBuilder.php:34)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Upsellar Attack Surface

Entry Points4
Unprotected0

AJAX Handlers 4

authwp_ajax_fetch_upsellar_blockssrc\Engine\Blocks\UpsellarBlockBuilder.php:23
noprivwp_ajax_fetch_upsellar_blockssrc\Engine\Blocks\UpsellarBlockBuilder.php:24
authwp_ajax_upsellar_track_product_interaction_jssrc\Interaction\UpsellarInteractionTrackingController.php:17
noprivwp_ajax_upsellar_track_product_interaction_jssrc\Interaction\UpsellarInteractionTrackingController.php:18
WordPress Hooks 31
actionadmin_menusrc\Admin\UpsellarAdminPage.php:18
actionadmin_noticessrc\Admin\UpsellarHttpsEnforcer.php:29
actionadmin_initsrc\Admin\UpsellarPluginInitializer.php:30
actionadmin_menusrc\Admin\UpsellarPluginInitializer.php:34
actionadmin_initsrc\Admin\UpsellarPluginInitializer.php:35
actionadmin_enqueue_scriptssrc\Admin\UpsellarPluginInitializer.php:39
actionadmin_enqueue_scriptssrc\Admin\UpsellarPluginInitializer.php:40
actionwp_enqueue_scriptssrc\Admin\UpsellarPluginInitializer.php:52
actionwoocommerce_new_productsrc\Admin\UpsellarProductsController.php:21
actionwoocommerce_update_productsrc\Admin\UpsellarProductsController.php:22
actionwp_trash_postsrc\Admin\UpsellarProductsController.php:23
actiondelete_postsrc\Admin\UpsellarProductsController.php:24
actionuntrashed_postsrc\Admin\UpsellarProductsController.php:25
actionwoocommerce_loadedsrc\Engine\Blocks\UpsellarBlockRegistrar.php:23
actionwpsrc\Engine\Blocks\UpsellarBlockRegistrar.php:25
filterpost_classsrc\Engine\Blocks\UpsellarHtmlBuilder.php:66
filterpost_classsrc\Engine\Blocks\UpsellarHtmlBuilder.php:103
filterpost_classsrc\Engine\Blocks\UpsellarHtmlBuilder.php:140
filterpost_classsrc\Engine\Blocks\UpsellarHtmlBuilder.php:177
actionadmin_noticessrc\Engine\UpsellarEngineController.php:40
actiontrack_product_interaction_phpsrc\Interaction\UpsellarInteractionTrackingController.php:21
actionwoocommerce_after_single_productsrc\Interaction\UpsellarWoocommerceInteractionController.php:19
actionwoocommerce_add_to_cartsrc\Interaction\UpsellarWoocommerceInteractionController.php:22
actionwoocommerce_thankyousrc\Interaction\UpsellarWoocommerceInteractionController.php:25
actionadmin_noticesupsellar.php:36
actionplugins_loadedupsellar.php:56
actionupdated_optionupsellar.php:60
actioninitupsellar.php:66
actionwoocommerce_loadedupsellar.php:71
actionwoocommerce_cart_collateralsupsellar.php:77
actionwoocommerce_after_single_product_summaryupsellar.php:78
Maintenance & Trust

Upsellar Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedJan 11, 2025
PHP min version7.4
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs0
Alternatives

Upsellar Alternatives

Product Recommendations – Custom Locations

Product Recommendations – Custom Locations

product-recommendations-custom-locations

A
92

Feature plugin for the official Product Recommendations extension that allows you to use shortcodes to recommend products in custom WooCommerce store …

300 No CVEs
Sales UP for WooCommerce – Boost Your sales with Cross Sells

Sales UP for WooCommerce – Boost Your sales with Cross Sells

wc-sales-up

A
85

This plugin helps you to display Frequently Bought together products with discount, display offers on cart page and checkout page to increase your sal …

10 No CVEs
C4D Woo Boost Sales – Set up Up-Sells & Cross-Sells

C4D Woo Boost Sales – Set up Up-Sells & Cross-Sells

c4d-woo-boost-sales

A
85

Help WooCommerce stores convert traffic into sales, upsell & cross-sell. Boost Sales Plugin for WooCommerce.

0 No CVEs
NextBestOffer-OLS

NextBestOffer-OLS

nextbestoffer-ols

A
85

Revolutionize your customers' shopping journey with recommendations tailored to their individual preferences. Increase your sales with minimal ef …

0 No CVEs
Nudgio Technologies

Nudgio Technologies

nudgio-technologies

A
100

AI-powered product recommendations for WooCommerce — bestsellers, cross-sell, upsell, and similar products.

0 No CVEs
Developer Profile

Upsellar Developer Profile

upsellar

1 plugin · 0 total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Upsellar

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/upsellar/assets/css/app.css/wp-content/plugins/upsellar/assets/js/upsellar.js/wp-content/plugins/upsellar/assets/js/admin.js
Script Paths
/wp-content/plugins/upsellar/assets/js/upsellar.js/wp-content/plugins/upsellar/assets/js/admin.js
Version Parameters
upsellar/assets/css/app.css?ver=upsellar/assets/js/upsellar.js?ver=upsellar/assets/js/admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
notice-successis-dismissible
Data Attributes
upsellarData
JS Globals
upsellarData
FAQ

Frequently Asked Questions about Upsellar