WP-Safety

Vendor Onboarding W9-1099 Chaser by Mypowerly Security & Risk Analysis

wordpress.org/plugins/w9-1099-chaser

Automate vendor onboarding - W-9 compliance & 1099 Electronic Filing (in minutes). Generate W-9 PDFs with eSignature. Connect to MyPowerly for adv …

0 active installs v1.0.14 PHP 7.4+ WP 5.8+ Updated Jun 18, 2026
1099affiliatetax-compliancevendor-managementw9
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Vendor Onboarding W9-1099 Chaser by Mypowerly Safe to Use in 2026?

Generally Safe

Score 100/100

Vendor Onboarding W9-1099 Chaser by Mypowerly has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The "w9-1099-chaser" v1.0.6 plugin exhibits a generally strong security posture with several positive indicators. The extensive use of prepared statements for SQL queries and a high percentage of properly escaped outputs suggest good development practices for preventing common injection vulnerabilities. A robust presence of nonce and capability checks across most entry points also indicates an effort to secure against unauthorized access. Furthermore, the absence of known CVEs and a clean vulnerability history are positive signs of a well-maintained and secure plugin.

Key Concerns

  • AJAX handlers without authentication checks
  • Use of dangerous functions (proc_open, shell_exec, unserialize)
Vulnerabilities
None known

Vendor Onboarding W9-1099 Chaser by Mypowerly Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Vendor Onboarding W9-1099 Chaser by Mypowerly Release Timeline

v1.0.14Current
v1.0.13
v1.0.12
v1.0.11
v1.0.10
v1.0.9
v1.0.8
v1.0.8-fix
v1.0.7
v1.0.6
Code Analysis
Analyzed Apr 16, 2026

Vendor Onboarding W9-1099 Chaser by Mypowerly Code Analysis

Dangerous Functions
4
Raw SQL Queries
0
86 prepared
Unescaped Output
22
1230 escaped
Nonce Checks
77
Capability Checks
76
File Operations
15
External Requests
14
Bundled Libraries
0

Dangerous Functions Found

proc_open$process = @proc_open( $command, $descriptorspec, $pipes );admin/class-admin.php:293
shell_exec$out = shell_exec( $command );admin/class-admin.php:309
shell_exec$shell_output = shell_exec( $command );admin/class-admin.php:453
unserialize$unserialized = @unserialize( $value, array( 'allowed_classes' => false ) );includes/class-form-plugin-detector.php:1546

SQL Query Safety

100% prepared86 total queries

Output Escaping

98% escaped1252 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

4 flows
render_settings_page (admin/class-admin.php:1227)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
2 unprotected

Vendor Onboarding W9-1099 Chaser by Mypowerly Attack Surface

Entry Points65
Unprotected2

AJAX Handlers 64

authwp_ajax_w91099ch_generate_w9_pdfadmin/class-admin.php:667
authwp_ajax_w91099ch_generate_govt_pdfadmin/class-admin.php:670
authwp_ajax_w91099ch_set_admin_consentadmin/class-admin.php:717
authwp_ajax_w91099ch_get_decrypted_credentialsadmin/class-admin.php:720
authwp_ajax_w91099ch_create_w9_pageadmin/class-admin.php:721
authwp_ajax_w91099ch_get_all_usersadmin/class-admin.php:722
authwp_ajax_w91099ch_get_default_page_urladmin/class-admin.php:723
authwp_ajax_w91099ch_get_accounting_bookkeeping_plugins_previewincludes/accounting-bookkeeping-plugin-ajax-handlers.php:7
authwp_ajax_w91099ch_refresh_affiliate_pluginsincludes/class-connector-core.php:551
authwp_ajax_w91099ch_get_plugin_affiliatesincludes/class-connector-core.php:552
authwp_ajax_w91099ch_get_all_affiliatesincludes/class-connector-core.php:553
authwp_ajax_w91099ch_initiate_connectionincludes/class-connector-core.php:554
authwp_ajax_w91099ch_process_credentialsincludes/class-connector-core.php:555
authwp_ajax_w91099ch_disconnectincludes/class-connector-core.php:556
authwp_ajax_w91099ch_test_connectionincludes/class-connector-core.php:557
authwp_ajax_w91099ch_validate_credentialsincludes/class-connector-core.php:558
authwp_ajax_w91099ch_refresh_credentialsincludes/class-connector-core.php:559
authwp_ajax_w91099ch_sync_profileincludes/class-connector-core.php:560
authwp_ajax_w91099ch_sync_plugin_dataincludes/class-connector-core.php:561
authwp_ajax_w91099ch_sync_affiliatesincludes/class-connector-core.php:562
authwp_ajax_w91099ch_save_auto_sync_settingincludes/class-connector-core.php:563
authwp_ajax_w91099ch_sync_w9_payeeincludes/class-connector-core.php:564
authwp_ajax_w91099ch_get_workspacesincludes/class-connector-core.php:565
authwp_ajax_w91099ch_get_detected_pluginsincludes/class-connector-core.php:566
authwp_ajax_w91099ch_collect_affiliate_dataincludes/class-connector-core.php:567
authwp_ajax_w91099ch_invite_team_membersincludes/class-connector-core.php:568
authwp_ajax_w91099ch_sync_all_webhookincludes/class-connector-core.php:569
authwp_ajax_w91099ch_get_user_countincludes/class-connector-core.php:570
authwp_ajax_w91099ch_get_excluded_affiliatesincludes/class-connector-core.php:571
authwp_ajax_w91099ch_set_excluded_affiliatesincludes/class-connector-core.php:572
authwp_ajax_w91099ch_validate_promo_codeincludes/class-connector-core.php:573
authwp_ajax_w91099ch_check_updateincludes/class-update-checker.php:32
authwp_ajax_w91099ch_get_fw9_pdfincludes/class-w9-form-shortcode.php:26
noprivwp_ajax_w91099ch_get_fw9_pdfincludes/class-w9-form-shortcode.php:27
authwp_ajax_w91099ch_generate_govt_pdfincludes/class-w9-form-shortcode.php:28
noprivwp_ajax_w91099ch_generate_govt_pdfincludes/class-w9-form-shortcode.php:29
authwp_ajax_w91099ch_submit_feedbackincludes/class-w9-form-shortcode.php:30
authwp_ajax_w91099ch_send_pdf_emailincludes/class-w9-form-shortcode.php:31
noprivwp_ajax_w91099ch_send_pdf_emailincludes/class-w9-form-shortcode.php:32
authwp_ajax_w91099ch_send_review_feedbackincludes/class-w9-form-shortcode.php:33
noprivwp_ajax_w91099ch_send_review_feedbackincludes/class-w9-form-shortcode.php:34
authwp_ajax_w91099ch_get_default_page_urlincludes/class-w9-form-shortcode.php:37
noprivwp_ajax_w91099ch_get_default_page_urlincludes/class-w9-form-shortcode.php:38
authwp_ajax_w91099ch_track_downloadincludes/class-w9-form-shortcode.php:41
noprivwp_ajax_w91099ch_track_downloadincludes/class-w9-form-shortcode.php:42
authwp_ajax_w91099ch_test_configincludes/class-w9-form-shortcode.php:45
noprivwp_ajax_w91099ch_test_configincludes/class-w9-form-shortcode.php:46
authwp_ajax_w91099ch_get_contractor_entries_previewincludes/contractor-plugin-ajax-handlers.php:10
authwp_ajax_w91099ch_refresh_form_pluginsincludes/form-plugin-ajax-handlers.php:689
authwp_ajax_w91099ch_get_plugin_formsincludes/form-plugin-ajax-handlers.php:723
authwp_ajax_w91099ch_get_excluded_formsincludes/form-plugin-ajax-handlers.php:775
authwp_ajax_w91099ch_set_excluded_formsincludes/form-plugin-ajax-handlers.php:789
authwp_ajax_w91099ch_get_form_entriesincludes/form-plugin-ajax-handlers.php:805
authwp_ajax_w91099ch_get_form_entries_previewincludes/form-plugin-ajax-handlers.php:834
authwp_ajax_w91099ch_reset_download_statsincludes/form-plugin-ajax-handlers.php:867
authwp_ajax_w91099ch_sync_form_pluginsincludes/form-plugin-ajax-handlers.php:889
authwp_ajax_w91099ch_sync_wallet_payout_pluginsincludes/form-plugin-ajax-handlers.php:963
authwp_ajax_w91099ch_sync_freelancer_contractor_pluginsincludes/form-plugin-ajax-handlers.php:1027
authwp_ajax_w91099ch_sync_accounting_bookkeeping_pluginsincludes/form-plugin-ajax-handlers.php:1096
authwp_ajax_w91099ch_sync_contractor_pluginsincludes/form-plugin-ajax-handlers.php:1160
authwp_ajax_w91099ch_get_freelancer_contractor_entries_previewincludes/freelancer-contractor-plugin-ajax-handlers.php:10
authwp_ajax_w91099ch_get_wallet_payout_plugins_previewincludes/wallet-payout-plugin-ajax-handlers.php:7
authwp_ajax_w91099ch_get_wallet_payout_entries_previewincludes/wallet-payout-plugin-ajax-handlers.php:34
authwp_ajax_w91099ch_sync_wallet_payout_dataincludes/wallet-payout-plugin-ajax-handlers.php:70

Shortcodes 1

[w91099ch_w9_form] includes/class-w9-form-shortcode.php:18
WordPress Hooks 70
actioncurrent_screenadmin/class-admin.php:678
actionadmin_menuadmin/class-admin.php:706
actionadmin_menuadmin/class-admin.php:707
actionadmin_enqueue_scriptsadmin/class-admin.php:708
actionadmin_noticesadmin/class-admin.php:709
actionwp_before_admin_bar_renderadmin/class-admin.php:712
actionadmin_post_w91099ch_accept_consentadmin/class-admin.php:714
actionadmin_post_w91099ch_revoke_consentadmin/class-admin.php:715
filtercron_schedulesincludes/class-connector-core.php:575
actionw91099ch_auto_sync_cronincludes/class-connector-core.php:576
actionactivated_pluginincludes/class-connector-core.php:577
actiondeactivated_pluginincludes/class-connector-core.php:578
actionupgrader_process_completeincludes/class-connector-core.php:579
actiondelete_pluginincludes/class-connector-core.php:580
actionuser_registerincludes/class-connector-core.php:581
actionprofile_updateincludes/class-connector-core.php:582
actionadded_optionincludes/class-connector-core.php:583
actionupdated_optionincludes/class-connector-core.php:584
actiondeleted_optionincludes/class-connector-core.php:585
actionaffwp_insert_affiliateincludes/class-connector-core.php:588
actionaffwp_update_affiliateincludes/class-connector-core.php:589
actionslicewp_register_affiliateincludes/class-connector-core.php:590
actionwpam_front_end_registration_form_submittedincludes/class-connector-core.php:591
actionwpam_affiliate_application_approvedincludes/class-connector-core.php:592
actionwpam_affiliate_application_activatedincludes/class-connector-core.php:593
actionwpam_affiliate_application_declinedincludes/class-connector-core.php:594
actionwpam_affiliate_application_blockedincludes/class-connector-core.php:595
actionwpam_affiliate_application_deactivatedincludes/class-connector-core.php:596
actionyith_wcaf_affiliate_createdincludes/class-connector-core.php:597
actionyith_wcaf_affiliate_updatedincludes/class-connector-core.php:598
actionyith_wcaf_affiliate_deletedincludes/class-connector-core.php:599
actionyith_wcaf_commission_createdincludes/class-connector-core.php:600
actionyith_wcaf_commission_status_changedincludes/class-connector-core.php:601
actionyith_wcaf_commission_deletedincludes/class-connector-core.php:602
actionfluentform_submission_insertedincludes/class-connector-core.php:605
actionwpforms_process_completeincludes/class-connector-core.php:606
actionfrm_after_create_entryincludes/class-connector-core.php:607
actionwpcf7_mail_sentincludes/class-connector-core.php:608
actionforminator_form_after_save_entryincludes/class-connector-core.php:609
actionninja_forms_after_submissionincludes/class-connector-core.php:610
actioneverest_forms_process_completeincludes/class-connector-core.php:611
actionrest_api_initincludes/class-connector-core.php:617
actioninitincludes/class-connector-core.php:618
actiontemplate_redirectincludes/class-connector-core.php:619
actionadmin_initincludes/class-connector-core.php:620
filterquery_varsincludes/class-connector-core.php:622
actionplugins_loadedincludes/class-elementor-integration.php:34
actionelementor/widgets/registerincludes/class-elementor-integration.php:47
actionelementor/elements/categories_registeredincludes/class-elementor-integration.php:50
actionrest_api_initincludes/class-my-powerly-card-rest.php:33
filterrest_pre_serve_requestincludes/class-my-powerly-card-rest.php:34
actionenqueue_block_editor_assetsincludes/class-mypowerly-widget-block.php:23
actionwpincludes/class-mypowerly-widget-block.php:24
actionadmin_enqueue_scriptsincludes/class-update-checker.php:33
actionenqueue_block_editor_assetsincludes/class-w9-form-block.php:23
actionwpincludes/class-w9-form-block.php:24
actionwpincludes/class-w9-form-shortcode.php:16
actionwp_enqueue_scriptsincludes/class-w9-form-shortcode.php:21
actionwp_enqueue_scriptsincludes/class-w9-form-shortcode.php:24
actionwp_footerincludes/class-w9-form-shortcode.php:51
actionwpincludes/class-widget-manager.php:39
actionadmin_menuincludes/class-widget-manager.php:40
actionadmin_enqueue_scriptsincludes/class-widget-manager.php:41
actionwp_enqueue_scriptsincludes/class-widget-manager.php:42
actionwp_footerincludes/class-widget-manager.php:43
actionwidgets_initincludes/class-widget-manager.php:44
actionplugins_loadedw9-1099-chaser.php:29
actioninitw9-1099-chaser.php:152
actioninitw9-1099-chaser.php:153
filterquery_varsw9-1099-chaser.php:385

Scheduled Events 1

w91099ch_auto_sync_cron
Maintenance & Trust

Vendor Onboarding W9-1099 Chaser by Mypowerly Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.5
Last updatedJun 18, 2026
PHP min version7.4
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs0
Alternatives

Vendor Onboarding W9-1099 Chaser by Mypowerly Alternatives

PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links

PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links

pretty-link

A
93

🌠 Shorten, brand, and track any URL on your own domain. Keep your links — and your data — where they belong. 🔗

200K 8 CVEs
Advanced Ads – Ad Manager & AdSense

Advanced Ads – Ad Manager & AdSense

advanced-ads

A
88

The only complete toolkit for all ad types. Grow your revenue with AdSense, Amazon—or any affiliate network. Get pinpoint targeting and best support!

100K 9 CVEs
ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin

ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin

thirstyaffiliates

A
96

🔗 Affiliate link management & cloaker tool. Easily manage, shrink and track your affiliate links in WordPress. 🔥

30K 5 CVEs
BetterLinks – URL Shortener, Link Tracking, Analytics & Affiliate Link Manager

BetterLinks – URL Shortener, Link Tracking, Analytics & Affiliate Link Manager

betterlinks

A
98

Ultimate plugin to create, shorten, track and manage any URL. Gather analytics reports and run successful marketing campaigns easily.

20K 3 CVEs
Pochipp

Pochipp

pochipp

A
98

Amazonや楽天市場から商品を検索してアフィリエイトリンクを管理できるプラグインです。

20K 2 CVEs
Developer Profile

Vendor Onboarding W9-1099 Chaser by Mypowerly Developer Profile

mypowerly

2 plugins · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Vendor Onboarding W9-1099 Chaser by Mypowerly

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/w9-1099-chaser/admin/css/admin.css/wp-content/plugins/w9-1099-chaser/admin/js/admin.js/wp-content/plugins/w9-1099-chaser/assets/css/w9-form-styles.css/wp-content/plugins/w9-1099-chaser/assets/js/w9-form-script.js/wp-content/plugins/w9-1099-chaser/assets/js/w9-form-block.js/wp-content/plugins/w9-1099-chaser/assets/js/mypowerly-widget-block.js/wp-content/plugins/w9-1099-chaser/assets/js/widget-manager.js
Script Paths
/wp-content/plugins/w9-1099-chaser/admin/js/admin.js/wp-content/plugins/w9-1099-chaser/assets/js/w9-form-script.js/wp-content/plugins/w9-1099-chaser/assets/js/w9-form-block.js/wp-content/plugins/w9-1099-chaser/assets/js/mypowerly-widget-block.js/wp-content/plugins/w9-1099-chaser/assets/js/widget-manager.js
Version Parameters
w9-1099-chaser/admin/css/admin.css?ver=w9-1099-chaser/admin/js/admin.js?ver=w9-1099-chaser/assets/css/w9-form-styles.css?ver=w9-1099-chaser/assets/js/w9-form-script.js?ver=w9-1099-chaser/assets/js/w9-form-block.js?ver=w9-1099-chaser/assets/js/mypowerly-widget-block.js?ver=w9-1099-chaser/assets/js/widget-manager.js?ver=

HTML / DOM Fingerprints

CSS Classes
w9-1099-chaser-form-container
Data Attributes
data-w9-form-nonce
JS Globals
w91099ch_form_script_paramsw91099ch_widget_block_paramsw91099ch_mypowerly_widget_block_params
REST Endpoints
/wp-json/w91099ch/v1/card-data
Shortcode Output
[w9_form]
FAQ

Frequently Asked Questions about Vendor Onboarding W9-1099 Chaser by Mypowerly