Order Splitter for WooCommerce – Split / Duplicate / Merge Orders Security & Risk Analysis

The wc-order-splitter v1.4.9 plugin exhibits a strong security posture based on the provided static analysis and vulnerability history. A significant strength is the complete absence of unprotected entry points, with all 9 AJAX handlers and 1 REST API route appearing to have appropriate authorization checks. The code also demonstrates good practices by using prepared statements for all SQL queries and a high percentage of properly escaped output. The lack of any identified dangerous functions, file operations, or taint analysis findings further bolsters its security. The plugin's history of zero known vulnerabilities is a very positive indicator of its maintainers' commitment to security.