Order Splitter for WooCommerce – Split / Duplicate / Merge Orders Security & Risk Analysis

wordpress.org/plugins/wc-order-splitter

A plugin helps you to simply split and duplicate orders.

300 active installs v1.4.9 PHP 7.4+ WP 6.3+ Updated Feb 3, 2026
cloneduplicate-ordermergesplitsplit-order
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Order Splitter for WooCommerce – Split / Duplicate / Merge Orders Safe to Use in 2026?

Generally Safe

Score 100/100

Order Splitter for WooCommerce – Split / Duplicate / Merge Orders has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The wc-order-splitter v1.4.9 plugin exhibits a strong security posture based on the provided static analysis and vulnerability history. A significant strength is the complete absence of unprotected entry points, with all 9 AJAX handlers and 1 REST API route appearing to have appropriate authorization checks. The code also demonstrates good practices by using prepared statements for all SQL queries and a high percentage of properly escaped output. The lack of any identified dangerous functions, file operations, or taint analysis findings further bolsters its security. The plugin's history of zero known vulnerabilities is a very positive indicator of its maintainers' commitment to security.

Key Concerns

  • External HTTP requests identified
  • Some output escaping could be improved
Vulnerabilities
None known

Order Splitter for WooCommerce – Split / Duplicate / Merge Orders Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Order Splitter for WooCommerce – Split / Duplicate / Merge Orders Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
10
58 escaped
Nonce Checks
9
Capability Checks
21
File Operations
0
External Requests
2
Bundled Libraries
0

Output Escaping

85% escaped68 total outputs
Attack Surface

Order Splitter for WooCommerce – Split / Duplicate / Merge Orders Attack Surface

Entry Points10
Unprotected0

AJAX Handlers 9

authwp_ajax_yoos_merge_order_actioninc\backend\actions\merge-order.php:9
authwp_ajax_yoos_handle_bulk_actioninc\backend\actions\return-order-bulk-action.php:8
authwp_ajax_split_order_by_categoryinc\backend\actions\split-order-by-category.php:8
authwp_ajax_get_order_itemsinc\backend\actions\split-order-by-default.php:8
authwp_ajax_split_orderinc\backend\actions\split-order-by-default.php:9
authwp_ajax_split_order_by_stock_statusinc\backend\actions\split-order-by-stock-status.php:8
authwp_ajax_never_show_wc_order_splitter_noticeinc\cores\notices.php:11
authwp_ajax_dismiss_pre_order_noticeinc\cores\notices.php:13
authwp_ajax_dismiss_settings_noticeinc\cores\notices.php:14

REST API Routes 1

POST/wp-json/yoohw/v1/noticeinc\backend\yoohw-news.php:109
WordPress Hooks 47
actionwoocommerce_order_action_yoos_duplicate_orderinc\backend\actions\duplicate-order.php:8
actionadmin_enqueue_scriptsinc\backend\actions\merge-order.php:8
actionwoocommerce_admin_order_data_after_order_detailsinc\backend\actions\merge-order.php:31
actionadmin_noticesinc\backend\actions\return-order-bulk-action.php:9
actionwoocommerce_order_action_yoos_return_orderinc\backend\actions\return-order.php:8
filterwoocommerce_email_recipient_new_orderinc\backend\actions\split-order-by-category.php:143
filterwoocommerce_email_recipient_customer_processing_orderinc\backend\actions\split-order-by-category.php:144
filterwoocommerce_email_recipient_customer_on_hold_orderinc\backend\actions\split-order-by-category.php:145
filterwoocommerce_email_recipient_customer_completed_orderinc\backend\actions\split-order-by-category.php:146
filterwoocommerce_email_recipient_new_orderinc\backend\actions\split-order-by-default.php:271
filterwoocommerce_email_recipient_customer_processing_orderinc\backend\actions\split-order-by-default.php:272
filterwoocommerce_email_recipient_customer_on_hold_orderinc\backend\actions\split-order-by-default.php:273
filterwoocommerce_email_recipient_customer_completed_orderinc\backend\actions\split-order-by-default.php:274
filterwoocommerce_email_recipient_new_orderinc\backend\actions\split-order-by-stock-status.php:126
filterwoocommerce_email_recipient_customer_processing_orderinc\backend\actions\split-order-by-stock-status.php:127
filterwoocommerce_email_recipient_customer_on_hold_orderinc\backend\actions\split-order-by-stock-status.php:128
filterwoocommerce_email_recipient_customer_completed_orderinc\backend\actions\split-order-by-stock-status.php:129
actioninitinc\backend\actions\split-order-set-email-filters.php:8
filterwoocommerce_email_recipient_customer_on_hold_orderinc\backend\actions\split-order-set-email-filters.php:15
filterwoocommerce_email_recipient_customer_processing_orderinc\backend\actions\split-order-set-email-filters.php:16
filterwoocommerce_email_recipient_new_orderinc\backend\actions\split-order-set-email-filters.php:19
filterwoocommerce_email_recipient_customer_on_hold_orderinc\backend\actions\split-order-set-email-filters.php:22
filterwoocommerce_email_recipient_customer_processing_orderinc\backend\actions\split-order-set-email-filters.php:23
filterwoocommerce_email_recipient_new_orderinc\backend\actions\split-order-set-email-filters.php:24
filterwoocommerce_order_actionsinc\backend\order-duplicate-option.php:8
filterwoocommerce_order_actionsinc\backend\order-merge-option.php:8
filterwoocommerce_order_actionsinc\backend\order-return-option.php:8
actionwoocommerce_order_item_add_action_buttonsinc\backend\order-split-button.php:8
actionwoocommerce_admin_order_totals_after_totalinc\backend\order-split-button.php:9
actionwoocommerce_admin_order_data_after_order_detailsinc\backend\orders.php:10
actionadmin_enqueue_scriptsinc\backend\orders.php:11
filterwoocommerce_settings_tabs_arrayinc\backend\settings.php:8
actionwoocommerce_settings_tabs_ordersinc\backend\settings.php:9
actionwoocommerce_update_options_ordersinc\backend\settings.php:10
actionadmin_footerinc\backend\settings.php:12
actionwoocommerce_admin_field_available_timeinc\backend\settings.php:21
actionadmin_menuinc\backend\yoohw-dashboard.php:19
actionadmin_menuinc\backend\yoohw-news.php:25
actionrest_api_initinc\backend\yoohw-news.php:26
actionadmin_noticesinc\backend\yoohw-news.php:27
actionadmin_initinc\backend\yoohw-news.php:28
actionadmin_initinc\backend\yoohw-news.php:29
filterwoocommerce_settings_tabs_arrayinc\backend\yoohw-woo-settings-tabs-reorder.php:9
actionadmin_noticesinc\cores\notices.php:10
actionadmin_enqueue_scriptsinc\cores\notices.php:12
actionadmin_enqueue_scriptsinc\cores\script.php:13
actionadmin_initinc\cores\script.php:14
Maintenance & Trust

Order Splitter for WooCommerce – Split / Duplicate / Merge Orders Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 3, 2026
PHP min version7.4
Downloads7K

Community Trust

Rating100/100
Number of ratings4
Active installs300
Developer Profile

Order Splitter for WooCommerce – Split / Duplicate / Merge Orders Developer Profile

YoOhw Studio

7 plugins · 3K total installs

92
trust score
Avg Security Score
97/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Order Splitter for WooCommerce – Split / Duplicate / Merge Orders

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wc-order-splitter/js/merge-action.js
Script Paths
js/merge-action.js
Version Parameters
wc-order-splitter/js/merge-action.js?ver=1.0.0

HTML / DOM Fingerprints

Data Attributes
data-woocommerce-order-id
JS Globals
wc_order_splitter_params
FAQ

Frequently Asked Questions about Order Splitter for WooCommerce – Split / Duplicate / Merge Orders