Product Subtitle For WooCommerce Security & Risk Analysis

wordpress.org/plugins/wc-product-subtitle

Product Subtitle For WooCommerce plugin allows you to easily add a subtitle to your Products.

3K active installs v4.6.2 PHP + WP 5.0+ Updated May 20, 2022
productproduct-subtitleproduct-titlewc-productwoocommerce
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Product Subtitle For WooCommerce Safe to Use in 2026?

Generally Safe

Score 85/100

Product Subtitle For WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3yr ago
Risk Assessment

The wc-product-subtitle plugin v4.6.2 exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The absence of dangerous functions, raw SQL queries, file operations, and external HTTP requests is commendable. Notably, all SQL queries utilize prepared statements, indicating good database interaction practices. The high percentage of properly escaped output also suggests an effort to mitigate cross-site scripting (XSS) vulnerabilities. The plugin also has no recorded CVEs, which is a significant positive indicator of its historical security. However, there are a few areas for improvement. The lack of nonce checks and capability checks across its entry points, particularly the three shortcodes, presents a potential risk. While the static analysis reports zero unprotected entry points, the absence of these fundamental security checks means that even if the shortcodes are technically guarded by permission callbacks (not explicitly stated but implied by 'Unprotected: 0'), they might be susceptible to CSRF attacks or unauthorized invocation if not properly implemented within their respective callbacks. The taint analysis showing zero flows is excellent, but this is a small sample size, so it's not a definitive guarantee of no taint issues.

Key Concerns

  • Missing nonce checks on entry points
  • Missing capability checks on entry points
  • Partial output escaping (85%)
Vulnerabilities
None known

Product Subtitle For WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Product Subtitle For WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
3
17 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

85% escaped20 total outputs
Attack Surface

Product Subtitle For WooCommerce Attack Surface

Entry Points3
Unprotected0

Shortcodes 3

[wc-ps] includes\class-shortcode.php:23
[wc_ps] includes\class-shortcode.php:24
[product_subtitle] includes\class-shortcode.php:25
WordPress Hooks 10
actionwoocommerce_after_order_itemmetaincludes\admin\class-order-render.php:22
actionedit_form_before_permalinkincludes\admin\product\class-field.php:25
actionsave_postincludes\admin\product\class-field.php:26
filterwoocommerce_cart_item_nameincludes\class-cart-page.php:22
filterwoocommerce_cart_item_nameincludes\class-checkout-page.php:22
actionwoocommerce_email_before_order_tableincludes\class-email.php:21
actionwpo_wcpdf_after_item_metaincludes\class-integrations.php:22
actionwoocommerce_before_mini_cartincludes\class-mini-cart.php:22
filterwoocommerce_cart_item_nameincludes\class-mini-cart.php:31
actionwoocommerce_single_product_summaryincludes\class-single-product-page.php:53
Maintenance & Trust

Product Subtitle For WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested5.9.13
Last updatedMay 20, 2022
PHP min version
Downloads68K

Community Trust

Rating88/100
Number of ratings31
Active installs3K
Developer Profile

Product Subtitle For WooCommerce Developer Profile

Varun Sridharan

2 plugins · 4K total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Product Subtitle For WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wc-product-subtitle/assets/css/admin-style.css/wp-content/plugins/wc-product-subtitle/assets/css/style.css/wp-content/plugins/wc-product-subtitle/assets/js/admin-script.js/wp-content/plugins/wc-product-subtitle/assets/js/script.js
Script Paths
/wp-content/plugins/wc-product-subtitle/assets/js/admin-script.js/wp-content/plugins/wc-product-subtitle/assets/js/script.js
Version Parameters
/wp-content/plugins/wc-product-subtitle/assets/css/admin-style.css?ver=/wp-content/plugins/wc-product-subtitle/assets/css/style.css?ver=/wp-content/plugins/wc-product-subtitle/assets/js/admin-script.js?ver=/wp-content/plugins/wc-product-subtitle/assets/js/script.js?ver=

HTML / DOM Fingerprints

CSS Classes
wc-product-subtitle
Data Attributes
data-wc-ps-iddata-wc-ps-tagdata-wc-ps-subtitle-iddata-wc-ps-subtitle-tag
Shortcode Output
[wc-ps][wc_ps][product_subtitle]
FAQ

Frequently Asked Questions about Product Subtitle For WooCommerce