WP-Safety

Wishlist and Waitlist for WooCommerce Security & Risk Analysis

wordpress.org/plugins/wish-wait-list-for-woocommerce

Wishlist and Waitlist for your clients

100 active installs v3.6.2.3 PHP 7.0+ WP 5.0+ Updated Mar 12, 2026
wailist-widgetwish-listwishlistwishlist-widget
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Wishlist and Waitlist for WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

Wishlist and Waitlist for WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 22d ago
Risk Assessment

The wish-wait-list-for-woocommerce plugin exhibits a mixed security posture. While it has a clean vulnerability history with no recorded CVEs, indicating a generally stable past, the static analysis reveals several areas of concern. A significant portion of AJAX handlers lack proper authentication checks, presenting a clear attack vector. Furthermore, the presence of the `unserialize` function and the complete absence of prepared statements for SQL queries are critical security red flags. The limited output escaping percentage also suggests potential cross-site scripting (XSS) vulnerabilities. These code-level weaknesses, despite the absence of known historical exploits, warrant careful attention.

Key Concerns

  • AJAX handlers without auth checks
  • Dangerous function: unserialize
  • SQL queries without prepared statements
  • Low percentage of properly escaped output
Vulnerabilities
None known

Wishlist and Waitlist for WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Wishlist and Waitlist for WooCommerce Code Analysis

Dangerous Functions
1
Raw SQL Queries
6
0 prepared
Unescaped Output
190
114 escaped
Nonce Checks
14
Capability Checks
24
File Operations
4
External Requests
5
Bundled Libraries
0

Dangerous Functions Found

unserialize$error_log = unserialize(preg_replace('/R:\d+/', 's:18:"RECURSION DETECTED"', serialize(self::$errorberocket\includes\updater.php:128

SQL Query Safety

0% prepared6 total queries

Output Escaping

38% escaped304 total outputs
Data Flows
2 unsanitized

Data Flow Analysis

10 flows2 with unsanitized paths
update_list (main.php:458)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
6 unprotected

Wishlist and Waitlist for WooCommerce Attack Surface

Entry Points20
Unprotected6

AJAX Handlers 19

authwp_ajax_brfr_get_export_settingsberocket\includes\admin\import_export.php:5
authwp_ajax_brfr_set_import_settingsberocket\includes\admin\import_export.php:6
authwp_ajax_brfr_get_import_backupsberocket\includes\admin\import_export.php:7
authwp_ajax_brfr_restore_import_backupsberocket\includes\admin\import_export.php:8
authwp_ajax_berocket_admin_close_noticeberocket\includes\admin_notices.php:1199
authwp_ajax_berocket_subscribe_emailberocket\includes\admin_notices.php:1200
authwp_ajax_berocket_rate_stars_closeberocket\includes\admin_notices.php:1208
authwp_ajax_berocket_feature_request_sendberocket\includes\admin_notices.php:1209
authwp_ajax_berocket_error_notices_getberocket\includes\error_notices.php:5
authwp_ajax_berocket_information_close_noticeberocket\includes\information_notices.php:198
authwp_ajax_br_test_keyberocket\includes\updater.php:46
authwp_ajax_br_test_keysberocket\includes\updater.php:47
authwp_ajax_brww_wish_waitdivi\includes\WishWaitExtension.php:13
authwp_ajax_brwwl_setmailincludes\notloggedin.php:50
noprivwp_ajax_brwwl_setmailincludes\notloggedin.php:51
authwp_ajax_br_wish_addmain.php:140
authwp_ajax_br_wait_addmain.php:141
noprivwp_ajax_br_wish_addmain.php:142
noprivwp_ajax_br_wait_addmain.php:143

Shortcodes 1

[br_wishwait_list] main.php:149
WordPress Hooks 118
filterplugins_listberocket\framework.php:84
filterBeRocket_updater_add_pluginberocket\framework.php:105
filterberocket_admin_notices_rate_stars_pluginsberocket\framework.php:106
actioninitberocket\framework.php:107
actioninitberocket\framework.php:110
actionwp_headberocket\framework.php:111
actionwp_footerberocket\framework.php:112
actionadmin_initberocket\framework.php:113
actionadmin_menuberocket\framework.php:114
actionadmin_enqueue_scriptsberocket\framework.php:115
actionberocket_enqueue_mediaberocket\framework.php:116
filterplugin_row_metaberocket\framework.php:122
filteris_berocket_settings_pageberocket\framework.php:123
actionplugins_loadedberocket\framework.php:128
actionsanitize_comment_cookiesberocket\framework.php:129
actioninstall_plugins_pre_plugin-informationberocket\framework.php:130
filterberocket_admin_notices_subscribe_pluginsberocket\framework.php:132
filterBeRocket_admin_init_user_capabilitiesberocket\framework.php:135
filterberocket_sanitize_array_predefineberocket\framework.php:136
filterberocket_sanitize_array_ksesberocket\framework.php:137
filterberocket_sanitize_array_ksesberocket\framework.php:140
actionbefore_woocommerce_initberocket\framework.php:150
filterloop_shop_per_pageberocket\framework.php:391
actionupgrader_process_completeberocket\framework.php:499
actionadmin_footerberocket\framework.php:1158
actionwp_footerberocket\framework.php:1159
actionadmin_initberocket\framework.php:1273
actionadmin_bar_menuberocket\includes\admin\admin_bar.php:8
actionwp_footerberocket\includes\admin\admin_bar.php:9
filterberocket_admin_bar_plugins_databerocket\includes\admin\admin_bar.php:149
actionBeRocket_framework_updater_account_form_afterberocket\includes\admin\import_export.php:4
filterberocket_admin_notice_is_display_noticeberocket\includes\admin_notices.php:75
filterberocket_admin_notice_is_display_notice_priorityberocket\includes\admin_notices.php:76
actionadmin_noticesberocket\includes\admin_notices.php:1198
actionadmin_noticesberocket\includes\admin_notices.php:1207
actionberocket_rate_plugin_windowberocket\includes\admin_notices.php:1210
actionberocket_related_plugins_windowberocket\includes\admin_notices.php:1211
actionberocket_above_admin_settingsberocket\includes\admin_notices.php:1212
actionberocket_feature_request_windowberocket\includes\admin_notices.php:1213
actionadmin_footerberocket\includes\admin_notices.php:1285
actionadmin_footerberocket\includes\admin_notices.php:1493
actionadmin_footerberocket\includes\admin_notices.php:1922
actionadmin_footerberocket\includes\admin_notices.php:2079
actioninitberocket\includes\custom_post\enable_disable.php:9
actionadmin_initberocket\includes\custom_post\enable_disable.php:10
actionpost_action_enableberocket\includes\custom_post\enable_disable.php:13
actionpost_action_disableberocket\includes\custom_post\enable_disable.php:14
filterpost_classberocket\includes\custom_post\enable_disable.php:16
filterpre_get_postsberocket\includes\custom_post\enable_disable.php:18
actionpre_get_postsberocket\includes\custom_post\sortable.php:22
actionin_admin_footerberocket\includes\custom_post\sortable.php:117
actioninitberocket\includes\custom_post.php:58
filterinitberocket\includes\custom_post.php:59
filteradmin_initberocket\includes\custom_post.php:60
filterwp_insert_post_databerocket\includes\custom_post.php:61
filterBeRocket_admin_init_user_capabilitiesberocket\includes\custom_post.php:71
actionadd_meta_boxesberocket\includes\custom_post.php:128
actionsave_postberocket\includes\custom_post.php:129
filterpost_row_actionsberocket\includes\custom_post.php:130
filterlist_table_primary_columnberocket\includes\custom_post.php:131
actionadmin_enqueue_scriptsberocket\includes\custom_post.php:133
filteris_berocket_settings_pageberocket\includes\custom_post.php:135
actionadmin_footerberocket\includes\custom_post.php:162
actionadmin_noticesberocket\includes\information_notices.php:197
actionadmin_initberocket\includes\updater.php:18
filterwoocommerce_addons_sectionsberocket\includes\updater.php:27
filteris_berocket_settings_pageberocket\includes\updater.php:28
actionadmin_footerberocket\includes\updater.php:30
actionadmin_headberocket\includes\updater.php:39
actionadmin_menuberocket\includes\updater.php:40
actionadmin_menuberocket\includes\updater.php:41
actionnetwork_admin_menuberocket\includes\updater.php:42
actionadmin_initberocket\includes\updater.php:43
filterpre_set_site_transient_update_pluginsberocket\includes\updater.php:44
filterplugins_api_resultberocket\includes\updater.php:45
filterhttp_request_host_is_externalberocket\includes\updater.php:48
actionadmin_footerberocket\includes\updater.php:51
actionwp_footerberocket\includes\updater.php:52
filterberocket_display_additional_noticesberocket\includes\updater.php:92
filtercustom_menu_orderberocket\includes\updater.php:98
filterberocket_admin_notice_is_display_noticeberocket\includes\updater.php:102
filterberocket_admin_notice_is_display_notice_priorityberocket\includes\updater.php:103
filterplugins_api_resultberocket\includes\updater.php:109
actioninitberocket\includes\updater.php:1413
actionadmin_enqueue_scriptsberocket\sale\sale.php:4
filterbr_product_preview_positions_elementsincludes\compatibility\product_preview.php:4
actionbr_build_preview_berocket_wishincludes\compatibility\product_preview.php:5
actionbr_build_preview_berocket_waitincludes\compatibility\product_preview.php:6
actionbr_build_preview_berocket_wish_waitincludes\compatibility\product_preview.php:7
filterwc_product_table_custom_table_data_br_waitincludes\compatibility\product_table.php:29
filterwc_product_table_custom_table_data_br_wishincludes\compatibility\product_table.php:30
filterwc_product_table_custom_table_data_br_wwincludes\compatibility\product_table.php:31
actioninitincludes\notloggedin.php:4
filterbrwwl_update_list_not_logged_inincludes\notloggedin.php:48
filterbrwwl_update_list_resultincludes\notloggedin.php:49
actionwp_footerincludes\notloggedin.php:52
actionbrwwl_send_email_instockincludes\notloggedin.php:53
actionwp_footerincludes\options\cookiemessage.php:4
actionwidgets_initmain.php:138
filterthe_contentmain.php:139
actionwoocommerce_product_set_stock_statusmain.php:144
actionberocket_add_ww_buttons_actionsmain.php:145
actionberocket_remove_ww_buttons_actionsmain.php:146
filterberocket_wait_list_replace_product_variablemain.php:147
filterberocket_wait_list_replace_user_variablemain.php:148
actiondivi_extensions_initmain.php:153
actionwoocommerce_shortcode_before_products_loopmain.php:154
actionwoocommerce_shortcode_after_products_loopmain.php:155
filtershortcode_atts_productsmain.php:156
filterberocket_display_additional_noticesmain.php:159
actionwoocommerce_before_shop_loop_itemmain.php:173
actionwoocommerce_after_order_notesmain.php:280
actionwoocommerce_checkout_processmain.php:281
filtermanage_edit-product_columnsmain.php:411
actionmanage_product_posts_custom_columnmain.php:412
filtermanage_edit-product_sortable_columnsmain.php:413
actionpre_get_postsmain.php:414
filterpost_classtemplates\widget.php:102
Maintenance & Trust

Wishlist and Waitlist for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 12, 2026
PHP min version7.0
Downloads16K

Community Trust

Rating78/100
Number of ratings7
Active installs100
Alternatives

Wishlist and Waitlist for WooCommerce Alternatives

Wishlist

Wishlist

wishlist

D
44

Add wishlist feature to your WooCommerce product or any post types.

400 5 unpatched
Advanced Product Wishlist for Woocommerce

Advanced Product Wishlist for Woocommerce

advanced-product-wishlist-for-woo

A
85

Advanced Product Wishlist add all Wishlist features to your website. Needs WooCommerce to work..

80 No CVEs
WooCollections for WooCommerce

WooCollections for WooCommerce

woocollections-for-woocommerce

A
85

WooCollections is an addon for WooCommerce to allow users to create a collection of products on any site.

10 No CVEs
YITH WooCommerce Wishlist

YITH WooCommerce Wishlist

yith-woocommerce-wishlist

A
92

YITH WooCommerce Wishlist add all Wishlist features to your website. Needs WooCommerce to work. WooCommerce 10.6.x compatible.

500K 6 CVEs
TI WooCommerce Wishlist

TI WooCommerce Wishlist

ti-woocommerce-wishlist

B
77

Boost your sales with a free WooCommerce Wishlist feature. Let your customers save and share their favorite products!

100K 9 CVEs
Developer Profile

Wishlist and Waitlist for WooCommerce Developer Profile

BeRocket

22 plugins · 139K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
381 days
View full developer profile
Detection Fingerprints

How We Detect Wishlist and Waitlist for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wish-wait-list-for-woocommerce/includes/css/style.css/wp-content/plugins/wish-wait-list-for-woocommerce/includes/css/style.min.css/wp-content/plugins/wish-wait-list-for-woocommerce/includes/js/frontend.js/wp-content/plugins/wish-wait-list-for-woocommerce/includes/js/frontend.min.js/wp-content/plugins/wish-wait-list-for-woocommerce/includes/js/admin.js/wp-content/plugins/wish-wait-list-for-woocommerce/includes/js/admin.min.js
Script Paths
/wp-content/plugins/wish-wait-list-for-woocommerce/includes/js/frontend.js/wp-content/plugins/wish-wait-list-for-woocommerce/includes/js/frontend.min.js/wp-content/plugins/wish-wait-list-for-woocommerce/includes/js/admin.js/wp-content/plugins/wish-wait-list-for-woocommerce/includes/js/admin.min.js
Version Parameters
wish-wait-list-for-woocommerce/includes/css/style.css?ver=wish-wait-list-for-woocommerce/includes/css/style.min.css?ver=wish-wait-list-for-woocommerce/includes/js/frontend.js?ver=wish-wait-list-for-woocommerce/includes/js/frontend.min.js?ver=wish-wait-list-for-woocommerce/includes/js/admin.js?ver=wish-wait-list-for-woocommerce/includes/js/admin.min.js?ver=

HTML / DOM Fingerprints

CSS Classes
br-wishlist-button-wrapbr-wishlist-buttonbr-waitlist-button-wrapbr-waitlist-buttonbr-added-wishlistbr-added-waitlist
HTML Comments
<!-- BeRocket Wishlist --><!-- /BeRocket Wishlist --><!-- BeRocket Waitlist --><!-- /BeRocket Waitlist -->+4 more
Data Attributes
data-berocket-wishlistdata-berocket-waitlist
JS Globals
br_wishlist_paramsbr_waitlist_params
REST Endpoints
/wp-json/berocket/v1/wishlist
Shortcode Output
[br_wishlist_button][br_waitlist_button]
FAQ

Frequently Asked Questions about Wishlist and Waitlist for WooCommerce