Product Category Slider for WooCommerce Security & Risk Analysis

wordpress.org/plugins/woo-category-slider-by-pluginever

Showcase Your WooCommerce store's categories/subcategories in a beautiful slider.

900 active installs v4.4.2 PHP 7.4+ WP 5.2+ Updated Nov 24, 2025
category-sliderproduct-slidersliderwoocommercewoocommerce-product-category-slider
97
A · Safe
CVEs total2
Unpatched0
Last CVEMay 2, 2025
Safety Verdict

Is Product Category Slider for WooCommerce Safe to Use in 2026?

Generally Safe

Score 97/100

Product Category Slider for WooCommerce has a strong security track record. Known vulnerabilities have been patched promptly.

2 known CVEsLast CVE: May 2, 2025Updated 4mo ago
Risk Assessment

The "woo-category-slider-by-pluginever" v4.4.2 plugin exhibits a generally good security posture based on the static analysis. It demonstrates a strong adherence to secure coding practices by utilizing prepared statements for all SQL queries and performing a high percentage of output escaping. The presence of nonce and capability checks on its entry points further enhances its security. However, the plugin does have a history of known vulnerabilities, indicating past security weaknesses. The types of past vulnerabilities, specifically 'PHP Remote File Inclusion' and 'Missing Authorization,' are critical and suggest a potential for severe security breaches if not addressed. While there are currently no unpatched vulnerabilities, this history warrants careful consideration and ongoing vigilance.

Key Concerns

  • History of high severity vulnerabilities
  • History of medium severity vulnerabilities
  • History of 'PHP Remote File Inclusion'
  • History of 'Missing Authorization'
  • One file operation found
Vulnerabilities
2

Product Category Slider for WooCommerce Security Vulnerabilities

CVEs by Year

1 CVE in 2022
2022
1 CVE in 2025
2025
Patched Has unpatched

Severity Breakdown

High
1
Medium
1

2 total CVEs

CVE-2025-39364high · 8.8Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

Product Category Slider for WooCommerce <= 4.3.4 - Authenticated (Contributor+) Local File Inclusion

May 2, 2025 Patched in 4.3.5 (4d)

Appsero <= 1.2.1 - Missing Authorization

Dec 16, 2022 Patched in 4.1.6 (699d)
Code Analysis
Analyzed Mar 16, 2026

Product Category Slider for WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
53
283 escaped
Nonce Checks
3
Capability Checks
3
File Operations
1
External Requests
0
Bundled Libraries
0

Output Escaping

84% escaped336 total outputs
Attack Surface

Product Category Slider for WooCommerce Attack Surface

Entry Points2
Unprotected0

AJAX Handlers 1

authwp_ajax_wc_slider_get_categoriesincludes\Admin\Admin.php:25

Shortcodes 1

[woo_category_slider] includes\Shortcodes\Shortcodes.php:18
WordPress Hooks 17
actionadmin_enqueue_scriptsincludes\Admin\Admin.php:22
actionadd_meta_boxesincludes\Admin\Admin.php:23
actionadd_meta_boxesincludes\Admin\Admin.php:24
actionsave_post_wc_category_sliderincludes\Admin\Admin.php:26
actionadmin_footerincludes\Admin\Admin.php:27
filteradmin_footer_textincludes\Admin\Admin.php:29
filterupdate_footerincludes\Admin\Admin.php:30
actionadmin_initincludes\Admin\Notices.php:21
actionbefore_woocommerce_initincludes\Plugin.php:64
actionwoocommerce_initincludes\Plugin.php:65
actionwp_enqueue_scriptsincludes\Plugin.php:66
actioninitincludes\Plugin.php:67
actioninitincludes\PostTypes.php:33
filterpost_updated_messagesincludes\PostTypes.php:36
filterwc_category_slider_categoriesincludes\RestAPI.php:18
actionrest_api_initincludes\RestAPI.php:19
filterwc_category_slider_categoriesincludes\Shortcodes\Shortcodes.php:19
Maintenance & Trust

Product Category Slider for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedNov 24, 2025
PHP min version7.4
Downloads72K

Community Trust

Rating80/100
Number of ratings20
Active installs900
Developer Profile

Product Category Slider for WooCommerce Developer Profile

PluginEver

12 plugins · 14K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
317 days
View full developer profile
Detection Fingerprints

How We Detect Product Category Slider for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/woo-category-slider-by-pluginever/assets/css/black-friday.css/wp-content/plugins/woo-category-slider-by-pluginever/assets/vendor/font-awesome/css/font-awesome.css/wp-content/plugins/woo-category-slider-by-pluginever/assets/css/admin.css/wp-content/plugins/woo-category-slider-by-pluginever/assets/js/wc-category-slider-admin.js/wp-content/plugins/woo-category-slider-by-pluginever/assets/js/wp-color-picker-alpha.min.js
Script Paths
/wp-content/plugins/woo-category-slider-by-pluginever/assets/js/wc-category-slider-admin.js/wp-content/plugins/woo-category-slider-by-pluginever/assets/js/wp-color-picker-alpha.min.js
Version Parameters
woo-category-slider-by-pluginever/assets/css/black-friday.css?ver=woo-category-slider-by-pluginever/assets/vendor/font-awesome/css/font-awesome.css?ver=woo-category-slider-by-pluginever/assets/css/admin.css?ver=woo-category-slider-by-pluginever/assets/js/wc-category-slider-admin.js?ver=woo-category-slider-by-pluginever/assets/js/wp-color-picker-alpha.min.js?ver=

HTML / DOM Fingerprints

CSS Classes
ever-col-6ever-slider-containerever-slideever-slide-headerever-slide-headerleftever-slide-mainever-slide-thumbnailimg-prev+10 more
HTML Comments
TODO: Remove this after black friday.
Data Attributes
data-gramm_editor
JS Globals
WCS
REST Endpoints
/wp-json/wc_category_slider/v1/get-categories
FAQ

Frequently Asked Questions about Product Category Slider for WooCommerce