Advanced Custom Stock Status Security & Risk Analysis

wordpress.org/plugins/woo-custom-stock-status

Write the custom stock status with different colors for each woocommerce product, to show in product details and listing pages.

9K active installs v1.6.6 PHP + WP 5.8+ Updated Dec 1, 2025
customstatusstockwoowoocommerce
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Advanced Custom Stock Status Safe to Use in 2026?

Generally Safe

Score 100/100

Advanced Custom Stock Status has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 5mo ago
Risk Assessment

The "woo-custom-stock-status" v1.6.6 plugin presents a mixed security posture. While it exhibits good practices by utilizing prepared statements for all SQL queries and having no recorded vulnerabilities or CVEs, significant concerns arise from its static analysis results. The presence of the `unserialize` function is a critical red flag, as it can lead to Remote Code Execution if user-controlled data is unserialized without proper sanitization and validation. Furthermore, the plugin lacks nonce checks and capability checks, which are essential for preventing Cross-Site Request Forgery (CSRF) and unauthorized actions, especially given it has shortcodes as entry points. The relatively low percentage of properly escaped output (49%) also indicates a potential risk of Cross-Site Scripting (XSS) vulnerabilities.

Key Concerns

  • Dangerous function: unserialize found
  • Missing nonce checks
  • Missing capability checks
  • Low percentage of properly escaped output
Vulnerabilities
None known

Advanced Custom Stock Status Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Advanced Custom Stock Status Release Timeline

v1.6.6Current
v1.6.5
v1.6.4
v1.6.3
v1.6.2
v1.6.1
v1.6.0
v1.5.9
v1.5.8
v1.5.7
v1.5.6
v1.5.5
v1.5.4
v1.5.3
v1.5.2
v1.5.1
v1.5.0
v1.4.9
v1.4.8
v1.4.7
Code Analysis
Analyzed Mar 16, 2026

Advanced Custom Stock Status Code Analysis

Dangerous Functions
1
Raw SQL Queries
0
1 prepared
Unescaped Output
24
23 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Dangerous Functions Found

unserialize$custom_message = unserialize(get_post_meta($order_id,'woo_custom_stock_status_backorder_statuincludes\class-wc-stock-product.php:920

SQL Query Safety

100% prepared1 total queries

Output Escaping

49% escaped47 total outputs
Attack Surface

Advanced Custom Stock Status Attack Surface

Entry Points3
Unprotected0

Shortcodes 3

[wcss_learn_more] includes\class-wc-stock-base.php:14
[wcss_delivery_date] includes\class-wc-stock-base.php:15
[woo_custom_stock_status] includes\class-wc-stock-product.php:88
WordPress Hooks 52
filterwoocommerce_get_availabilityincludes\class-wc-stock-base.php:12
filterwoocommerce_get_bundled_item_availabilityincludes\class-wc-stock-base.php:13
actionwoocommerce_settings_tabs_wc_stock_list_renameincludes\class-wc-stock-general.php:12
actionwoocommerce_update_options_wc_stock_list_renameincludes\class-wc-stock-general.php:13
filterwoocommerce_product_data_tabsincludes\class-wc-stock-product.php:14
actionwoocommerce_product_data_panelsincludes\class-wc-stock-product.php:17
actionwoocommerce_process_product_meta_simpleincludes\class-wc-stock-product.php:20
actionwoocommerce_process_product_meta_bundleincludes\class-wc-stock-product.php:23
actionwoocommerce_process_product_meta_compositeincludes\class-wc-stock-product.php:26
actionocean_before_archive_product_priceincludes\class-wc-stock-product.php:38
actionocean_after_archive_product_innerincludes\class-wc-stock-product.php:41
actionwoocommerce_get_price_htmlincludes\class-wc-stock-product.php:45
actionwoocommerce_after_shop_loop_item_titleincludes\class-wc-stock-product.php:47
filterb2bking_hide_price_product_textincludes\class-wc-stock-product.php:50
actionwoocommerce_process_product_meta_groupedincludes\class-wc-stock-product.php:58
actionwoocommerce_variation_options_inventoryincludes\class-wc-stock-product.php:62
actionwoocommerce_save_product_variationincludes\class-wc-stock-product.php:65
actionwoocommerce_order_item_meta_startincludes\class-wc-stock-product.php:68
filterwoocommerce_order_item_get_formatted_meta_dataincludes\class-wc-stock-product.php:70
filterwoocommerce_cart_item_nameincludes\class-wc-stock-product.php:76
filterwoocommerce_checkout_cart_item_quantityincludes\class-wc-stock-product.php:83
actionwoocommerce_new_order_itemincludes\class-wc-stock-product.php:86
filterwoocommerce_cart_item_backorder_notificationincludes\class-wc-stock-product.php:90
filterwoocommerce_blocks_product_grid_item_htmlincludes\class-wc-stock-product.php:92
actionwoocommerce_add_cart_itemincludes\class-wc-stock-product.php:98
filterwoocommerce_attribute_labelincludes\class-wc-stock-product.php:106
actionwoocommerce_product_options_stock_statusincludes\class-wc-stock-product.php:109
actionwoocommerce_process_product_metaincludes\class-wc-stock-product.php:110
filterbewpi_hidden_order_itemmetaincludes\class-wc-stock-product.php:113
filterwpi_item_description_dataincludes\class-wc-stock-product.php:114
filterrender_blockincludes\class-wc-stock-product.php:116
actionwoocommerce_blocks_loadedincludes\class-wc-stock-product.php:118
actionwp_enqueue_scriptsincludes\class-wc-stock-product.php:120
actionwp_footerincludes\class-wc-stock-product.php:122
filterwoocommerce_get_stock_htmlincludes\class-wc-stock-product.php:124
actionwoocommerce_available_variationincludes\class-wc-stock-product.php:125
filterporto_woocommerce_stock_htmlincludes\class-wc-stock-product.php:128
filterwoocommerce_settings_tabs_arrayincludes\class-wc-stock-setting.php:14
actionwp_headincludes\class-wc-stock-setting.php:16
actionwoocommerce_sections_wc_stock_list_renameincludes\class-wc-stock-setting.php:18
actionadmin_headincludes\class-wc-stock-setting.php:20
filtergettextincludes\class-wc-stock-setting.php:22
actionwoocommerce_settings_tabs_wc_stock_list_renameincludes\class-wc-stock-status.php:12
actionwoocommerce_update_options_wc_stock_list_renameincludes\class-wc-stock-status.php:13
actionpmxi_saved_postintegration\class-wp-all-import.php:11
actionpmxi_extend_options_custom_fieldsintegration\class-wp-all-import.php:12
filteryith_wcwl_stock_statusintegration\class-yith-wishlist.php:11
filterwpseo_schema_productintegration\class-yoast-seo.php:14
filterwpseo_frontend_presentersintegration\class-yoast-seo.php:16
actionwpseo_headintegration\class-yoast-seo.php:53
actioninitwoo-custom-stock-status.php:122
actionadmin_noticeswoo-custom-stock-status.php:169
Maintenance & Trust

Advanced Custom Stock Status Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedDec 1, 2025
PHP min version
Downloads292K

Community Trust

Rating84/100
Number of ratings37
Active installs9K
Developer Profile

Advanced Custom Stock Status Developer Profile

Softound Solutions

2 plugins · 9K total installs

89
trust score
Avg Security Score
93/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Advanced Custom Stock Status

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/woo-custom-stock-status/assets/css/woo-custom-stock-status.css/wp-content/plugins/woo-custom-stock-status/assets/js/woo-custom-stock-status.js/wp-content/plugins/woo-custom-stock-status/assets/js/variation-stock-status.js
Script Paths
/wp-content/plugins/woo-custom-stock-status/assets/js/woo-custom-stock-status.js/wp-content/plugins/woo-custom-stock-status/assets/js/variation-stock-status.js
Version Parameters
woo-custom-stock-status/assets/css/woo-custom-stock-status.css?ver=woo-custom-stock-status/assets/js/woo-custom-stock-status.js?ver=woo-custom-stock-status/assets/js/variation-stock-status.js?ver=

HTML / DOM Fingerprints

CSS Classes
wc-custom-stock-status-message
Data Attributes
data-stock-status-message
JS Globals
woo_stock_variation_params
FAQ

Frequently Asked Questions about Advanced Custom Stock Status