Min Max Control – Min Max Quantity & Step Control for WooCommerce Security & Risk Analysis

wordpress.org/plugins/woo-min-max-quantity-step-control-single

Min Max Control plugin offers to set product's minimum, maximum quantity and step of each product individually.

10K active installs v8.0.1 PHP 5.4+ WP 4.0.0+ Updated Jan 28, 2026
customize-woocommerce-quantitylimit-quantitymin-and-max-to-purchasewc-min-max-quantitieswoocommerce-limit-quantities
100
A · Safe
CVEs total1
Unpatched0
Last CVEAug 21, 2023
Safety Verdict

Is Min Max Control – Min Max Quantity & Step Control for WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

Min Max Control – Min Max Quantity & Step Control for WooCommerce has a strong security track record. Known vulnerabilities have been patched promptly.

1 known CVELast CVE: Aug 21, 2023Updated 2mo ago
Risk Assessment

The "woo-min-max-quantity-step-control-single" plugin v8.0.1 exhibits a generally good security posture with several strengths. The plugin has a limited attack surface, with all entry points (AJAX handlers) protected by authentication checks. Crucially, it uses prepared statements for all SQL queries, mitigating common SQL injection risks. The high percentage of properly escaped output is also a positive sign. However, there are some areas for improvement. The presence of two flows with unsanitized paths in the taint analysis is a concern, even if they are not currently rated as critical or high severity. While the plugin has had a past medium severity vulnerability related to Cross-Site Scripting, the fact that there are no currently unpatched CVEs is encouraging. Overall, the plugin follows many best practices, but the unsanitized paths warrant careful review to ensure no latent vulnerabilities exist.

Key Concerns

  • Flows with unsanitized paths found
  • Bundled library (Select2) may be outdated
  • Past medium severity vulnerability recorded
Vulnerabilities
1

Min Max Control – Min Max Quantity & Step Control for WooCommerce Security Vulnerabilities

CVEs by Year

1 CVE in 2023
2023
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2023-4270medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Min Max Control <= 4.5 - Reflected Cross-Site Scripting

Aug 21, 2023 Patched in 4.6 (155d)
Code Analysis
Analyzed Mar 16, 2026

Min Max Control – Min Max Quantity & Step Control for WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
57
370 escaped
Nonce Checks
7
Capability Checks
1
File Operations
0
External Requests
2
Bundled Libraries
1

Bundled Libraries

Select2

Output Escaping

87% escaped427 total outputs
Data Flows
2 unsanitized

Data Flow Analysis

8 flows2 with unsanitized paths
redirect_wpml (admin\page-loader.php:138)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Min Max Control – Min Max Quantity & Step Control for WooCommerce Attack Surface

Entry Points3
Unprotected0

AJAX Handlers 3

authwp_ajax_update_notice_statusframework\ca-framework\app\base\notice-base.php:14
authwp_ajax_woocommerce_ajax_add_to_cartincludes\features\quantiy-archive.php:30
noprivwp_ajax_woocommerce_ajax_add_to_cartincludes\features\quantiy-archive.php:31
WordPress Hooks 58
actionwoocommerce_product_options_wcmmq_minmaxstepadmin\add_options_admin.php:106
actionwoocommerce_process_product_metaadmin\add_options_admin.php:155
actionadmin_initadmin\adm-inc\plugin-installer.php:38
filterwoocommerce_settings_tabs_arrayadmin\adm-inc\settings\menu-control.php:8
filterwoocommerce_settings_tabs_arrayadmin\adm-inc\settings\wc-tab.php:21
filteradmin_headadmin\functions.php:177
actionadmin_noticesadmin\page-loader.php:33
actionadmin_menuadmin\page-loader.php:44
actionadmin_enqueue_scriptsadmin\page-loader.php:45
filterpssg_products_columnsadmin\page-loader.php:77
filteradmin_footer_textadmin\page-loader.php:215
actionadmin_noticesadmin\page-loader.php:354
filterplugin_action_links_woo-min-max-quantity-step-control-single/wcmmq.phpadmin\plugin_setting_link.php:19
filterplugins_api_resultadmin\plugin_setting_link.php:21
filterwoocommerce_product_data_tabsadmin\product_panel.php:33
filterwoocommerce_product_data_panelsadmin\product_panel.php:52
actionadmin_enqueue_scriptsframework\ca-framework\app\base\notice-base.php:13
actionadmin_noticesframework\ca-framework\app\notice.php:228
actionadmin_noticesframework\ca-framework\app\require-control.php:118
actionadmin_noticesframework\offr-manage.php:72
actionadmin_enqueue_scriptsframework\plugin-required.php:289
filterscript_loader_tagincludes\enqueue.php:34
actionwp_enqueue_scriptsincludes\enqueue.php:70
actionwoocommerce_before_shop_loopincludes\features\quantiy-archive.php:26
actionwp_enqueue_scriptsincludes\features\quantiy-archive.php:28
filterwoocommerce_loop_add_to_cart_linkincludes\features\quantiy-archive.php:44
filterpssg_products_columnsincludes\features\syncronize-google-sheet.php:13
filterwoocommerce_loop_add_to_cart_argsincludes\min-max-controller.php:124
filterwoocommerce_quantity_input_argsincludes\min-max-controller.php:125
filterwoocommerce_available_variationincludes\min-max-controller.php:126
filterwoocommerce_quantity_input_stepincludes\min-max-controller.php:139
filterwoocommerce_quantity_input_minincludes\min-max-controller.php:140
filterwoocommerce_quantity_input_maxincludes\min-max-controller.php:141
filterwoocommerce_store_api_product_quantity_multiple_ofincludes\min-max-controller.php:148
filterwoocommerce_store_api_product_quantity_minimumincludes\min-max-controller.php:149
filterwoocommerce_store_api_product_quantity_maximumincludes\min-max-controller.php:150
filterwoocommerce_add_to_cart_validationincludes\min-max-controller.php:153
filterwoocommerce_update_cart_validationincludes\min-max-controller.php:154
actionwoocommerce_single_variationincludes\min-max-controller.php:159
filterwcmmq_single_product_min_max_conditionincludes\min-max-controller.php:172
actionwp_footerincludes\min-max-controller.php:173
actionwpt_action_variationincludes\min-max-controller.php:258
filterwcmmq_modulous_validationincludes\set_max_min_quantity.php:154
filterwcmmq_last_step_checker_filterincludes\set_max_min_quantity.php:155
filterwoocommerce_quantity_input_step_adminincludes\set_max_min_quantity.php:648
filterwoocommerce_quantity_input_min_adminincludes\set_max_min_quantity.php:721
filterwoocommerce_quantity_input_min_adminincludes\set_max_min_quantity.php:768
filterwoocommerce_quantity_input_step_adminincludes\set_max_min_quantity.php:769
actionwoocommerce_before_add_to_cart_quantityincludes\set_max_min_quantity.php:841
actionwoocommerce_after_add_to_cart_quantityincludes\set_max_min_quantity.php:857
actionwp_headincludes\set_max_min_quantity.php:870
filterwoocommerce_blocks_product_grid_item_htmlmodules\module\guttenberg-block.php:59
actionplugins_loadedwcmmq.php:150
actioninitwcmmq.php:151
actioninitwcmmq.php:152
actioninitwcmmq.php:153
actionwp_headwcmmq.php:156
actionbefore_woocommerce_initwcmmq.php:194
Maintenance & Trust

Min Max Control – Min Max Quantity & Step Control for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 28, 2026
PHP min version5.4
Downloads395K

Community Trust

Rating96/100
Number of ratings80
Active installs10K
Developer Profile

Min Max Control – Min Max Quantity & Step Control for WooCommerce Developer Profile

Saiful Islam

12 plugins · 20K total installs

75
trust score
Avg Security Score
94/100
Avg Patch Time
116 days
View full developer profile
Detection Fingerprints

How We Detect Min Max Control – Min Max Quantity & Step Control for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/woo-min-max-quantity-step-control-single/assets/css/style.css/wp-content/plugins/woo-min-max-quantity-step-control-single/assets/js/frontend.js/wp-content/plugins/woo-min-max-quantity-step-control-single/assets/js/global.js/wp-content/plugins/woo-min-max-quantity-step-control-single/assets/js/admin.js/wp-content/plugins/woo-min-max-quantity-step-control-single/assets/css/admin-style.css
Script Paths
/wp-content/plugins/woo-min-max-quantity-step-control-single/assets/js/frontend.js/wp-content/plugins/woo-min-max-quantity-step-control-single/assets/js/global.js/wp-content/plugins/woo-min-max-quantity-step-control-single/assets/js/admin.js
Version Parameters
/wp-content/plugins/woo-min-max-quantity-step-control-single/assets/css/style.css?ver=/wp-content/plugins/woo-min-max-quantity-step-control-single/assets/js/frontend.js?ver=/wp-content/plugins/woo-min-max-quantity-step-control-single/assets/js/global.js?ver=/wp-content/plugins/woo-min-max-quantity-step-control-single/assets/js/admin.js?ver=/wp-content/plugins/woo-min-max-quantity-step-control-single/assets/css/admin-style.css?ver=

HTML / DOM Fingerprints

CSS Classes
wcmmq_input_field_divwcmmq_quantity_wrapwcmmq_minuswcmmq_plus
Data Attributes
data-wcmmq-id
JS Globals
wc_mmq_frontend_params
FAQ

Frequently Asked Questions about Min Max Control – Min Max Quantity & Step Control for WooCommerce