WP-Safety

Photo Reviews for WooCommerce Security & Risk Analysis

wordpress.org/plugins/woo-photo-reviews

Let customers attach photos to reviews, enhanced with filterable grids and overall ratings. Auto-send review reminders and coupon emails

10K active installs v1.2.25 PHP 7.0+ WP 5.0+ Updated Mar 6, 2026
couponcustomer-reviewsproduct-reviews-imagereview-reminderwoocommerce-reviews
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Photo Reviews for WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

Photo Reviews for WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 28d ago
Risk Assessment

The "woo-photo-reviews" v1.2.25 plugin demonstrates a generally good security posture based on the provided static analysis. The plugin has a relatively small attack surface with all identified AJAX handlers properly protected with authentication checks. Furthermore, the code shows strong adherence to secure coding practices, with 100% of SQL queries utilizing prepared statements and an impressive 99% of outputs being properly escaped. The absence of critical or high-severity taint analysis flows and a clean vulnerability history with zero recorded CVEs are significant strengths, indicating a history of diligent security development and maintenance.

Key Concerns

  • Bundled library: Select2
  • External HTTP requests: 2
Vulnerabilities
None known

Photo Reviews for WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Photo Reviews for WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
8
635 escaped
Nonce Checks
24
Capability Checks
12
File Operations
0
External Requests
2
Bundled Libraries
1

Bundled Libraries

Select2

Output Escaping

99% escaped643 total outputs
Data Flows
All sanitized

Data Flow Analysis

7 flows
preview_emails_ajax (admin\admin.php:228)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Photo Reviews for WooCommerce Attack Surface

Entry Points4
Unprotected0

AJAX Handlers 4

authwp_ajax_wcpr_search_couponadmin\admin.php:27
authwp_ajax_wcpr_search_parent_productadmin\admin.php:28
authwp_ajax_wcpr_search_cateadmin\admin.php:29
authwp_ajax_wcpr_preview_emailsadmin\admin.php:42
WordPress Hooks 73
actionadmin_initadmin\admin.php:21
actionadmin_initadmin\admin.php:22
actionadmin_menuadmin\admin.php:23
actionadmin_enqueue_scriptsadmin\admin.php:25
actiondelete_commentadmin\admin.php:31
actiondelete_attachmentadmin\admin.php:32
actionadd_meta_boxes_commentadmin\admin.php:34
actionedit_commentadmin\admin.php:35
actionload-edit-comments.phpadmin\admin.php:36
filtermanage_product_page_product-reviews_columnsadmin\admin.php:37
actionmanage_comments_custom_columnadmin\admin.php:38
actionwoocommerce_product_reviews_table_column_wcpr_photosadmin\admin.php:39
actionmedia_buttonsadmin\admin.php:41
actionadmin_footeradmin\admin.php:43
actioninitadmin\admin.php:45
actioninitadmin\admin.php:47
filterplupload_default_paramsadmin\admin.php:50
filterintermediate_image_sizesadmin\admin.php:51
filterintermediate_image_sizesadmin\admin.php:126
actionedit_commentfrontend\frontend.php:23
actionwp_set_comment_statusfrontend\frontend.php:24
actionwpr_schedule_emailfrontend\frontend.php:25
actioncomment_form_beforefrontend\frontend.php:29
actioncomment_form_topfrontend\frontend.php:31
actioncomment_postfrontend\frontend.php:35
actioncomment_form_beforefrontend\frontend.php:42
actioncomment_form_afterfrontend\frontend.php:43
filterwoocommerce_product_review_comment_form_argsfrontend\frontend.php:45
filterpreprocess_commentfrontend\frontend.php:47
filtercomments_template_query_argsfrontend\frontend.php:49
actioncomment_postfrontend\frontend.php:51
actionparse_comment_queryfrontend\frontend.php:53
actionparse_comment_queryfrontend\frontend.php:54
actionwoocommerce_order_status_completedfrontend\frontend.php:57
filterget_comment_linkfrontend\frontend.php:77
actionparse_comment_queryfrontend\frontend.php:169
actionparse_comment_queryfrontend\frontend.php:170
actionparse_comment_queryfrontend\frontend.php:207
actionparse_comment_queryfrontend\frontend.php:208
actionparse_comment_queryfrontend\frontend.php:314
actioncomment_formfrontend\frontend.php:924
filterintermediate_image_sizesfrontend\frontend.php:1155
actioncomment_postfrontend\frontend.php:1240
actioncomment_postfrontend\frontend.php:1242
actionwp_enqueue_scriptsfrontend\single-page.php:24
actionwp_footerfrontend\single-page.php:26
actionwp_list_comments_argsfrontend\single-page.php:30
actionwoocommerce_review_after_comment_textfrontend\single-page.php:32
actionviwcpr_get_overall_rating_htmlfrontend\single-page.php:34
actionviwcpr_get_filters_htmlfrontend\single-page.php:35
actionviwcpr_get_template_masonry_htmlfrontend\single-page.php:36
actionviwcpr_get_template_basic_htmlfrontend\single-page.php:37
actionparse_comment_queryfrontend\single-page.php:106
actionparse_comment_queryfrontend\single-page.php:107
actionparse_comment_queryfrontend\single-page.php:164
actionwp_footerfrontend\single-page.php:219
actionadmin_enqueue_scriptsincludes\support.php:32
actionadmin_noticesincludes\support.php:33
actionadmin_initincludes\support.php:34
actionadmin_menuincludes\support.php:35
filterplugin_row_metaincludes\support.php:37
actionadmin_initincludes\support.php:39
actionadmin_bar_menuincludes\support.php:41
actionadmin_noticesincludes\support.php:55
actionadmin_footerincludes\support.php:672
actionadmin_bar_menuincludes\support.php:810
actionadmin_noticesincludes\support.php:956
actionviwcpr_reminder_before_get_product_htmlplugins\curcy.php:12
actionviwcpr_reminder_after_get_product_htmlplugins\curcy.php:13
filterwoocommerce_currencyplugins\curcy.php:31
actionbefore_woocommerce_initwoo-photo-reviews.php:32
actionplugins_loadedwoo-photo-reviews.php:36
filterplugin_action_links_woo-photo-reviews/woo-photo-reviews.phpwoo-photo-reviews.php:37

Scheduled Events 3

wpr_schedule_email
wpr_schedule_email
wpr_schedule_email
Maintenance & Trust

Photo Reviews for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 6, 2026
PHP min version7.0
Downloads532K

Community Trust

Rating94/100
Number of ratings77
Active installs10K
Alternatives

Photo Reviews for WooCommerce Alternatives

ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema

ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema

reviewx

A
93

Drive woocommerce business growth with social proof: gather product reviews with multicriteria ratings, auto-reminder emails, discounts, and more.

9K 9 CVEs
Customer Reviews for WooCommerce

Customer Reviews for WooCommerce

customer-reviews-woocommerce

A
88

Customer Reviews for WooCommerce plugin helps you get more sales with social proof. Set up automated review reminders and increase conversion rate.

80K 19 CVEs
Customer Reviews Collector for WooCommerce

Customer Reviews Collector for WooCommerce

customer-reviews-collector-for-woocommerce

A
99

Collect reviews on Google, Facebook, Yelp, Trustindex and other platforms automatically, with the help of our system.

5K 1 CVE
WiserReview Product Reviews for WooCommerce

WiserReview Product Reviews for WooCommerce

wiser-review

A
100

Collect, manage, and display powerful product reviews and testimonials for WooCommerce stores. Boost trust and conversion with automated review collec …

700 No CVEs
Customer Reviews for WooCommerce

Customer Reviews for WooCommerce

customer-reviews-for-woocommerce

A
85

Looking to boost your WooCommerce sales? Using the WooCommerce customer reviews widget, you can! Collect more reviews and build brand loyalty with thi …

200 No CVEs
Developer Profile

Photo Reviews for WooCommerce Developer Profile

VillaTheme

58 plugins · 167K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
217 days
View full developer profile
Detection Fingerprints

How We Detect Photo Reviews for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/woo-photo-reviews/includes/assets/css/admin.css/wp-content/plugins/woo-photo-reviews/includes/assets/css/frontend.css/wp-content/plugins/woo-photo-reviews/includes/assets/js/frontend.js/wp-content/plugins/woo-photo-reviews/includes/assets/js/admin.js
Script Paths
/wp-content/plugins/woo-photo-reviews/includes/assets/js/frontend.js/wp-content/plugins/woo-photo-reviews/includes/assets/js/admin.js
Version Parameters
woo-photo-reviews/includes/assets/css/admin.css?ver=woo-photo-reviews/includes/assets/css/frontend.css?ver=woo-photo-reviews/includes/assets/js/frontend.js?ver=woo-photo-reviews/includes/assets/js/admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
wcpr_preview_email_buttonwcpr_add_new_image
HTML Comments
<!-- Photo Reviews for WooCommerce -->
Data Attributes
data-reviews_anchor_linkdata-wcpr_product_id
JS Globals
wcpr_frontend_paramswcpr_admin_params
REST Endpoints
/wp-json/wcpr/v1/get-reviews
FAQ

Frequently Asked Questions about Photo Reviews for WooCommerce