UpSell for WooCommerce Security & Risk Analysis

wordpress.org/plugins/woo-upsell

This plugin allows you to add UpSell's products to the cart directly from single product page. Using add to cart buttons or checkboxes.

300 active installs v1.4.0 PHP + WP 6.0.0+ Updated Dec 18, 2025
boost-salescross-sellsproduct-pageupsellwoocommerce
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is UpSell for WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

UpSell for WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The plugin "woo-upsell" v1.4.0 exhibits a strong security posture based on the provided static analysis. The complete absence of identified entry points like AJAX handlers, REST API routes, shortcodes, and cron events significantly reduces the potential attack surface. Furthermore, the code demonstrates good practices by utilizing prepared statements for all SQL queries and avoiding dangerous functions and file operations. The lack of external HTTP requests and the absence of any recorded vulnerabilities in its history are also positive indicators.

Key Concerns

  • Output escaping is only 64% proper
  • No nonce checks found
  • No capability checks found
Vulnerabilities
None known

UpSell for WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

UpSell for WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
26
46 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

64% escaped72 total outputs
Attack Surface

UpSell for WooCommerce Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 17
filterwoocommerce_settings_tabs_arrayadmin\woo-upsell-admin.php:10
actionwoocommerce_settings_tabs_upsell_settingsadmin\woo-upsell-admin.php:11
actionwoocommerce_update_options_upsell_settingsadmin\woo-upsell-admin.php:12
actionadmin_enqueue_scriptsadmin\woo-upsell-admin.php:14
actionncmwcp1802_upsell_styleincludes\button\button-style.php:10
actionwp_enqueue_scriptsincludes\button\button-style.php:11
filterwoocommerce_get_cart_item_from_sessionincludes\button\button-style.php:14
actionncmwcp1802_upsell_styleincludes\checkbox\checkbox-style.php:10
actionwp_enqueue_scriptsincludes\checkbox\checkbox-style.php:11
actionwoocommerce_add_to_cartincludes\checkbox\checkbox-style.php:14
filterwoocommerce_get_cart_item_from_sessionincludes\checkbox\checkbox-style.php:17
actionbefore_woocommerce_initwoo-upsell.php:37
actionplugins_loadedwoo-upsell.php:46
actionwp_enqueue_scriptswoo-upsell.php:53
actionwoocommerce_before_add_to_cart_buttonwoo-upsell.php:70
actionwoocommerce_after_add_to_cart_quantitywoo-upsell.php:79
actionwpwoo-upsell.php:91
Maintenance & Trust

UpSell for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 18, 2025
PHP min version
Downloads6K

Community Trust

Rating100/100
Number of ratings4
Active installs300
Developer Profile

UpSell for WooCommerce Developer Profile

Nordic Custom Made

1 plugin · 300 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect UpSell for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/woo-upsell/css/style.css

HTML / DOM Fingerprints

CSS Classes
ncmwcp1802_product_upsellscolumn-1column-2
HTML Comments
Disse produkter anbefales sammen med
Data Attributes
upsell_<?php echo $upsell_id; ?>
FAQ

Frequently Asked Questions about UpSell for WooCommerce