Migrate Xcart to WooCommerce Security & Risk Analysis

wordpress.org/plugins/woo-xcart-migration

The plugin is developed to automate data migration from X-Cart to WooCoomerce.

0 active installs v1.0.0 PHP 5.2.4+ WP 4.X+ Updated May 25, 2018
woocommercex-cartx-cart-migrationx-cart-to-woocommerce-migration
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Migrate Xcart to WooCommerce Safe to Use in 2026?

Generally Safe

Score 85/100

Migrate Xcart to WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7yr ago
Risk Assessment

The "woo-xcart-migration" plugin v1.0.0 presents a moderate security risk due to several identified weaknesses, despite some good practices. While it shows a strong adherence to prepared statements for SQL queries and has no recorded vulnerability history, significant concerns arise from its attack surface and code analysis. The presence of two unprotected AJAX handlers creates a direct entry point for potential unauthorized actions. Furthermore, the taint analysis reveals two high-severity flows with unsanitized paths, indicating a risk of data being processed in an insecure manner, potentially leading to unintended consequences if these paths are triggered with malicious input. The low percentage of properly escaped output also contributes to a heightened risk of cross-site scripting (XSS) vulnerabilities.

Key Concerns

  • Unprotected AJAX handlers
  • High severity taint flows with unsanitized paths
  • Low percentage of properly escaped output
  • Missing nonce checks on AJAX
  • Missing capability checks
Vulnerabilities
None known

Migrate Xcart to WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Migrate Xcart to WooCommerce Release Timeline

v1.0.0Current
Code Analysis
Analyzed Apr 16, 2026

Migrate Xcart to WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
2
140 prepared
Unescaped Output
40
34 escaped
Nonce Checks
0
Capability Checks
0
File Operations
6
External Requests
0
Bundled Libraries
0

SQL Query Safety

99% prepared142 total queries

Output Escaping

46% escaped74 total outputs
Data Flows · Security
2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths
wxm_get_weight_status (woo-xcart-migration.php:1130)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
2 unprotected

Migrate Xcart to WooCommerce Attack Surface

Entry Points2
Unprotected2

AJAX Handlers 2

authwp_ajax_wxm_get_weight_statuswoo-xcart-migration.php:1173
noprivwp_ajax_wxm_get_weight_statuswoo-xcart-migration.php:1174
WordPress Hooks 9
filtercron_scheduleswoo-xcart-migration.php:641
actionproductcronjobwoo-xcart-migration.php:660
actionadmin_menuwoo-xcart-migration.php:842
actionbefore_delete_postwoo-xcart-migration.php:856
actiondeleted_userwoo-xcart-migration.php:924
actiondeleted_term_taxonomywoo-xcart-migration.php:955
actiondelete_termwoo-xcart-migration.php:986
actionwp_print_scriptswoo-xcart-migration.php:1122
filterwoocommerce_order_numberwoo-xcart-migration.php:1191

Scheduled Events 1

productcronjob
Maintenance & Trust

Migrate Xcart to WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29
Last updatedMay 25, 2018
PHP min version5.2.4
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Migrate Xcart to WooCommerce Developer Profile

vgroup

1 plugin · 0 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Migrate Xcart to WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/woo-xcart-migration/js/wxm-admin.js/wp-content/plugins/woo-xcart-migration/css/wxm-admin.css
Script Paths
/wp-content/plugins/woo-xcart-migration/js/wxm-admin.js
Version Parameters
woo-xcart-migration/js/wxm-admin.js?ver=woo-xcart-migration/css/wxm-admin.css?ver=

HTML / DOM Fingerprints

HTML Comments
<!-- X-Cart to WooCommerce Migration Tool --><!-- This program is free software: you can redistribute it and/or modifyit under the terms of the GNU General Public License as published bythe Free Software Foundation, either version 3 of the License, or+8 more
Data Attributes
data-wp-action
FAQ

Frequently Asked Questions about Migrate Xcart to WooCommerce