Customer who viewed this item also viewed using Woocommerce Security & Risk Analysis

The static analysis of the 'woocommerce-customer-who-viewed-this-item-also-viewed' plugin version 3.4 reveals a generally strong security posture with no identified entry points (AJAX handlers, REST API routes, shortcodes, cron events) and no dangerous functions or file operations. The plugin also exhibits good practices by exclusively using prepared statements for SQL queries and making no external HTTP requests. However, a significant concern is the low percentage of properly escaped output (24%). This indicates a potential risk for cross-site scripting (XSS) vulnerabilities if user-supplied data is not adequately sanitized before being displayed in the frontend or backend. The absence of any recorded vulnerabilities, critical taint flows, or unpatched CVEs is a positive indicator, suggesting a history of responsible development and maintenance. While the lack of recorded vulnerabilities is reassuring, the low output escaping rate remains a notable weakness that should be addressed to ensure a more robust security profile.