WowShipping – Weight Based Table Rate Shipping with Live Rates for UPS, USPS, DHL Security & Risk Analysis

wordpress.org/plugins/wow-table-rate-shipping

Flexible table rate shipping plugin with live rates to solve any complex shipping scenario using weight, cart, location, and 30+ conditions.

100 active installs v1.1.16 PHP 7.4+ WP 6.4+ Updated Apr 6, 2026

table-ratetable-rate-shippingupsweight-based-shippingwoocommerce-table-rate-shipping

A · Safe

CVEs total0

Unpatched0

Last CVENever

Download

Safety Verdict

Is WowShipping – Weight Based Table Rate Shipping with Live Rates for UPS, USPS, DHL Safe to Use in 2026?

Generally Safe

Score 100/100

WowShipping – Weight Based Table Rate Shipping with Live Rates for UPS, USPS, DHL has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago

Risk Assessment

The wow-table-rate-shipping plugin, version 1.1.13, demonstrates a generally strong security posture with no recorded vulnerabilities or identified critical/high taint flows. The code strictly adheres to prepared statements for all SQL queries and ensures all output is properly escaped, which are excellent security practices. The absence of dangerous functions, file operations, and bundled libraries further contributes to its secure foundation. However, a notable concern is the presence of one AJAX handler that lacks authentication checks. While the total attack surface is relatively small, this single unprotected entry point presents a potential avenue for unauthorized actions, even if the impact might be limited by other security layers within the application.

Key Concerns

AJAX handler without authentication check

Vulnerabilities

None known

WowShipping – Weight Based Table Rate Shipping with Live Rates for UPS, USPS, DHL Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Version History

WowShipping – Weight Based Table Rate Shipping with Live Rates for UPS, USPS, DHL Release Timeline

v1.1.16Current

v1.1.15

v1.1.14

v1.1.13

v1.1.12

v1.1.11

v1.1.10

v1.1.9

v1.1.8

v1.1.7

v1.1.6

v1.1.5

v1.1.4

v1.1.3

v1.1.2

v1.1.1

v1.1.0

v1.0.7

v1.0.6

v1.0.5

Code Analysis

Analyzed Mar 16, 2026

WowShipping – Weight Based Table Rate Shipping with Live Rates for UPS, USPS, DHL Code Analysis

Dangerous Functions

Raw SQL Queries

16 prepared

Unescaped Output

238 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

100% prepared16 total queries

Output Escaping

100% escaped238 total outputs

Data Flows · Security

All sanitized

Data Flow Analysis

1 flows

<class-notice> (includes\utils\class-notice.php:0)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

1 unprotected

WowShipping – Weight Based Table Rate Shipping with Live Rates for UPS, USPS, DHL Attack Surface

Entry Points28

Unprotected1

AJAX Handlers 3

authwp_ajax_wtrs_deactive_pluginincludes\utils\class-deactive.php:33

authwp_ajax_wtrs_installincludes\utils\class-notice.php:41

authwp_ajax_wtrs_install_pluginincludes\utils\class-our-plugins.php:20

REST API Routes 24

GET/wp-json/wow-table-rate-shipping/v1/analytics/order-logincludes\rest\class-analytics-rest.php:40

GET/wp-json/wow-table-rate-shipping/v1/analytics/avg-shipping-costincludes\rest\class-analytics-rest.php:70

GET/wp-json/wow-table-rate-shipping/v1/analytics/rule-usageincludes\rest\class-analytics-rest.php:91

GET/wp-json/wow-table-rate-shipping/v1/carriers/valuesincludes\rest\class-carrier-rest.php:39

GET/wp-json/wow-table-rate-shipping/v1/carriers/statusincludes\rest\class-carrier-rest.php:63

POST/wp-json/wow-table-rate-shipping/v1/carriers/validateincludes\rest\class-carrier-rest.php:81

GET/wp-json/wow-table-rate-shipping/v1/carriers/secretsincludes\rest\class-carrier-rest.php:104

GET/wp-json/wow-table-rate-shipping/v1/condition-data/(?P<type>[a-zA-Z_-]+)includes\rest\class-conditions-rest.php:29

GET/wp-json/wow-table-rate-shipping/v1/shipping-classesincludes\rest\class-conditions-rest.php:85

GET/wp-json/wow-table-rate-shipping/v1/product-attributesincludes\rest\class-conditions-rest.php:95

GET/wp-json/wow-table-rate-shipping/v1/shipping-rulesincludes\rest\class-rest.php:48

GET/wp-json/wow-table-rate-shipping/v1/shipping-rules/(?P<id>[a-z0-9_-]+)includes\rest\class-rest.php:58

POST/wp-json/wow-table-rate-shipping/v1/shipping-rules/(?P<id>[a-zA-Z0-9_-]+)/duplicateincludes\rest\class-rest.php:69

POST/wp-json/wow-table-rate-shipping/v1/shipping-rulesincludes\rest\class-rest.php:88

GET/wp-json/wow-table-rate-shipping/v1/shipping-rules-exportincludes\rest\class-rest.php:98

GET/wp-json/wow-table-rate-shipping/v1/shipping-rules-countincludes\rest\class-rest.php:123

DELETE/wp-json/wow-table-rate-shipping/v1/shipping-rules/(?P<id>[a-z0-9_-]+)includes\rest\class-rest.php:134

POST/wp-json/wow-table-rate-shipping/v1/shipping-rules/import/rulesincludes\rest\class-rest.php:154

GET/wp-json/wow-table-rate-shipping/v1/shipping-rules/import/rules/statusincludes\rest\class-rest.php:171

POST/wp-json/wow-table-rate-shipping/v1/shipping-rules/bulkincludes\rest\class-rest.php:182

GET/wp-json/wow-table-rate-shipping/v1/settingsincludes\rest\class-rest.php:207

POST/wp-json/wow-table-rate-shipping/v1/settingsincludes\rest\class-rest.php:217

GET/wp-json/wow-table-rate-shipping/v1/woo-shipping-zonesincludes\rest\class-rest.php:253

GET/wp-json/wow-table-rate-shipping/v1/shipping-regionsincludes\rest\class-woo-shipping-settings.php:28

Shortcodes 1

[fee] includes\class-method-helper.php:298

WordPress Hooks 30

actionwtrs_carrier_invalidate_cachecarriers\class-live-rate-manager.php:33

actionactivated_pluginincludes\class-init.php:31

actionplugins_loadedincludes\class-init.php:33

actionwoocommerce_loadedincludes\class-init.php:49

actionadmin_enqueue_scriptsincludes\class-init.php:61

actionwoocommerce_shipping_method_add_rateincludes\class-wow-shipping-method.php:109

actionwoocommerce_cart_calculate_feesincludes\class-wow-shipping-method.php:112

actionrest_api_initincludes\rest\class-analytics-rest.php:31

actionrest_api_initincludes\rest\class-carrier-rest.php:29

actionrest_api_initincludes\rest\class-conditions-rest.php:20

actionrest_api_initincludes\rest\class-rest.php:37

actionrest_api_initincludes\rest\class-woo-shipping-settings.php:21

actionadmin_footerincludes\utils\class-deactive.php:31

filterwtrs_get_allowed_html_tagsincludes\utils\class-hooks.php:25

filterwoocommerce_shipping_methodsincludes\utils\class-hooks.php:27

filterwoocommerce_shipping_zone_method_addedincludes\utils\class-hooks.php:28

actionwoocommerce_shipping_zone_method_status_toggledincludes\utils\class-hooks.php:29

filterwoocommerce_shipping_zone_method_deletedincludes\utils\class-hooks.php:30

actionwoocommerce_delete_shipping_zoneincludes\utils\class-hooks.php:31

actionwoocommerce_after_shipping_rateincludes\utils\class-hooks.php:34

actionwtrs_process_rule_import_jobincludes\utils\class-import-helper.php:52

actionadmin_noticesincludes\utils\class-notice.php:34

actionadmin_initincludes\utils\class-notice.php:35

actionrest_api_initincludes\utils\class-notice.php:38

actionadmin_menuincludes\utils\class-options.php:24

actionadmin_menuincludes\utils\class-options.php:26

actionin_admin_headerincludes\utils\class-options.php:27

filteradmin_footer_textincludes\utils\class-options.php:29

filterupdate_footerincludes\utils\class-options.php:30

filterplugin_row_metaincludes\utils\class-plugin-actions.php:19

Scheduled Events 1

wtrs_process_rule_import_job

Maintenance & Trust

WowShipping – Weight Based Table Rate Shipping with Live Rates for UPS, USPS, DHL Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4

Last updatedApr 6, 2026

PHP min version7.4

Downloads4K

Community Trust

Rating100/100

Number of ratings8

Active installs100

Alternatives

WowShipping – Weight Based Table Rate Shipping with Live Rates for UPS, USPS, DHL Alternatives

Weight Based Shipping Table Rate for WooCommerce – Flexible Shipping

flexible-shipping

Weight based shipping methods for WooCommerce. Flexible shipping with table rate rules by cart weight and order value. Accurate rates at checkout.

100K 2 CVEs

Weight Based Shipping for WooCommerce

weight-based-shipping-for-woocommerce

100

Weight Based Shipping is a flexible and widely-used solution to calculate shipping costs based on the total cart weight and value.

60K 1 CVE

Easy Table Rate Shipping for WooCommmerce

easy-table-rate-shipping-for-woocommerce

Table rate shipping extends WooCommerce’s default shipping options letting you calculate shipping costs based on total price, item count, weight, etc

200 No CVEs

Weight Based Shipping For WooCommerce

livemesh-weight-based-shipping

Discover the most intuitive yet flexible way to set conditional weight based shipping rates for WooCommerce.

40 No CVEs

Table Rate Shipping for WooCommerce

woocommerce-easy-table-rate-shipping

100

Advanced shipping rate for WooCommerce. Calculate rate shipping using country, weight, or price. Supports WooCommerce shipping zones.

20K No CVEs

Developer Profile

WowShipping – Weight Based Table Rate Shipping with Live Rates for UPS, USPS, DHL Developer Profile

WPXPO

9 plugins · 51K total installs

trust score

Avg Security Score

89/100

Avg Patch Time

137 days

View full developer profile

Detection Fingerprints

How We Detect WowShipping – Weight Based Table Rate Shipping with Live Rates for UPS, USPS, DHL

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/wow-table-rate-shipping/assets/css/wtrs-backend-datatable-rtl.css/wp-content/plugins/wow-table-rate-shipping/assets/css/wtrs-backend-datatable.css/wp-content/plugins/wow-table-rate-shipping/assets/css/wtrs-backend-rtl.css/wp-content/plugins/wow-table-rate-shipping/assets/css/wtrs-backend.css

Script Paths

/wp-content/plugins/wow-table-rate-shipping/assets/js/wtrs-backend.js

Version Parameters

wow-table-rate-shipping/assets/css/wtrs-backend-datatable-rtl.css?ver=wow-table-rate-shipping/assets/css/wtrs-backend-datatable.css?ver=wow-table-rate-shipping/assets/css/wtrs-backend-rtl.css?ver=wow-table-rate-shipping/assets/css/wtrs-backend.css?ver=wow-table-rate-shipping/assets/js/wtrs-backend.js?ver=

HTML / DOM Fingerprints

CSS Classes

wtrs-dashboard

Data Attributes

data-wtrs-settings

JS Globals

wtrsAdmin

REST Endpoints

/wp-json/wtrs/v1/settings

FAQ