Custom Product Builder or Configurator for WooCommerce Security & Risk Analysis

wordpress.org/plugins/wpappsdev-pcbuilder

Product Builder or Configurator: Complete PC Components Selling Solution For WooCommerce.

50 active installs v2.2.3 PHP 7.4+ WP 6.0+ Updated Jul 17, 2025
computer-componentpc-builderproduct-builderproduct-configuratorwoocommerce-computer-builder
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Custom Product Builder or Configurator for WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

Custom Product Builder or Configurator for WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8mo ago
Risk Assessment

The "wpappsdev-pcbuilder" plugin version 2.2.3 exhibits a generally strong security posture with several positive indicators. The static analysis reveals a complete absence of direct SQL injection vulnerabilities due to 100% usage of prepared statements. Furthermore, there are no reported CVEs associated with this plugin, and the static analysis identified no dangerous functions, file operations, or external HTTP requests, which significantly reduces the attack surface. The presence of nonce checks on AJAX handlers is also a good practice for preventing CSRF attacks.

Key Concerns

  • Flows with unsanitized paths found
  • Lack of capability checks on AJAX handlers
  • 89% output escaping is not perfect
Vulnerabilities
None known

Custom Product Builder or Configurator for WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Custom Product Builder or Configurator for WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
9 prepared
Unescaped Output
22
177 escaped
Nonce Checks
10
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
1

Bundled Libraries

Select2

SQL Query Safety

100% prepared9 total queries

Output Escaping

89% escaped199 total outputs
Data Flows
4 unsanitized

Data Flow Analysis

4 flows4 with unsanitized paths
maybe_change_menu_parent_file (includes\Admin\Menu.php:90)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Custom Product Builder or Configurator for WooCommerce Attack Surface

Entry Points16
Unprotected0

AJAX Handlers 16

authwp_ajax_generate_component_filtersincludes\Ajax.php:14
noprivwp_ajax_generate_component_filtersincludes\Ajax.php:15
authwp_ajax_add_component_productincludes\Ajax.php:18
noprivwp_ajax_add_component_productincludes\Ajax.php:19
authwp_ajax_remove_component_productincludes\Ajax.php:22
noprivwp_ajax_remove_component_productincludes\Ajax.php:23
authwp_ajax_add_components_product_to_cartincludes\Ajax.php:26
noprivwp_ajax_add_components_product_to_cartincludes\Ajax.php:27
authwp_ajax_pcbuilder_configuration_saveincludes\Ajax.php:30
noprivwp_ajax_pcbuilder_configuration_saveincludes\Ajax.php:31
authwp_ajax_remove_configurationincludes\Ajax.php:34
noprivwp_ajax_remove_configurationincludes\Ajax.php:35
authwp_ajax_filter_component_productincludes\Ajax.php:38
noprivwp_ajax_filter_component_productincludes\Ajax.php:39
authwp_ajax_generate_share_linkincludes\Ajax.php:42
noprivwp_ajax_generate_share_linkincludes\Ajax.php:43
WordPress Hooks 37
actionadmin_menuincludes\Admin\Menu.php:32
actionadmin_menuincludes\Admin\Menu.php:34
actionadmin_headincludes\Admin\Menu.php:36
actionadd_meta_boxesincludes\Admin\Product.php:17
actionsave_postincludes\Admin\Product.php:18
actionadmin_menuincludes\Admin\Settings.php:25
actionadmin_initincludes\Admin\Settings.php:27
actioninitincludes\Assets.php:10
actionadmin_enqueue_scriptsincludes\Assets.php:13
actionwp_enqueue_scriptsincludes\Assets.php:15
actionpcbucomp_add_form_fieldsincludes\Component.php:37
actionpcbucomp_edit_form_fieldsincludes\Component.php:39
actionedited_pcbucompincludes\Component.php:41
actioncreate_pcbucompincludes\Component.php:42
filtermanage_edit-pcbucomp_columnsincludes\Component.php:44
filtermanage_edit-pcbucomp_sortable_columnsincludes\Component.php:45
actionmanage_pcbucomp_custom_columnincludes\Component.php:47
filterget_terms_argsincludes\Component.php:49
filterget_terms_orderbyincludes\Component.php:50
actionadd_meta_boxesincludes\FiltersGroup.php:41
filtermanage_edit-pcbucf_columnsincludes\FiltersGroup.php:43
actionmanage_pcbucf_posts_custom_columnincludes\FiltersGroup.php:45
actioninitincludes\Frontend\CustomerDashboard.php:18
filterquery_varsincludes\Frontend\CustomerDashboard.php:20
filterwoocommerce_account_menu_itemsincludes\Frontend\CustomerDashboard.php:22
actionwoocommerce_account_saved-configurations_endpointincludes\Frontend\CustomerDashboard.php:24
actionwoocommerce_account_view-configuration_endpointincludes\Frontend\CustomerDashboard.php:26
actionwpincludes\Frontend.php:13
actionwp_footerincludes\Frontend.php:14
actioninitincludes\Frontend.php:15
actionplugins_loadedwpappsdev-pcbuilder.php:72
actionadmin_noticeswpappsdev-pcbuilder.php:176
actioninitwpappsdev-pcbuilder.php:182
actioninitwpappsdev-pcbuilder.php:184
actioninitwpappsdev-pcbuilder.php:186
actionwpadpcbu_loadedwpappsdev-pcbuilder.php:188
actionbefore_woocommerce_initwpappsdev-pcbuilder.php:192
Maintenance & Trust

Custom Product Builder or Configurator for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedJul 17, 2025
PHP min version7.4
Downloads5K

Community Trust

Rating100/100
Number of ratings2
Active installs50
Developer Profile

Custom Product Builder or Configurator for WooCommerce Developer Profile

Siful Islam Ananda

3 plugins · 1K total installs

91
trust score
Avg Security Score
95/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Custom Product Builder or Configurator for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wpappsdev-pcbuilder/assets/css/main.css/wp-content/plugins/wpappsdev-pcbuilder/assets/css/pc-builder.css/wp-content/plugins/wpappsdev-pcbuilder/assets/js/pc-builder.js/wp-content/plugins/wpappsdev-pcbuilder/assets/js/scripts.js/wp-content/plugins/wpappsdev-pcbuilder/assets/js/frontend.js
Generator Patterns
Custom Product Builder or Configurator for WooCommerce v2.2.3
Script Paths
/wp-content/plugins/wpappsdev-pcbuilder/assets/js/pc-builder.js/wp-content/plugins/wpappsdev-pcbuilder/assets/js/scripts.js/wp-content/plugins/wpappsdev-pcbuilder/assets/js/frontend.js
Version Parameters
wpappsdev-pcbuilder/assets/css/main.css?ver=wpappsdev-pcbuilder/assets/css/pc-builder.css?ver=wpappsdev-pcbuilder/assets/js/pc-builder.js?ver=wpappsdev-pcbuilder/assets/js/scripts.js?ver=wpappsdev-pcbuilder/assets/js/frontend.js?ver=

HTML / DOM Fingerprints

CSS Classes
wpappsdev-pcbuilderpc-builder-wrapperpc-builder-product-listpc-builder-component-itemwpappsdev_pcbuilder_frontend
HTML Comments
<!-- WPAppsDev PCBuilder Frontend --><!-- WPAppsDev PCBuilder Component Section --><!-- WPAppsDev PCBuilder Configuration Summary -->
Data Attributes
data-product-iddata-component-iddata-builder-configdata-wpappsdev-pcbuilder
JS Globals
wpappsdev_pcbuilder_frontend_paramsWPAPPSDEV_PCBUILDER_AJAX_URL
REST Endpoints
/wp-json/wpappsdev-pcbuilder/v1/get-components/wp-json/wpappsdev-pcbuilder/v1/save-configuration
Shortcode Output
[pcbuilder][wpadpcbu_builder][wpadpcbu_configurator]
FAQ

Frequently Asked Questions about Custom Product Builder or Configurator for WooCommerce