WPC Free Shipping Bar for WooCommerce Security & Risk Analysis

wordpress.org/plugins/wpc-free-shipping-bar

Encourage customers to increase their order value to be qualified for free shipping with a beautiful customizable bar.

3K active installs v1.4.9 PHP + WP 4.0+ Updated Feb 4, 2026
free-shippingshippingshipping-barwoocommercewpc
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WPC Free Shipping Bar for WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

WPC Free Shipping Bar for WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "wpc-free-shipping-bar" plugin v1.5.0 exhibits a generally strong security posture based on the provided static analysis and vulnerability history. A significant strength is the complete absence of known CVEs, indicating a history of stable and secure development. Furthermore, the code demonstrates good practices such as 100% use of prepared statements for SQL queries and a high percentage of properly escaped output. The presence of nonce and capability checks on entry points also suggests an awareness of common attack vectors.

Key Concerns

  • Use of unserialize function
Vulnerabilities
None known

WPC Free Shipping Bar for WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

WPC Free Shipping Bar for WooCommerce Code Analysis

Dangerous Functions
3
Raw SQL Queries
0
0 prepared
Unescaped Output
11
124 escaped
Nonce Checks
7
Capability Checks
2
File Operations
0
External Requests
3
Bundled Libraries
0

Dangerous Functions Found

unserialize$plugins = unserialize( $response['body'] );includes\dashboard\wpc-dashboard.php:101
unserialize$plugins = unserialize( $response['body'] );includes\dashboard\wpc-dashboard.php:179
unserialize$plugins = unserialize( $response['body'] );includes\kit\wpc-kit.php:98

Output Escaping

92% escaped135 total outputs
Data Flows
All sanitized

Data Flow Analysis

3 flows
ajax_export (includes\dashboard\wpc-dashboard.php:215)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

WPC Free Shipping Bar for WooCommerce Attack Surface

Entry Points6
Unprotected0

AJAX Handlers 5

authwp_ajax_wpc_get_pluginsincludes\dashboard\wpc-dashboard.php:9
authwp_ajax_wpc_get_suggestionincludes\dashboard\wpc-dashboard.php:10
authwp_ajax_wpc_exportincludes\dashboard\wpc-dashboard.php:11
authwp_ajax_wpc_importincludes\dashboard\wpc-dashboard.php:12
authwp_ajax_wpc_get_essential_kitincludes\kit\wpc-kit.php:22

Shortcodes 1

[wpcfb] wpc-free-shipping-bar.php:154
WordPress Hooks 35
actionadmin_enqueue_scriptsincludes\dashboard\wpc-dashboard.php:7
actionadmin_menuincludes\dashboard\wpc-dashboard.php:8
actionbefore_woocommerce_initincludes\hpos.php:7
actionadmin_enqueue_scriptsincludes\kit\wpc-kit.php:20
actionadmin_menuincludes\kit\wpc-kit.php:21
actionadmin_initincludes\log\wpc-log.php:6
actionplugins_loadedwpc-free-shipping-bar.php:38
actionadmin_noticeswpc-free-shipping-bar.php:41
actioninitwpc-free-shipping-bar.php:65
actionadmin_initwpc-free-shipping-bar.php:66
filterpre_update_optionwpc-free-shipping-bar.php:67
actionadmin_menuwpc-free-shipping-bar.php:68
actionwp_enqueue_scriptswpc-free-shipping-bar.php:69
actionadmin_enqueue_scriptswpc-free-shipping-bar.php:70
filterplugin_action_linkswpc-free-shipping-bar.php:73
filterplugin_row_metawpc-free-shipping-bar.php:74
actionwoocommerce_widget_shopping_cart_before_buttonswpc-free-shipping-bar.php:78
actionwoocommerce_proceed_to_checkoutwpc-free-shipping-bar.php:86
actionwoocommerce_proceed_to_checkoutwpc-free-shipping-bar.php:89
actionwoocommerce_before_cart_tablewpc-free-shipping-bar.php:92
actionwoocommerce_after_cart_tablewpc-free-shipping-bar.php:95
actionwoocommerce_before_cart_totalswpc-free-shipping-bar.php:98
actionwoocommerce_after_cart_totalswpc-free-shipping-bar.php:101
actionwoocommerce_before_cartwpc-free-shipping-bar.php:104
actionwoocommerce_after_cartwpc-free-shipping-bar.php:107
actionwoocommerce_review_order_before_submitwpc-free-shipping-bar.php:116
actionwoocommerce_review_order_after_submitwpc-free-shipping-bar.php:119
actionwoocommerce_before_checkout_formwpc-free-shipping-bar.php:122
actionwoocommerce_after_checkout_formwpc-free-shipping-bar.php:125
actionwoocommerce_checkout_before_order_reviewwpc-free-shipping-bar.php:128
actionwoocommerce_checkout_after_order_reviewwpc-free-shipping-bar.php:131
actionwoocommerce_checkout_before_customer_detailswpc-free-shipping-bar.php:134
actionwoocommerce_checkout_after_customer_detailswpc-free-shipping-bar.php:140
filterwoocommerce_add_to_cart_fragmentswpc-free-shipping-bar.php:145
filterwoocommerce_update_order_review_fragmentswpc-free-shipping-bar.php:146
Maintenance & Trust

WPC Free Shipping Bar for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 4, 2026
PHP min version
Downloads54K

Community Trust

Rating84/100
Number of ratings13
Active installs3K
Developer Profile

WPC Free Shipping Bar for WooCommerce Developer Profile

WPClever

71 plugins · 441K total installs

87
trust score
Avg Security Score
99/100
Avg Patch Time
68 days
View full developer profile
Detection Fingerprints

How We Detect WPC Free Shipping Bar for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wpc-free-shipping-bar/assets/css/frontend.css
Version Parameters
wpc-free-shipping-bar/assets/css/frontend.css?ver=

HTML / DOM Fingerprints

CSS Classes
wpcfb-bar-wrapperwpcfb-bar
Data Attributes
data-wpcfb-targetdata-wpcfb-progress-bardata-wpcfb-progress-bar-width
Shortcode Output
[wpcfb][/wpcfb]
FAQ

Frequently Asked Questions about WPC Free Shipping Bar for WooCommerce