WPC Variation Duplicator for WooCommerce Security & Risk Analysis

wordpress.org/plugins/wpc-variation-duplicator

WPC Variation Duplicator helps you duplicate a variation with all properties in just 1-click.

400 active installs v1.1.2 PHP + WP 4.0+ Updated Dec 4, 2025
clonedduplicatorvariationwoocommercewpc
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WPC Variation Duplicator for WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

WPC Variation Duplicator for WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The plugin "wpc-variation-duplicator" v1.1.2 exhibits a generally strong security posture based on the static analysis. The absence of unprotected entry points, including AJAX handlers and REST API routes, is a significant positive. The code also demonstrates good practices by exclusively using prepared statements for SQL queries and maintaining a high percentage of properly escaped outputs. The plugin's vulnerability history is also clean, with no recorded CVEs, suggesting a development team that prioritizes security or has not yet encountered exploitable flaws.

Key Concerns

  • Use of unserialize()
  • Low number of capability checks
Vulnerabilities
None known

WPC Variation Duplicator for WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

WPC Variation Duplicator for WooCommerce Code Analysis

Dangerous Functions
3
Raw SQL Queries
0
0 prepared
Unescaped Output
4
94 escaped
Nonce Checks
8
Capability Checks
2
File Operations
0
External Requests
3
Bundled Libraries
0

Dangerous Functions Found

unserialize$plugins = unserialize( $response['body'] );includes\dashboard\wpc-dashboard.php:111
unserialize$plugins = unserialize( $response['body'] );includes\dashboard\wpc-dashboard.php:189
unserialize$plugins = unserialize( $response['body'] );includes\kit\wpc-kit.php:98

Output Escaping

96% escaped98 total outputs
Data Flows
All sanitized

Data Flow Analysis

3 flows
ajax_export (includes\dashboard\wpc-dashboard.php:225)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

WPC Variation Duplicator for WooCommerce Attack Surface

Entry Points6
Unprotected0

AJAX Handlers 6

authwp_ajax_wpcvd_duplicateincludes\class-backend.php:30
authwp_ajax_wpc_get_pluginsincludes\dashboard\wpc-dashboard.php:19
authwp_ajax_wpc_get_suggestionincludes\dashboard\wpc-dashboard.php:20
authwp_ajax_wpc_exportincludes\dashboard\wpc-dashboard.php:21
authwp_ajax_wpc_importincludes\dashboard\wpc-dashboard.php:22
authwp_ajax_wpc_get_essential_kitincludes\kit\wpc-kit.php:22
WordPress Hooks 14
actioninitincludes\class-backend.php:19
actionadmin_enqueue_scriptsincludes\class-backend.php:20
actionwoocommerce_product_after_variable_attributesincludes\class-backend.php:21
actionadmin_initincludes\class-backend.php:24
actionadmin_menuincludes\class-backend.php:25
filterplugin_action_linksincludes\class-backend.php:26
filterplugin_row_metaincludes\class-backend.php:27
actionadmin_enqueue_scriptsincludes\dashboard\wpc-dashboard.php:17
actionadmin_menuincludes\dashboard\wpc-dashboard.php:18
actionbefore_woocommerce_initincludes\hpos.php:7
actionadmin_enqueue_scriptsincludes\kit\wpc-kit.php:20
actionadmin_menuincludes\kit\wpc-kit.php:21
actionplugins_loadedwpc-variation-duplicator.php:36
actionadmin_noticeswpc-variation-duplicator.php:40
Maintenance & Trust

WPC Variation Duplicator for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 4, 2025
PHP min version
Downloads6K

Community Trust

Rating0/100
Number of ratings0
Active installs400
Developer Profile

WPC Variation Duplicator for WooCommerce Developer Profile

WPClever

71 plugins · 441K total installs

87
trust score
Avg Security Score
99/100
Avg Patch Time
68 days
View full developer profile
Detection Fingerprints

How We Detect WPC Variation Duplicator for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wpc-variation-duplicator/assets/css/backend.css/wp-content/plugins/wpc-variation-duplicator/assets/js/backend.js
Script Paths
/wp-content/plugins/wpc-variation-duplicator/assets/js/backend.js
Version Parameters
wpc-variation-duplicator/assets/css/backend.css?ver=wpc-variation-duplicator/assets/js/backend.js?ver=

HTML / DOM Fingerprints

CSS Classes
wpcvd_duplicate_variation
Data Attributes
data-product_iddata-variation_id
JS Globals
WPCleverWpcvd
REST Endpoints
/wp-json/wpcvduplicator/v1/duplicate
FAQ

Frequently Asked Questions about WPC Variation Duplicator for WooCommerce