How many vulnerabilities does Bad Otter Ultimate Commerce for WooCommerce have?

The audit found 25 findings: 1 critical, 3 high, 14 medium severity.

Should I use Bad Otter Ultimate Commerce for WooCommerce?

Based on the latest audit (grade B, risk CRITICAL), review the 25 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

Bad Otter Ultimate Commerce for WooCommerce

Q: Is Bad Otter Ultimate Commerce for WooCommerce secure?

WP HealthKit's independent audit rates Bad Otter Ultimate Commerce for WooCommerce overall risk as CRITICAL with a report-card grade of B.

Audited at release

v0.2.0WordPress PluginAudited Today

A modular WooCommerce experience layer for catalogue, variations, cart, wishlist, recently viewed products and customer account foundations.

CRITICAL

Total Findings

Security Grade

Security Findings

Critical1

High3

Medium14

Low5

Info2

Executive Summary

Is Bad Otter Ultimate Commerce for WooCommerce secure? In WP HealthKit's independent 2026 audit, Bad Otter Ultimate Commerce for WooCommerce received an overall risk of CRITICAL and a report-card grade of B across 25 findings (1 critical, 3 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

security

standards

quality

compatibility

Overall

PHP Compatibility

Requires PHP 8.1Declared minimum: 8.1

Categories with Findings

SecurityCoding StandardsType SafetyInternationalizationDatabaseTheme StandardsWordPress CompatibilityPlugin ConflictscompatibilityPlugin Lifecycle

Plugin Info

Audit Count: 1
Type: plugin

Embed

Show your audit status in your README or website.

[![Bad Otter Ultimate Commerce for WooCommerce security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/bad-otter-ultimate-commerce-woocommerce)](https://wphealthkit.com/directory/bad-otter-ultimate-commerce-woocommerce)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

Audit Your Plugin

Get a comprehensive security audit for your WordPress plugin or theme. Upload your zip and get results in minutes.

Start Free Audit

PHP Compatibility

Requires PHP 8.1Declared minimum: 8.1

Categories with Findings

SecurityCoding StandardsType SafetyInternationalizationDatabaseTheme StandardsWordPress CompatibilityPlugin ConflictscompatibilityPlugin Lifecycle