How many vulnerabilities does BOS Lessons have?

The audit found 44 findings: 1 critical, 4 high, 29 medium severity.

Should I use BOS Lessons?

Based on the latest audit (grade D, risk CRITICAL), review the 44 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

BOS Lessons

Q: Is BOS Lessons secure?

WP HealthKit's independent audit rates BOS Lessons overall risk as CRITICAL with a report-card grade of D.

Audited at release

v1.0.4WordPress PluginAudited Today

Sell video and audio lessons from your own WordPress site. Students buy through WooCommerce and watch on your site or in your branded app.

CRITICAL

Total Findings

Security Grade

Coding Score

31/100

Security Findings

Critical1

High4

Medium29

Low8

Info2

Executive Summary

Is BOS Lessons secure? In WP HealthKit's independent 2026 audit, BOS Lessons received an overall risk of CRITICAL and a report-card grade of D across 44 findings (1 critical, 4 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

Readiness

Coding Standards

31/100

PHP Compatibility

Requires PHP 5.6Declared minimum: 7.4

Categories with Findings

SecurityHardcoded SecretsPerformanceSQL InjectionCoding StandardsType SafetyWooCommerce CompatibilityHook WiringInternationalizationPlugin LifecycleTheme StandardsAI-Generated CodeWordPress CompatibilityPlugin Conflicts

Plugin Info

Audit Count: 1
Type: plugin

Embed

Show your audit status in your README or website.

[![BOS Lessons security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/bos-lessons)](https://wphealthkit.com/directory/bos-lessons)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

Readiness

Coding Standards

31/100

PHP Compatibility

Requires PHP 5.6Declared minimum: 7.4

BOS Lessons

Security Findings

Executive Summary

Security Report Card

Readiness

PHP Compatibility

Categories with Findings

Plugin Info

Embed

Are you the developer?

Audit Your Plugin

Readiness

PHP Compatibility

Categories with Findings