How many vulnerabilities does RecoveryFlow by WA.cr have?

The audit found 201 findings: 1 critical, 20 high, 157 medium severity.

Should I use RecoveryFlow by WA.cr?

Based on the latest audit (grade C, risk CRITICAL), review the 201 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

RecoveryFlow by WA.cr

Q: Is RecoveryFlow by WA.cr secure?

WP HealthKit's independent audit rates RecoveryFlow by WA.cr overall risk as CRITICAL with a report-card grade of C.

Audited at release

v0.1.5WordPress PluginAudited 5 days ago

Turn lost conversions into conversations. RecoveryFlow recovers abandoned journeys over WhatsApp through WA.cr, and by email from WordPress.

CRITICAL

Total Findings

201

Security Grade

Security Findings

201

Critical1

High20

Medium157

Low17

Info6

Executive Summary

Is RecoveryFlow by WA.cr secure? In WP HealthKit's independent 2026 audit, RecoveryFlow by WA.cr received an overall risk of CRITICAL and a report-card grade of C across 201 findings (1 critical, 20 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

PHP Compatibility

Requires PHP 8.1Declared minimum: 8.0Mismatch detected

Categories with Findings

SecurityPHP CompatibilityPerformanceDatabasePlugin LifecycleTheme StandardsType SafetyWooCommerce CompatibilityHook WiringInternationalizationCoding StandardsWordPress CompatibilityPlugin ConflictscompatibilityDependencies

Plugin Info

Audit Count: 1
Type: plugin

Embed

Show your audit status in your README or website.

[![RecoveryFlow by WA.cr security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/kdc-wacr-recoveryflow)](https://wphealthkit.com/directory/kdc-wacr-recoveryflow)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

PHP Compatibility

Requires PHP 8.1Declared minimum: 8.0Mismatch detected

RecoveryFlow by WA.cr

Security Findings

Executive Summary

Security Report Card

PHP Compatibility

Categories with Findings

Plugin Info

Embed

Are you the developer?

Audit Your Plugin

PHP Compatibility

Categories with Findings