Kodlo Price Builder for WooCommerce

v1.3.5WordPress PluginAudited Todaydeepseek-v4-flash

HIGH

WP.org

Total Findings

Security Grade

Security Findings

Critical0

High12

Medium18

Low9

Info1

Executive Summary

Free-tier AI cap reached. This report contains deterministic-scanner findings only. Upgrade to a paid tier for security / quality / accessibility AI engine analysis.

Security Report Card

security

PHP Compatibility

Requires PHP 8.0Declared minimum: 8.1

Categories with Findings

PerformanceDatabaseCoding StandardsPlugin LifecycleAuth & AuthorizationType SafetyHook WiringSecurityAccessibilityPlugin ConflictscompatibilityWordPress Compatibility

Plugin Info

Audit Count: 1
Type: plugin

Embed Audit Badge

Show your audit status in your README or website.

[![Kodlo Price Builder for WooCommerce security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/kodlo-price-builder-for-woocommerce)](https://wphealthkit.com/directory/kodlo-price-builder-for-woocommerce)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update? See the update-safety verdict for Kodlo Price Builder for WooCommerce

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

PHP Compatibility

Requires PHP 8.0Declared minimum: 8.1

Categories with Findings

PerformanceDatabaseCoding StandardsPlugin LifecycleAuth & AuthorizationType SafetyHook WiringSecurityAccessibilityPlugin ConflictscompatibilityWordPress Compatibility

Positive Observations

Conditional asset enqueuing: scripts and styles are only loaded on relevant admin pages, not site-wide.
Use of transients for price calculation results (1-hour TTL) to avoid recalculating on every request for formulas that are cached.
Proper nonce verification and capability checks on all admin REST endpoints and meta saving.
No remote HTTP calls on the frontend; all API calls are admin-only.
Clear separation of admin and frontend hooks; no expensive operations on `init` or `wp_head`.
Good security practices: rate limiting, user-agent blocking, and honeypot in REST API.

Kodlo Price Builder for WooCommerce

Security Findings

Executive Summary

Security Report Card

PHP Compatibility

Categories with Findings

Plugin Info

Embed Audit Badge

Are you the developer?

Audit Your Plugin

PHP Compatibility

Categories with Findings

Positive Observations