How many vulnerabilities does LaFactory Subscriptions for WooCommerce have?

The audit found 79 findings: 2 critical, 8 high, 25 medium severity.

Should I use LaFactory Subscriptions for WooCommerce?

Based on the latest audit (grade C, risk CRITICAL), review the 79 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

LaFactory Subscriptions for WooCommerce

Q: Is LaFactory Subscriptions for WooCommerce secure?

WP HealthKit's independent audit rates LaFactory Subscriptions for WooCommerce overall risk as CRITICAL with a report-card grade of C.

Audited at release

v0.31.2WordPress PluginAudited 14 days ago

Sell subscriptions with WooCommerce: trials, sign-up fees, plan switching, customer self-service, automatic payment retries. Free and complete.

CRITICAL

Total Findings

Security Grade

Security Findings

Critical2

High8

Medium25

Low32

Info12

Executive Summary

Is LaFactory Subscriptions for WooCommerce secure? In WP HealthKit's independent 2026 audit, LaFactory Subscriptions for WooCommerce received an overall risk of CRITICAL and a report-card grade of C across 79 findings (2 critical, 8 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

PHP Compatibility

Requires PHP 8.0Declared minimum: 8.1

Categories with Findings

SecuritycompatibilityHook WiringPerformancePlugin LifecycleCoding StandardsType SafetyInternationalizationTheme StandardsPlugin ConflictsWordPress CompatibilityDependencies

Plugin Info

Audit Count: 1
Type: plugin

Embed

Show your audit status in your README or website.

[![LaFactory Subscriptions for WooCommerce security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/lafactory-subscriptions)](https://wphealthkit.com/directory/lafactory-subscriptions)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

PHP Compatibility

Requires PHP 8.0Declared minimum: 8.1

Categories with Findings

SecuritycompatibilityHook WiringPerformancePlugin LifecycleCoding StandardsType SafetyInternationalizationTheme StandardsPlugin ConflictsWordPress CompatibilityDependencies

LaFactory Subscriptions for WooCommerce

Security Findings

Executive Summary

Security Report Card

PHP Compatibility

Categories with Findings

Plugin Info

Embed

Are you the developer?

Audit Your Plugin

PHP Compatibility

Categories with Findings