How many vulnerabilities does PublishPress Cart – eCommerce for Digital Products have?

The audit found 628 findings: 0 critical, 40 high, 435 medium severity.

Should I use PublishPress Cart – eCommerce for Digital Products?

Based on the latest audit (grade D, risk HIGH), review the 628 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

PublishPress Cart – eCommerce for Digital Products

Q: Is PublishPress Cart – eCommerce for Digital Products secure?

WP HealthKit's independent audit rates PublishPress Cart – eCommerce for Digital Products overall risk as HIGH with a report-card grade of D.

Audited at release

v1.0.0WordPress PluginAudited Today

Create order and thank you pages for digital products, programs, and services.

HIGH

Total Findings

628

Security Grade

Security Findings

628

Critical0

High40

Medium435

Low137

Info16

Executive Summary

Is PublishPress Cart – eCommerce for Digital Products secure? In WP HealthKit's independent 2026 audit, PublishPress Cart – eCommerce for Digital Products received an overall risk of HIGH and a report-card grade of D across 628 findings (0 critical, 40 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

PHP Compatibility

Requires PHP 8.0

Categories with Findings

PHP CompatibilityPlugin ConflictsHook WiringPerformanceDatabaseCSRFPlugin LifecycleCoding StandardsTheme StandardsDependency SecurityType SafetyInternationalizationAccessibilitySecurityUpdate SafetyWordPress Compatibilitycompatibility

Plugin Info

Audit Count: 1
Type: plugin

Embed

Show your audit status in your README or website.

[![PublishPress Cart – eCommerce for Digital Products security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/publishpress-cart)](https://wphealthkit.com/directory/publishpress-cart)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

PHP Compatibility

Requires PHP 8.0

PublishPress Cart – eCommerce for Digital Products

Security Findings

Executive Summary

Security Report Card

PHP Compatibility

Categories with Findings

Plugin Info

Embed

Are you the developer?

Audit Your Plugin

PHP Compatibility

Categories with Findings