How many vulnerabilities does Vixns Commerce Profile for Universal Commerce Protocol have?

The audit found 76 findings: 3 critical, 6 high, 30 medium severity.

Vixns Commerce Profile for Universal Commerce Protocol

Q: Is Vixns Commerce Profile for Universal Commerce Protocol secure?

WP HealthKit's independent audit rates Vixns Commerce Profile for Universal Commerce Protocol overall risk as CRITICAL with a report-card grade of D.

Q: Should I use Vixns Commerce Profile for Universal Commerce Protocol?

Based on the latest audit (grade D, risk CRITICAL), review the 76 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

Audited at release

v0.4.0WordPress PluginAudited 19 days ago

Static Universal Commerce Protocol business profile, optional catalog REST, and signing keys[] for WooCommerce. Not affiliated with the UCP project.

CRITICAL

Total Findings

Security Grade

Security Findings

Critical3

High6

Medium30

Low12

Info25

Executive Summary

Is Vixns Commerce Profile for Universal Commerce Protocol secure? In WP HealthKit's independent 2026 audit, Vixns Commerce Profile for Universal Commerce Protocol received an overall risk of CRITICAL and a report-card grade of D across 76 findings (3 critical, 6 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

PHP Compatibility

Requires PHP 8.0Declared minimum: 7.4Mismatch detected

Categories with Findings

SecurityPHP CompatibilityPlugin LifecycleCoding StandardsType SafetyWooCommerce CompatibilityHook WiringPerformanceDatabaseWordPress CompatibilityDependencies

Plugin Info

Audit Count: 1
Type: plugin

Embed

Show your audit status in your README or website.

[![Vixns Commerce Profile for Universal Commerce Protocol security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/vixns-commerce-profile-ucp)](https://wphealthkit.com/directory/vixns-commerce-profile-ucp)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

PHP Compatibility

Requires PHP 8.0Declared minimum: 7.4Mismatch detected

Categories with Findings

SecurityPHP CompatibilityPlugin LifecycleCoding StandardsType SafetyWooCommerce CompatibilityHook WiringPerformanceDatabaseWordPress CompatibilityDependencies

Vixns Commerce Profile for Universal Commerce Protocol

Security Findings

Executive Summary

Security Report Card

PHP Compatibility

Categories with Findings

Plugin Info

Embed

Are you the developer?

Audit Your Plugin

PHP Compatibility

Categories with Findings