How many vulnerabilities does WooCommerce Legacy REST API have?

The audit found 533 findings: 0 critical, 477 high, 33 medium severity.

Should I use WooCommerce Legacy REST API?

Based on the latest audit (grade B, risk HIGH), review the 533 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

WooCommerce Legacy REST API

Q: Is WooCommerce Legacy REST API secure?

WP HealthKit's independent audit rates WooCommerce Legacy REST API overall risk as HIGH with a report-card grade of B.

v1.0.5WordPress Plugin400K+ installs1.5Audited 103 days ago

HIGH

Total Findings

533

Security Grade

Active Installs

400K+

Coding Score

100/100

Security Findings

533

Critical0

High477

Medium33

Low20

Info3

Executive Summary

Is WooCommerce Legacy REST API secure? In WP HealthKit's independent 2026 audit, WooCommerce Legacy REST API received an overall risk of HIGH and a report-card grade of B across 533 findings (0 critical, 477 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

Readiness

Coding Standards

100/100

PHP Compatibility

Requires PHP 8.0Declared minimum: 7.4Mismatch detected

Categories with Findings

PHP CompatibilityWooCommerce CompatibilityPerformanceInternationalizationType SafetyWordPress Compatibility

Plugin Info

Active Installs: 400K+
WP.org Rating: 1.5
Requires WP: 6.2+
Tested Up To: false
Requires PHP: 7.4+
Audit Count: 1
Type: plugin

Embed Audit Badge

Show your audit status in your README or website.

[![WooCommerce Legacy REST API security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/woocommerce-legacy-rest-api)](https://wphealthkit.com/directory/woocommerce-legacy-rest-api)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin