How many vulnerabilities does WooCommerce Tax (formerly WooCommerce Shipping & Tax) have?

The audit found 134 findings: 0 critical, 44 high, 18 medium severity.

Should I use WooCommerce Tax (formerly WooCommerce Shipping & Tax)?

Based on the latest audit (grade B, risk HIGH), review the 134 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

WooCommerce Tax (formerly WooCommerce Shipping & Tax)

Q: Is WooCommerce Tax (formerly WooCommerce Shipping & Tax) secure?

WP HealthKit's independent audit rates WooCommerce Tax (formerly WooCommerce Shipping & Tax) overall risk as HIGH with a report-card grade of B.

v3.6.5WordPress Plugin600K+ installs2.0Audited 105 days ago

HIGH

Total Findings

134

Security Grade

Active Installs

600K+

Coding Score

100/100

Security Findings

134

Critical0

High44

Medium18

Low11

Info61

Executive Summary

Is WooCommerce Tax (formerly WooCommerce Shipping & Tax) secure? In WP HealthKit's independent 2026 audit, WooCommerce Tax (formerly WooCommerce Shipping & Tax) received an overall risk of HIGH and a report-card grade of B across 134 findings (0 critical, 44 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

Readiness

Coding Standards

100/100

PHP Compatibility

Requires PHP 8.0Declared minimum: 7.4Mismatch detected

Categories with Findings

PHP CompatibilityPerformanceInternationalizationType SafetyWooCommerce CompatibilityPlugin ConflictsWordPress Compatibility

Plugin Info

Active Installs: 600K+
WP.org Rating: 2.0
Requires WP: 6.9+
Tested Up To: 7.0
Requires PHP: 7.4+
Audit Count: 1
Type: plugin

Embed Audit Badge

Show your audit status in your README or website.

[![WooCommerce Tax (formerly WooCommerce Shipping & Tax) security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/woocommerce-services)](https://wphealthkit.com/directory/woocommerce-services)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin