Plugins inspections and reviews
To make sure that the sites we build and the plugins they rely on are secure we regularly carry out plugin reviews and publish our findings.
WordPress security advisories, audit and assurance
We undertake a significant quantity of assurance work, to ensure that the sites we build and the plugins they rely on are secure. We publish information about that work on this site.
Recent plugin recommendations
Media Tracker
Media Tracker is a WordPress plugin to find and remove unused media files, manage duplicates, and optimize your media library for better performance.
1.3.5 - No issues found
Aurora Heatmap
1.7.1 - Use with caution
WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)
WordPress + Microsoft Entra | Ext. ID | B2C | M365 Integration for your Digital Workplace. For SSO, Mail, Roles, Access, Profiles, SharePoint, PowerBI.
40.2 - Use with caution
Search & Filter Pro
Search & Filter Pro is a simple search and filtering plugin for WordPress – it is an advancement of the WordPress search box.
3.1.8 - Use with caution
Search & Filter
Search & Filter is a simple search and filtering plugin for WordPress – it is an advancement of the WordPress search box.
1.2.18 - No issues found
Recent advisories
CSRF in MapSVG Lite could allow an attacker to do almost anything an admin can
Severity: Medium
ACE via file inclusion in Redirection allows admins to execute any PHP file in the filesystem
Severity: High
CSRF in Tooltipy (tooltips for WP) could allow anybody to duplicate posts
Severity: Medium
Reflected XSS in Tooltipy (tooltips for WP) could allow anybody to do almost anything an admin can
Severity: Medium
Unserialization vulnerability in Redirection could allow admin to execute arbitrary code in some circumstances
Severity: High