Access Code Lite Security & Risk Analysis

wordpress.org/plugins/access-code-lite

Restrict site access with a simple URL code parameter and grant access using private link sharing. Ideal for sites in development or maintenance.

0 active installs v1.0.2 PHP 7.4+ WP 5.8+ Updated Feb 3, 2026
accesscodedevelopmentpreviewstaging
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Access Code Lite Safe to Use in 2026?

Generally Safe

Score 100/100

Access Code Lite has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The static analysis of access-code-lite v1.0.2 indicates a strong security posture with no identified dangerous functions, SQL injection risks, or unsanitized output. The absence of file operations and external HTTP requests further contributes to its secure design. The presence of a nonce check is a positive sign for preventing CSRF attacks. However, the complete lack of capability checks is a significant concern. While there are no direct entry points detected in the static analysis and the vulnerability history is clean, the absence of capability checks means that any potential future entry points or undiscovered vulnerabilities might not be adequately protected against unauthorized access.

Key Concerns

  • No capability checks present
Vulnerabilities
None known

Access Code Lite Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Access Code Lite Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
8 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped8 total outputs
Attack Surface

Access Code Lite Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 3
actionadmin_menuapp\Events\AdminMenuEvent.php:10
filterquery_varsapp\Events\QueryVarsEvent.php:11
actiontemplate_redirectapp\Events\TemplateRedirectEvent.php:11
Maintenance & Trust

Access Code Lite Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 3, 2026
PHP min version7.4
Downloads360

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Access Code Lite Developer Profile

ExpandOps

2 plugins · 10 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Access Code Lite

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/access-code-lite/app/Handlers/AccessCodeRequest.php/wp-content/plugins/access-code-lite/shared/functions/expandops-functions.php/wp-content/plugins/access-code-lite/lib/autoload.php/wp-content/plugins/access-code-lite/app/bootstrap.php/wp-content/plugins/access-code-lite/app/autoload.php

HTML / DOM Fingerprints

CSS Classes
acl-access-denied
FAQ

Frequently Asked Questions about Access Code Lite