AJAX Calendar Security & Risk Analysis

wordpress.org/plugins/ajax-calendar

AJAX Calendar is a plugin that will display an AJAXified WordPress calendar.

400 active installs v2.5.1 PHP + WP 2.9+ Updated Jul 17, 2011
ajaxcalendarwidget
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is AJAX Calendar Safe to Use in 2026?

Generally Safe

Score 85/100

AJAX Calendar has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 14yr ago
Risk Assessment

The static analysis of ajax-calendar v2.5.1 reveals a plugin with a seemingly very limited attack surface. There are no identified AJAX handlers, REST API routes, shortcodes, or cron events, which significantly reduces the potential entry points for malicious activity. Furthermore, the code exhibits good practices in handling SQL queries, as 100% of them utilize prepared statements, and there are no detected dangerous functions, file operations, or external HTTP requests. This indicates a conscientious effort to avoid common vulnerabilities.

Key Concerns

  • Low output escaping coverage
  • Absence of capability checks
  • Absence of nonce checks
Vulnerabilities
None known

AJAX Calendar Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

AJAX Calendar Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
11
4 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

27% escaped15 total outputs
Attack Surface

AJAX Calendar Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 3
actiontemplate_redirectajax-calendar.php:20
filterqueryajax-calendar.php:79
actionwidgets_initajax-calendar.php:144
Maintenance & Trust

AJAX Calendar Maintenance & Trust

Maintenance Signals

WordPress version tested3.2.1
Last updatedJul 17, 2011
PHP min version
Downloads111K

Community Trust

Rating74/100
Number of ratings3
Active installs400
Developer Profile

AJAX Calendar Developer Profile

John Godley

14 plugins · 2.1M total installs

70
trust score
Avg Security Score
87/100
Avg Patch Time
4069 days
View full developer profile
Detection Fingerprints

How We Detect AJAX Calendar

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Script Paths
/wp-content/plugins/ajax-calendar/ajax-calendar.php

HTML / DOM Fingerprints

CSS Classes
ajax_calendar_widget
Data Attributes
id="next"id="prev"
JS Globals
show_micro_ajaxmicroAjax
FAQ

Frequently Asked Questions about AJAX Calendar