Automatic Actions for LearnDash Security & Risk Analysis

wordpress.org/plugins/automatic-actions-for-learndash

Automatic Actions for LearnDash: [Actions] Enroll users to courses, add them to groups or change their roles on [Triggers] registration/login or on co …

10 active installs v1.0.0 PHP 5.6+ WP 5.0+ Updated Aug 10, 2022
educationelearninglearndashlearninglms
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Automatic Actions for LearnDash Safe to Use in 2026?

Generally Safe

Score 85/100

Automatic Actions for LearnDash has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3yr ago
Risk Assessment

The plugin "automatic-actions-for-learndash" v1.0.0 exhibits a generally strong security posture based on the provided static analysis. The absence of direct SQL injection risks, the use of prepared statements for all queries, and a high percentage of properly escaped output are significant strengths. Furthermore, the presence of nonce and capability checks on its entry points, coupled with zero known CVEs, suggests a well-developed and secure plugin. The limited attack surface, consisting of only two AJAX handlers with all checks in place, further reinforces this positive assessment.

Key Concerns

  • Unescaped output (12% of outputs)
  • File operations detected
Vulnerabilities
None known

Automatic Actions for LearnDash Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Automatic Actions for LearnDash Release Timeline

v1.0.0Current
Code Analysis
Analyzed Apr 16, 2026

Automatic Actions for LearnDash Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
49
362 escaped
Nonce Checks
3
Capability Checks
6
File Operations
2
External Requests
0
Bundled Libraries
0

Output Escaping

88% escaped411 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

1 flows
<callbacks-actions> (includes/callbacks-actions.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Automatic Actions for LearnDash Attack Surface

Entry Points2
Unprotected0

AJAX Handlers 2

authwp_ajax_cmb2_oembed_handlerincludes/cmb2/includes/CMB2_Ajax.php:51
noprivwp_ajax_cmb2_oembed_handlerincludes/cmb2/includes/CMB2_Ajax.php:52
WordPress Hooks 76
actioncmb2_admin_initadmin/traa-metaboxes.php:25
actioncmb2_after_formadmin/traa-metaboxes.php:682
actioncmb2_after_formadmin/traa-metaboxes.php:801
actioncmb2_after_formadmin/traa-metaboxes.php:826
actionadmin_initautomatic-actions-for-learndash.php:25
actionadmin_noticesautomatic-actions-for-learndash.php:26
actioninitautomatic-actions-for-learndash.php:50
actionwp_loadedautomatic-actions-for-learndash.php:70
actionadmin_enqueue_scriptsautomatic-actions-for-learndash.php:82
actioninitautomatic-actions-for-learndash.php:151
actionadmin_menuautomatic-actions-for-learndash.php:154
actionuser_registerincludes/callbacks-actions.php:237
actionregister_formincludes/callbacks-actions.php:241
actionwp_loginincludes/callbacks-actions.php:257
actionlogin_formincludes/callbacks-actions.php:261
actionlearndash_course_completedincludes/callbacks-actions.php:352
actiontraa_ldactions_action_performedincludes/callbacks-actions.php:355
actionsave_postincludes/callbacks-actions.php:384
actioncmb2_admin_initincludes/cmb2/example-functions.php:105
actioncmb2_admin_initincludes/cmb2/example-functions.php:470
actioncmb2_admin_initincludes/cmb2/example-functions.php:500
actioncmb2_admin_initincludes/cmb2/example-functions.php:564
actioncmb2_admin_initincludes/cmb2/example-functions.php:633
actioncmb2_admin_initincludes/cmb2/example-functions.php:674
actioncmb2_initincludes/cmb2/example-functions.php:777
filterwp_prepare_attachment_for_jsincludes/cmb2/includes/CMB2.php:1558
actionadmin_enqueue_scriptsincludes/cmb2/includes/CMB2.php:1576
actioncmb2_save_options-page_fieldsincludes/cmb2/includes/CMB2_Ajax.php:54
filterget_post_metadataincludes/cmb2/includes/CMB2_Ajax.php:147
filterupdate_post_metadataincludes/cmb2/includes/CMB2_Ajax.php:150
filtercmb2_show_onincludes/cmb2/includes/CMB2_Hookup.php:79
actionedit_form_topincludes/cmb2/includes/CMB2_Hookup.php:115
actionedit_form_before_permalinkincludes/cmb2/includes/CMB2_Hookup.php:119
actionedit_form_after_titleincludes/cmb2/includes/CMB2_Hookup.php:123
actionedit_form_after_editorincludes/cmb2/includes/CMB2_Hookup.php:127
actionadd_meta_boxesincludes/cmb2/includes/CMB2_Hookup.php:131
actionadd_meta_boxesincludes/cmb2/includes/CMB2_Hookup.php:134
actionadd_attachmentincludes/cmb2/includes/CMB2_Hookup.php:135
actionedit_attachmentincludes/cmb2/includes/CMB2_Hookup.php:136
actionsave_postincludes/cmb2/includes/CMB2_Hookup.php:137
actionpre_get_postsincludes/cmb2/includes/CMB2_Hookup.php:144
actionadd_meta_boxes_commentincludes/cmb2/includes/CMB2_Hookup.php:152
actionedit_commentincludes/cmb2/includes/CMB2_Hookup.php:153
filtermanage_edit-comments_columnsincludes/cmb2/includes/CMB2_Hookup.php:156
actionmanage_comments_custom_columnincludes/cmb2/includes/CMB2_Hookup.php:157
filtermanage_edit-comments_sortable_columnsincludes/cmb2/includes/CMB2_Hookup.php:158
actionpre_get_postsincludes/cmb2/includes/CMB2_Hookup.php:159
actionshow_user_profileincludes/cmb2/includes/CMB2_Hookup.php:168
actionedit_user_profileincludes/cmb2/includes/CMB2_Hookup.php:169
actionuser_new_formincludes/cmb2/includes/CMB2_Hookup.php:170
actionpersonal_options_updateincludes/cmb2/includes/CMB2_Hookup.php:172
actionedit_user_profile_updateincludes/cmb2/includes/CMB2_Hookup.php:173
actionuser_registerincludes/cmb2/includes/CMB2_Hookup.php:174
filtermanage_users_columnsincludes/cmb2/includes/CMB2_Hookup.php:177
filtermanage_users_custom_columnincludes/cmb2/includes/CMB2_Hookup.php:178
filtermanage_users_sortable_columnsincludes/cmb2/includes/CMB2_Hookup.php:179
actionpre_get_postsincludes/cmb2/includes/CMB2_Hookup.php:180
actionpre_get_postsincludes/cmb2/includes/CMB2_Hookup.php:226
actioncreated_termincludes/cmb2/includes/CMB2_Hookup.php:230
actionedited_termsincludes/cmb2/includes/CMB2_Hookup.php:231
actiondelete_termincludes/cmb2/includes/CMB2_Hookup.php:232
actioncmb2_do_oembedincludes/cmb2/includes/helper-functions.php:131
filteris_protected_metaincludes/cmb2/includes/rest-api/CMB2_REST.php:144
actioninitincludes/cmb2/init.php:131
actioncmb2_attached_posts_field_loadincludes/cmb2-attached-posts/cmb2-attached-posts-field.php:106
actionafter_setup_themeincludes/cmb2-attached-posts/cmb2-attached-posts-field.php:109
actioncmb2_initincludes/cmb2-attached-posts/example-field-setup.php:59
actioncmb2_render_custom_attached_postsincludes/cmb2-attached-posts/init.php:49
actioncmb2_pre_field_display_custom_attached_postsincludes/cmb2-attached-posts/init.php:50
actioncmb2_sanitize_custom_attached_postsincludes/cmb2-attached-posts/init.php:51
actioncmb2_attached_posts_field_add_find_posts_divincludes/cmb2-attached-posts/init.php:52
actioncmb2_after_initincludes/cmb2-attached-posts/init.php:53
actionadmin_footerincludes/cmb2-attached-posts/init.php:72
actionwp_footerincludes/cmb2-attached-posts/init.php:501
actionpre_get_usersincludes/cmb2-attached-posts/init.php:541
actionpre_get_postsincludes/cmb2-attached-posts/init.php:543
Maintenance & Trust

Automatic Actions for LearnDash Maintenance & Trust

Maintenance Signals

WordPress version tested6.0.11
Last updatedAug 10, 2022
PHP min version5.6
Downloads3K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Automatic Actions for LearnDash Developer Profile

Luis Rock

12 plugins · 1K total installs

83
trust score
Avg Security Score
84/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Automatic Actions for LearnDash

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/automatic-actions-for-learndash/assets/js/traa-admin.js
Script Paths
/wp-content/plugins/automatic-actions-for-learndash/assets/js/traa-admin.js
Version Parameters
automatic-actions-for-learndash/assets/js/traa-admin.js?ver=1.0.0

HTML / DOM Fingerprints

CSS Classes
notice-erroris-dismissible
REST Endpoints
/wp-json/wp/v2
FAQ

Frequently Asked Questions about Automatic Actions for LearnDash