Birthday Bash Security & Risk Analysis

wordpress.org/plugins/birthday-bash

Make WooCommerce customers happy by automatically sending birthday coupons. It’s an easy way to boost loyalty and bring them back to shop again.

10 active installs v1.0.0 PHP + WP 6.4+ Updated Jul 24, 2025
birthdaycouponsdiscountmarketingwoocommerce
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Birthday Bash Safe to Use in 2026?

Generally Safe

Score 100/100

Birthday Bash has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8mo ago
Risk Assessment

The "birthday-bash" plugin v1.0.0 demonstrates a generally strong security posture based on the provided static analysis. The absence of shortcodes, REST API routes, and particularly the fact that all three AJAX handlers have authentication checks are positive indicators. The code also shows good practices regarding SQL queries, with 92% using prepared statements, and output escaping, with 91% properly escaped. The lack of file operations and external HTTP requests further reduces the attack surface. The complete absence of known CVEs and a clean vulnerability history is also a significant strength.

Vulnerabilities
None known

Birthday Bash Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Birthday Bash Code Analysis

Dangerous Functions
0
Raw SQL Queries
1
12 prepared
Unescaped Output
11
106 escaped
Nonce Checks
11
Capability Checks
2
File Operations
0
External Requests
1
Bundled Libraries
0

SQL Query Safety

92% prepared13 total queries

Output Escaping

91% escaped117 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
add_birthday_fields_to_registration_form (includes\frontend\class-birthday-bash-registration.php:34)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Birthday Bash Attack Surface

Entry Points3
Unprotected0

AJAX Handlers 3

authwp_ajax_birthday_bash_deactivation_feedbackincludes\admin\class-birthday-bash-deactivation-feedback.php:25
authwp_ajax_birthday_bash_save_birthday_block_freeincludes\frontend\class-birthday-bash-gutenberg-blocks-free.php:25
noprivwp_ajax_birthday_bash_save_birthday_block_freeincludes\frontend\class-birthday-bash-gutenberg-blocks-free.php:26
WordPress Hooks 31
actionbefore_woocommerce_initbirthday-bash.php:25
actionadmin_noticesbirthday-bash.php:33
actionwoocommerce_loadedbirthday-bash.php:49
actionpersonal_options_updateincludes\admin\class-birthday-bash-admin.php:23
actionedit_user_profile_updateincludes\admin\class-birthday-bash-admin.php:24
actionshow_user_profileincludes\admin\class-birthday-bash-admin.php:25
actionedit_user_profileincludes\admin\class-birthday-bash-admin.php:26
actionadmin_enqueue_scriptsincludes\admin\class-birthday-bash-deactivation-feedback.php:23
actionadmin_footerincludes\admin\class-birthday-bash-deactivation-feedback.php:24
actionadmin_initincludes\admin\class-birthday-bash-settings.php:23
actionadmin_enqueue_scriptsincludes\admin\class-birthday-bash-settings.php:25
actionplugins_loadedincludes\class-birthday-bash.php:74
actionadmin_menuincludes\class-birthday-bash.php:75
actionadmin_enqueue_scriptsincludes\class-birthday-bash.php:76
actionwp_enqueue_scriptsincludes\class-birthday-bash.php:77
filterwoocommerce_email_classesincludes\class-birthday-bash.php:79
actionwpincludes\common\class-birthday-bash-cron.php:23
actionbirthday_bash_daily_cronincludes\common\class-birthday-bash-cron.php:24
actionwoocommerce_checkout_before_customer_detailsincludes\frontend\class-birthday-bash-checkout.php:23
actionwoocommerce_checkout_update_user_metaincludes\frontend\class-birthday-bash-checkout.php:25
actionwoocommerce_checkout_update_customer_dataincludes\frontend\class-birthday-bash-checkout.php:27
actionwoocommerce_checkout_processincludes\frontend\class-birthday-bash-checkout.php:29
actionwoocommerce_checkout_create_orderincludes\frontend\class-birthday-bash-checkout.php:31
actionwoocommerce_before_cartincludes\frontend\class-birthday-bash-frontend.php:23
actioninitincludes\frontend\class-birthday-bash-gutenberg-blocks-free.php:23
actionenqueue_block_editor_assetsincludes\frontend\class-birthday-bash-gutenberg-blocks-free.php:24
actionwoocommerce_edit_account_formincludes\frontend\class-birthday-bash-my-account.php:23
actionwoocommerce_save_account_detailsincludes\frontend\class-birthday-bash-my-account.php:26
actionregister_formincludes\frontend\class-birthday-bash-registration.php:24
filterregistration_errorsincludes\frontend\class-birthday-bash-registration.php:26
actionuser_registerincludes\frontend\class-birthday-bash-registration.php:28

Scheduled Events 2

birthday_bash_daily_cron
birthday_bash_daily_cron
Maintenance & Trust

Birthday Bash Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedJul 24, 2025
PHP min version
Downloads297

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Birthday Bash Developer Profile

Pamir

1 plugin · 10 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Birthday Bash

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/birthday-bash/assets/css/deactivation-feedback.css
Script Paths
/wp-content/plugins/birthday-bash/assets/js/deactivation-feedback.js
Version Parameters
birthday-bash/assets/css/deactivation-feedback.css?ver=birthday-bash/assets/js/deactivation-feedback.js?ver=

HTML / DOM Fingerprints

CSS Classes
birthday-bash-modal-contentbirthday-bash-reasonsbirthday-bash-deactivation-form
Data Attributes
id="birthday-bash-deactivation-modal"id="birthday-bash-deactivation-form"
JS Globals
birthday_bash_deactivation_vars
REST Endpoints
/wp-json/birthday-bash/v1/feedback
FAQ

Frequently Asked Questions about Birthday Bash