Blockish Security & Risk Analysis

wordpress.org/plugins/blockish

The Blockish plugin is a collection of creative Gutenberg blocks that help you design your website with ease.

0 active installs v1.0.2 PHP 7.4+ WP 6.1+ Updated Dec 10, 2025
blocksbuilderdesigns
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Blockish Safe to Use in 2026?

Generally Safe

Score 100/100

Blockish has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The 'blockish' v1.0.2 plugin exhibits a generally strong security posture based on the provided static analysis. The absence of known CVEs and a clean vulnerability history are positive indicators. The plugin also demonstrates excellent adherence to secure coding practices, with all SQL queries utilizing prepared statements and all output being properly escaped. Furthermore, the use of nonces and capability checks is present, and there are no critical or high-severity taint analysis findings, suggesting that user-supplied data is being handled with care.

Key Concerns

  • AJAX handler without authentication check
Vulnerabilities
None known

Blockish Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Blockish Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
0
92 escaped
Nonce Checks
5
Capability Checks
6
File Operations
1
External Requests
1
Bundled Libraries
0

SQL Query Safety

100% prepared2 total queries

Output Escaping

100% escaped92 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
dci_sdk_insights (dci\insights.php:567)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
1 unprotected

Blockish Attack Surface

Entry Points3
Unprotected1

AJAX Handlers 3

authwp_ajax_dci_sdk_insightsdci\insights.php:40
authwp_ajax_dci_sdk_dismiss_noticedci\insights.php:41
authwp_ajax_dci_sdk_insights_deactivate_feedbackdci\insights.php:42
WordPress Hooks 34
actionplugins_loadedblockish.php:64
actioninitblockish.php:66
filteradmin_body_classblockish.php:127
filterbody_classblockish.php:132
actionadmin_enqueue_scriptsblockish.php:136
actionadmin_initblockish.php:226
actionadmin_enqueue_scriptsdci\insights.php:207
actionadmin_noticesdci\insights.php:215
actionadmin_noticesdci\insights.php:227
actionin_admin_headerdci\insights.php:233
actionadmin_enqueue_scriptsdci\insights.php:261
actionin_admin_headerdci\insights.php:270
actionadmin_enqueue_scriptsincludes\Admin\Admin.php:22
actionadmin_enqueue_scriptsincludes\Admin\Admin.php:23
actionrest_api_initincludes\Admin\Classes\Blocks_Settings.php:57
actionrest_api_initincludes\Admin\Classes\Dashboard.php:51
actionadmin_menuincludes\Admin\Menu.php:35
actioninitincludes\Core\Blocks.php:15
filterblock_type_metadataincludes\Core\Blocks.php:16
filterblock_categories_allincludes\Core\Blocks.php:17
actionenqueue_block_editor_assetsincludes\Core\Enqueue.php:17
actionenqueue_block_assetsincludes\Core\Enqueue.php:18
actionenqueue_block_assetsincludes\Core\Extensions.php:22
filterrender_block_dataincludes\Core\Extensions.php:23
filterrender_block_dataincludes\Core\StyleGenerator.php:19
filterrender_blockincludes\Core\StyleGenerator.php:20
actionwp_enqueue_scriptsincludes\Core\StyleGenerator.php:21
actiontemplate_redirectincludes\Core\StyleGenerator.php:23
actionsave_postincludes\Core\StyleGenerator.php:24
actiondelete_postincludes\Core\StyleGenerator.php:25
actiontrash_postincludes\Core\StyleGenerator.php:26
actionuntrash_postincludes\Core\StyleGenerator.php:27
actiondelete_attachmentincludes\Core\StyleGenerator.php:28
actionupdate_option_permalink_structureincludes\Core\StyleGenerator.php:29
Maintenance & Trust

Blockish Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 10, 2025
PHP min version7.4
Downloads361

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Blockish Developer Profile

wowDevs

7 plugins · 2K total installs

99
trust score
Avg Security Score
98/100
Avg Patch Time
6 days
View full developer profile
Detection Fingerprints

How We Detect Blockish

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/blockish/build/styles/index.css/wp-content/plugins/blockish/build/blocks/blockish-blocks.asset.php/wp-content/plugins/blockish/build/blocks/editor.css/wp-content/plugins/blockish/build/blocks/style.css/wp-content/plugins/blockish/dci/assets/css/dci.css
Script Paths
/wp-content/plugins/blockish/build/blocks/index.js
Version Parameters
blockish/build/styles/index.css?ver=blockish/build/blocks/index.js?ver=blockish/build/blocks/editor.css?ver=blockish/build/blocks/style.css?ver=dci-sdk-blockish?ver=

HTML / DOM Fingerprints

CSS Classes
blockishblockish-frontend
Data Attributes
data-blockish-id
JS Globals
window.blockish
REST Endpoints
/wp-json/dci/v1/data-insights
FAQ

Frequently Asked Questions about Blockish