Bonboarding Security & Risk Analysis

wordpress.org/plugins/bonboarding

Create stunning product tours to enhance user adoption and engagement with Bonboarding.

10 active installs v1.0.8 PHP 8.0+ WP 4.7+ Updated Apr 17, 2025
introintroductiononboardingproduct-tourtutorial
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Bonboarding Safe to Use in 2026?

Generally Safe

Score 92/100

Bonboarding has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The "bonboarding" plugin version 1.0.8 presents a generally strong security posture based on the provided static analysis. The absence of any identified dangerous functions, file operations, or external HTTP requests is a positive indicator. Furthermore, all SQL queries are properly prepared, and a high percentage of output is correctly escaped, suggesting good development practices regarding data handling and sanitization. The lack of any recorded vulnerabilities, including CVEs, across its history is also a significant strength, implying a history of secure development or a lack of historical targeting. The very small attack surface with no identified unprotected entry points further bolsters this assessment.

Key Concerns

  • No nonce checks found
  • No capability checks found
  • 13% of outputs not properly escaped
Vulnerabilities
None known

Bonboarding Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Bonboarding Release Timeline

v1.0.8Current
v1.0.7
v1.0.6
v1.0.5
v1.0.4
v1.0.3
v1.0.2
v1.0.1
v1.0.0
Code Analysis
Analyzed Mar 17, 2026

Bonboarding Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
2
13 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

87% escaped15 total outputs
Attack Surface

Bonboarding Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 6
actionactivated_pluginbonboarding.php:40
actionwp_headintegration.php:120
actionadmin_headintegration.php:121
actionadmin_menusettings.php:9
actionadmin_initsettings.php:10
actionadmin_enqueue_scriptssettings.php:11
Maintenance & Trust

Bonboarding Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedApr 17, 2025
PHP min version8.0
Downloads2K

Community Trust

Rating100/100
Number of ratings2
Active installs10
Developer Profile

Bonboarding Developer Profile

Resurs Bank Plugins & Onboarding

2 plugins · 100 total installs

91
trust score
Avg Security Score
96/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Bonboarding

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/bonboarding/logo.svg/wp-content/plugins/bonboarding/new-tab.svg/wp-content/plugins/bonboarding/video.svg

HTML / DOM Fingerprints

CSS Classes
bonboarding-settingsflows-buttonbonboarding-settings .flexbonboarding-settings .logo-containerbonboarding-settings .flows-button-containerbonboarding-settings .flows-button imgbonboarding-settings .watch-videobonboarding-settings .watch-video img+5 more
Data Attributes
id="tutorial-video"class="thickbox watch-video"
FAQ

Frequently Asked Questions about Bonboarding