Card Elements for WPBakery Security & Risk Analysis

wordpress.org/plugins/card-elements-for-wpbakery

Showcase useful elements with card style for WPBakery page builder.

500 active installs v1.0.8 PHP 8.0+ WP 4.4+ Updated Apr 22, 2025
card-elements-moduleprofile-moduletestimonial-modulewpbakerywpbakery-addon
78
B · Generally Safe
CVEs total1
Unpatched1
Last CVESep 22, 2025
Safety Verdict

Is Card Elements for WPBakery Safe to Use in 2026?

Mostly Safe

Score 78/100

Card Elements for WPBakery is generally safe to use. 1 past CVE were resolved. Keep it updated.

1 known CVE 1 unpatched Last CVE: Sep 22, 2025Updated 11mo ago
Risk Assessment

The plugin 'card-elements-for-wpbakery' v1.0.8 exhibits a generally positive security posture based on the static analysis, with a very high percentage of properly escaped outputs and no detected SQL queries without prepared statements. The attack surface is small and, crucially, all identified entry points (shortcodes) appear to have capability checks, which is a strong security practice. Furthermore, the absence of dangerous functions, file operations, external HTTP requests, and critical taint flows suggests a well-written codebase with limited potential for common web vulnerabilities.

Key Concerns

  • Unpatched medium severity CVE
  • No nonce checks on shortcodes
Vulnerabilities
1

Card Elements for WPBakery Security Vulnerabilities

CVEs by Year

1 CVE in 2025 · unpatched
2025
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2025-58220medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Card Elements for WPBakery <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Sep 22, 2025Unpatched
Code Analysis
Analyzed Mar 16, 2026

Card Elements for WPBakery Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
9
1159 escaped
Nonce Checks
0
Capability Checks
3
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

99% escaped1168 total outputs
Attack Surface

Card Elements for WPBakery Attack Surface

Entry Points3
Unprotected0

Shortcodes 3

[cewb_post_card_layout] widgets\post-card-widget.php:115
[cewb_profile_card_layout] widgets\profile-card-widget.php:92
[cewb_testimonial_card_layout] widgets\testimonial-card-widget.php:58
WordPress Hooks 13
actioninitcard-elements-for-wpbakery.php:42
actioninitcard-elements-for-wpbakery.php:44
actionplugins_loadedcard-elements-for-wpbakery.php:54
actionwp_enqueue_scriptscard-elements-for-wpbakery.php:55
actionadmin_noticescard-elements-for-wpbakery.php:94
actionadmin_noticescard-elements-for-wpbakery.php:100
filterinitinclude\iconpicker-support.php:14
filtervc_after_initinclude\iconpicker-support.php:83
filtervc_iconpicker-type-fontawesomeinclude\iconpicker-support.php:105
actionvc_base_register_admin_cssinclude\iconpicker-support.php:118
actionvc_backend_editor_enqueue_js_cssinclude\iconpicker-support.php:129
actionvc_frontend_editor_enqueue_js_cssinclude\iconpicker-support.php:130
actionvc_enqueue_font_icon_elementinclude\iconpicker-support.php:143
Maintenance & Trust

Card Elements for WPBakery Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedApr 22, 2025
PHP min version8.0
Downloads8K

Community Trust

Rating100/100
Number of ratings1
Active installs500
Developer Profile

Card Elements for WPBakery Developer Profile

Techeshta

8 plugins · 6K total installs

98
trust score
Avg Security Score
97/100
Avg Patch Time
5 days
View full developer profile
Detection Fingerprints

How We Detect Card Elements for WPBakery

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/card-elements-for-wpbakery/assets/css/vc-number.css/wp-content/plugins/card-elements-for-wpbakery/assets/css/common-card-style.css/wp-content/plugins/card-elements-for-wpbakery/assets/css/post-card-style.css/wp-content/plugins/card-elements-for-wpbakery/assets/css/profile-card-style.css/wp-content/plugins/card-elements-for-wpbakery/assets/css/testimonial-card-style.css/wp-content/plugins/card-elements-for-wpbakery/assets/css/animate.css
Script Paths
/wp-content/plugins/card-elements-for-wpbakery/assets/js/fontawesome-icon.js
Version Parameters
card-elements-for-wpbakery/assets/css/vc-number.css?ver=card-elements-for-wpbakery/assets/css/common-card-style.css?ver=card-elements-for-wpbakery/assets/css/post-card-style.css?ver=card-elements-for-wpbakery/assets/css/profile-card-style.css?ver=card-elements-for-wpbakery/assets/css/testimonial-card-style.css?ver=card-elements-for-wpbakery/assets/css/animate.css?ver=card-elements-for-wpbakery/assets/js/fontawesome-icon.js?ver=

HTML / DOM Fingerprints

CSS Classes
cewb-custom-numbercewb-common-card-stylecewb-post-card-stylecewb-profile-card-stylecewb-testimonial-card-stylecewb-animate-stylefontawesome-icon
JS Globals
fontawesome_icon
FAQ

Frequently Asked Questions about Card Elements for WPBakery