ConvBoost Sticky Notification Bar Security & Risk Analysis

wordpress.org/plugins/convboost-sticky-notification-bar

Lightweight sticky top/bottom bar for promos & announcements. CTA, scheduling, exclusions, and live admin preview.

0 active installs v0.0.9 PHP 7.4+ WP 6.0+ Updated Feb 10, 2026
announcement-barbottom-barnotification-barsticky-bartop-bar
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is ConvBoost Sticky Notification Bar Safe to Use in 2026?

Generally Safe

Score 100/100

ConvBoost Sticky Notification Bar has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

Based on the provided static analysis and vulnerability history, the "convboost-sticky-notification-bar" plugin v0.0.9 exhibits a generally positive security posture. The absence of any recorded CVEs and the lack of critical or high-severity taint flows are strong indicators of a well-maintained and secure codebase. Furthermore, the plugin appears to have minimal attack surface, with no exposed AJAX handlers, REST API routes, shortcodes, or cron events, and all identified SQL queries utilize prepared statements. The presence of capability checks is also a positive sign. However, a significant concern arises from the output escaping, where only 57% of outputs are properly escaped. This indicates a potential for Cross-Site Scripting (XSS) vulnerabilities, especially if user-supplied data is being outputted without adequate sanitization in the unescaped portions. While the overall vulnerability history is clean, this specific code signal warrants attention.

Key Concerns

  • Low percentage of properly escaped outputs
Vulnerabilities
None known

ConvBoost Sticky Notification Bar Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

ConvBoost Sticky Notification Bar Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
114
151 escaped
Nonce Checks
0
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

57% escaped265 total outputs
Attack Surface

ConvBoost Sticky Notification Bar Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 7
actionplugins_loadedconvboost-sticky-notification-bar.php:30
actionadmin_menuincludes\admin.php:6
actionadmin_initincludes\admin.php:7
actionadmin_enqueue_scriptsincludes\admin.php:8
actionwp_enqueue_scriptsincludes\frontend.php:6
actionwp_body_openincludes\frontend.php:7
actionwp_footerincludes\frontend.php:8
Maintenance & Trust

ConvBoost Sticky Notification Bar Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 10, 2026
PHP min version7.4
Downloads118

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

ConvBoost Sticky Notification Bar Developer Profile

numeriweb

2 plugins · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect ConvBoost Sticky Notification Bar

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/convboost-sticky-notification-bar/assets/admin.css/wp-content/plugins/convboost-sticky-notification-bar/assets/admin.js
Script Paths
/wp-content/plugins/convboost-sticky-notification-bar/assets/admin.js
Version Parameters
convboost-sticky-notification-bar/assets/admin.css?ver=convboost-sticky-notification-bar/assets/admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
convbst-snb-admin-pageconvbst-snb-heroconvbst-snb-hero-innerconvbst-snb-hero-leftconvbst-snb-hero-titleconvbst-snb-hero-brandconvbst-snb-hero-productconvbst-snb-hero-subtitle+4 more
Data Attributes
data-convbst-snb-admin-preview
FAQ

Frequently Asked Questions about ConvBoost Sticky Notification Bar