Does Core Web Vitals Monitor – Track your Page Speed & Load Times for Real Users have any unpatched vulnerabilities?

No. All known vulnerabilities in Core Web Vitals Monitor – Track your Page Speed & Load Times for Real Users have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Core Web Vitals Monitor – Track your Page Speed & Load Times for Real Users compatible with WordPress 6.1.10?

According to WordPress.org data, Core Web Vitals Monitor – Track your Page Speed & Load Times for Real Users 1.0.0 has been tested up to WordPress 6.1.10. Check the plugin's changelog for the latest compatibility information.

Core Web Vitals Monitor – Track your Page Speed & Load Times for Real Users Security & Risk Analysis

wordpress.org/plugins/core-web-vitals-monitor

Track page load times & core web vitals for real users who visit your site.

30 active installs v1.0.0 PHP 7.4.0+ WP 5.2+ Updated Feb 15, 2023

core-web-vitalslargest-contentful-paintload-timespage-loadpage-speed

A · Safe

CVEs total0

Unpatched0

Last CVENever

Download

Safety Verdict

Is Core Web Vitals Monitor – Track your Page Speed & Load Times for Real Users Safe to Use in 2026?

Generally Safe

Score 85/100

Core Web Vitals Monitor – Track your Page Speed & Load Times for Real Users has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3yr ago

Risk Assessment

Based on the provided static analysis and vulnerability history, the 'core-web-vitals-monitor' plugin version 1.0.0 exhibits a strong initial security posture. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events means there are no apparent entry points for attackers to exploit directly through these common plugin vectors. Furthermore, the code analysis reveals no dangerous functions, all SQL queries utilize prepared statements, output is properly escaped, and there are no file operations or external HTTP requests. The lack of any recorded vulnerabilities, including CVEs of any severity, is also a very positive indicator.

Vulnerabilities

None known

Core Web Vitals Monitor – Track your Page Speed & Load Times for Real Users Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

Core Web Vitals Monitor – Track your Page Speed & Load Times for Real Users Code Analysis

Dangerous Functions

Raw SQL Queries

9 prepared

Unescaped Output

2 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

100% prepared9 total queries

Output Escaping

100% escaped2 total outputs

Attack Surface

Core Web Vitals Monitor – Track your Page Speed & Load Times for Real Users Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 10

actioninitcorewebvitalsmonitor.php:40

actioninitcorewebvitalsmonitor.php:43

actionadmin_initcorewebvitalsmonitor.php:44

actionrest_api_initcorewebvitalsmonitor.php:45

actionwp_dashboard_setupsrc\class-admin-dashboard.php:8

actionwp_enqueue_scriptssrc\class-assets-manager.php:10

actionadmin_enqueue_scriptssrc\class-assets-manager.php:11

actionenqueue_block_editor_assetssrc\class-assets-manager.php:12

filterscript_loader_tagsrc\class-assets-manager.php:57

actionadd_meta_boxessrc\class-metabox.php:9

Maintenance & Trust

Core Web Vitals Monitor – Track your Page Speed & Load Times for Real Users Maintenance & Trust

Maintenance Signals

WordPress version tested6.1.10

Last updatedFeb 15, 2023

PHP min version7.4.0

Downloads1K

Community Trust

Rating0/100

Number of ratings0

Active installs30

Alternatives

Core Web Vitals Monitor – Track your Page Speed & Load Times for Real Users Alternatives

NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization

nitropack

Boost site speed and performance with an all-in-one cache and speed optimization plugin. Pass Core Web Vitals with CDN, image optimization, lazy loadi …

100K 6 CVEs

Solid Performance – Your No-Code Caching, Performance, & Page Speed Solution

solid-performance

100

Solid Performance is a no-code solution for increasing the page performance of your WordPress website.

3K No CVEs

LCP Booster for WooCommerce

lcp-booster-for-woocommerce

Preloads main product image in the WooCommerce product page.

100 No CVEs

Bandwidth Saver: Image CDN

bandwidth-saver

100

Image CDN for WordPress. Serve images from 300+ global edge servers. Faster Core Web Vitals, better SEO. $9.99/mo.

0 No CVEs

Cirv Pulse

cirv-pulse

100

Real-time Core Web Vitals monitoring inside WordPress. Track LCP, INP, CLS and get actionable performance recommendations without leaving your dashboa …

0 No CVEs

Developer Profile

Core Web Vitals Monitor – Track your Page Speed & Load Times for Real Users Developer Profile

WRD Studio

2 plugins · 30 total installs

trust score

Avg Security Score

85/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Core Web Vitals Monitor – Track your Page Speed & Load Times for Real Users

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/core-web-vitals-monitor/assets/scripts/dist/public.js/wp-content/plugins/core-web-vitals-monitor/assets/scripts/dist/admin.js

Script Paths