Helpful – Article Feedback Plugin Security & Risk Analysis

wordpress.org/plugins/daext-helpful

Easily add a "Was it helpful?" survey on your blog or knowledge base pages with this article feedback plugin.

600 active installs v1.14 PHP 5.3+ WP 5.0+ Updated May 7, 2025
article-feedbackfeedbackpost-ratingrate-postuser-feedback
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Helpful – Article Feedback Plugin Safe to Use in 2026?

Generally Safe

Score 100/100

Helpful – Article Feedback Plugin has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 11mo ago
Risk Assessment

The "daext-helpful" v1.14 plugin exhibits a generally strong security posture based on the provided static analysis. The plugin demonstrates good practices by implementing robust checks on its entry points, with all AJAX handlers and REST API routes properly secured by authentication and permission callbacks respectively. The extensive use of output escaping (98%) and prepared statements for SQL queries (68%) further contributes to a secure foundation. The absence of dangerous functions and external HTTP requests is also a positive indicator.

Key Concerns

  • Flows with unsanitized paths
  • SQL queries not using prepared statements
  • File operations detected
  • Bundled libraries (Select2)
Vulnerabilities
None known

Helpful – Article Feedback Plugin Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Helpful – Article Feedback Plugin Code Analysis

Dangerous Functions
0
Raw SQL Queries
15
32 prepared
Unescaped Output
11
490 escaped
Nonce Checks
6
Capability Checks
8
File Operations
1
External Requests
0
Bundled Libraries
1

Bundled Libraries

Select2

SQL Query Safety

68% prepared47 total queries

Output Escaping

98% escaped501 total outputs
Data Flows
2 unsanitized

Data Flow Analysis

4 flows2 with unsanitized paths
display_crud_menu (admin\inc\menu\class-daexthefu-menu-elements.php:1324)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Helpful – Article Feedback Plugin Attack Surface

Entry Points8
Unprotected0

AJAX Handlers 2

authwp_ajax_daexthefu_save_feedbackclass-daexthefu-ajax.php:38
noprivwp_ajax_daexthefu_save_feedbackclass-daexthefu-ajax.php:39

REST API Routes 5

POST/wp-json/daext-helpful/v1/read-options/inc\class-daexthefu-rest.php:63
POST/wp-json/daext-helpful/v1/optionsinc\class-daexthefu-rest.php:74
POST/wp-json/daext-helpful/v1/statistics/inc\class-daexthefu-rest.php:86
POST/wp-json/daext-helpful/v1/statistics-details-view/inc\class-daexthefu-rest.php:97
POST/wp-json/daext-helpful/v1/feedback/inc\class-daexthefu-rest.php:108

Shortcodes 1

[helpful] public\class-daexthefu-public.php:46
WordPress Hooks 22
actionadmin_enqueue_scriptsadmin\class-daexthefu-admin.php:78
actionadmin_enqueue_scriptsadmin\class-daexthefu-admin.php:79
actionadmin_menuadmin\class-daexthefu-admin.php:82
actionadmin_initadmin\class-daexthefu-admin.php:85
actioninitadmin\class-daexthefu-admin.php:88
actioninitadmin\class-daexthefu-admin.php:91
actionadmin_initadmin\inc\menu\class-daexthefu-menu-elements.php:125
actionadmin_initadmin\inc\menu\class-daexthefu-menu-elements.php:126
actionadmin_initadmin\inc\menu\class-daexthefu-menu-elements.php:127
actionadmin_initadmin\inc\menu\class-daexthefu-menu-elements.php:131
actionenqueue_block_editor_assetsblocks\src\init.php:63
actioninitblocks\src\init.php:90
actionrest_api_initinc\class-daexthefu-rest.php:38
actionplugins_loadedinit.php:32
actionplugins_loadedinit.php:35
actionplugins_loadedinit.php:45
actionplugins_loadedinit.php:63
actioninitinit.php:76
filterthe_contentpublic\class-daexthefu-public.php:43
actionwp_enqueue_scriptspublic\class-daexthefu-public.php:49
actionwp_enqueue_scriptspublic\class-daexthefu-public.php:52
actionregister_post_type_argspublic\class-daexthefu-public.php:55
Maintenance & Trust

Helpful – Article Feedback Plugin Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedMay 7, 2025
PHP min version5.3
Downloads9K

Community Trust

Rating88/100
Number of ratings8
Active installs600
Developer Profile

Helpful – Article Feedback Plugin Developer Profile

DAEXT

13 plugins · 30K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
101 days
View full developer profile
Detection Fingerprints

How We Detect Helpful – Article Feedback Plugin

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/daext-helpful/admin/css/admin-style.css/wp-content/plugins/daext-helpful/admin/js/admin-script.js/wp-content/plugins/daext-helpful/public/css/public-style.css/wp-content/plugins/daext-helpful/public/js/public-script.js/wp-content/plugins/daext-helpful/blocks/build/index.js
Script Paths
/wp-content/plugins/daext-helpful/admin/js/admin-script.js/wp-content/plugins/daext-helpful/public/js/public-script.js
Version Parameters
daext-helpful/admin/css/admin-style.css?ver=daext-helpful/admin/js/admin-script.js?ver=daext-helpful/public/css/public-style.css?ver=daext-helpful/public/js/public-script.js?ver=daext-helpful/blocks/build/index.js?ver=

HTML / DOM Fingerprints

CSS Classes
daexthefu-form-containerdaexthefu-yes-buttondaexthefu-no-buttondaexthefu-feedback-form
Data Attributes
data-daexthefu-id
JS Globals
daexthefu_public_params
REST Endpoints
/wp-json/daexthefu/v1/feedback
Shortcode Output
[helpful-feedback][helpful-survey]
FAQ

Frequently Asked Questions about Helpful – Article Feedback Plugin