Does UberChart – WordPress Chart Plugin have any unpatched vulnerabilities?

No. All known vulnerabilities in UberChart – WordPress Chart Plugin have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is UberChart – WordPress Chart Plugin compatible with WordPress 6.7.5?

According to WordPress.org data, UberChart – WordPress Chart Plugin 1.05 has been tested up to WordPress 6.7.5. Check the plugin's changelog for the latest compatibility information.

Is UberChart – WordPress Chart Plugin compatible with PHP 5.2+?

UberChart – WordPress Chart Plugin requires PHP 5.2 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is UberChart – WordPress Chart Plugin updated?

UberChart – WordPress Chart Plugin was last updated on Jan 31, 2025. Frequent updates are generally a positive security signal.

What is UberChart – WordPress Chart Plugin's security score?

UberChart – WordPress Chart Plugin has a WP-Safety security score of 92/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

UberChart – WordPress Chart Plugin Security & Risk Analysis

wordpress.org/plugins/daext-uberchart

UberChart brings the endless customization possibilities included in the Chart.js library to WordPress.

300 active installs v1.05 PHP 5.2+ WP 4.0+ Updated Jan 31, 2025

chartchartsgraphspievisualization

A · Safe

CVEs total0

Unpatched0

Last CVENever

Download

Safety Verdict

Is UberChart – WordPress Chart Plugin Safe to Use in 2026?

Generally Safe

Score 92/100

UberChart – WordPress Chart Plugin has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago

Risk Assessment

The daext-uberchart plugin version 1.05 demonstrates a strong security posture based on the provided static analysis and vulnerability history. The absence of known CVEs and the plugin's codebase exhibiting excellent practices in SQL prepared statements and output escaping are significant strengths. Furthermore, the analysis reveals no critical or high-severity taint flows, indicating a low risk of immediate code injection or data manipulation vulnerabilities. The presence of numerous nonce and capability checks on its entry points further bolsters its defenses, as all AJAX handlers and REST API routes appear to be properly secured.

Vulnerabilities

None known

UberChart – WordPress Chart Plugin Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

UberChart – WordPress Chart Plugin Code Analysis

Dangerous Functions

Raw SQL Queries

75 prepared

Unescaped Output

712 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

TinyMCESelect2

SQL Query Safety

83% prepared90 total queries

Output Escaping

97% escaped731 total outputs

Data Flows

All sanitized

Data Flow Analysis

9 flows

save_data (class-daextubch-ajax.php:116)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

UberChart – WordPress Chart Plugin Attack Surface

Entry Points11

Unprotected0

AJAX Handlers 10

authwp_ajax_save_dataclass-daextubch-ajax.php:42

authwp_ajax_retrieve_row_dataclass-daextubch-ajax.php:43

authwp_ajax_update_data_structureclass-daextubch-ajax.php:44

authwp_ajax_retrieve_chart_dataclass-daextubch-ajax.php:45

authwp_ajax_retrieve_chart_datasetclass-daextubch-ajax.php:46

authwp_ajax_add_remove_rowsclass-daextubch-ajax.php:47

authwp_ajax_add_remove_columnsclass-daextubch-ajax.php:48

authwp_ajax_load_modelclass-daextubch-ajax.php:49

authwp_ajax_daextubch_get_modal_window_contentclass-daextubch-ajax.php:50

authwp_ajax_daextubch_get_chart_listclass-daextubch-ajax.php:51

Shortcodes 1

[uberchart] public\class-daextubch-public.php:53

WordPress Hooks 16

actionadmin_enqueue_scriptsadmin\class-daextubch-admin.php:87

actionadmin_enqueue_scriptsadmin\class-daextubch-admin.php:88

actionadmin_headadmin\class-daextubch-admin.php:91

actionadmin_menuadmin\class-daextubch-admin.php:94

actionadmin_initadmin\class-daextubch-admin.php:101

actioninitadmin\class-daextubch-admin.php:104

actionwpmu_new_blogadmin\class-daextubch-admin.php:107

actiondelete_blogadmin\class-daextubch-admin.php:110

actioninitadmin\class-daextubch-admin.php:113

filtermce_external_pluginsadmin\class-daextubch-admin.php:1288

filtermce_buttonsadmin\class-daextubch-admin.php:1291

actionenqueue_block_editor_assetsblocks\src\init.php:59

actionplugins_loadedinit.php:28

actionplugins_loadedinit.php:34

actionplugins_loadedinit.php:49

actionwp_enqueue_scriptspublic\class-daextubch-public.php:50

Maintenance & Trust

UberChart – WordPress Chart Plugin Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5

Last updatedJan 31, 2025

PHP min version5.2

Downloads3K

Community Trust

Rating0/100

Number of ratings0

Active installs300

Alternatives

UberChart – WordPress Chart Plugin Alternatives

Visualizer: Tables and Charts Manager for WordPress

visualizer

A simple yet powerful WordPress chart plugin to effortlessly create and embed responsive charts & tables into your site, supporting multiple data …

20K 12 CVEs

Chartify – WordPress Chart Plugin

chart-builder

Chartify is a powerful WordPress Chart Builder Plugin that will help you to create WordPress Graphs & Charts easily and quickly.

4K 8 CVEs

Graphina – Charts and Graphs For Elementor

graphina-elementor-charts-and-graphs

Most Powerful Data visualization plugin for WordPress Elementor. The easiest way to build gorgeous Charts & Graphs on your Elementor website.

10K 7 CVEs

Data Diagrams: Visual Chart Editor for WordPress

data-diagrams

100

Visual Editor for 33+ free responsive SVG data charts - as easy as adding an image. No technical skills needed. Live data. No external API calls.

10 No CVEs

Easy Graphs

easy-graphs

100

This plugin allows for simple data visualization in post content. It is Multisite compatible and relies on shortcodes to render the graphs.

10 No CVEs

Developer Profile

UberChart – WordPress Chart Plugin Developer Profile

DAEXT

13 plugins · 30K total installs

trust score

Avg Security Score

99/100

Avg Patch Time

101 days

View full developer profile

Detection Fingerprints

How We Detect UberChart – WordPress Chart Plugin

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/daext-uberchart/admin/assets/css/framework/menu.css/wp-content/plugins/daext-uberchart/admin/assets/css/menu-charts.css/wp-content/plugins/daext-uberchart/admin/assets/css/jquery-ui-tooltip.css/wp-content/plugins/daext-uberchart/admin/assets/inc/handsontable/handsontable.full.min.css/wp-content/plugins/daext-uberchart/admin/assets/inc/select2/dist/css/select2.min.css/wp-content/plugins/daext-uberchart/admin/assets/css/select2-custom.css/wp-content/plugins/daext-uberchart/admin/assets/inc/spectrum/spectrum.css/wp-content/plugins/daext-uberchart/admin/assets/css/jquery-ui-dialog.css+12 more

Script Paths

/wp-content/plugins/daext-uberchart/admin/assets/js/menu-charts.js/wp-content/plugins/daext-uberchart/admin/assets/js/jquery-ui.js/wp-content/plugins/daext-uberchart/admin/assets/js/handsontable-full.min.js/wp-content/plugins/daext-uberchart/admin/assets/js/select2.min.js/wp-content/plugins/daext-uberchart/admin/assets/js/select2-custom.js/wp-content/plugins/daext-uberchart/admin/assets/inc/spectrum/spectrum.js+4 more

Version Parameters

daext-uberchart/admin/assets/css/framework/menu.css?ver=daext-uberchart/admin/assets/css/menu-charts.css?ver=daext-uberchart/admin/assets/css/jquery-ui-tooltip.css?ver=daext-uberchart/admin/assets/inc/handsontable/handsontable.full.min.css?ver=daext-uberchart/admin/assets/inc/select2/dist/css/select2.min.css?ver=daext-uberchart/admin/assets/css/select2-custom.css?ver=daext-uberchart/admin/assets/inc/spectrum/spectrum.css?ver=daext-uberchart/admin/assets/css/jquery-ui-dialog.css?ver=daext-uberchart/admin/assets/css/jquery-ui-dialog-custom.css?ver=daext-uberchart/admin/assets/js/menu-charts.js?ver=daext-uberchart/admin/assets/js/jquery-ui.js?ver=daext-uberchart/admin/assets/js/handsontable-full.min.js?ver=daext-uberchart/admin/assets/js/select2.min.js?ver=daext-uberchart/admin/assets/js/select2-custom.js?ver=daext-uberchart/admin/assets/inc/spectrum/spectrum.js?ver=daext-uberchart/admin/assets/js/tinymce-uberchart.js?ver=daext-uberchart/admin/assets/js/jquery-ui-dialog.js?ver=daext-uberchart/public/assets/css/public.css?ver=daext-uberchart/public/assets/js/public.js?ver=daext-uberchart/shared/assets/js/shared.js?ver=

HTML / DOM Fingerprints

CSS Classes

uberchart-containerdaext-uberchart-wrap

HTML Comments

<!-- Note that daextubch_nonce is used only in the uberchart\admin\assets\js\tinymce-uberchart.js file. The reason isthat using wp_add_inline_script() doesn't seem to be possible with tinymce plugins.

Data Attributes

data-daextubch-nonce

JS Globals

daextubch_nonce

FAQ