Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode Plugin Security & Risk Analysis

wordpress.org/plugins/darklup-lite-wp-dark-mode

Experience Darklup — Your WordPress ally for dark mode, dark themes, and night mode. Switch to an eye-friendly dark view.

1K active installs v3.2.15 PHP 7.4+ WP 6.5+ Updated Jan 15, 2026
dark-modedark-mode-plugindark-themewordpress-dark-modewp-dark-mode
100
A · Safe
CVEs total1
Unpatched0
Last CVEDec 16, 2022
Safety Verdict

Is Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode Plugin Safe to Use in 2026?

Generally Safe

Score 100/100

Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode Plugin has a strong security track record. Known vulnerabilities have been patched promptly.

1 known CVELast CVE: Dec 16, 2022Updated 2mo ago
Risk Assessment

The static analysis of darklup-lite-wp-dark-mode v3.2.15 indicates a generally good security posture. The plugin demonstrates strong adherence to secure coding practices by utilizing prepared statements for all SQL queries and a high percentage of proper output escaping. The absence of dangerous functions, file operations, and taint flows with unsanitized paths further contributes to its strength. Furthermore, the presence of nonce and capability checks on all identified entry points is commendable, suggesting a robust defense against common web vulnerabilities.

Key Concerns

  • Medium severity vulnerability in history
  • Bundled library (Select2)
  • External HTTP requests
Vulnerabilities
1

Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode Plugin Security Vulnerabilities

CVEs by Year

1 CVE in 2022
2022
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

Appsero <= 1.2.1 - Missing Authorization

Dec 16, 2022 Patched in 2.1.2 (699d)
Code Analysis
Analyzed Mar 16, 2026

Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode Plugin Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
91
488 escaped
Nonce Checks
4
Capability Checks
13
File Operations
0
External Requests
2
Bundled Libraries
1

Bundled Libraries

Select2

SQL Query Safety

100% prepared2 total queries

Output Escaping

84% escaped579 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
saveAdminSettings (admin\admin.php:206)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode Plugin Attack Surface

Entry Points4
Unprotected0

AJAX Handlers 2

noprivwp_ajax_darkluplite_save_admin_settingsadmin\admin.php:46
authwp_ajax_darkluplite_save_admin_settingsadmin\admin.php:47

Shortcodes 2

[darkluplite_darkmode_switch] page-builder\shortcode\class-switch-shortcode.php:20
[vc_darkluplite_darkmode_switch] page-builder\wpbakery\darkluplite-vc-init.php:25
WordPress Hooks 42
actionadmin_menuadmin\admin.php:38
actionadmin_initadmin\admin.php:39
actionadmin_enqueue_scriptsadmin\admin.php:40
actionwp_dashboard_setupadmin\admin.php:43
actionswitch_themeappsero\src\Insights.php:132
actionswitch_themeappsero\src\Insights.php:133
actionadmin_footerappsero\src\Insights.php:145
actionadmin_noticesappsero\src\Insights.php:162
actionadmin_initappsero\src\Insights.php:165
filtercron_schedulesappsero\src\Insights.php:171
actionadmin_menuappsero\src\License.php:219
actionafter_switch_themeappsero\src\License.php:774
actionswitch_themeappsero\src\License.php:775
filterpre_set_site_transient_update_pluginsappsero\src\Updater.php:51
filterplugins_apiappsero\src\Updater.php:52
filterpre_set_site_transient_update_themesappsero\src\Updater.php:61
actioninitdarklup-lite.php:67
actioninitdarklup-lite.php:97
actionelementor/widgets/widgets_registereddarklup-lite.php:102
actionwp_dashboard_setupdarklup-lite.php:107
filterstyle_loader_tagdarklup-lite.php:367
actiondarkluplite_initdarklup-lite.php:375
actionwp_enqueue_scriptsinc\class-dark-inline-css.php:30
actionlogin_enqueue_scriptsinc\class-dark-inline-css.php:31
actionadmin_enqueue_scriptsinc\class-dark-inline-css.php:32
actionwp_enqueue_scriptsinc\class-dark-inline-css220.php:30
actionlogin_enqueue_scriptsinc\class-dark-inline-css220.php:31
actionadmin_enqueue_scriptsinc\class-dark-inline-css220.php:32
actionwp_enqueue_scriptsinc\class-enqueue.php:36
actionlogin_enqueue_scriptsinc\class-enqueue.php:37
actionlogin_enqueue_scriptsinc\class-enqueue.php:38
actionwp_footerinc\class-hooks.php:42
actionlogin_footerinc\class-hooks.php:43
actionadmin_bar_menuinc\class-hooks.php:47
filterwp_nav_menu_itemsinc\class-hooks.php:54
actionwp_headinc\class-hooks.php:58
actionadmin_footerinc\class-hooks.php:59
actionelementor/controls/controls_registeredinc\custom-controls\elemenor-control\custom-control.php:20
actioninitpage-builder\gutenberg-block\darkluplite-switch-block\src\init.php:99
actionwidgets_initpage-builder\wp-widget\widget-darkmode-switch.php:159
actionvc_build_admin_pagepage-builder\wpbakery\darkluplite-vc-init.php:15
actionvc_before_initpage-builder\wpbakery\vc-darkmode-switch.php:14
Maintenance & Trust

Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode Plugin Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 15, 2026
PHP min version7.4
Downloads58K

Community Trust

Rating88/100
Number of ratings41
Active installs1K
Developer Profile

Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode Plugin Developer Profile

Darklup

1 plugin · 1K total installs

79
trust score
Avg Security Score
100/100
Avg Patch Time
699 days
View full developer profile
Detection Fingerprints

How We Detect Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode Plugin

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/darklup-lite-wp-dark-mode/admin/assets/css/darklup-admin.css/wp-content/plugins/darklup-lite-wp-dark-mode/admin/assets/js/darklup-admin.js/wp-content/plugins/darklup-lite-wp-dark-mode/assets/css/darklup-frontend.css/wp-content/plugins/darklup-lite-wp-dark-mode/assets/js/darklup-frontend.js
Script Paths
/wp-content/plugins/darklup-lite-wp-dark-mode/admin/assets/js/darklup-admin.js/wp-content/plugins/darklup-lite-wp-dark-mode/assets/js/darklup-frontend.js
Version Parameters
/wp-content/plugins/darklup-lite-wp-dark-mode/admin/assets/css/darklup-admin.css?ver=/wp-content/plugins/darklup-lite-wp-dark-mode/admin/assets/js/darklup-admin.js?ver=/wp-content/plugins/darklup-lite-wp-dark-mode/assets/css/darklup-frontend.css?ver=/wp-content/plugins/darklup-lite-wp-dark-mode/assets/js/darklup-frontend.js?ver=

HTML / DOM Fingerprints

CSS Classes
darklup-switch
JS Globals
darklup_lite_frontend_obj
FAQ

Frequently Asked Questions about Darklup – Enhanced WordPress Dark Mode, Dark Theme, Night Mode Plugin