Database Operations Security & Risk Analysis

wordpress.org/plugins/database-operations

Database Operations Plugin. Display MY_SQL tables and perform MY_SQL set operation.

0 active installs v2.9.9 PHP 5.2.4+ WP 4.6+ Updated Jul 25, 2019
databasedatabase-operationsdbmysqlquery
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Database Operations Safe to Use in 2026?

Generally Safe

Score 85/100

Database Operations has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 6yr ago
Risk Assessment

The "database-operations" plugin v2.9.9 exhibits a generally strong security posture, primarily due to its adherence to secure coding practices. The plugin demonstrates an excellent track record with zero known vulnerabilities, indicating a history of diligent security maintenance and proactive patching. The static analysis results further bolster this impression, showing no critical or high severity taint flows and a complete absence of dangerous functions. All SQL queries are properly prepared, and there are no file operations or external HTTP requests, significantly reducing potential attack vectors. A single nonce check is present, which is a positive sign for input validation.

Key Concerns

  • Output escaping is not fully comprehensive
  • No capability checks on entry points
Vulnerabilities
None known

Database Operations Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Database Operations Release Timeline

v2.9.9Current
v2.9.5
v2.5.8
v2.5.7
v2.5.6
v1.9.0
v1.6.2
v1.6.1
v1.6
v1.5
v1.0
Code Analysis
Analyzed Apr 16, 2026

Database Operations Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
7 prepared
Unescaped Output
11
17 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared7 total queries

Output Escaping

61% escaped28 total outputs
Attack Surface

Database Operations Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[database_operations] public/class-database-operations-public.php:105
WordPress Hooks 11
actionplugins_loadedincludes/class-database-operations.php:114
actionadmin_enqueue_scriptsincludes/class-database-operations.php:129
actionadmin_enqueue_scriptsincludes/class-database-operations.php:130
actioninitincludes/class-database-operations.php:132
actionadd_meta_boxesincludes/class-database-operations.php:133
actionsave_postincludes/class-database-operations.php:134
filtermanage_edit-ct_ms_columnsincludes/class-database-operations.php:136
actionmanage_ct_ms_posts_custom_columnincludes/class-database-operations.php:137
actionwp_enqueue_scriptsincludes/class-database-operations.php:151
actionwp_enqueue_scriptsincludes/class-database-operations.php:152
actioninitincludes/class-database-operations.php:153
Maintenance & Trust

Database Operations Maintenance & Trust

Maintenance Signals

WordPress version tested5.2.24
Last updatedJul 25, 2019
PHP min version5.2.4
Downloads2K

Community Trust

Rating100/100
Number of ratings1
Active installs0
Developer Profile

Database Operations Developer Profile

devjoe2016

1 plugin · 0 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Database Operations

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/database-operations/css/database-operations-admin.css/wp-content/plugins/database-operations/css/db_wp_charts.css/wp-content/plugins/database-operations/js/Chart.min.js/wp-content/plugins/database-operations/js/db_wp_charts.js/wp-content/plugins/database-operations/js/database-operations-admin.js/wp-content/plugins/database-operations/js/db_wp_charts_init.js/wp-content/plugins/database-operations/js/db_wp_charts_admin.js
Script Paths
js/Chart.min.jsjs/db_wp_charts.jsjs/db_wp_charts_init.jsjs/db_wp_charts_admin.js
Version Parameters
database-operations-admin.css?ver=database-operations-admin.js?ver=db_wp_charts.js?ver=

HTML / DOM Fingerprints

CSS Classes
wp-block-database-operations-database-operations
HTML Comments
This function is provided for demonstration purposes only.An instance of this class should be passed to the run() functiondefined in Database_Operations_Loader as all of the hooks are definedin that particular class.+3 more
Data Attributes
data-block="database-operations/database-operations"
JS Globals
PWPC_CHARTS_VERSIONdb_wp_charts_initdb_wp_charts_admin
REST Endpoints
/wp-json/database-operations/v1/settings
Shortcode Output
[display_db_table][select_db_table][union_db_table]
FAQ

Frequently Asked Questions about Database Operations