Defer CSS Addon for BWP Minify Security & Risk Analysis

wordpress.org/plugins/defer-css-addon-for-bwp-minify

An addon for BWP Minify plugin that can defer CSS load dynamically from the footer of the page.

40 active installs v1.0 PHP + WP 3.3.2+ Updated Aug 31, 2015
csscss-deliverycss-loaddeferdefer-css
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Defer CSS Addon for BWP Minify Safe to Use in 2026?

Generally Safe

Score 85/100

Defer CSS Addon for BWP Minify has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10yr ago
Risk Assessment

The plugin 'defer-css-addon-for-bwp-minify' v1.0 exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The absence of any identified dangerous functions, raw SQL queries, file operations, or external HTTP requests is commendable. Furthermore, the complete lack of known CVEs in its history suggests a history of responsible development and maintenance. The static analysis also indicates zero attack surface entry points that are unprotected, which is a significant positive. However, a critical concern arises from the output escaping. With one total output and 0% properly escaped, this represents a significant risk for Cross-Site Scripting (XSS) vulnerabilities. Any data displayed to users, even if indirectly, could be injected with malicious scripts. The absence of nonce checks and capability checks, while not directly leading to exploitable issues in this analysis (due to the zero attack surface), can be a weakness if any entry points were to be introduced or discovered later.

Key Concerns

  • Output not properly escaped
Vulnerabilities
None known

Defer CSS Addon for BWP Minify Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Defer CSS Addon for BWP Minify Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped1 total outputs
Attack Surface

Defer CSS Addon for BWP Minify Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 4
filterbwp_get_minify_tagbwp-minify-defer-css.php:23
filterbwp_minify_get_tagbwp-minify-defer-css.php:24
actionwp_footerbwp-minify-defer-css.php:52
actionlogin_footerbwp-minify-defer-css.php:55
Maintenance & Trust

Defer CSS Addon for BWP Minify Maintenance & Trust

Maintenance Signals

WordPress version tested4.3.34
Last updatedAug 31, 2015
PHP min version
Downloads9K

Community Trust

Rating60/100
Number of ratings2
Active installs40
Developer Profile

Defer CSS Addon for BWP Minify Developer Profile

Pau Iglesias

8 plugins · 620 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Defer CSS Addon for BWP Minify

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Script Paths
/wp-content/plugins/defer-css-addon-for-bwp-minify/defer-css-addon-for-bwp-minify.php

HTML / DOM Fingerprints

HTML Comments
<!-- The code below is from "Defer CSS Addon for BWP Minify" plugin --><!-- End of "Defer CSS Addon for BWP Minify" plugin code -->
JS Globals
be_css_defer
FAQ

Frequently Asked Questions about Defer CSS Addon for BWP Minify