Display PHP Version Security & Risk Analysis

wordpress.org/plugins/display-php-version

Displays the currently installed PHP/MySQL version in the "At a Glance" admin dashboard widget.

30K active installs v1.8 PHP + WP 3.0+ Updated May 16, 2023
admindashboardserversupportversion
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Display PHP Version Safe to Use in 2026?

Generally Safe

Score 85/100

Display PHP Version has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2yr ago
Risk Assessment

The "display-php-version" v1.8 plugin exhibits an excellent security posture based on the provided static analysis. The absence of any detected AJAX handlers, REST API routes, shortcodes, or cron events significantly limits the plugin's attack surface. Furthermore, the code analysis reveals no dangerous functions, all SQL queries are properly prepared, and all outputs are correctly escaped. The plugin also has no file operations, external HTTP requests, or any reliance on bundled libraries, further reducing potential vulnerabilities. The taint analysis also shows no identified flows with unsanitized paths, indicating no critical or high-severity risks in this regard.

The vulnerability history is equally impressive, with zero known CVEs, unpatched vulnerabilities, or common vulnerability types recorded. This consistent lack of past security issues suggests a well-maintained and secure codebase. The plugin's strengths lie in its minimal footprint and adherence to secure coding practices, effectively mitigating common attack vectors.

In conclusion, based on the provided data, the "display-php-version" v1.8 plugin appears to be highly secure. There are no identified weaknesses or areas of concern in the static analysis or vulnerability history. It demonstrates a proactive approach to security, making it a low-risk plugin.

Vulnerabilities
None known

Display PHP Version Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Display PHP Version Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Display PHP Version Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
actionadmin_enqueue_scriptsdisplay-php-version.php:48
filterplugin_action_links_display-php-version/display-php-version.phpdisplay-php-version.php:51
Maintenance & Trust

Display PHP Version Maintenance & Trust

Maintenance Signals

WordPress version tested6.2.9
Last updatedMay 16, 2023
PHP min version
Downloads500K

Community Trust

Rating98/100
Number of ratings35
Active installs30K
Developer Profile

Display PHP Version Developer Profile

David Gwyer

11 plugins · 109K total installs

69
trust score
Avg Security Score
86/100
Avg Patch Time
156 days
View full developer profile
Detection Fingerprints

How We Detect Display PHP Version

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/display-php-version/dpv.js
Script Paths
/wp-content/plugins/display-php-version/dpv.js
Version Parameters
display-php-version/dpv.js?ver=

HTML / DOM Fingerprints

JS Globals
dpvObj
FAQ

Frequently Asked Questions about Display PHP Version