Does sermon.net display have any unpatched vulnerabilities?

No. All known vulnerabilities in sermon.net display have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is sermon.net display compatible with WordPress 6.8.5?

According to WordPress.org data, sermon.net display 1.4.4 has been tested up to WordPress 6.8.5. Check the plugin's changelog for the latest compatibility information.

How often is sermon.net display updated?

sermon.net display was last updated on Apr 28, 2025. Frequent updates are generally a positive security signal.

What is sermon.net display's security score?

sermon.net display has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

sermon.net display Security & Risk Analysis

wordpress.org/plugins/display-sermonnet

A plugin that brings in your sermon.net data (sermon audio, sermon video, pdf, and live stream) for display on your WordPress website.

80 active installs v1.4.4 PHP + WP 5.5+ Updated Apr 28, 2025

live-streamlive-stream-worshiplive-streamingsermon-feedsermon-shortcode

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is sermon.net display Safe to Use in 2026?

Generally Safe

Score 100/100

sermon.net display has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 11mo ago

Risk Assessment

The plugin "display-sermonnet" v1.4.4 presents a mixed security posture. On the positive side, it demonstrates good practices by exclusively using prepared statements for SQL queries and has no recorded historical vulnerabilities. The absence of dangerous functions, file operations, and critical taint flows is also reassuring. However, significant concerns arise from its attack surface and output escaping practices. With a total of 3 entry points, one AJAX handler is left unprotected, posing a direct risk. Furthermore, a low proper output escaping rate of 26% indicates a high likelihood of cross-site scripting (XSS) vulnerabilities, especially when combined with the unprotected AJAX handler.

Key Concerns

Unprotected AJAX handler
Low output escaping (26%)
No nonce checks on AJAX
No capability checks

Vulnerabilities

None known

sermon.net display Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

sermon.net display Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

22 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

26% escaped84 total outputs

Attack Surface

1 unprotected

sermon.net display Attack Surface

Entry Points3

Unprotected1

AJAX Handlers 1

authwp_ajax_getTheContentincludes\block-shortcodes.php:7

Shortcodes 2

[wt_sermonnet_live] includes\shortcodes.php:5

[wt_sermonnet_list] includes\shortcodes.php:90

WordPress Hooks 13

actionenqueue_block_editor_assetsincludes\block-shortcodes.php:6

actionenqueue_block_editor_assetsincludes\gb-live-shortcodes.php:2

actionadmin_menuincludes\options.php:7

filtermedia_upload_tabsincludes\shortcodes.php:46

actionmedia_upload_wt_sermonnet_live_tabincludes\shortcodes.php:54

filtermedia_upload_tabsincludes\shortcodes.php:237

actionmedia_upload_wt_sermonnet_tabincludes\shortcodes.php:245

actionwidgets_initincludes\widgets.php:11

actionwp_enqueue_scriptswt-sermonnet.php:41

actionwp_footerwt-sermonnet.php:42

actionadmin_initwt-sermonnet.php:62

actionadmin_initwt-sermonnet.php:77

actionadmin_noticeswt-sermonnet.php:99

Maintenance & Trust

sermon.net display Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5

Last updatedApr 28, 2025

PHP min version

Downloads0

Community Trust

Rating100/100

Number of ratings1

Active installs80

Alternatives

sermon.net display Alternatives

Instant Indexing for Google

fast-indexing-api

100

A very efficient yet simple plugin to take care of your indexing woos and helps get your content crawled by search bots instantly.

200K No CVEs

WpStream – Live Streaming, Video on Demand, Pay Per View

wpstream

WpStream is a Video Streaming Plugin that lets you broadcast live events and helps you sell tickets or recordings via WooCommerce.

4K 4 CVEs

Castio.live – WordPress Live Streaming (HLS) + Real‑Time Chat

castio-live

100

WordPress live streaming via browser-based HLS. Go live from the admin—no OBS, no RTMP, no external services. Auto viewer page with HLS player and bui …

20 No CVEs

Aabir Indexing Api

aabir-indexing-api

100

Aabir indexing api helps get your website content crawled by search bots instantly. Job posting or livestreaming video pages are indexed by indexing a …

0 No CVEs

Easy Embed for Social Media Wall

easy-embed-for-social-media

Embed Facebook Videos, Posts and Live Status easily. Customise your Facebook Wall and display on your page with easy-to-use Shortcodes.

0 No CVEs

Developer Profile

sermon.net display Developer Profile

Michael

4 plugins · 280 total installs

trust score

Avg Security Score

92/100

Avg Patch Time

1 days

View full developer profile

Detection Fingerprints

How We Detect sermon.net display

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/display-sermonnet/includes/style.css

Script Paths

/wp-content/plugins/display-sermonnet/sermon-block.js

HTML / DOM Fingerprints

CSS Classes

wt_select_sermonnet_form

Data Attributes

data-sermonnet-iddata-sermonnet-namedata-sermonnet-playlistsdata-sermonnet-num

JS Globals

wtsermonnet_add_script

Shortcode Output

[display_sermonnet]

FAQ