Dreamfoxmedia Helpspot live lookup Security & Risk Analysis

wordpress.org/plugins/dreamfox-helpspot-live-lookup

This plugin makes it possible to load user details in helpspot helpdesk software with the live lookup function.

0 active installs v1.2 PHP + WP 4.5+ Updated Apr 3, 2020
dreamfoxmediafreehelpspotlivelookup
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Dreamfoxmedia Helpspot live lookup Safe to Use in 2026?

Generally Safe

Score 85/100

Dreamfoxmedia Helpspot live lookup has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 6yr ago
Risk Assessment

The "dreamfox-helpspot-live-lookup" plugin version 1.2 exhibits a generally good security posture based on the provided static analysis and vulnerability history. The absence of known CVEs, critical taint flows, dangerous functions, and direct SQL queries is a positive indicator. The code also demonstrates some good practices such as using prepared statements for its single SQL query and performing capability checks.

Key Concerns

  • Output escaping is only 27% proper
  • No nonce checks implemented
  • One external HTTP request without context
Vulnerabilities
None known

Dreamfoxmedia Helpspot live lookup Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Dreamfoxmedia Helpspot live lookup Release Timeline

v1.2Current
v1.1
v1.0
Code Analysis
Analyzed Apr 16, 2026

Dreamfoxmedia Helpspot live lookup Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
1 prepared
Unescaped Output
45
17 escaped
Nonce Checks
0
Capability Checks
2
File Operations
0
External Requests
1
Bundled Libraries
0

SQL Query Safety

100% prepared1 total queries

Output Escaping

27% escaped62 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

2 flows
helpdesk_options_page (dreamfoxmedia-helpspot-live-lookup.php:118)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Dreamfoxmedia Helpspot live lookup Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 3
actioninitdreamfoxmedia-helpspot-live-lookup.php:101
actionadmin_enqueue_scriptsdreamfoxmedia-helpspot-live-lookup.php:111
actionadmin_menudreamfoxmedia-helpspot-live-lookup.php:116
Maintenance & Trust

Dreamfoxmedia Helpspot live lookup Maintenance & Trust

Maintenance Signals

WordPress version tested5.4.19
Last updatedApr 3, 2020
PHP min version
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Dreamfoxmedia Helpspot live lookup Developer Profile

dreamfox

6 plugins · 410 total installs

84
trust score
Avg Security Score
94/100
Avg Patch Time
87 days
View full developer profile
Detection Fingerprints

How We Detect Dreamfoxmedia Helpspot live lookup

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/dreamfox-helpspot-live-lookup/css/style.css/wp-content/plugins/dreamfox-helpspot-live-lookup/js/dd_horizontal_tabs.js
Script Paths
js/dd_horizontal_tabs.js
Version Parameters
dreamfox-helpspot-live-lookup/style.css?ver=dd_horizontal_tabs.js?ver=

HTML / DOM Fingerprints

CSS Classes
horz_tabswrap-mc-paidleft-dd-paidleft_box_containerright-dd-paid
HTML Comments
<!-- Helpspot live lookup for Wordpress is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 2 of the License, or any later version. --><!-- Helpspot live lookup for Wordpress is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. --><!-- You should have received a copy of the GNU General Public License along with Helpspot live lookup for Wordpress. If not, see https://dreamfoxmedia.com to your plugin license). -->
Data Attributes
data-plugin-namedata-plugin-versiondata-plugin-details
JS Globals
window.dreamfox_dd_versionvar dreamfox_dd_version
Shortcode Output
<livelookup version="1.0" columns="customer_id,first_name,last_name,email"><customer><customer_id><first_name>
FAQ

Frequently Asked Questions about Dreamfoxmedia Helpspot live lookup