Easy TikTok Feed – TikTok Video, Feed & Gallery Plugin Security & Risk Analysis

wordpress.org/plugins/easy-tiktok-feed

Embed TikTok feeds in WordPress — responsive, SEO-ready, and monetization-friendly. No coding or tokens needed.

90 active installs v2.0.0 PHP 7.4+ WP + Updated Jul 2, 2025
embed-tiktoktiktoktiktok-feedtiktok-videotiktok-widget
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Easy TikTok Feed – TikTok Video, Feed & Gallery Plugin Safe to Use in 2026?

Generally Safe

Score 100/100

Easy TikTok Feed – TikTok Video, Feed & Gallery Plugin has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9mo ago
Risk Assessment

The easy-tiktok-feed plugin version 2.0.0 exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The absence of dangerous functions, SQL injection vulnerabilities, and file operations is highly positive. Furthermore, the overwhelming majority of output is properly escaped, and SQL queries utilize prepared statements, indicating good development practices in these critical areas. The plugin also demonstrates a reasonable number of capability checks and a single nonce check, suggesting some effort towards securing its entry points. The vulnerability history being entirely clean is a significant strength.

Key Concerns

  • REST API route without permission callback
  • Bundled Freemius v1.0 library
Vulnerabilities
None known

Easy TikTok Feed – TikTok Video, Feed & Gallery Plugin Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Easy TikTok Feed – TikTok Video, Feed & Gallery Plugin Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
38 escaped
Nonce Checks
1
Capability Checks
7
File Operations
0
External Requests
4
Bundled Libraries
1

Bundled Libraries

Freemius1.0

Output Escaping

97% escaped39 total outputs
Attack Surface
1 unprotected

Easy TikTok Feed – TikTok Video, Feed & Gallery Plugin Attack Surface

Entry Points21
Unprotected1

AJAX Handlers 1

authwp_ajax_etf_dismiss_noticesrc\Admin\AdminNotices.php:30

REST API Routes 18

GET/wp-json/easy-tiktok-feed/v1/feedssrc\Admin\RestApi\Endpoints\FeedsEndpoint.php:23
GET/wp-json/easy-tiktok-feed/v1/feeds/(?P<id>\d+)src\Admin\RestApi\Endpoints\FeedsEndpoint.php:39
POST/wp-json/easy-tiktok-feed/v1/feedssrc\Admin\RestApi\Endpoints\FeedsEndpoint.php:61
PUT/wp-json/easy-tiktok-feed/v1/feeds/(?P<id>\d+)src\Admin\RestApi\Endpoints\FeedsEndpoint.php:81
POST/wp-json/easy-tiktok-feed/v1/feeds/(?P<id>\d+)/clear-cachesrc\Admin\RestApi\Endpoints\FeedsEndpoint.php:100
POST/wp-json/easy-tiktok-feed/v1/feeds/(?P<id>\d+)/duplicatesrc\Admin\RestApi\Endpoints\FeedsEndpoint.php:111
GET/wp-json/easy-tiktok-feed/v1/freemius-statussrc\Admin\RestApi\Endpoints\FreemiusEndpoint.php:23
GET/wp-json/easy-tiktok-feed/v1/settingssrc\Admin\RestApi\Endpoints\SettingsEndpoint.php:29
POST/wp-json/easy-tiktok-feed/v1/settingssrc\Admin\RestApi\Endpoints\SettingsEndpoint.php:40
GET/wp-json/easy-tiktok-feed/v1/tiktok-accountssrc\Admin\RestApi\Endpoints\TikTokAccountsEndpoint.php:23
POST/wp-json/easy-tiktok-feed/v1/tiktok-accountssrc\Admin\RestApi\Endpoints\TikTokAccountsEndpoint.php:39
DELETE/wp-json/easy-tiktok-feed/v1/tiktok-accounts/(?P<id>\d+)src\Admin\RestApi\Endpoints\TikTokAccountsEndpoint.php:58
GET/wp-json/easy-tiktok-feed/v1/tiktok-accounts/(?P<id>\d+)/feeds-countsrc\Admin\RestApi\Endpoints\TikTokAccountsEndpoint.php:70
POST/wp-json/easy-tiktok-feed/v1/tiktok-accounts/(?P<id>\d+)/refresh-tokensrc\Admin\RestApi\Endpoints\TikTokAccountsEndpoint.php:82
POST/wp-json/easy-tiktok-feed/v1/tiktok-accounts/(?P<id>\d+)/revokesrc\Admin\RestApi\Endpoints\TikTokAccountsEndpoint.php:94
POST/wp-json/easy-tiktok-feed/v1/tiktok-accounts/(?P<id>\d+)/sync-feedssrc\Admin\RestApi\Endpoints\TikTokAccountsEndpoint.php:106
GET/wp-json/easy-tiktok-feed/v1/tiktok-videos/(?P<id>\d+)src\Admin\RestApi\Endpoints\TikTokVideosEndpoint.php:24
POST/wp-json/easy-tiktok-feed/v1/tiktok-videos/(?P<id>\d+)/syncsrc\Admin\RestApi\Endpoints\TikTokVideosEndpoint.php:41

Shortcodes 2

[easy_tiktok_feed] src\Frontend\Frontend.php:29
[easy_tiktok_feed] src\Frontend\Shortcodes\ShortcodeManager.php:28
WordPress Hooks 23
actionadmin_initeasy-tiktok-feed.php:47
actionadmin_noticeseasy-tiktok-feed.php:56
actionadmin_initeasy-tiktok-feed.php:166
actionadmin_noticessrc\Admin\AdminNotices.php:28
actionadmin_enqueue_scriptssrc\Admin\AdminNotices.php:29
actionadmin_menusrc\Admin\AdminPage.php:28
actionadmin_enqueue_scriptssrc\Admin\AdminPage.php:29
filtersubmenu_filesrc\Admin\AdminPage.php:30
filterscript_loader_tagsrc\Admin\AdminPage.php:140
filterscript_loader_tagsrc\Admin\AdminPage.php:162
filterscript_loader_tagsrc\Admin\AdminPage.php:184
actioninitsrc\Core\FeedPostType.php:37
actionadmin_noticessrc\Core\Plugin.php:91
actionadmin_noticessrc\Core\Plugin.php:104
actionadmin_noticessrc\Core\Plugin.php:115
actionadmin_enqueue_scriptssrc\Core\Plugin.php:202
actionrest_api_initsrc\Core\Plugin.php:268
actioninitsrc\Core\TikTokAccountsPostType.php:37
actionetf_refresh_tokens_cronsrc\Core\TokenRefresher.php:43
actioninitsrc\Core\TokenRefresher.php:46
actionwp_enqueue_scriptssrc\Frontend\Frontend.php:28
actionwp_enqueue_scriptssrc\Frontend\Shortcodes\ShortcodeManager.php:29
filterscript_loader_tagsrc\Frontend\Shortcodes\ShortcodeManager.php:48

Scheduled Events 1

etf_refresh_tokens_cron
Maintenance & Trust

Easy TikTok Feed – TikTok Video, Feed & Gallery Plugin Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedJul 2, 2025
PHP min version7.4
Downloads6K

Community Trust

Rating20/100
Number of ratings1
Active installs90
Developer Profile

Easy TikTok Feed – TikTok Video, Feed & Gallery Plugin Developer Profile

maltathemes

2 plugins · 120 total installs

89
trust score
Avg Security Score
93/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Easy TikTok Feed – TikTok Video, Feed & Gallery Plugin

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/easy-tiktok-feed/assets/admin-notices.css/wp-content/plugins/easy-tiktok-feed/assets/admin-notices.js/wp-content/plugins/easy-tiktok-feed/assets/images/etf-tiktok-icon.svg
Script Paths
/wp-content/plugins/easy-tiktok-feed/vendor/freemius/wordpress-sdk/start.php
Version Parameters
easy-tiktok-feed/assets/admin-notices.css?ver=easy-tiktok-feed/assets/admin-notices.js?ver=

HTML / DOM Fingerprints

CSS Classes
etf-noticeetf-notice-contentetf-notice-iconetf-notice-message
Data Attributes
data-nonce
JS Globals
etfNotices
REST Endpoints
/wp-json/etf_dismiss_notice
FAQ

Frequently Asked Questions about Easy TikTok Feed – TikTok Video, Feed & Gallery Plugin