Easy Voice Mail Security & Risk Analysis

wordpress.org/plugins/easy-voice-mail

Provides a simpler, more efficient way for your client to contact you and express their needs via voice mail.

100 active installs v1.2.6 PHP 5.6.20+ WP 6.2+ Updated Feb 23, 2026
audiocontact-formmicrophonerecordvoice
99
A · Safe
CVEs total1
Unpatched0
Last CVEFeb 13, 2026
Safety Verdict

Is Easy Voice Mail Safe to Use in 2026?

Generally Safe

Score 99/100

Easy Voice Mail has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.

1 known CVELast CVE: Feb 13, 2026Updated 6mo ago
Risk Assessment

The 'easy-voice-mail' plugin v1.2.6 demonstrates a strong security posture in its current static analysis. All SQL queries are properly prepared, output is fully escaped, and there are no detected file operations or external HTTP requests, which are common vectors for vulnerabilities. The absence of critical or high-severity taint flows is also a positive indicator. The plugin also implements a reasonable number of nonce checks and has no identified dangerous functions, further bolstering its defensive coding practices.

Key Concerns

  • One medium severity CVE in history
  • No capability checks on any entry points
Vulnerabilities
1 published

Easy Voice Mail Security Vulnerabilities

CVEs by Year

1 CVE in 2026
2026
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2026-1164medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Easy Voice Mail <= 1.2.5 - Unauthenticated Stored Cross-Site Scripting via 'message'

Feb 13, 2026 Patched in 1.2.6 (21d)
Version History

Easy Voice Mail Release Timeline

v1.2.6Current
Code Analysis
Analyzed Mar 16, 2026

Easy Voice Mail Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
8 prepared
Unescaped Output
0
45 escaped
Nonce Checks
4
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared8 total queries

Output Escaping

100% escaped45 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

2 flows
easy_voice_mail_admin (admin\easy-voice-mail-admin.php:11)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Easy Voice Mail Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[easy_voice_mail] easy-voice-mail.php:24
WordPress Hooks 1
actionadmin_menuadmin\easy-voice-mail-admin.php:9
Maintenance & Trust

Easy Voice Mail Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.5
Last updatedFeb 23, 2026
PHP min version5.6.20
Downloads5K

Community Trust

Rating100/100
Number of ratings4
Active installs100
Developer Profile

Easy Voice Mail Developer Profile

Phoenix Studio

1 plugin · 100 total installs

93
trust score
Avg Security Score
99/100
Avg Patch Time
21 days
View full developer profile
Detection Fingerprints

How We Detect Easy Voice Mail

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/easy-voice-mail/css/easy-voice-mail.css/wp-content/plugins/easy-voice-mail/js/easy-voice-mail.js
Script Paths
/wp-content/plugins/easy-voice-mail/js/easy-voice-mail.js
Version Parameters
easy-voice-mail/css/easy-voice-mail.css?ver=easy-voice-mail/js/easy-voice-mail.js?ver=

HTML / DOM Fingerprints

CSS Classes
easy-voice-mail-wrap
HTML Comments
Easy Voice MailEasy Voice MailEasy Voice MailEasy Voice Mail
Data Attributes
data-current_pagedata-next_pagedata-max_duration_minutesdata-max_duration_secondsdata-show_countdowndata-show_description+10 more
JS Globals
easy_voice_mail_data
Shortcode Output
[easy_voice_mail]
FAQ

Frequently Asked Questions about Easy Voice Mail