EasyBar Security & Risk Analysis

wordpress.org/plugins/easybar

A lightweight, pure JavaScript WordPress plugin to create and display highly customizable notification and promotion bars with countdown timers and sc …

0 active installs v1.0.0 PHP 7.2+ WP 5.9+ Updated Dec 28, 2025
announcementcountdownnotification-barpromotionsticky-bar
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is EasyBar Safe to Use in 2026?

Generally Safe

Score 100/100

EasyBar has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

Based on the static analysis and vulnerability history, the 'easybar' v1.0.0 plugin appears to have a very strong security posture. The absence of any identified attack vectors like AJAX handlers, REST API routes, shortcodes, or cron events significantly limits the plugin's exposure. Furthermore, the code signals are overwhelmingly positive, with 100% of SQL queries using prepared statements and all output properly escaped. The lack of file operations and external HTTP requests further reduces potential risks. The plugin also demonstrates good security practices with a capability check present, although the absence of nonce checks is noted. The clean vulnerability history with zero recorded CVEs reinforces the perception of a secure plugin. While the plugin exhibits excellent security fundamentals, the minimal attack surface and lack of complex functionality contribute to this positive assessment. The absence of nonces on any entry points could be a minor concern if any were present, but with zero entry points, this is not a practical risk in the current version.

Vulnerabilities
None known

EasyBar Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

EasyBar Release Timeline

v1.0.0Current
Code Analysis
Analyzed Apr 16, 2026

EasyBar Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
117 escaped
Nonce Checks
0
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped117 total outputs
Attack Surface

EasyBar Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 5
actionwp_footerinc/class-easybar-frontend.php:30
actionwp_enqueue_scriptsinc/class-easybar-frontend.php:31
actionadmin_menuinc/class-easybar-settings.php:28
actionadmin_initinc/class-easybar-settings.php:31
actionadmin_enqueue_scriptsinc/class-easybar-settings.php:34
Maintenance & Trust

EasyBar Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 28, 2025
PHP min version7.2
Downloads136

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

EasyBar Developer Profile

easylaunch

3 plugins · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect EasyBar

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/easybar/assets/css/easybar-frontend.css/wp-content/plugins/easybar/assets/js/easybar-frontend.js
Script Paths
assets/js/easybar-frontend.js
Version Parameters
easybar-frontend.css?ver=easybar-frontend.js?ver=

HTML / DOM Fingerprints

CSS Classes
easybar-containereasybar-text-wrapeasybar-timer-digiteasybar-expired-text
Data Attributes
easybar-scroll-amount
JS Globals
easybarData
FAQ

Frequently Asked Questions about EasyBar