Eazy CSS Slider Security & Risk Analysis

wordpress.org/plugins/eazy-css-slider

This plugin creates a custom post type for slides allowing you to use core WordPress functions and CSS to display a slider.

10 active installs v1.0.0 PHP + WP 4.2+ Updated Unknown
css-slidergalleryimage-carouselimage-sliderslider
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Eazy CSS Slider Safe to Use in 2026?

Generally Safe

Score 100/100

Eazy CSS Slider has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

The eazy-css-slider v1.0.0 plugin exhibits a mixed security posture. On the positive side, it demonstrates good practices by not utilizing dangerous functions, avoiding raw SQL queries in favor of prepared statements, and having no recorded vulnerabilities or CVEs. The absence of external HTTP requests and file operations also reduces potential attack vectors. However, a significant concern arises from the complete lack of output escaping for all identified outputs. This is a critical weakness, as it can lead to Cross-Site Scripting (XSS) vulnerabilities where malicious scripts can be injected into the website through the slider's output. The absence of nonce checks and capability checks, while not directly flagged in the current analysis, are also potential areas of concern for securing entry points, especially if the attack surface were to grow or if any of the entry points were to process user-supplied data in the future.

Key Concerns

  • All identified outputs are not properly escaped
  • No nonce checks on entry points
  • No capability checks on entry points
Vulnerabilities
None known

Eazy CSS Slider Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Eazy CSS Slider Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
16
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped16 total outputs
Attack Surface

Eazy CSS Slider Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[eazy-css-slider] eazy_css_slider_shortcode.php:3
WordPress Hooks 7
actioniniteazy_css_slider.php:58
actioniniteazy_css_slider.php:95
filtergettexteazy_css_slider.php:105
actiondo_meta_boxeseazy_css_slider.php:113
filterimage_downsizeeazy_css_slider.php:126
filterimage_downsizeeazy_css_slider.php:129
actionwp_enqueue_scriptseazy_css_slider.php:141
Maintenance & Trust

Eazy CSS Slider Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29
Last updatedUnknown
PHP min version
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Eazy CSS Slider Developer Profile

Rob Scott

8 plugins · 2K total installs

71
trust score
Avg Security Score
88/100
Avg Patch Time
99 days
View full developer profile
Detection Fingerprints

How We Detect Eazy CSS Slider

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/eazy-css-slider/css/style.css

HTML / DOM Fingerprints

CSS Classes
sliderslidefirstslidelastslidenavprevnext
Data Attributes
id="all-slides"name="radio-btn"checked="checked"
Shortcode Output
<form class="slider"<input type="radio" name="radio-btn"<div class="slide<label for="
FAQ

Frequently Asked Questions about Eazy CSS Slider