Hockey GMS Feed Security & Risk Analysis

wordpress.org/plugins/eh-gms-feed

Use a shortcode to show fixtures, results and league tables from England Hockey Game Management System (GMS) in your posts and pages.

10 active installs v3.21 PHP 5.3+ WP + Updated Mar 21, 2026
gmshockey
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Hockey GMS Feed Safe to Use in 2026?

Generally Safe

Score 100/100

Hockey GMS Feed has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "eh-gms-feed" plugin v3.20 demonstrates a generally strong security posture based on the provided static analysis. The absence of any known CVEs, coupled with the fact that all identified SQL queries utilize prepared statements and a high percentage of output is properly escaped, indicates good development practices. The plugin also successfully implements nonce and capability checks where relevant, and importantly, has no unprotected entry points, which is a critical defense against unauthorized access. The total lack of taint analysis findings further reinforces a positive view of its internal code hygiene.

Key Concerns

  • External HTTP requests made
  • Some outputs not properly escaped (12%)
Vulnerabilities
None known

Hockey GMS Feed Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Hockey GMS Feed Release Timeline

v3.21Current
v3.20
v3.19
v3.18
v3.17
v3.16
v3.15
v3.14
v3.13
v3.12
v3.11
v3.10
v3.9
v3.8
v3.7
v3.6
v3.5
v3.4
v3.3
v3.2
Code Analysis
Analyzed Mar 16, 2026

Hockey GMS Feed Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
4
30 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
1
Bundled Libraries
0

Output Escaping

88% escaped34 total outputs
Attack Surface

Hockey GMS Feed Attack Surface

Entry Points3
Unprotected0

AJAX Handlers 2

authwp_ajax_get_gms_tableincludes\main-class.php:20
noprivwp_ajax_get_gms_tableincludes\main-class.php:21

Shortcodes 1

[gms] includes\main-class.php:18
WordPress Hooks 6
actioniniteh-gms-feed.php:29
actionadmin_initeh-gms-feed.php:31
actionadmin_noticeseh-gms-feed.php:32
actionwp_enqueue_scriptsincludes\main-class.php:19
actionadmin_initincludes\settings.php:26
actionadmin_menuincludes\settings.php:27
Maintenance & Trust

Hockey GMS Feed Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 21, 2026
PHP min version5.3
Downloads3K

Community Trust

Rating100/100
Number of ratings1
Active installs10
Developer Profile

Hockey GMS Feed Developer Profile

mtreherne

2 plugins · 1K total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Hockey GMS Feed

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/eh-gms-feed/css/style.css/wp-content/plugins/eh-gms-feed/js/main.js
Script Paths
/wp-content/plugins/eh-gms-feed/js/main.js
Version Parameters
eh-gms-feed/style.css?ver=eh-gms-feed/js/main.js?ver=

HTML / DOM Fingerprints

Data Attributes
data-club-iddata-comp-iddata-showdata-methoddata-linkdata-team+3 more
JS Globals
EH_GMS_Feed_Data
REST Endpoints
/wp-json/eh-gms-feed/v1/tables/wp-json/eh-gms-feed/v1/competitions/wp-json/eh-gms-feed/v1/teams
Shortcode Output
[gms][gms <!-- GMS Feed Start --><!-- GMS Feed End -->
FAQ

Frequently Asked Questions about Hockey GMS Feed