EmailCraft Security & Risk Analysis

wordpress.org/plugins/emailcraft

Design stunning, responsive email templates with intuitive drag-and-drop blocks. Professional results, no coding required.

0 active installs v0.0.1 PHP 7.4+ WP 6.5+ Updated Unknown
email-designemail-template-builderemail-templates
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is EmailCraft Safe to Use in 2026?

Generally Safe

Score 100/100

EmailCraft has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

Based on the provided static analysis and vulnerability history, the Emailcraft plugin v0.0.1 exhibits a generally strong security posture. The plugin has no known vulnerabilities, including no recorded CVEs, which is a significant positive indicator. The code analysis reveals a minimal attack surface with zero entry points identified, and importantly, zero unprotected entry points. This suggests a conscious effort to prevent direct unauthorized access. Furthermore, all SQL queries are using prepared statements, which is excellent practice for preventing SQL injection. Capability checks are present, further bolstering the plugin's defenses against unauthorized actions.

Key Concerns

  • Missing nonce checks on file operations
  • Improper output escaping on 1 out of 3 outputs
  • File operations without clear authorization checks
Vulnerabilities
None known

EmailCraft Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

EmailCraft Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
2 escaped
Nonce Checks
0
Capability Checks
2
File Operations
2
External Requests
0
Bundled Libraries
0

Output Escaping

67% escaped3 total outputs
Attack Surface

EmailCraft Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 15
filteremailcraft_is_test_emailapp\Http\Controllers\Admin\TestEmailController.php:26
actioninitapp\Providers\BlockServiceProvider.php:11
actionadmin_menuapp\Providers\MenuServiceProvider.php:12
actioninitapp\Providers\PostTypeServiceProvider.php:11
filterallowed_block_types_allapp\Providers\PostTypeServiceProvider.php:12
actionadmin_initapp\Providers\PostTypeServiceProvider.php:13
filterblock_categories_allapp\Providers\PostTypeServiceProvider.php:14
filteremailcraft_smarttag_tagsapp\Providers\SmartTagServiceProvider.php:12
filterwp_new_user_notification_emailapp\Providers\WpServiceProvider.php:12
filterwp_new_user_notification_email_adminapp\Providers\WpServiceProvider.php:13
filterretrieve_password_notification_emailapp\Providers\WpServiceProvider.php:14
filterpassword_change_emailapp\Providers\WpServiceProvider.php:15
filterwp_password_change_notification_emailapp\Providers\WpServiceProvider.php:16
filteremail_change_emailapp\Providers\WpServiceProvider.php:17
actionplugins_loadedemailcraft.php:53
Maintenance & Trust

EmailCraft Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedUnknown
PHP min version7.4
Downloads161

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

EmailCraft Developer Profile

Crafium

3 plugins · 1K total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect EmailCraft

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/emailcraft/app/View/email.php/wp-content/plugins/emailcraft/app/templates/default/welcome/content.txt/wp-content/plugins/emailcraft/app/templates/default/welcome/settings.json

HTML / DOM Fingerprints

HTML Comments
<!-- Default welcome template --><!-- Default user registration template -->
JS Globals
emailcraft
REST Endpoints
/wp-json/emailcraft/v1/templates/wp-json/emailcraft/v1/templates/store/wp-json/emailcraft/v1/templates/(?P<id>\d+)/status
FAQ

Frequently Asked Questions about EmailCraft