Emoza Starter Sites Security & Risk Analysis

wordpress.org/plugins/emoza-starter-sites

Quickly import demo content for the Emoza theme and launch your site with a professional look in minutes!

80 active installs v1.0.0 PHP 7.4+ WP 4.0+ Updated Unknown
demoselementoremozaimportsites
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Emoza Starter Sites Safe to Use in 2026?

Generally Safe

Score 100/100

Emoza Starter Sites has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

The emoza-starter-sites plugin v1.0.0 exhibits a generally good security posture with several strengths. The absence of any recorded vulnerabilities (CVEs) and a clean taint analysis with zero critical or high severity flows are significant positive indicators. The code also demonstrates strong adherence to secure coding practices, with 100% of SQL queries using prepared statements and a high percentage (94%) of output escaping. Furthermore, the plugin implements a substantial number of nonce and capability checks, indicating an effort to protect against common WordPress attacks.

Key Concerns

  • AJAX handler without authentication check
Vulnerabilities
None known

Emoza Starter Sites Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Emoza Starter Sites Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
6 prepared
Unescaped Output
4
67 escaped
Nonce Checks
11
Capability Checks
13
File Operations
2
External Requests
2
Bundled Libraries
0

SQL Query Safety

100% prepared6 total queries

Output Escaping

94% escaped71 total outputs
Data Flows
All sanitized

Data Flow Analysis

1 flows
<class-demos> (core\classes\class-demos.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
1 unprotected

Emoza Starter Sites Attack Surface

Entry Points12
Unprotected1

AJAX Handlers 12

authwp_ajax_emwc_import_datacore\classes\class-demos.php:54
authwp_ajax_emwc_html_import_datacore\classes\class-demos.php:55
authwp_ajax_emwc_dismissed_handlercore\classes\class-demos.php:56
authwp_ajax_save_emwc_custom_datacore\classes\class-demos.php:58
authwp_ajax_emwc_import_startcore\classes\class-importer.php:68
authwp_ajax_emwc_import_cleancore\classes\class-importer.php:69
authwp_ajax_emwc_import_plugincore\classes\class-importer.php:70
authwp_ajax_emwc_import_contentscore\classes\class-importer.php:71
authwp_ajax_emwc_import_widgetscore\classes\class-importer.php:72
authwp_ajax_emwc_import_customizercore\classes\class-importer.php:73
authwp_ajax_emwc_import_finishcore\classes\class-importer.php:74
authwp_ajax_emwc_notice_dismissed_handlerinc\class-notice.php:19
WordPress Hooks 27
actionplugins_loadedcore\classes\class-core.php:42
actionadmin_enqueue_scriptscore\classes\class-core.php:43
actioninitcore\classes\class-demos.php:45
actioninitcore\classes\class-demos.php:46
actionadmin_noticescore\classes\class-demos.php:48
actionadmin_footercore\classes\class-demos.php:49
actionadmin_footercore\classes\class-demos.php:50
actionemwc_starter_sitescore\classes\class-demos.php:52
actionemwc_plugin_activationcore\classes\class-demos.php:60
actionemwc_plugin_deactivationcore\classes\class-demos.php:61
actionafter_setup_themecore\classes\class-importer.php:55
actionupload_mimescore\classes\class-importer.php:65
filterwp_check_filetype_and_extcore\classes\class-importer.php:66
filterwxr_importer.pre_process.usercore\classes\class-importer.php:597
filterwxr_importer.pre_process.postcore\classes\class-importer.php:600
filterwxr_importer.pre_process.postcore\classes\class-importer.php:603
filterwxr_importer.pre_process.post_metacore\classes\class-importer.php:606
filterwxr_importer.processed.postcore\classes\class-importer.php:609
filterwxr_importer.processed.termcore\classes\class-importer.php:612
filteremwc_importer.processed.attachmentcore\classes\class-importer.php:616
filterwxr_importer.pre_process.termcore\classes\class-importer.php:621
filteradd_term_metadatacore\classes\class-importer.php:622
filteremwc_register_demos_listcore\themes\emoza-woocommerce.php:61
actionemwc_finish_importcore\themes\emoza-woocommerce.php:177
filterwoocommerce_create_pagescore\themes\emoza-woocommerce.php:183
actionadmin_enqueue_scriptsinc\class-notice.php:17
actionadmin_noticesinc\class-notice.php:18
Maintenance & Trust

Emoza Starter Sites Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedUnknown
PHP min version7.4
Downloads542

Community Trust

Rating0/100
Number of ratings0
Active installs80
Developer Profile

Emoza Starter Sites Developer Profile

Emoza

2 plugins · 480 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Emoza Starter Sites

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/emoza-starter-sites/core/assets/js/pickr.min.js/wp-content/plugins/emoza-starter-sites/core/assets/js/script.min.js/wp-content/plugins/emoza-starter-sites/core/assets/css/style.min.css
Version Parameters
emoza-starter-sites/core/assets/js/pickr.min.js?ver=emoza-starter-sites/core/assets/js/script.min.js?ver=emoza-starter-sites/core/assets/css/style.min.css?ver=

HTML / DOM Fingerprints

CSS Classes
emwc-temporary-notice
Data Attributes
data-notice
JS Globals
emwc_localize
FAQ

Frequently Asked Questions about Emoza Starter Sites