Events Search For The Events Calendar Security & Risk Analysis

wordpress.org/plugins/events-search-addon-for-the-events-calendar

Adds an AJAX-based events search bar on any page via shortcode to quickly find any upcoming event created with The Events Calendar plugin.

3K active installs v1.3.4 PHP 5.6+ WP 5.0+ Updated Mar 10, 2026
ajax-searchevent-calendareventslive-searchthe-events-calendar
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Events Search For The Events Calendar Safe to Use in 2026?

Generally Safe

Score 100/100

Events Search For The Events Calendar has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 24d ago
Risk Assessment

The "events-search-addon-for-the-events-calendar" plugin version 1.3.4 exhibits a generally strong security posture with several good practices in place. The plugin successfully uses prepared statements for all its SQL queries, indicating a conscious effort to prevent SQL injection vulnerabilities. Furthermore, the vast majority of its output (93%) is properly escaped, which is crucial for mitigating Cross-Site Scripting (XSS) attacks. The complete absence of known CVEs and critical or high severity taint analysis results further bolsters this positive assessment, suggesting a mature and well-maintained codebase with no readily apparent exploitable flaws in its history.

Key Concerns

  • AJAX handlers without authentication checks
  • Small attack surface with unprotected entry points
Vulnerabilities
None known

Events Search For The Events Calendar Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Events Search For The Events Calendar Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
1 prepared
Unescaped Output
26
343 escaped
Nonce Checks
5
Capability Checks
11
File Operations
1
External Requests
2
Bundled Libraries
0

SQL Query Safety

100% prepared1 total queries

Output Escaping

93% escaped369 total outputs
Data Flows
All sanitized

Data Flow Analysis

1 flows
<events-addon-page> (admin\events-addon-page\events-addon-page.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
2 unprotected

Events Search For The Events Calendar Attack Surface

Entry Points6
Unprotected2

AJAX Handlers 5

authwp_ajax_cpfm_handle_opt_inadmin\cpfm-feedback\cpfm-feedback-notice.php:13
authwp_ajax_ect_dashboard_install_pluginadmin\events-addon-page\events-addon-page.php:57
authwp_ajax_ecsa_dismiss_noticeadmin\feedback-notice\ecsa-feedback-notice.php:13
authwp_ajax_ecsa_search_dataevents-calendar-search-addon.php:65
noprivwp_ajax_ecsa_search_dataevents-calendar-search-addon.php:66

Shortcodes 1

[events-calendar-search] events-calendar-search-addon.php:64
WordPress Hooks 19
actionadmin_initadmin\cpfm-feedback\cpfm-feedback-notice.php:11
actionadmin_enqueue_scriptsadmin\cpfm-feedback\cpfm-feedback-notice.php:12
actionadmin_footeradmin\cpfm-feedback\cpfm-feedback-notice.php:15
filtercron_schedulesadmin\cpfm-feedback\cron\class-cron.php:12
actionecsa_extra_data_updateadmin\cpfm-feedback\cron\class-cron.php:13
actionadmin_menuadmin\events-addon-page\events-addon-page.php:56
actionadmin_enqueue_scriptsadmin\events-addon-page\events-addon-page.php:58
actionadmin_enqueue_scriptsadmin\feedback\admin-feedback-form.php:21
actionadmin_headadmin\feedback\admin-feedback-form.php:22
actionect_display_admin_noticesadmin\feedback-notice\ecsa-feedback-notice.php:12
actioninitevents-calendar-search-addon.php:60
actionplugins_loadedevents-calendar-search-addon.php:61
actionplugins_loadedevents-calendar-search-addon.php:62
actionwp_enqueue_scriptsevents-calendar-search-addon.php:63
actionadmin_print_scriptsevents-calendar-search-addon.php:67
actionadmin_noticesevents-calendar-search-addon.php:167
actioncpfm_register_noticeevents-calendar-search-addon.php:207
actioncpfm_after_opt_in_ecsaevents-calendar-search-addon.php:230
actionwidgets_initincludes\ecsa-widget.php:8

Scheduled Events 2

ecsa_extra_data_update
ecsa_extra_data_update
Maintenance & Trust

Events Search For The Events Calendar Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 10, 2026
PHP min version5.6
Downloads77K

Community Trust

Rating94/100
Number of ratings27
Active installs3K
Developer Profile

Events Search For The Events Calendar Developer Profile

CoolHappy

12 plugins · 210K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
203 days
View full developer profile
Detection Fingerprints

How We Detect Events Search For The Events Calendar

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/events-search-addon-for-the-events-calendar/assets/css/ecsa-search-style.css/wp-content/plugins/events-search-addon-for-the-events-calendar/assets/js/ecsa-search-script.js/wp-content/plugins/events-search-addon-for-the-events-calendar/assets/css/ecsa-search-layout-medium.css/wp-content/plugins/events-search-addon-for-the-events-calendar/assets/css/ecsa-search-layout-advance.css/wp-content/plugins/events-search-addon-for-the-events-calendar/assets/css/ecsa-search-layout-classic.css/wp-content/plugins/events-search-addon-for-the-events-calendar/assets/js/ecsa-search-jquery.min.js/wp-content/plugins/events-search-addon-for-the-events-calendar/assets/js/ecsa-search-select2.full.min.js/wp-content/plugins/events-search-addon-for-the-events-calendar/assets/js/ecsa-search-app.js
Script Paths
/wp-content/plugins/events-search-addon-for-the-events-calendar/assets/js/ecsa-search-script.js/wp-content/plugins/events-search-addon-for-the-events-calendar/assets/js/ecsa-search-app.js
Version Parameters
events-search-addon-for-the-events-calendar/assets/css/ecsa-search-style.css?ver=events-search-addon-for-the-events-calendar/assets/js/ecsa-search-script.js?ver=events-search-addon-for-the-events-calendar/assets/css/ecsa-search-layout-medium.css?ver=events-search-addon-for-the-events-calendar/assets/css/ecsa-search-layout-advance.css?ver=events-search-addon-for-the-events-calendar/assets/css/ecsa-search-layout-classic.css?ver=events-search-addon-for-the-events-calendar/assets/js/ecsa-search-jquery.min.js?ver=events-search-addon-for-the-events-calendar/assets/js/ecsa-search-select2.full.min.js?ver=events-search-addon-for-the-events-calendar/assets/js/ecsa-search-app.js?ver=

HTML / DOM Fingerprints

CSS Classes
ecsa-search-wrapecsa-search-boxecsa-search-resultsecsa-event-titleecsa-event-dateecsa-event-excerpt
HTML Comments
<!-- Widget Search --><!-- End Widget Search --><!-- End Search Section --><!-- Start Search Section -->
Data Attributes
data-placeholderdata-show-eventsdata-disable-past-eventsdata-layoutdata-content-typedata-ajax-url
JS Globals
ecsa_ajax_object
REST Endpoints
/wp-json/ecsa/v1/search
Shortcode Output
[events-calendar-search
FAQ

Frequently Asked Questions about Events Search For The Events Calendar