Extra User Data Security & Risk Analysis

wordpress.org/plugins/extra-user-data

Add extra columns to the Users screen - number of comments and all post types, registration & login dates and IP addresses.

70 active installs v0.14 PHP + WP 3.8+ Updated Apr 9, 2024
more-user-columnsnumber-commentstotal-postsuser-datauser-info
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Extra User Data Safe to Use in 2026?

Generally Safe

Score 92/100

Extra User Data has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The extra-user-data v0.14 plugin exhibits a generally strong security posture based on the provided static analysis. The absence of identified dangerous functions, external HTTP requests, and file operations is commendable. Furthermore, all detected SQL queries utilize prepared statements, and output is properly escaped, mitigating common vulnerabilities like SQL injection and cross-site scripting (XSS). The plugin's attack surface is also zero, indicating no publicly exposed entry points like AJAX handlers, REST API routes, or shortcodes that could be directly targeted by attackers without authentication or permission checks.

Key Concerns

  • High severity unsanitized path flow
  • Missing capability checks
  • Missing nonce checks
Vulnerabilities
None known

Extra User Data Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Extra User Data Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
4 prepared
Unescaped Output
0
2 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared4 total queries

Output Escaping

100% escaped2 total outputs
Data Flows
1 unsanitized

Data Flow Analysis

1 flows1 with unsanitized paths
<extra-user-data> (extra-user-data.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Extra User Data Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 9
actionuser_registerextra-user-data.php:18
actionwp_loginextra-user-data.php:19
filtermanage_users_columnsextra-user-data.php:23
filtermanage_users_custom_columnextra-user-data.php:24
filtermanage_users_sortable_columnsextra-user-data.php:25
filterpre_user_queryextra-user-data.php:26
actionadmin_footerextra-user-data.php:29
actionadmin_headextra-user-data.php:36
actionadmin_footerextra-user-data.php:37
Maintenance & Trust

Extra User Data Maintenance & Trust

Maintenance Signals

WordPress version tested6.5.8
Last updatedApr 9, 2024
PHP min version
Downloads4K

Community Trust

Rating90/100
Number of ratings6
Active installs70
Developer Profile

Extra User Data Developer Profile

keith_wp

10 plugins · 300 total installs

91
trust score
Avg Security Score
95/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Extra User Data

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/extra-user-data/languages/wp-content/plugins/extra-user-data/extra-user-data.php
Version Parameters
extra-user-data/style.css?ver=extra-user-data/extra-user-data.php?ver=

HTML / DOM Fingerprints

CSS Classes
ip-highlightcomment-count-pendingcomment-count-approved
Data Attributes
title="Comments"title="Total Logins"title="IP: title="title=href="mailto:+1 more
Shortcode Output
<li><b></b>: </li>
FAQ

Frequently Asked Questions about Extra User Data