ez Schedule Manager Security & Risk Analysis

wordpress.org/plugins/ez-schedule-manager-free

ez Schedule Manager is a WordPress plugin which allows you to manage incoming schedule requests.

40 active installs v1.1 PHP + WP 3.7+ Updated May 20, 2015
bookingbooking-datebooking-requestbooking-timecontact
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is ez Schedule Manager Safe to Use in 2026?

Generally Safe

Score 85/100

ez Schedule Manager has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10yr ago
Risk Assessment

The "ez-schedule-manager-free" v1.1 plugin presents a mixed security posture. While it boasts a clean vulnerability history with no recorded CVEs, indicating past diligence or a lack of discovery, the static analysis reveals significant areas of concern. The presence of three unprotected AJAX handlers significantly expands the attack surface, making it susceptible to unauthorized actions if these endpoints can be triggered by malicious actors. Furthermore, the taint analysis highlights two high-severity flows with unsanitized paths, which could potentially lead to security vulnerabilities if exploited.

Key Concerns

  • Unprotected AJAX handlers
  • High severity taint flows (unsanitized paths)
  • Low rate of output escaping
  • Limited nonce checks
Vulnerabilities
None known

ez Schedule Manager Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

ez Schedule Manager Code Analysis

Dangerous Functions
0
Raw SQL Queries
10
19 prepared
Unescaped Output
64
2 escaped
Nonce Checks
1
Capability Checks
7
File Operations
2
External Requests
0
Bundled Libraries
1

Bundled Libraries

jQuery

SQL Query Safety

66% prepared29 total queries

Output Escaping

3% escaped66 total outputs
Data Flows
3 unsanitized

Data Flow Analysis

3 flows3 with unsanitized paths
<ezscm-page-settings> (ezscm-page-settings.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
3 unprotected

ez Schedule Manager Attack Surface

Entry Points4
Unprotected3

AJAX Handlers 3

authwp_ajax_ezscm_backendezscm.php:20
authwp_ajax_ezscm_frontendezscm.php:21
noprivwp_ajax_ezscm_frontendezscm.php:22

Shortcodes 1

[ezscm] ezscm.php:228
WordPress Hooks 5
actionadmin_menuezscm.php:17
actionwp_headezscm.php:18
actioninitezscm.php:19
actioninitezscm.php:230
actionwp_footerezscm.php:231
Maintenance & Trust

ez Schedule Manager Maintenance & Trust

Maintenance Signals

WordPress version tested4.2.39
Last updatedMay 20, 2015
PHP min version
Downloads5K

Community Trust

Rating100/100
Number of ratings1
Active installs40
Developer Profile

ez Schedule Manager Developer Profile

ezPlugins

2 plugins · 60 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect ez Schedule Manager

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/ez-schedule-manager-free/style-backend.css/wp-content/plugins/ez-schedule-manager-free/assets/css/bootstrap-grid.min.css/wp-content/plugins/ez-schedule-manager-free/assets/css/jquery-ui-smoothness.min.css/wp-content/plugins/ez-schedule-manager-free/assets/css/jquery.timepicker.css/wp-content/plugins/ez-schedule-manager-free/assets/css/opentip.css/wp-content/plugins/ez-schedule-manager-free/assets/css/font-awesome.min.css/wp-content/plugins/ez-schedule-manager-free/assets/js/jquery.scrollTo.min.js/wp-content/plugins/ez-schedule-manager-free/assets/js/moment.min.js+6 more
Script Paths
/wp-content/plugins/ez-schedule-manager-free/assets/js/jquery.scrollTo.min.js/wp-content/plugins/ez-schedule-manager-free/assets/js/moment.min.js/wp-content/plugins/ez-schedule-manager-free/assets/js/jquery.timepicker.min.js/wp-content/plugins/ez-schedule-manager-free/assets/js/opentip-jquery.min.js/wp-content/plugins/ez-schedule-manager-free/backend.min.js/wp-content/plugins/ez-schedule-manager-free/backend-options.js+2 more
Version Parameters
/wp-content/plugins/ez-schedule-manager-free/style-backend.css?ver=/wp-content/plugins/ez-schedule-manager-free/backend.min.js?ver=/wp-content/plugins/ez-schedule-manager-free/backend-options.js?ver=/wp-content/plugins/ez-schedule-manager-free/frontend.min.js?ver=

HTML / DOM Fingerprints

CSS Classes
ezscm-calendarezscm-schedule-list
HTML Comments
<!-- ezscm-main-wrapper --><!-- ezscm-header --><!-- ezscm-content --><!-- ezscm-footer -->+1 more
Data Attributes
data-ezscm-schedule-iddata-ezscm-entry-id
JS Globals
ezscm_ajaxurlezscm_form_vars
FAQ

Frequently Asked Questions about ez Schedule Manager