Favorite Links Security & Risk Analysis

wordpress.org/plugins/favorite-links

Increase your productivity by adding favorite links to the wp-admin bar. Customize favorite links per user.

10 active installs v1.0.1 PHP + WP 3.0.1+ Updated Oct 13, 2016
adminadmin-favorite-linksfavorite-linksfavorite-links-wp-adminwp-admin
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Favorite Links Safe to Use in 2026?

Generally Safe

Score 85/100

Favorite Links has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9yr ago
Risk Assessment

The favorite-links plugin v1.0.1 exhibits a generally good security posture based on the provided static analysis. The absence of known CVEs and a clean vulnerability history suggest it has been well-maintained or has not historically presented significant security flaws. The plugin also demonstrates strong adherence to secure coding practices, with 100% of SQL queries using prepared statements and a single nonce check present. This indicates a proactive approach to preventing common vulnerabilities like SQL injection and cross-site request forgery.

Key Concerns

  • Low percentage of properly escaped output
  • No capability checks on AJAX handlers
Vulnerabilities
None known

Favorite Links Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Favorite Links Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
9
2 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

18% escaped11 total outputs
Attack Surface

Favorite Links Attack Surface

Entry Points1
Unprotected0

AJAX Handlers 1

authwp_ajax_wpfl_update_favorite_linkswp-favorite-links.php:157
WordPress Hooks 7
actionadmin_enqueue_scriptswp-favorite-links.php:56
actionadmin_bar_menuwp-favorite-links.php:119
actionadmin_menuwp-favorite-links.php:131
filterpost_row_actionswp-favorite-links.php:204
filterpage_row_actionswp-favorite-links.php:205
filteruser_row_actionswp-favorite-links.php:206
filtermedia_row_actionswp-favorite-links.php:207
Maintenance & Trust

Favorite Links Maintenance & Trust

Maintenance Signals

WordPress version tested3.4.2
Last updatedOct 13, 2016
PHP min version
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Favorite Links Developer Profile

Ahmad Karim

3 plugins · 310 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Favorite Links

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/favorite-links/assets/css/styles.css/wp-content/plugins/favorite-links/assets/js/scripts-general.js/wp-content/plugins/favorite-links/assets/js/scripts-options-page.js
Script Paths
/wp-content/plugins/favorite-links/assets/js/scripts-general.js/wp-content/plugins/favorite-links/assets/js/scripts-options-page.js
Version Parameters
favorite-links/assets/css/styles.css?ver=favorite-links/assets/js/scripts-general.js?ver=favorite-links/assets/js/scripts-options-page.js?ver=

HTML / DOM Fingerprints

CSS Classes
wpfl_favorite_links_wrapwpfl-linkfavorite-linksempty_linksfavorite_links_list_wrapwpfl_loading_iconauto_update_chk_labelmanual_update_chk+11 more
HTML Comments
<!-- ... -->
Data Attributes
data-titledata-countdata-href
JS Globals
wpfl_ajax_urlwpfl_nonce
REST Endpoints
/wp-json/wpfl/v1/update-links
FAQ

Frequently Asked Questions about Favorite Links