FitCalc – BMI Calculator Security & Risk Analysis

wordpress.org/plugins/fitcalc-bmi-calculator

Lightweight BMI calculator with Metric and Imperial units. Use the shortcode [fitcalc_bmi].

20 active installs v1.0.7 PHP 7.4+ WP 5.2+ Updated Aug 20, 2025
bmicalculatorfitnesshealthweight
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is FitCalc – BMI Calculator Safe to Use in 2026?

Generally Safe

Score 100/100

FitCalc – BMI Calculator has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7mo ago
Risk Assessment

The 'fitcalc-bmi-calculator' plugin v1.0.7 demonstrates a generally strong security posture based on the provided static analysis. The absence of dangerous functions, SQL queries without prepared statements, unescaped output, file operations, and external HTTP requests is highly commendable. Furthermore, the plugin does not appear to have any recorded vulnerabilities, indicating a history of responsible development and maintenance. The limited attack surface, consisting solely of a single shortcode with no apparent authentication or capability checks, is a notable concern. While the static analysis did not identify any specific vulnerabilities in this shortcode, its presence as an unprotected entry point warrants careful monitoring. The lack of taint analysis results is also unusual, making it difficult to assess the potential for data manipulation through user-supplied input.

Key Concerns

  • Shortcode without auth/capability checks
  • No nonce checks
  • No capability checks
  • No taint analysis results
Vulnerabilities
None known

FitCalc – BMI Calculator Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

FitCalc – BMI Calculator Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

FitCalc – BMI Calculator Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[fitcalc_bmi] fitcalc-bmi-calculator.php:68
WordPress Hooks 2
actionplugins_loadedfitcalc-bmi-calculator.php:23
actionwp_enqueue_scriptsfitcalc-bmi-calculator.php:28
Maintenance & Trust

FitCalc – BMI Calculator Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedAug 20, 2025
PHP min version7.4
Downloads233

Community Trust

Rating0/100
Number of ratings0
Active installs20
Developer Profile

FitCalc – BMI Calculator Developer Profile

Adnan Shahid

2 plugins · 20 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect FitCalc – BMI Calculator

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/fitcalc-bmi-calculator/assets/css/style.css/wp-content/plugins/fitcalc-bmi-calculator/assets/js/fitcalc-script.js
Script Paths
/wp-content/plugins/fitcalc-bmi-calculator/assets/js/fitcalc-script.js
Version Parameters
fitcalc-bmi-calculator/assets/css/style.css?ver=fitcalc-bmi-calculator/assets/js/fitcalc-script.js?ver=

HTML / DOM Fingerprints

JS Globals
FITCALC_BMI_I18N
Shortcode Output
<!-- BMI Calculator Form -->
FAQ

Frequently Asked Questions about FitCalc – BMI Calculator