Formcraft Utility Security & Risk Analysis

wordpress.org/plugins/formcraft-utility

FormCraft Utility addon prevents users from submitting duplicate emails, duplicate input values and inline javascript and html injection.

50 active installs v1.0 PHP + WP 3.0.1+ Updated Nov 18, 2016
formcraftformsregister
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Formcraft Utility Safe to Use in 2026?

Generally Safe

Score 85/100

Formcraft Utility has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9yr ago
Risk Assessment

The 'formcraft-utility' v1.0 plugin exhibits an exceptionally clean static analysis report, indicating strong adherence to secure coding practices. The absence of any identified entry points, dangerous functions, file operations, external HTTP requests, or vulnerability flows suggests a well-hardened codebase. The fact that all SQL queries, though only one is present, are properly escaped and all outputs are escaped further reinforces this positive assessment. Furthermore, the plugin's history is entirely free of recorded vulnerabilities, which is a significant strength. This lack of historical issues suggests either meticulous development or a relatively low profile which has not attracted attacks. However, the complete absence of nonce and capability checks, combined with zero attack surface entry points, might be a statistical anomaly rather than a deliberate security feature. While the current state is highly secure based on the provided data, it's worth noting that a truly robust security posture often involves explicit checks, even if the attack surface appears minimal. In conclusion, 'formcraft-utility' v1.0 appears to be a very secure plugin according to this analysis, with no immediate threats identified. Its strengths lie in its clean code and lack of historical vulnerabilities.

Key Concerns

  • Missing nonce checks
  • Missing capability checks
  • SQL queries not using prepared statements
Vulnerabilities
None known

Formcraft Utility Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Formcraft Utility Code Analysis

Dangerous Functions
0
Raw SQL Queries
1
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

0% prepared1 total queries
Attack Surface

Formcraft Utility Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
actionformcraft_before_saveformcraft_utility.php:13
Maintenance & Trust

Formcraft Utility Maintenance & Trust

Maintenance Signals

WordPress version tested4.6.30
Last updatedNov 18, 2016
PHP min version
Downloads3K

Community Trust

Rating100/100
Number of ratings1
Active installs50
Developer Profile

Formcraft Utility Developer Profile

ferozjaf

2 plugins · 60 total installs

89
trust score
Avg Security Score
93/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Formcraft Utility

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Formcraft Utility