Free SMS OTP Verification for Gravity Forms By Firebase Security & Risk Analysis

wordpress.org/plugins/free-sms-verification-for-gravity-forms

The best free SMS verification plugin for Gravity Forms, Verify users numbers before submitting the forms.

200 active installs v1.0.8 PHP 5.6+ WP 4.7+ Updated Mar 10, 2021
form-sms-otpgraivty-forms-otpgravity-forms-firebasegravity-forms-smsgravity-forms-verification
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Free SMS OTP Verification for Gravity Forms By Firebase Safe to Use in 2026?

Generally Safe

Score 85/100

Free SMS OTP Verification for Gravity Forms By Firebase has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 5yr ago
Risk Assessment

The plugin 'free-sms-verification-for-gravity-forms' v1.0.8 exhibits a generally good security posture based on the provided static analysis. The absence of detected dangerous functions, the exclusive use of prepared statements for SQL queries, and the high percentage of properly escaped output are all positive indicators. Furthermore, the lack of known CVEs and a clean vulnerability history suggest a history of secure development.

Key Concerns

  • Missing Nonce Checks
  • No Capability Checks
  • Unsanitized Paths in Taint Flows
  • Bundled Library: Select2
Vulnerabilities
None known

Free SMS OTP Verification for Gravity Forms By Firebase Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Free SMS OTP Verification for Gravity Forms By Firebase Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
10 escaped
Nonce Checks
0
Capability Checks
0
File Operations
2
External Requests
1
Bundled Libraries
1

Bundled Libraries

Select2

Output Escaping

91% escaped11 total outputs
Data Flows
2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths
validate_form (app\class-app.php:82)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Free SMS OTP Verification for Gravity Forms By Firebase Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 10
actionadmin_initapp\class-app.php:48
actionplugins_loadedapp\class-app.php:49
actiongform_loadedapp\class-app.php:50
filtergform_field_validationapp\class-app.php:51
actionwp_print_scriptsapp\class-app.php:52
actionnetwork_admin_noticesapp\class-app.php:175
actionadmin_noticesapp\class-app.php:178
filtergform_tooltipsapp\partials\class-gf-sms-addon.php:106
actiongform_field_standard_settingsapp\partials\class-gf-sms-addon.php:107
actiongform_enqueue_scriptsapp\partials\class-gf-sms-addon.php:116
Maintenance & Trust

Free SMS OTP Verification for Gravity Forms By Firebase Maintenance & Trust

Maintenance Signals

WordPress version tested5.5.18
Last updatedMar 10, 2021
PHP min version5.6
Downloads9K

Community Trust

Rating100/100
Number of ratings8
Active installs200
Alternatives

Free SMS OTP Verification for Gravity Forms By Firebase Alternatives

No alternatives data available yet.

Developer Profile

Free SMS OTP Verification for Gravity Forms By Firebase Developer Profile

WiserSteps

2 plugins · 210 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Free SMS OTP Verification for Gravity Forms By Firebase

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/free-sms-verification-for-gravity-forms/assets/css/firebase-ui-auth.css/wp-content/plugins/free-sms-verification-for-gravity-forms/assets/css/firebase-ui-auth-rtl.css/wp-content/plugins/free-sms-verification-for-gravity-forms/assets/js/firebase-app.min.js/wp-content/plugins/free-sms-verification-for-gravity-forms/assets/js/firebase-auth.min.js/wp-content/plugins/free-sms-verification-for-gravity-forms/assets/js/public-script.js/wp-content/plugins/free-sms-verification-for-gravity-forms/assets/css/select2.min.css/wp-content/plugins/free-sms-verification-for-gravity-forms/assets/js/select2.min.js/wp-content/plugins/free-sms-verification-for-gravity-forms/assets/js/admin-script.js
Script Paths
https://www.gstatic.com/firebasejs/ui/4.5.1/firebase-ui-auth__.js
Version Parameters
gf-free-sms-verification/assets/css/firebase-ui-auth.css?ver=gf-free-sms-verification/assets/css/firebase-ui-auth-rtl.css?ver=gf-free-sms-verification/assets/js/firebase-app.min.js?ver=gf-free-sms-verification/assets/js/firebase-auth.min.js?ver=https://www.gstatic.com/firebasejs/ui/4.5.1/firebase-ui-auth__.js?ver=gf-free-sms-verification/assets/js/public-script.js?ver=gf-free-sms-verification/assets/css/select2.min.css?ver=gf-free-sms-verification/assets/js/select2.min.js?ver=gf-free-sms-verification/assets/js/admin-script.js?ver=

HTML / DOM Fingerprints

CSS Classes
gfield_gf-free-sms-verification
JS Globals
firebase_data
FAQ

Frequently Asked Questions about Free SMS OTP Verification for Gravity Forms By Firebase