f(x) Share Security & Risk Analysis

wordpress.org/plugins/fx-share

Simple sharing plugin. Easily add Facebook, Twitter, and Google+ share button to your content.

10 active installs v1.0.0 PHP + WP 4.3+ Updated Aug 1, 2016
commentsspam
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is f(x) Share Safe to Use in 2026?

Generally Safe

Score 85/100

f(x) Share has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9yr ago
Risk Assessment

Based on the static analysis and vulnerability history, the fx-share plugin v1.0.0 exhibits a very strong security posture. The absence of any identified attack surface, dangerous functions, raw SQL queries, file operations, external HTTP requests, or taint flows is highly commendable. The high percentage of properly escaped output further reinforces this good practice. The plugin's vulnerability history is also spotless, indicating a well-maintained and secure codebase over time.

While the lack of explicit capability checks and nonce checks on AJAX handlers is noted, the absence of any AJAX handlers or cron events significantly mitigates the risk associated with these omissions. The plugin appears to have been designed with security in mind, focusing on a minimal attack surface and robust code practices. However, as with any software, ongoing vigilance and potential for future vulnerabilities should always be considered.

Key Concerns

  • Missing capability checks
  • Missing nonce checks
Vulnerabilities
None known

f(x) Share Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

f(x) Share Release Timeline

v1.0.0Current
Code Analysis
Analyzed Apr 16, 2026

f(x) Share Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
3
35 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

92% escaped38 total outputs
Attack Surface

f(x) Share Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 6
actionplugins_loadedfx-share.php:32
actioncustomize_registerincludes/customizer.php:5
actioncustomize_controls_enqueue_scriptsincludes/customizer.php:149
actionwp_enqueue_scriptsincludes/setup.php:7
filterthe_excerptincludes/setup.php:19
filterthe_contentincludes/setup.php:20
Maintenance & Trust

f(x) Share Maintenance & Trust

Maintenance Signals

WordPress version tested4.7.33
Last updatedAug 1, 2016
PHP min version
Downloads2K

Community Trust

Rating100/100
Number of ratings1
Active installs10
Developer Profile

f(x) Share Developer Profile

David Chandra Purnama

13 plugins · 2K total installs

82
trust score
Avg Security Score
83/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect f(x) Share

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/fx-share/assets/fx-share-icons/fx-share-icons.css/wp-content/plugins/fx-share/assets/fx-share.css
Script Paths
/wp-content/plugins/fx-share/assets/js/fx-share-customize.js
Version Parameters
fx-share/assets/fx-share-icons/fx-share-icons.css?ver=fx-share/assets/fx-share.css?ver=

HTML / DOM Fingerprints

CSS Classes
fx-share-multicheck-sortable-listfx-share-multicheck-sortable-itemfx-share-multicheck-sortable-handlefx-share-hidemefx-share-multicheck-listfx-share-multicheck-item
Data Attributes
data-customize-setting-link="fx_share_options[options]"class="fx-share-multicheck-sortable"class="fx-share-multicheck"
JS Globals
fx_share_customize
Shortcode Output
[fx_share]
FAQ

Frequently Asked Questions about f(x) Share