Does Golden Ticket have any unpatched vulnerabilities?

No. All known vulnerabilities in Golden Ticket have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Golden Ticket compatible with WordPress 3.6.1?

According to WordPress.org data, Golden Ticket 1.0.3 has been tested up to WordPress 3.6.1. Check the plugin's changelog for the latest compatibility information.

How often is Golden Ticket updated?

Golden Ticket was last updated on Jun 5, 2015. Frequent updates are generally a positive security signal.

What is Golden Ticket's security score?

Golden Ticket has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Golden Ticket Security & Risk Analysis

wordpress.org/plugins/golden-ticket

Easily provide incentives for user interactions.

10 active installs v1.0.3 PHP + WP 3.0+ Updated Jun 5, 2015

coupongiveawayspromotionrewardsseo

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Golden Ticket Safe to Use in 2026?

Generally Safe

Score 85/100

Golden Ticket has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10yr ago

Risk Assessment

The 'golden-ticket' plugin v1.0.3 exhibits a generally good security posture based on the provided static analysis. The plugin has no known vulnerabilities in its history, and the static analysis shows no critical or high severity issues in taint flows. Furthermore, it utilizes prepared statements for its SQL query and has capability checks in place for its entry points. The attack surface is also limited and appears to be protected by authentication mechanisms.

Key Concerns

Output not properly escaped
No nonce checks implemented

Vulnerabilities

None known

Golden Ticket Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 17, 2026

Golden Ticket Code Analysis

Dangerous Functions

Raw SQL Queries

1 prepared

Unescaped Output

0 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

100% prepared1 total queries

Output Escaping

0% escaped30 total outputs

Attack Surface

Golden Ticket Attack Surface

Entry Points2

Unprotected0

Shortcodes 2

[goldenticket] index.php:177

[goldenticket] index.php:303

WordPress Hooks 5

actionplugins_loadedindex.php:284

actionadmin_menuindex.php:290

actionadmin_initindex.php:291

actionwp_enqueue_scriptsindex.php:302

filterthe_contentindex.php:305

Maintenance & Trust

Golden Ticket Maintenance & Trust

Maintenance Signals

WordPress version tested3.6.1

Last updatedJun 5, 2015

PHP min version

Downloads3K

Community Trust

Rating100/100

Number of ratings1

Active installs10

Alternatives

Golden Ticket Alternatives

MyRewards

woorewards

Free top-rated points and rewards program to retain your customers, grow your sales and get new customers.

3K 2 CVEs

Loyalty Points Rewards and Referral for WooCommerce – WPLoyalty

wployalty

100

Create WooCommerce points and rewards program with WPLoyalty to increase customer loyalty and boost sales. Reward customers to drive repeat purchases.

3K No CVEs

Woobox

woobox

Easily embed your Woobox promotions in WordPress using a simple shortcode.

1K 2 CVEs

EchoRewards — Refer-a-Friend & Referral Program for WooCommerce

echo-rewards

100

Create a WooCommerce refer-a-friend program. Generate coupons, reward customers, and run a customer referral program for your store.

300 No CVEs

Contextly Recommends

contextly-related-links

Build your audience with great related and popular recommendations. Let readers follow topics. Editorial control and machine learning.

100 No CVEs

Developer Profile

Golden Ticket Developer Profile

The Plugin Factory

5 plugins · 260 total installs

trust score

Avg Security Score

84/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Golden Ticket

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/golden-ticket/goldenticket_js.js

Script Paths

/wp-content/plugins/golden-ticket/jquery.inview.js/wp-content/plugins/golden-ticket/goldenticket_js.js

Version Parameters

golden-ticket/goldenticket_js.js?ver=

HTML / DOM Fingerprints

Data Attributes

id="goldenticket_trigger"id="goldenticket"

Shortcode Output

<div id="goldenticket" style="display:none">

FAQ