GoValid QR Security & Risk Analysis

wordpress.org/plugins/govalid-qr-validator

Generate, embed, and track QR codes from your GoValid account directly in WordPress.

0 active installs v3.6.7 PHP 7.4+ WP 5.8+ Updated Mar 12, 2026
analyticsbarcodegovalidqrqr-code
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is GoValid QR Safe to Use in 2026?

Generally Safe

Score 100/100

GoValid QR has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 22d ago
Risk Assessment

The govalid-qr-validator plugin v3.6.7 exhibits a strong security posture based on the provided static analysis. The absence of any documented vulnerabilities, including critical or high severity ones, is a significant positive indicator. Furthermore, the code analysis reveals excellent security practices, with 100% of outputs being properly escaped, no dangerous functions identified, and a high percentage of SQL queries utilizing prepared statements. The presence of nonce and capability checks for entry points also suggests a well-considered approach to access control.

Vulnerabilities
None known

GoValid QR Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

GoValid QR Code Analysis

Dangerous Functions
0
Raw SQL Queries
11
48 prepared
Unescaped Output
2
442 escaped
Nonce Checks
16
Capability Checks
24
File Operations
4
External Requests
12
Bundled Libraries
0

SQL Query Safety

81% prepared59 total queries

Output Escaping

100% escaped444 total outputs
Attack Surface

GoValid QR Attack Surface

Entry Points8
Unprotected0

Shortcodes 8

[govalid_form] includes\shortcodes\class-govalid-form-shortcode.php:16
[govalid_qr] includes\shortcodes\class-govalid-shortcodes.php:16
[govalid_verify_result] includes\shortcodes\class-govalid-verify-page-shortcode.php:30
[govalid_verify_status] includes\shortcodes\class-govalid-verify-page-shortcode.php:31
[govalid_verify_field] includes\shortcodes\class-govalid-verify-page-shortcode.php:32
[govalid_verify_alerts] includes\shortcodes\class-govalid-verify-page-shortcode.php:33
[govalid_powered_by] includes\shortcodes\class-govalid-verify-page-shortcode.php:34
[govalid_verify] includes\shortcodes\class-govalid-verify-shortcode.php:22
WordPress Hooks 24
actionplugins_loadedgovalid-qr.php:80
actionwp_dashboard_setupincludes\admin\class-govalid-admin-dashboard.php:16
actionadmin_post_govalid_save_formincludes\admin\class-govalid-admin-forms.php:16
actionadmin_post_govalid_delete_formincludes\admin\class-govalid-admin-forms.php:17
actionadmin_post_govalid_qr_createincludes\admin\class-govalid-admin-generator.php:16
actionadmin_initincludes\admin\class-govalid-admin-settings.php:16
actionadmin_initincludes\admin\class-govalid-admin-settings.php:17
actionadmin_post_govalid_qr_connectincludes\admin\class-govalid-admin-settings.php:18
actionadmin_post_govalid_qr_disconnectincludes\admin\class-govalid-admin-settings.php:19
actionadmin_post_govalid_qr_clear_cacheincludes\admin\class-govalid-admin-settings.php:20
actionadmin_post_govalid_qr_create_verify_pageincludes\admin\class-govalid-admin-settings.php:21
actionadmin_menuincludes\admin\class-govalid-admin.php:16
actionadmin_enqueue_scriptsincludes\admin\class-govalid-admin.php:17
actioninitincludes\blocks\class-govalid-blocks.php:16
actiongovalid_qr_cache_cleanupincludes\cache\class-govalid-cache.php:38
filterquery_varsincludes\class-govalid-qr.php:47
actioninitincludes\class-govalid-qr.php:48
actioninitincludes\class-govalid-qr.php:49
actionrest_api_initincludes\rest\class-govalid-form-rest-controller.php:20
filterupload_dirincludes\rest\class-govalid-form-rest-controller.php:900
actionrest_api_initincludes\rest\class-govalid-link-rest-controller.php:20
actionrest_api_initincludes\rest\class-govalid-rest-controller.php:18
actionwp_enqueue_scriptsincludes\shortcodes\class-govalid-form-shortcode.php:17
actionwp_footerincludes\shortcodes\class-govalid-verify-shortcode.php:25

Scheduled Events 1

govalid_qr_cache_cleanup
Maintenance & Trust

GoValid QR Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 12, 2026
PHP min version7.4
Downloads116

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

GoValid QR Developer Profile

nfloval1739

1 plugin · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect GoValid QR

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/govalid-qr-validator/admin/css/govalid-admin.css/wp-content/plugins/govalid-qr-validator/admin/js/govalid-admin.js/wp-content/plugins/govalid-qr-validator/admin/js/govalid-settings.js/wp-content/plugins/govalid-qr-validator/admin/js/govalid-generator.js/wp-content/plugins/govalid-qr-validator/admin/js/govalid-humanize-links.js/wp-content/plugins/govalid-qr-validator/admin/js/govalid-forms.js/wp-content/plugins/govalid-qr-validator/admin/js/govalid-list.js/wp-content/plugins/govalid-qr-validator/admin/js/govalid-analytics.js+3 more
Script Paths
/wp-content/plugins/govalid-qr-validator/admin/js/govalid-admin.js/wp-content/plugins/govalid-qr-validator/admin/js/govalid-settings.js/wp-content/plugins/govalid-qr-validator/admin/js/govalid-generator.js/wp-content/plugins/govalid-qr-validator/admin/js/govalid-humanize-links.js/wp-content/plugins/govalid-qr-validator/admin/js/govalid-forms.js/wp-content/plugins/govalid-qr-validator/admin/js/govalid-list.js+4 more
Version Parameters
govalid-qr-validator/style.css?ver=govalid-qr-validator/admin/css/govalid-admin.css?ver=

HTML / DOM Fingerprints

CSS Classes
govalid-admin-pagegovalid-tab-contentgovalid-tab-headergovalid-qr-generator-wrappergovalid-qr-generator-formgovalid-qr-code-displaygovalid-qr-code-settingsgovalid-qr-code-preview+4 more
HTML Comments
<!-- Admin menu registration. --><!-- Register admin hooks. --><!-- Add admin menu pages. --><!-- QR Generator (top item — matches parent slug). -->+12 more
Data Attributes
data-govalid-noncedata-govalid-admin-url
JS Globals
govalid_admin_params
FAQ

Frequently Asked Questions about GoValid QR