WP-Safety

Experience API for MasterStudy by GrassBlade Security & Risk Analysis

wordpress.org/plugins/grassblade-xapi-masterstudy

This plugin enables the Experience API (xAPI / Tin Can) , SCORM 1.2, SCORM 2004 cmi5 standard content support on the MasterStudy LMS by integrating wi …

30 active installs v2.4 PHP 5.6+ WP 4.0+ Updated Oct 26, 2025
experience-apigrassblademasterstudytin-canxapi
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Experience API for MasterStudy by GrassBlade Safe to Use in 2026?

Generally Safe

Score 100/100

Experience API for MasterStudy by GrassBlade has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 5mo ago
Risk Assessment

The grassblade-xapi-masterstudy plugin v2.4 exhibits a generally strong security posture based on the provided static analysis. The plugin has a small attack surface with only two AJAX handlers, and importantly, both appear to be protected with authentication checks. The code signals are also encouraging, with no dangerous functions detected, a reasonable percentage of SQL queries using prepared statements, and a high rate of proper output escaping. The absence of file operations and external HTTP requests further reduces potential attack vectors. The plugin also demonstrates good security practices by including a nonce check and a capability check.

Vulnerabilities
None known

Experience API for MasterStudy by GrassBlade Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Experience API for MasterStudy by GrassBlade Code Analysis

Dangerous Functions
0
Raw SQL Queries
2
4 prepared
Unescaped Output
2
14 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

67% prepared6 total queries

Output Escaping

88% escaped16 total outputs
Data Flows
All sanitized

Data Flow Analysis

1 flows
<functions> (functions.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Experience API for MasterStudy by GrassBlade Attack Surface

Entry Points2
Unprotected0

AJAX Handlers 2

authwp_ajax_stm_lms_add_h5p_resultfunctions.php:110
noprivwp_ajax_stm_lms_add_h5p_resultfunctions.php:111
WordPress Hooks 28
actionadmin_menufunctions.php:29
actionplugins_loadedfunctions.php:30
actionadmin_noticesfunctions.php:59
actiongrassblade_completedfunctions.php:63
actiongrassblade_course_startedfunctions.php:64
actionstm_lms_quiz_passedfunctions.php:66
actionstm_lms_quiz_failedfunctions.php:67
actionstm_lms_lesson_passedfunctions.php:68
actionstm_lms_quiz_passedfunctions.php:70
actionstm_lms_quiz_failedfunctions.php:71
actionstm_lms_lesson_passedfunctions.php:72
actionadd_user_coursefunctions.php:74
actionstm_lms_lesson_startedfunctions.php:76
filterstm_lms_lesson/navigationfunctions.php:77
filterstm_lms_components/nav-buttonfunctions.php:78
filtergrassblade_lms_mark_complete_button_idfunctions.php:82
filtergrassblade_lms_next_button_idfunctions.php:83
filtergrassblade_content_postfunctions.php:85
filtermasterstudy_lms_lesson_custom_fieldsfunctions.php:89
filtermasterstudy_lms_quiz_custom_fieldsfunctions.php:90
filtermasterstudy_lms_course_builder_custom_fieldsfunctions.php:92
filtergrassblade_get_coursesfunctions.php:103
filtergrassblade_get_course_content_idsfunctions.php:104
filtergrassblade_get_coursefunctions.php:105
filtergrassblade_shortcode_attsfunctions.php:113
filterstm_lms_course-player/content/quiz/resultfunctions.php:115
filtergrassblade/reports/progress_snapshot/datareports_progress_snapshot_report\functions.php:6
filtergrassblade/reports/progress_snapshot/detailsreports_progress_snapshot_report\functions.php:7
Maintenance & Trust

Experience API for MasterStudy by GrassBlade Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedOct 26, 2025
PHP min version5.6
Downloads3K

Community Trust

Rating0/100
Number of ratings0
Active installs30
Alternatives

Experience API for MasterStudy by GrassBlade Alternatives

Experience API for LearnPress by GrassBlade

Experience API for LearnPress by GrassBlade

grassblade-xapi-learnpress

A
100

This plugin enables the Experience API (xAPI / Tin Can), cmi5 , SCORM 1.2, SCORM 2004 and SCORM Dispatch on the LearnPress LMS by integrating with Gra &hellip;

200 No CVEs
Experience API for LifterLMS by Grassblade

Experience API for LifterLMS by Grassblade

grassblade-xapi-lifterlms

A
100

This plugin enables the Experience API (xAPI / Tin Can) , SCORM 1.2 and SCORM 2004 support on the LifterLMS by integrating with GrassBlade xAPI Compan &hellip;

100 No CVEs
Experience API for WP Courseware by Grassblade

Experience API for WP Courseware by Grassblade

grassblade-xapi-wp-courseware

A
100

This plugin enables the Experience API (xAPI / Tin Can), cmi5, SCORM 1.2 and SCORM 2004 support on the WP Courseware LMS by integrating with GrassBlad &hellip;

50 No CVEs
Experience API for Sensei LMS by GrassBlade

Experience API for Sensei LMS by GrassBlade

grassblade-xapi-sensei

A
100

This plugin enables the Experience API (xAPI / Tin Can) , SCORM 1.2 and SCORM 2004 support on the Sensei LMS by integrating with GrassBlade xAPI Compa &hellip;

20 No CVEs
Experience API for TutorLMS by GrassBlade

Experience API for TutorLMS by GrassBlade

grassblade-xapi-tutorlms

A
100

Experience API for TutorLMS plugin adds xAPI, SCORM, and cmi5 support to Tutor LMS by integrating with the GrassBlade xAPI Companion plugin.

200 No CVEs
Developer Profile

Experience API for MasterStudy by GrassBlade Developer Profile

Pankaj Agrawal

21 plugins · 5K total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Experience API for MasterStudy by GrassBlade

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/grassblade-xapi-masterstudy/assets/css/grassblade-masterstudy-lms.css/wp-content/plugins/grassblade-xapi-masterstudy/assets/js/grassblade-masterstudy-lms.js/wp-content/plugins/grassblade-xapi-masterstudy/reports_progress_snapshot_report/css/style.css
Script Paths
/wp-content/plugins/grassblade-xapi-masterstudy/assets/js/grassblade-masterstudy-lms.js
Version Parameters
grassblade-xapi-masterstudy/assets/css/grassblade-masterstudy-lms.css?ver=grassblade-xapi-masterstudy/assets/js/grassblade-masterstudy-lms.js?ver=

HTML / DOM Fingerprints

CSS Classes
grassblade-masterstudy-lms-wrapper
Data Attributes
data-grassblade-masterstudy-lms
JS Globals
grassblade_masterstudy_activate_plugin
Shortcode Output
[grassblade_lms_course_list][grassblade_lms_course_progress][grassblade_lms_quiz_list][grassblade_lms_quiz_progress]
FAQ

Frequently Asked Questions about Experience API for MasterStudy by GrassBlade