Happy New Year Lantern(新年快乐灯笼) Security & Risk Analysis

wordpress.org/plugins/happy-new-year-lantern

可自定义的新年灯笼挂件,支持在“外观 → 自定义”中调整位置、大小、摆动与发光等。

10 active installs v2.0.1 PHP 7.0+ WP 5.0+ Updated Jan 29, 2026
chinese-new-yearcustomizecustomizerdecorationlantern
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Happy New Year Lantern(新年快乐灯笼) Safe to Use in 2026?

Generally Safe

Score 100/100

Happy New Year Lantern(新年快乐灯笼) has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The plugin "happy-new-year-lantern" v2.0.1 exhibits a strong security posture based on the provided static analysis. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events significantly limits the potential attack surface. Furthermore, the code demonstrates good practices with the complete use of prepared statements for SQL queries and a high percentage of properly escaped output, indicating a low risk of common injection and cross-site scripting vulnerabilities. The lack of file operations and external HTTP requests further reduces the attack vectors. The plugin also has no recorded vulnerabilities or CVEs, which is a positive indicator of its past security development.

Key Concerns

  • Missing Nonce Checks
  • Missing Capability Checks
Vulnerabilities
None known

Happy New Year Lantern(新年快乐灯笼) Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Happy New Year Lantern(新年快乐灯笼) Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
7
36 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

84% escaped43 total outputs
Attack Surface

Happy New Year Lantern(新年快乐灯笼) Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 7
actioninithappy-new-year-lantern.php:25
actionadmin_menuwp-hny.php:82
actionadmin_initwp-hny.php:83
actionadmin_noticeswp-hny.php:360
actionwp_footerwp-hny.php:385
actionwp_enqueue_scriptswp-hny.php:577
actioncustomize_registerwp-hny.php:579
Maintenance & Trust

Happy New Year Lantern(新年快乐灯笼) Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 29, 2026
PHP min version7.0
Downloads154

Community Trust

Rating100/100
Number of ratings1
Active installs10
Developer Profile

Happy New Year Lantern(新年快乐灯笼) Developer Profile

dzw6

1 plugin · 10 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Happy New Year Lantern(新年快乐灯笼)

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/happy-new-year-lantern/assets/css/style.css/wp-content/plugins/happy-new-year-lantern/assets/js/script.js
Script Paths
/wp-content/plugins/happy-new-year-lantern/assets/js/script.js
Version Parameters
happy-new-year-lantern/assets/css/style.css?ver=happy-new-year-lantern/assets/js/script.js?ver=

HTML / DOM Fingerprints

CSS Classes
xcbtmw-lantern-containerxcbtmw-lantern-itemxcbtmw-lantern-textxcbtmw-lantern-glow
Data Attributes
data-xcbtmw-positiondata-xcbtmw-scaledata-xcbtmw-min-gapdata-xcbtmw-swing-degreesdata-xcbtmw-swing-durationdata-xcbtmw-glow-strength+2 more
JS Globals
xcbtmw_settings
FAQ

Frequently Asked Questions about Happy New Year Lantern(新年快乐灯笼)