Hill Extension Security & Risk Analysis

wordpress.org/plugins/hill-extension

Import all the demos on your site with customize setting

20 active installs v1.0 PHP + WP + Updated Jun 10, 2022
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Hill Extension Safe to Use in 2026?

Generally Safe

Score 85/100

Hill Extension has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3yr ago
Risk Assessment

The "hill-extension" v1.0 plugin presents a mixed security posture. On the positive side, it demonstrates good practices regarding SQL queries, utilizing prepared statements exclusively, and there is no recorded vulnerability history. The absence of critical or high-severity taint flows is also a strength. However, significant concerns arise from the attack surface analysis, which reveals four AJAX handlers with no authentication checks. This indicates a substantial risk of unauthorized access and execution of plugin functionalities. Furthermore, only 63% of output is properly escaped, leaving potential for cross-site scripting (XSS) vulnerabilities. While the absence of known CVEs is reassuring, the combination of unprotected AJAX endpoints and insufficient output escaping creates a notable security risk.

Key Concerns

  • AJAX handlers without authentication checks
  • Insufficient output escaping
Vulnerabilities
None known

Hill Extension Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Hill Extension Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
70
119 escaped
Nonce Checks
1
Capability Checks
1
File Operations
3
External Requests
1
Bundled Libraries
0

SQL Query Safety

100% prepared2 total queries

Output Escaping

63% escaped189 total outputs
Attack Surface
4 unprotected

Hill Extension Attack Surface

Entry Points4
Unprotected4

AJAX Handlers 4

authwp_ajax_kirki_fonts_google_all_getinc\kirki\packages\kirki-framework\googlefonts\src\GoogleFonts.php:47
noprivwp_ajax_kirki_fonts_google_all_getinc\kirki\packages\kirki-framework\googlefonts\src\GoogleFonts.php:48
authwp_ajax_kirki_fonts_standard_all_getinc\kirki\packages\kirki-framework\module-webfonts\src\Webfonts\Google.php:88
noprivwp_ajax_kirki_fonts_standard_all_getinc\kirki\packages\kirki-framework\module-webfonts\src\Webfonts\Google.php:89
WordPress Hooks 144
actionplugins_loadedhill-extension.php:20
actionwp_enqueue_scriptshill-extension.php:32
actioncustomize_controls_enqueue_scriptshill-extension.php:46
actioninitinc\global.php:2
actioncustomize_registerinc\kirki\packages\kirki-framework\compatibility\src\Aliases.php:152
filterkirki_configinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:4
filterkirki_control_typesinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:8
filterkirki_section_typesinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:12
filterkirki_section_types_excludeinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:16
filterkirki_control_types_excludeinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:20
filterkirki_controlsinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:24
filterkirki_fieldsinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:28
filterkirki_modulesinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:32
filterkirki_panel_typesinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:36
filterkirki_setting_typesinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:40
filterkirki_variableinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:44
filterkirki_values_get_valueinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:48
actioninitinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:52
filterkirki_enqueue_google_fontsinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:82
filterkirki_styles_arrayinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:86
filterkirki_dynamic_css_methodinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:90
filterkirki_postmessage_scriptinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:94
filterkirki_fonts_allinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:98
filterkirki_fonts_standard_fontsinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:102
filterkirki_fonts_google_fontsinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:106
filterkirki_googlefonts_load_methodinc\kirki\packages\kirki-framework\compatibility\src\deprecated\filters.php:110
actionwp_loadedinc\kirki\packages\kirki-framework\compatibility\src\Init.php:43
filterkirki_control_typesinc\kirki\packages\kirki-framework\compatibility\src\Init.php:44
actioncustomize_registerinc\kirki\packages\kirki-framework\compatibility\src\Init.php:46
actionadmin_noticesinc\kirki\packages\kirki-framework\compatibility\src\Init.php:48
actionadmin_initinc\kirki\packages\kirki-framework\compatibility\src\Init.php:49
actioncustomize_registerinc\kirki\packages\kirki-framework\compatibility\src\Init.php:102
actioncustomize_registerinc\kirki\packages\kirki-framework\compatibility\src\Init.php:103
actionafter_setup_themeinc\kirki\packages\kirki-framework\compatibility\src\Modules.php:48
actionafter_setup_themeinc\kirki\packages\kirki-framework\compatibility\src\Modules.php:49
actionwp_enqueue_scriptsinc\kirki\packages\kirki-framework\compatibility\src\Scripts.php:38
actionadmin_register_scriptsinc\kirki\packages\kirki-framework\compatibility\src\Scripts.php:39
actioncustomize_controls_enqueue_scriptsinc\kirki\packages\kirki-framework\compatibility\src\Scripts.php:40
filterkirki_output_item_argsinc\kirki\packages\kirki-framework\control-image\src\Field\Image.php:56
filterkirki_output_control_classnamesinc\kirki\packages\kirki-framework\control-image\src\Field\Image.php:57
actioncustomize_preview_initinc\kirki\packages\kirki-framework\control-react-colorful\src\Field\ReactColorful.php:60
filterkirki_output_control_classnamesinc\kirki\packages\kirki-framework\control-react-colorful\src\Field\ReactColorful.php:61
filterkirki_field_add_setting_argsinc\kirki\packages\kirki-framework\data-option\src\Option.php:27
filterkirki_field_add_control_argsinc\kirki\packages\kirki-framework\data-option\src\Option.php:28
filterkirki_get_valueinc\kirki\packages\kirki-framework\data-option\src\Option.php:29
actionwp_loadedinc\kirki\packages\kirki-framework\field\src\Field.php:90
actionwpinc\kirki\packages\kirki-framework\field\src\Field.php:97
actioncustomize_registerinc\kirki\packages\kirki-framework\field\src\Field.php:107
actioncustomize_registerinc\kirki\packages\kirki-framework\field\src\Field.php:110
actioncustomize_registerinc\kirki\packages\kirki-framework\field\src\Field.php:113
filterkirki_field_add_setting_argsinc\kirki\packages\kirki-framework\field\src\Field.php:116
filterkirki_field_add_control_argsinc\kirki\packages\kirki-framework\field\src\Field.php:117
actioncustomize_preview_initinc\kirki\packages\kirki-framework\field-background\src\Background.php:246
filterkirki_output_control_classnamesinc\kirki\packages\kirki-framework\field-background\src\Background.php:247
actioncustomize_controls_enqueue_scriptsinc\kirki\packages\kirki-framework\field-dimensions\src\Dimensions.php:43
actioncustomize_preview_initinc\kirki\packages\kirki-framework\field-dimensions\src\Dimensions.php:44
filterkirki_output_control_classnamesinc\kirki\packages\kirki-framework\field-dimensions\src\Dimensions.php:45
filterkirki_output_control_classnamesinc\kirki\packages\kirki-framework\field-multicolor\src\Field\Multicolor.php:41
actioncustomize_controls_enqueue_scriptsinc\kirki\packages\kirki-framework\field-typography\src\Field\Typography.php:209
actioncustomize_preview_initinc\kirki\packages\kirki-framework\field-typography\src\Field\Typography.php:210
filterkirki_output_control_classnamesinc\kirki\packages\kirki-framework\field-typography\src\Field\Typography.php:211
actionplugins_loadedinc\kirki\packages\kirki-framework\l10n\src\L10n.php:62
filteroverride_load_textdomaininc\kirki\packages\kirki-framework\l10n\src\L10n.php:66
actionkirki_field_initinc\kirki\packages\kirki-framework\module-css\src\CSS.php:82
actioninitinc\kirki\packages\kirki-framework\module-css\src\CSS.php:83
actionwpinc\kirki\packages\kirki-framework\module-css\src\CSS.php:96
actionwp_enqueue_scriptsinc\kirki\packages\kirki-framework\module-css\src\CSS.php:106
actionwp_headinc\kirki\packages\kirki-framework\module-css\src\CSS.php:108
actionadmin_initinc\kirki\packages\kirki-framework\module-editor-styles\src\Editor_Styles.php:80
actionenqueue_block_editor_assetsinc\kirki\packages\kirki-framework\module-editor-styles\src\Editor_Styles.php:107
actionafter_setup_themeinc\kirki\packages\kirki-framework\module-editor-styles\src\Editor_Styles.php:108
actioncustomize_controls_enqueue_scriptsinc\kirki\packages\kirki-framework\module-field-dependencies\src\Field_Dependencies.php:38
filterkirki_field_add_control_argsinc\kirki\packages\kirki-framework\module-field-dependencies\src\Field_Dependencies.php:39
actioncustomize_registerinc\kirki\packages\kirki-framework\module-panels\src\Panel.php:63
actioncustomize_controls_enqueue_scriptsinc\kirki\packages\kirki-framework\module-panels\src\Panel.php:65
actioncustomize_registerinc\kirki\packages\kirki-framework\module-panels\src\Panel.php:112
actioncustomize_preview_initinc\kirki\packages\kirki-framework\module-postmessage\src\Postmessage.php:37
actionkirki_field_add_setting_argsinc\kirki\packages\kirki-framework\module-postmessage\src\Postmessage.php:38
actioncustomize_controls_print_footer_scriptsinc\kirki\packages\kirki-framework\module-preset\src\Preset.php:38
filterkirki_field_add_control_argsinc\kirki\packages\kirki-framework\module-preset\src\Preset.php:39
actioncustomize_controls_enqueue_scriptsinc\kirki\packages\kirki-framework\module-section-icons\src\Section_Icons.php:56
actionkirki_panel_addedinc\kirki\packages\kirki-framework\module-section-icons\src\Section_Icons.php:57
actionkirki_section_addedinc\kirki\packages\kirki-framework\module-section-icons\src\Section_Icons.php:58
actioncustomize_registerinc\kirki\packages\kirki-framework\module-sections\src\Section.php:65
actioncustomize_registerinc\kirki\packages\kirki-framework\module-sections\src\Section.php:68
actioncustomize_controls_enqueue_scriptsinc\kirki\packages\kirki-framework\module-sections\src\Section.php:70
actioncustomize_controls_print_footer_scriptsinc\kirki\packages\kirki-framework\module-sections\src\Section.php:71
actioncustomize_registerinc\kirki\packages\kirki-framework\module-sections\src\Section.php:142
filterkirki_field_add_setting_argsinc\kirki\packages\kirki-framework\module-selective-refresh\src\Selective_Refresh.php:35
actioncustomize_controls_print_footer_scriptsinc\kirki\packages\kirki-framework\module-tooltips\src\Tooltips.php:41
filterkirki_field_add_control_argsinc\kirki\packages\kirki-framework\module-tooltips\src\Tooltips.php:42
actionwp_headinc\kirki\packages\kirki-framework\module-webfonts\src\Webfonts\Async.php:82
actionwp_headinc\kirki\packages\kirki-framework\module-webfonts\src\Webfonts\Async.php:83
actionadmin_enqueue_scriptsinc\kirki\packages\kirki-framework\module-webfonts\src\Webfonts\Async.php:86
actionadmin_enqueue_scriptsinc\kirki\packages\kirki-framework\module-webfonts\src\Webfonts\Async.php:87
actionwpinc\kirki\packages\kirki-framework\module-webfonts\src\Webfonts\Embed.php:72
actionkirki_dynamic_cssinc\kirki\packages\kirki-framework\module-webfonts\src\Webfonts\Embed.php:85
actionkirki_field_initinc\kirki\packages\kirki-framework\module-webfonts\src\Webfonts.php:51
actionwp_loadedinc\kirki\packages\kirki-framework\module-webfonts\src\Webfonts.php:52
filterhttp_request_argsinc\kirki\packages\kirki-framework\util\src\Util.php:37
actionkirki_field_initinc\kirki\packages\kirki-framework\util\src\Util.php:38
actioninitthemes\comman\admin\customizer-blog.php:84
actionwp_headthemes\comman\admin\customizer-blog.php:114
actioninitthemes\comman\admin\customizer-breadcrumb.php:64
actioninitthemes\comman\admin\customizer-button.php:147
actioninitthemes\comman\admin\customizer-container.php:36
actionwp_headthemes\comman\admin\customizer-container.php:57
actioninitthemes\comman\admin\customizer-fonts.php:141
actioninitthemes\comman\admin\customizer-footer.php:109
actioninitthemes\comman\admin\customizer-frontpage-order.php:30
actioninitthemes\comman\admin\customizer-header.php:170
actioninitthemes\comman\admin\customizer-scroll_button.php:62
actioninitthemes\comman\admin\customizer-sidebar.php:40
actionwp_headthemes\comman\admin\customizer-sidebar.php:63
actioninitthemes\comman\admin\customizer-social-icon.php:77
actioninitthemes\comman\admin\customizer-stricky_header.php:31
actionhill_header_typethemes\comman\admin\customizer-stricky_header.php:42
actionwp_headthemes\comman\admin\customizer-stricky_header.php:62
actioninitthemes\comman\admin\customizer-top.php:66
actioninitthemes\comman\admin\frontpage\customizer-about.php:90
actioninitthemes\comman\admin\frontpage\customizer-banner.php:123
actioninitthemes\comman\admin\frontpage\customizer-gallery.php:113
actionwp_headthemes\comman\admin\frontpage\customizer-gallery.php:127
actioninitthemes\comman\admin\frontpage\customizer-service.php:113
actionwp_headthemes\comman\admin\frontpage\customizer-service.php:127
actioninitthemes\comman\admin\frontpage\customizer-sponsors.php:92
actioninitthemes\comman\admin\frontpage\customizer-team.php:118
actionwp_headthemes\comman\admin\frontpage\customizer-team.php:132
actioninitthemes\comman\admin\frontpage\customizer-tesimonial.php:112
actionwp_headthemes\comman\admin\frontpage\customizer-tesimonial.php:126
actioncustomize_registerthemes\comman\comman.php:50
actioncustomize_registerthemes\comman\comman.php:52
filterkirki_control_typesthemes\comman\comman.php:72
actioninitthemes\comman\comman.php:79
filterhill_top_barthemes\comman\front\front-action.php:3
filterhill_left_header_beforethemes\comman\front\front-action.php:15
filterhill_center_header_beforethemes\comman\front\front-action.php:25
filterhill_right_headerthemes\comman\front\front-action.php:40
filterwp_footerthemes\comman\front\front-action.php:55
filterhill_section_bodythemes\comman\front\front-action.php:63
filterhill_before_index_loopthemes\comman\front\front-action.php:75
filterhill_after_index_loopthemes\comman\front\front-action.php:76
actionwpthemes\comman\front\front-action.php:94
actionhill_section_bodythemes\comman\front\front-action.php:97
Maintenance & Trust

Hill Extension Maintenance & Trust

Maintenance Signals

WordPress version tested5.8.13
Last updatedJun 10, 2022
PHP min version
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs20
Alternatives

Hill Extension Alternatives

No alternatives data available yet.

Developer Profile

Hill Extension Developer Profile

theme funda

26 plugins · 12K total installs

87
trust score
Avg Security Score
98/100
Avg Patch Time
85 days
View full developer profile
Detection Fingerprints

How We Detect Hill Extension

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/hill-extension/assets/css/style.css/wp-content/plugins/hill-extension/assets/css/comman.css/wp-content/plugins/hill-extension/assets/libary/owl/assets/owl.carousel.min.css/wp-content/plugins/hill-extension/assets/libary/owl/assets/owl.theme.default.min.css/wp-content/plugins/hill-extension/assets/libary/aos/aos.css/wp-content/plugins/hill-extension/assets/js/script.js/wp-content/plugins/hill-extension/assets/css/customizer-admin.css
Script Paths
/wp-content/plugins/hill-extension/assets/libary/owl/owl.carousel.js/wp-content/plugins/hill-extension/assets/libary/aos/aos.js/wp-content/plugins/hill-extension/assets/js/script.js

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Hill Extension