WP-Safety

HM Resume Manager Security & Risk Analysis

wordpress.org/plugins/hm-resume-manager

WordPress Resume Manager plugin to display and manage personal resume or CV at your WordPress webpage.

200 active installs v2.4.1 PHP 7.2+ WP 5.4+ Updated Feb 6, 2025
cveducationexperienceresumeskills
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is HM Resume Manager Safe to Use in 2026?

Generally Safe

Score 92/100

HM Resume Manager has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The "hm-resume-manager" v2.4.1 plugin exhibits a mixed security posture. On one hand, its code demonstrates good practices regarding SQL queries, utilizing prepared statements exclusively, and has a strong track record with 98% of its outputs being properly escaped. The absence of recorded vulnerabilities or CVEs is also a significant positive indicator. However, the plugin presents a notable concern due to its substantial attack surface without adequate authorization checks. With four out of five identified entry points being AJAX handlers without authentication, this creates a significant risk of unauthorized access and manipulation.

Key Concerns

  • 4 unprotected AJAX handlers
  • Bundled Freemius v1.0 library potentially outdated
  • 2 flows with unsanitized paths
Vulnerabilities
None known

HM Resume Manager Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

HM Resume Manager Code Analysis

Dangerous Functions
6
Raw SQL Queries
0
2 prepared
Unescaped Output
5
202 escaped
Nonce Checks
4
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
1

Dangerous Functions Found

unserialize$hmrmGeneralSettings = stripslashes_deep(unserialize(get_option('hmrm_general_settings')));admin\view\personal-info.php:22
unserialize$hmrmStyleSettings = stripslashes_deep(unserialize(get_option('hmrm_style_settings')));admin\view\style.php:29
unserializeif (is_array(stripslashes_deep(unserialize(get_option('hmrm_general_settings'))))) {front\view\resume.php:3
unserialize$hmrmGeneralSettings = stripslashes_deep(unserialize(get_option('hmrm_general_settings')));front\view\resume.php:4
unserializeif (is_array(stripslashes_deep(unserialize(get_option('hmrm_style_settings'))))) {front\view\resume.php:30
unserialize$hmrmStyleSettings = stripslashes_deep(unserialize(get_option('hmrm_style_settings')));front\view\resume.php:32

Bundled Libraries

Freemius1.0

SQL Query Safety

100% prepared2 total queries

Output Escaping

98% escaped207 total outputs
Data Flows
2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths
<personal-info> (admin\view\personal-info.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
4 unprotected

HM Resume Manager Attack Surface

Entry Points5
Unprotected4

AJAX Handlers 4

authwp_ajax_hmrm_get_imageinc\cls-hmrm-master.php:41
noprivwp_ajax_hmrm_get_imageinc\cls-hmrm-master.php:42
authwp_ajax_hmrm_load_experienceinc\cls-hmrm-master.php:43
noprivwp_ajax_hmrm_load_experienceinc\cls-hmrm-master.php:44

Shortcodes 1

[hm_resume_manager] front\cls-hmrm-front.php:75
WordPress Hooks 4
actionplugins_loadedinc\cls-hmrm-master.php:17
actionadmin_menuinc\cls-hmrm-master.php:39
actionadmin_enqueue_scriptsinc\cls-hmrm-master.php:40
actionwp_enqueue_scriptsinc\cls-hmrm-master.php:50
Maintenance & Trust

HM Resume Manager Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedFeb 6, 2025
PHP min version7.2
Downloads7K

Community Trust

Rating100/100
Number of ratings1
Active installs200
Alternatives

HM Resume Manager Alternatives

Resume Builder

Resume Builder

resume-builder

A
100

Create one or many resumes with a photo, contact info, education, experience, skills, and more!

1K 1 CVE
WP Resume

WP Resume

wp-resume

A
85

Out-of-the-box solution to get your resume online. Built on WordPress's custom post types, it offers a uniquely familiar approach to publishing

100 No CVEs
Docs Viewer Add-On for WP Job Openings

Docs Viewer Add-On for WP Job Openings

docs-viewer-add-on-for-wp-job-openings

A
100

The plugin will add a preview of the uploaded resume in the applicant detail page of WP Job Openings Plugin. You need not download the uploaded resume &hellip;

6K No CVEs
Resume / CV

Resume / CV

resume-cv

A
85

Resume CV WordPress Plugin . Easily build resume with wordpress.

400 No CVEs
Resume CV Block

Resume CV Block

resume-cv-block

A
85

Beautiful Resume CV Gutenberg Block for everyone who wants to publish a nice Resume/CV.

70 No CVEs
Developer Profile

HM Resume Manager Developer Profile

Hossni Mubarak

13 plugins · 8K total installs

76
trust score
Avg Security Score
96/100
Avg Patch Time
146 days
View full developer profile
Detection Fingerprints

How We Detect HM Resume Manager

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/hm-resume-manager/assets/css/fontawesome/css/all.min.css/wp-content/plugins/hm-resume-manager/assets/css/hm-resume-manager-admin.css/wp-content/plugins/hm-resume-manager/assets/css/jquery.fancybox.css/wp-content/plugins/hm-resume-manager/assets/css/hm-custom-style.css/wp-content/plugins/hm-resume-manager/assets/js/jquery.fancybox.js/wp-content/plugins/hm-resume-manager/assets/js/hm-resume-manager-admin-script.js
Script Paths
/wp-content/plugins/hm-resume-manager/assets/js/jquery.fancybox.js/wp-content/plugins/hm-resume-manager/assets/js/hm-resume-manager-admin-script.js
Version Parameters
hm-resume-manager/assets/css/fontawesome/css/all.min.css?ver=hm-resume-manager/assets/css/hm-resume-manager-admin.css?ver=hm-resume-manager/assets/css/jquery.fancybox.css?ver=hm-resume-manager/assets/css/hm-custom-style.css?ver=hm-resume-manager/assets/js/jquery.fancybox.js?ver=hm-resume-manager/assets/js/hm-resume-manager-admin-script.js?ver=

HTML / DOM Fingerprints

CSS Classes
hmrm-alerthmrm-closebtnhmcs-delete-formhmcs-btn
Data Attributes
data-fancybox
JS Globals
hmrm_admin_ajax_object
Shortcode Output
[hm_resume_manager]
FAQ

Frequently Asked Questions about HM Resume Manager