Does Hooksure have any unpatched vulnerabilities?

No. All known vulnerabilities in Hooksure have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Hooksure compatible with WordPress 6.9.4?

According to WordPress.org data, Hooksure 1.2.5 has been tested up to WordPress 6.9.4. Check the plugin's changelog for the latest compatibility information.

How often is Hooksure updated?

Hooksure was last updated on Dec 27, 2025. Frequent updates are generally a positive security signal.

What is Hooksure's security score?

Hooksure has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Hooksure Security & Risk Analysis

wordpress.org/plugins/hooksure

Hooksure allows you to map SureForms, form submissions to webhooks dynamically within your WordPress admin dashboard without needing the pro plugin.

60 active installs v1.2.5 PHP + WP 6.5+ Updated Dec 27, 2025

automationform-integrationsformswebhook

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Hooksure Safe to Use in 2026?

Generally Safe

Score 100/100

Hooksure has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago

Risk Assessment

The "hooksure" v1.2.5 plugin exhibits a strong security posture based on the provided static analysis and vulnerability history. The absence of any identified entry points (AJAX handlers, REST API routes, shortcodes, cron events) significantly limits the potential attack surface. Furthermore, the code's adherence to secure coding practices, such as using prepared statements for all SQL queries and the lack of critical or high severity taint flows, is commendable. The plugin also has a clean vulnerability history, with no known CVEs recorded, suggesting a history of responsible development and maintenance.

Key Concerns

Output escaping is only 47% proper
External HTTP requests detected
Capability checks are missing

Vulnerabilities

None known

Hooksure Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

Hooksure Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

16 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

47% escaped34 total outputs

Data Flows

All sanitized

Data Flow Analysis

2 flows

render_hooksure_admin_page (inc\admin.php:20)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

Hooksure Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 4

actionadmin_menuinc\admin.php:6

actionadmin_initinc\admin.php:169

actionrest_api_initinc\hook.php:48

filterrest_pre_dispatchinc\hook.php:49

Maintenance & Trust

Hooksure Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4

Last updatedDec 27, 2025

PHP min version

Downloads2K

Community Trust

Rating0/100

Number of ratings0

Active installs60

Alternatives

Hooksure Alternatives

Webhookify – Send Form Submissions to Webhooks

webhookify-send-form-submissions-to-webhooks

100

Send form submissions from Contact Form 7, WPForms, Gravity Forms, Elementor Forms, and Formidable Forms to any webhook URL instantly.

90 No CVEs

Lazy Webhook Relay for WPForms

lazy-wpforms-webhook-relay

100

Are you a lazy developer? This plugin sends every WPForms submission to an endpoint in the background. Make that data someone else's problem!

0 No CVEs

OttoKit: All-in-One Automation Platform

suretriggers

Experience the power of automation within WordPress: Connect 1,300+ apps, automate manual tasks, and unlock your full potential. Get started now!

100K 4 CVEs

Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin

uncanny-automator

Uncanny Automator is the easiest and most powerful way to connect your WordPress plugins, sites and apps together with powerful automations.

50K 11 CVEs

WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress

wp-webhooks

Automate everything & connect your website, plugins and services together with no-code automations. Browse 100+ integrations...

20K 3 CVEs

Developer Profile

Hooksure Developer Profile

Nathan Foley

2 plugins · 110 total installs

trust score

Avg Security Score

100/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Hooksure

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/hooksure/assets/css/hooksure-admin-style.css/wp-content/plugins/hooksure/assets/js/hooksure-admin.js

Script Paths

/wp-content/plugins/hooksure/assets/js/hooksure-admin.js

Version Parameters

hooksure/assets/css/hooksure-admin-style.css?ver=hooksure/assets/js/hooksure-admin.js?ver=

HTML / DOM Fingerprints

FAQ