ImmoWP Diagnostic DPE GES Security & Risk Analysis

wordpress.org/plugins/immowp-diagnostic-dpe-ges

Affichez les diagnostics de performance énergétique (DPE) et les émissions de gaz à effet de serre (GES) avec des graphiques en pur CSS.

20 active installs v1.2.1 PHP 7.4+ WP 5.0+ Updated Apr 13, 2026
diagnosticdpeenergiegesimmobilier
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is ImmoWP Diagnostic DPE GES Safe to Use in 2026?

Generally Safe

Score 100/100

ImmoWP Diagnostic DPE GES has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The plugin "immowp-diagnostic-dpe-ges" v1.2.1 exhibits a generally strong security posture based on the static analysis and vulnerability history provided. The code demonstrates good practices by avoiding dangerous functions, using prepared statements exclusively for SQL queries, and maintaining a high percentage of properly escaped output. The presence of a nonce check and the absence of file operations or external HTTP requests further contribute to a secure foundation. Notably, the taint analysis found no unsanitized paths, indicating a low risk of typical injection vulnerabilities.

Key Concerns

  • No capability checks detected.
  • Minor concern: 99% output escaping, not 100%.
Vulnerabilities
None known

ImmoWP Diagnostic DPE GES Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

ImmoWP Diagnostic DPE GES Release Timeline

v1.2.1Current
v1.0.0
Code Analysis
Analyzed Apr 16, 2026

ImmoWP Diagnostic DPE GES Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
154 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

99% escaped155 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

1 flows
<settings-page> (admin/partials/settings-page.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

ImmoWP Diagnostic DPE GES Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[immowp_dpe_ges] includes/class-immowp-diagnostic-dpe-ges.php:54
WordPress Hooks 3
actionadmin_menuincludes/class-immowp-diagnostic-dpe-ges.php:46
actionadmin_enqueue_scriptsincludes/class-immowp-diagnostic-dpe-ges.php:47
actionwp_enqueue_scriptsincludes/class-immowp-diagnostic-dpe-ges.php:53
Maintenance & Trust

ImmoWP Diagnostic DPE GES Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.5
Last updatedApr 13, 2026
PHP min version7.4
Downloads350

Community Trust

Rating100/100
Number of ratings1
Active installs20
Developer Profile

ImmoWP Diagnostic DPE GES Developer Profile

ImmoWP

3 plugins · 70 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect ImmoWP Diagnostic DPE GES

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/immowp-diagnostic-dpe-ges/public/css/immowp-diagnostic-dpe-ges-public.css/wp-content/plugins/immowp-diagnostic-dpe-ges/admin/css/immowp-diagnostic-dpe-ges-admin.css
Version Parameters
immowp-diagnostic-dpe-ges/public/css/immowp-diagnostic-dpe-ges-public.css?ver=immowp-diagnostic-dpe-ges-admin?ver=

HTML / DOM Fingerprints

CSS Classes
immowp-dpe-ges-containerimmowp-dpe-ges-labelimmowp-dpe-ges-valueimmowp-dpe-ges-legendimmowp-dpe-ges-legend-itemimmowp-dpe-ges-legend-colorimmowp-dpe-ges-legend-textimmowp-dpe-ges-legend-range
HTML Comments
Shortcode handler for DPE/GES display
Data Attributes
data-dpe-valuedata-ges-value
Shortcode Output
<div class="immowp-dpe-ges-container"<div class="immowp-dpe-ges-label">DPE</div><div class="immowp-dpe-ges-value"><div class="immowp-dpe-ges-legend">
FAQ

Frequently Asked Questions about ImmoWP Diagnostic DPE GES