Inline Feedback Widget Security & Risk Analysis

wordpress.org/plugins/inline-feedback-widget

Collect user feedback with a lightweight widget. Connect your workspace, configure visibility, and start gathering insights in seconds.

0 active installs v0.1.0 PHP 7.0+ WP 4.7+ Updated Apr 10, 2026
customer-feedbackfeedbackuser-feedbackwidget
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Inline Feedback Widget Safe to Use in 2026?

Generally Safe

Score 100/100

Inline Feedback Widget has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "inline-feedback-widget" plugin version 0.1.0 exhibits a strong security posture based on the provided static analysis and vulnerability history. The absence of any identified dangerous functions, raw SQL queries, unsanitized paths in taint flows, or unescaped output is commendable. Furthermore, the plugin implements a reasonable number of nonce and capability checks, indicating an awareness of WordPress security best practices. The lack of any historical CVEs, especially critical or high severity ones, suggests a history of secure development or a lack of widespread exploitation, which is a positive indicator.

Key Concerns

  • Single external HTTP request detected.
Vulnerabilities
None known

Inline Feedback Widget Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Inline Feedback Widget Release Timeline

v0.1.0Current
Code Analysis
Analyzed Apr 16, 2026

Inline Feedback Widget Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
0
67 escaped
Nonce Checks
3
Capability Checks
6
File Operations
0
External Requests
1
Bundled Libraries
0

SQL Query Safety

100% prepared2 total queries

Output Escaping

100% escaped67 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

2 flows
handle_save_settings (includes/class-admin-settings.php:151)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Inline Feedback Widget Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 12
actionadmin_menuincludes/class-admin-settings.php:9
actionadmin_enqueue_scriptsincludes/class-admin-settings.php:10
actionadmin_noticesincludes/class-admin-settings.php:11
actionadmin_initincludes/class-admin-settings.php:12
actionadmin_initincludes/class-admin-settings.php:13
actionadmin_post_inlf_connectincludes/class-connect-handler.php:7
actionadmin_post_inlf_disconnectincludes/class-connect-handler.php:8
actionadmin_initincludes/class-connect-handler.php:9
filterallowed_redirect_hostsincludes/class-connect-handler.php:10
actionwp_enqueue_scriptsincludes/class-widget-injector.php:9
filterscript_loader_tagincludes/class-widget-injector.php:10
actionplugins_loadedinline-feedback-widget.php:83
Maintenance & Trust

Inline Feedback Widget Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedApr 10, 2026
PHP min version7.0
Downloads51

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Inline Feedback Widget Developer Profile

Inline Feedback

1 plugin · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Inline Feedback Widget

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/inline-feedback-widget/admin/css/admin-style.css/wp-content/plugins/inline-feedback-widget/admin/js/admin.js
Script Paths
/wp-content/plugins/inline-feedback-widget/admin/js/admin.js
Version Parameters
inline-feedback-widget/admin/css/admin-style.css?ver=inline-feedback-widget/admin/js/admin.js?ver=

HTML / DOM Fingerprints

JS Globals
inlfAdmin
FAQ

Frequently Asked Questions about Inline Feedback Widget