WP-Safety

PWA — easy way to Progressive Web App Security & Risk Analysis

wordpress.org/plugins/iworks-pwa

Your easy way to Progressive Web Application.

2K active installs v1.7.8 PHP 8.0+ WP 6.0+ Updated Sep 1, 2025
manifest-jsonofflineprogressive-web-applicationpwa
99
A · Safe
CVEs total1
Unpatched0
Last CVEOct 1, 2024
Plugin page Download
Safety Verdict

Is PWA — easy way to Progressive Web App Safe to Use in 2026?

Generally Safe

Score 99/100

PWA — easy way to Progressive Web App has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.

1 known CVELast CVE: Oct 1, 2024Updated 8mo ago
Risk Assessment

The iworks-pwa plugin v1.7.8 exhibits a generally strong security posture. The static analysis reveals a small attack surface with all identified entry points (AJAX handlers) protected by authentication checks. The code demonstrates good practices by using prepared statements for all SQL queries and properly escaping over 95% of its outputs. Nonce and capability checks are also present, indicating a conscious effort to prevent common web vulnerabilities. The absence of critical or high severity taint flows further reinforces this positive assessment.

Key Concerns

  • Bundled library (Select2) without version information
  • One known past medium vulnerability
Vulnerabilities
1 published

PWA — easy way to Progressive Web App Security Vulnerabilities

CVEs by Year

1 CVE in 2024
2024
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2024-8967medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

PWA — easy way to Progressive Web App <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

Oct 1, 2024 Patched in 1.6.4 (1d)
Version History

PWA — easy way to Progressive Web App Release Timeline

v1.7.8Current
v1.7.7
v1.7.6
v1.7.5
v1.7.4
v1.7.3
v1.7.2
v1.7.1
v1.7.0
v1.6.9
v1.6.8
v1.6.7
v1.6.6
v1.6.5
v1.6.4
v1.6.31 CVE
CVE-2024-8967
v1.6.21 CVE
CVE-2024-8967
v1.6.11 CVE
CVE-2024-8967
v1.6.01 CVE
CVE-2024-8967
v1.5.91 CVE
CVE-2024-8967
Code Analysis
Analyzed Mar 16, 2026

PWA — easy way to Progressive Web App Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
16
325 escaped
Nonce Checks
6
Capability Checks
2
File Operations
1
External Requests
2
Bundled Libraries
1

Bundled Libraries

Select2

Output Escaping

95% escaped341 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

2 flows
update_taxonomy_options (includes\iworks\options\options.php:1485)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

PWA — easy way to Progressive Web App Attack Surface

Entry Points2
Unprotected0

AJAX Handlers 2

authwp_ajax_iworks_pwa_notice_check_url_hideincludes\iworks\pwa\class-iworks-pwa-administrator.php:69
authwp_ajax_iworks_rate_buttonincludes\iworks\rate\rate.php:87
WordPress Hooks 83
actioninitincludes\iworks\class-iworks-pwa.php:161
actioninitincludes\iworks\class-iworks-pwa.php:162
actioninitincludes\iworks\class-iworks-pwa.php:163
actionload-settings_page_iworks_pwa_indexincludes\iworks\class-iworks-pwa.php:169
actionwp_update_nav_menuincludes\iworks\class-iworks-pwa.php:170
actionadmin_enqueue_scriptsincludes\iworks\options\options.php:88
actionadmin_headincludes\iworks\options\options.php:89
actionadmin_menuincludes\iworks\options\options.php:90
actionadmin_noticesincludes\iworks\options\options.php:91
filterscreen_layout_columnsincludes\iworks\options\options.php:92
actionload-index.phpincludes\iworks\pwa\class-iworks-pwa-administrator.php:51
filteriworks_plugin_get_optionsincludes\iworks\pwa\class-iworks-pwa-administrator.php:56
filteriworks_pwa_administrator_debug_infoincludes\iworks\pwa\class-iworks-pwa-administrator.php:57
filteriworks_pwa_optionsincludes\iworks\pwa\class-iworks-pwa-administrator.php:58
actionadmin_initincludes\iworks\pwa\class-iworks-pwa-administrator.php:62
actionadmin_noticesincludes\iworks\pwa\class-iworks-pwa-administrator.php:63
actionadmin_noticesincludes\iworks\pwa\class-iworks-pwa-administrator.php:64
actionadmin_noticesincludes\iworks\pwa\class-iworks-pwa-administrator.php:65
actionadmin_print_footer_scriptsincludes\iworks\pwa\class-iworks-pwa-administrator.php:66
actionupdate_option_rewrite_rulesincludes\iworks\pwa\class-iworks-pwa-administrator.php:67
actionadmin_enqueue_scriptsincludes\iworks\pwa\class-iworks-pwa-administrator.php:68
filteriworks_rate_notice_logo_styleincludes\iworks\pwa\class-iworks-pwa-administrator.php:73
actionload-settings_page_iworks_pwa_indexincludes\iworks\pwa\class-iworks-pwa-administrator.php:85
actionload-settings_page_iworks_pwa_indexincludes\iworks\pwa\class-iworks-pwa-administrator.php:86
actionsave_postincludes\iworks\pwa\class-iworks-pwa-administrator.php:87
actionupdate_option_active_pluginsincludes\iworks\pwa\class-iworks-pwa-administrator.php:88
actionupdate_option_blogdescriptionincludes\iworks\pwa\class-iworks-pwa-administrator.php:89
actionupdate_option_blognameincludes\iworks\pwa\class-iworks-pwa-administrator.php:90
actionupdate_option_db_versionincludes\iworks\pwa\class-iworks-pwa-administrator.php:91
actionupdate_option_homeincludes\iworks\pwa\class-iworks-pwa-administrator.php:92
actionupdate_option_page_for_postsincludes\iworks\pwa\class-iworks-pwa-administrator.php:93
actionupdate_option_page_on_frontincludes\iworks\pwa\class-iworks-pwa-administrator.php:94
actionupdate_option_permalink_structureincludes\iworks\pwa\class-iworks-pwa-administrator.php:95
actionupdate_option_show_on_frontincludes\iworks\pwa\class-iworks-pwa-administrator.php:96
actionupdate_option_site_iconincludes\iworks\pwa\class-iworks-pwa-administrator.php:97
actionupdate_option_siteurlincludes\iworks\pwa\class-iworks-pwa-administrator.php:98
actionupdate_option_stylesheetincludes\iworks\pwa\class-iworks-pwa-administrator.php:99
actionafter_switch_themeincludes\iworks\pwa\class-iworks-pwa-administrator.php:105
actionshutdownincludes\iworks\pwa\class-iworks-pwa-administrator.php:106
actionupdate_option_active_pluginsincludes\iworks\pwa\class-iworks-pwa-administrator.php:112
actionshutdownincludes\iworks\pwa\class-iworks-pwa-administrator.php:118
filteriworks_plugin_get_optionsincludes\iworks\pwa\class-iworks-pwa-administrator.php:122
actionadmin_noticesincludes\iworks\pwa\class-iworks-pwa-administrator.php:229
filterhttps_ssl_verifyincludes\iworks\pwa\class-iworks-pwa-administrator.php:519
actionwp_headincludes\iworks\pwa\class-iworks-pwa-apple.php:15
actioninitincludes\iworks\pwa\class-iworks-pwa-apple.php:16
actionwp_headincludes\iworks\pwa\class-iworks-pwa-frontend.php:32
actioninitincludes\iworks\pwa\class-iworks-pwa-frontend.php:33
actionwp_enqueue_scriptsincludes\iworks\pwa\class-iworks-pwa-frontend.php:60
actionwp_enqueue_scriptsincludes\iworks\pwa\class-iworks-pwa-frontend.php:61
actionparse_requestincludes\iworks\pwa\class-iworks-pwa-manifest.php:31
actionafter_setup_themeincludes\iworks\pwa\class-iworks-pwa-manifest.php:35
actioninitincludes\iworks\pwa\class-iworks-pwa-manifest.php:36
actioninitincludes\iworks\pwa\class-iworks-pwa-manifest.php:37
actionlogin_enqueue_scriptsincludes\iworks\pwa\class-iworks-pwa-manifest.php:38
actionwp_enqueue_scriptsincludes\iworks\pwa\class-iworks-pwa-manifest.php:39
actionwp_nav_menu_item_custom_fieldsincludes\iworks\pwa\class-iworks-pwa-manifest.php:40
actionwp_update_nav_menuincludes\iworks\pwa\class-iworks-pwa-manifest.php:41
actionwp_update_nav_menuincludes\iworks\pwa\class-iworks-pwa-manifest.php:42
actionwp_headincludes\iworks\pwa\class-iworks-pwa-microsoft.php:58
actionparse_requestincludes\iworks\pwa\class-iworks-pwa-microsoft.php:59
actioninitincludes\iworks\pwa\class-iworks-pwa-microsoft.php:60
filteriworks_pwa_manifest_shortcut_elementincludes\iworks\pwa\integrations\class-iworks-pwa-integrations-menu-icons.php:11
filterog_image_initincludes\iworks\pwa\integrations\class-iworks-pwa-integrations-og.php:15
actionadmin_initincludes\iworks\pwa\integrations\class-iworks-pwa-integrations-wpml.php:15
filteriworks_pwa_configuration_descriptionincludes\iworks\pwa\integrations\class-iworks-pwa-integrations-wpml.php:19
filteriworks_pwa_configuration_nameincludes\iworks\pwa\integrations\class-iworks-pwa-integrations-wpml.php:20
filteriworks_pwa_configuration_offline_page_contentincludes\iworks\pwa\integrations\class-iworks-pwa-integrations-wpml.php:21
filteriworks_pwa_configuration_short_nameincludes\iworks\pwa\integrations\class-iworks-pwa-integrations-wpml.php:22
filteriworks_pwa_manifest_is_manifest_json_requestincludes\iworks\pwa\integrations\class-iworks-pwa-integrations-wpml.php:23
filteriworks_pwa_manifest_is_offline_page_requestincludes\iworks\pwa\integrations\class-iworks-pwa-integrations-wpml.php:24
filteriworks_pwa_manifest_is_service_worker_requestincludes\iworks\pwa\integrations\class-iworks-pwa-integrations-wpml.php:25
filteriworks_pwa_offline_cache_nameincludes\iworks\pwa\integrations\class-iworks-pwa-integrations-wpml.php:26
actionload-index.phpincludes\iworks\rate\rate.php:85
actioniworks-register-pluginincludes\iworks\rate\rate.php:86
actionadmin_initincludes\iworks\rate\rate.php:88
filteriworks_rate_assistanceincludes\iworks\rate\rate.php:92
filteriworks_rate_loveincludes\iworks\rate\rate.php:93
filteriworks_rate_advertising_ogincludes\iworks\rate\rate.php:99
actionadmin_enqueue_scriptsincludes\iworks\rate\rate.php:164
actionadmin_noticesincludes\iworks\rate\rate.php:165
actionadmin_enqueue_scriptsincludes\iworks\rate\rate.php:174
actionadmin_noticesincludes\iworks\rate\rate.php:175
Maintenance & Trust

PWA — easy way to Progressive Web App Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedSep 1, 2025
PHP min version8.0
Downloads57K

Community Trust

Rating96/100
Number of ratings26
Active installs2K
Alternatives

PWA — easy way to Progressive Web App Alternatives

PWA for WP – Progressive Web Apps Made Simple

PWA for WP – Progressive Web Apps Made Simple

pwa-for-wp

A
95

PWA plugin is bringing the power of the Progressive Web Apps to the WP & AMP to take the user experience to the next level.

20K 5 CVEs
Hyper PWA

Hyper PWA

hyper-pwa

A
92

Provide Manifest and Service Worker, convert WordPress into Progressive Web Apps (PWA).

300 No CVEs
SiteEase Progressive Web App

SiteEase Progressive Web App

iflair-pwa-app

A
100

SiteEase Progressive Web App converts your WordPress website into a Progressive Web App (PWA) with offline support, caching strategies, and installabl &hellip;

60 No CVEs
Internet Connection Alert!

Internet Connection Alert!

internet-connection-status

A
85

Aautomatically alert your visitors when they've lost internet connectivity

60 No CVEs
Offline Pre-Cache

Offline Pre-Cache

offline-precache

A
85

The missing plugin which will make your website load as a rocket even offline.

0 No CVEs
Developer Profile

PWA — easy way to Progressive Web App Developer Profile

Marcin Pietrzak

23 plugins · 89K total installs

77
trust score
Avg Security Score
97/100
Avg Patch Time
274 days
View full developer profile
Detection Fingerprints

How We Detect PWA — easy way to Progressive Web App

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/iworks-pwa/assets/css/iworks-pwa.css/wp-content/plugins/iworks-pwa/assets/js/iworks-pwa.js/wp-content/plugins/iworks-pwa/assets/js/iworks-pwa-sw.js/wp-content/plugins/iworks-pwa/assets/js/iworks-pwa-utils.js/wp-content/plugins/iworks-pwa/assets/js/iworks-pwa-apple.js/wp-content/plugins/iworks-pwa/assets/js/iworks-pwa-microsoft.js/wp-content/plugins/iworks-pwa/assets/js/iworks-pwa-manifest.js
Script Paths
/wp-content/plugins/iworks-pwa/assets/js/iworks-pwa.js/wp-content/plugins/iworks-pwa/assets/js/iworks-pwa-sw.js/wp-content/plugins/iworks-pwa/assets/js/iworks-pwa-utils.js/wp-content/plugins/iworks-pwa/assets/js/iworks-pwa-apple.js/wp-content/plugins/iworks-pwa/assets/js/iworks-pwa-microsoft.js/wp-content/plugins/iworks-pwa/assets/js/iworks-pwa-manifest.js
Version Parameters
iworks-pwa/assets/css/iworks-pwa.css?ver=iworks-pwa/assets/js/iworks-pwa.js?ver=iworks-pwa/assets/js/iworks-pwa-sw.js?ver=iworks-pwa/assets/js/iworks-pwa-utils.js?ver=iworks-pwa/assets/js/iworks-pwa-apple.js?ver=iworks-pwa/assets/js/iworks-pwa-microsoft.js?ver=iworks-pwa/assets/js/iworks-pwa-manifest.js?ver=

HTML / DOM Fingerprints

CSS Classes
iworks-pwa-options-wrapiworks-pwa-options-wrap-contentiworks-pwa-options-wrap-headeriworks-pwa-options-wrap-navigationiworks-pwa-options-wrap-navigation-linkiworks-pwa-options-wrap-navigation-link-activeiworks-pwa-options-wrap-navigation-link-itemiworks-pwa-options-wrap-navigation-link-item-active+40 more
HTML Comments
<!-- PWA - by iWorks --><!-- PWA icon - start --><!-- PWA icon - end --><!-- PWA apple icon - start -->+9 more
Data Attributes
data-iworks-pwa-options
JS Globals
iworks_pwa
FAQ

Frequently Asked Questions about PWA — easy way to Progressive Web App