Jellyfish backdrop Security & Risk Analysis

wordpress.org/plugins/jellyfish-backdrop

Fullscreen background images and background slideshows on any WordPress post or page. Easily upload and select images using the media library.

100 active installs v0.7.0 PHP + WP 3.5+ Updated Aug 28, 2020
backgroundfullscreengalleryimageslideshow
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Jellyfish backdrop Safe to Use in 2026?

Generally Safe

Score 85/100

Jellyfish backdrop has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 5yr ago
Risk Assessment

The "jellyfish-backdrop" v0.7.0 plugin exhibits a strong security posture from an attack surface perspective, with no apparent AJAX handlers, REST API routes, shortcodes, or cron events exposed. This significantly reduces the potential for external manipulation. Furthermore, the code demonstrates good practices regarding SQL queries, all of which are properly prepared, and includes a nonce check and capability checks, indicating an effort to secure its operations. The absence of any recorded vulnerabilities, critical taint flows, or dangerous functions further reinforces this positive assessment.

Key Concerns

  • Low output escaping
  • Bundled outdated library (Select2)
Vulnerabilities
None known

Jellyfish backdrop Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Jellyfish backdrop Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
61
9 escaped
Nonce Checks
1
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
1

Bundled Libraries

Select2

Output Escaping

13% escaped70 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
save (meta-box-class\my-meta-box-class.php:1020)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Jellyfish backdrop Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 10
actionadmin_initadmin.php:6
actionadmin_menuadmin.php:7
actionwp_enqueue_scriptsjellyfish-backdrop.php:43
actionwp_footerjellyfish-backdrop.php:78
filterinitmeta-box-class\my-meta-box-class.php:118
actionadd_meta_boxesmeta-box-class\my-meta-box-class.php:138
actionsave_postmeta-box-class\my-meta-box-class.php:140
actionadmin_print_stylesmeta-box-class\my-meta-box-class.php:143
filterwp_handle_upload_prefiltermeta-box-class\my-meta-box-class.php:145
actionpost_edit_form_tagmeta-box-class\my-meta-box-class.php:221
Maintenance & Trust

Jellyfish backdrop Maintenance & Trust

Maintenance Signals

WordPress version tested5.5.18
Last updatedAug 28, 2020
PHP min version
Downloads7K

Community Trust

Rating100/100
Number of ratings5
Active installs100
Developer Profile

Jellyfish backdrop Developer Profile

Strawberry Jellyfish

3 plugins · 1K total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Jellyfish backdrop

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/jellyfish-backdrop/js/jquery.backstretch.min.js
Script Paths
/wp-content/plugins/jellyfish-backdrop/js/jquery.backstretch.min.js

HTML / DOM Fingerprints

JS Globals
sjb_backgrounds
FAQ

Frequently Asked Questions about Jellyfish backdrop