
JS Widgets Security & Risk Analysis
wordpress.org/plugins/js-widgetsA prototype of next generation of widgets in core, embracing JS for UI and powering the Widgets REST API.
Is JS Widgets Safe to Use in 2026?
Generally Safe
Score 100/100JS Widgets has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.
The "js-widgets" v0.4.3 plugin exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The absence of any reported CVEs and the clean taint analysis are significant strengths, indicating a history of secure development and a lack of exploitable vulnerabilities in past versions. The code also demonstrates good practices with all SQL queries using prepared statements and a high percentage of properly escaped output. Capability checks are also in place, which is positive for access control.
Key Concerns
- No nonce checks detected on entry points
- Potential for insecure file operations
JS Widgets Security Vulnerabilities
JS Widgets Code Analysis
SQL Query Safety
Output Escaping
JS Widgets Attack Surface
WordPress Hooks 28
Maintenance & Trust
JS Widgets Maintenance & Trust
Maintenance Signals
Community Trust
JS Widgets Alternatives
Blaze Demo Importer
blaze-demo-importer
Blaze Demo Importer can be used in all the official themes developed by BlazeThemes.
Organic Builder Widgets – Simple WordPress Page Builder
organic-customizer-widgets
A simple WordPress page builder, Organic Builder Widgets provides a collection of 12 custom widgets to be used in the Customizer as content sections.
Storefront Top Bar
storefront-top-bar
Adds two widgets areas on top of the header of Storefront.
BE REST Endpoints
be-rest-endpoints
Major features in BE REST Endpoints include:
Customize Widgets Plus
customize-widgets-plus
Lab features and a testbed for improvements to Widgets and the Customizer.
JS Widgets Developer Profile
22 plugins · 437K total installs
How We Detect JS Widgets
Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.
Asset Fingerprints
/wp-content/plugins/js-widgets/js/widget-form.js/wp-content/plugins/js-widgets/js/customize-js-widgets.js/wp-content/plugins/js-widgets/js/admin-js-widgets.js/wp-content/plugins/js-widgets/js/shortcode-ui-view-widget-form-field.js/wp-content/plugins/js-widgets/js/widget-preview.js/wp-content/plugins/js-widgets/js/widget-renderer.js/wp-content/plugins/js-widgets/css/widget-preview.css/wp-content/plugins/js-widgets/css/widget-renderer.css/wp-content/plugins/js-widgets/js/widget-form.js/wp-content/plugins/js-widgets/js/customize-js-widgets.js/wp-content/plugins/js-widgets/js/admin-js-widgets.js/wp-content/plugins/js-widgets/js/shortcode-ui-view-widget-form-field.js/wp-content/plugins/js-widgets/js/widget-preview.js/wp-content/plugins/js-widgets/js/widget-renderer.js/wp-content/plugins/js-widgets/js/widget-form.js?ver=/wp-content/plugins/js-widgets/js/customize-js-widgets.js?ver=/wp-content/plugins/js-widgets/js/admin-js-widgets.js?ver=/wp-content/plugins/js-widgets/js/shortcode-ui-view-widget-form-field.js?ver=/wp-content/plugins/js-widgets/js/widget-preview.js?ver=/wp-content/plugins/js-widgets/js/widget-renderer.js?ver=/wp-content/plugins/js-widgets/css/widget-preview.css?ver=/wp-content/plugins/js-widgets/css/widget-renderer.css?ver=HTML / DOM Fingerprints
components-widget-field__descriptioncomponents-widget-field__helpcomponents-widget-field__labelcomponents-widget-field__inputShortcake integration.data-shortcake-ui-widget-namedata-shortcake-ui-widget-field-namedata-shortcake-ui-widget-field-typewindow.JS_Widgets_Formwindow.JS_Widgets_Customize_Widget_Datawindow.JS_Widgets_Customize_Widget_Rendererwindow.JS_Widgets_Adminwindow.JS_Widgets_Previewwindow.JS_Widgets_Renderer/wp-json/js-widgets/v1/widgets