JSM Show User Metadata Security & Risk Analysis

wordpress.org/plugins/jsm-show-user-meta

Show user metadata in a metabox when editing users - a great tool for debugging issues with user metadata.

3K active installs v4.8.0 PHP 7.4.33+ WP 6.0+ Updated Mar 11, 2026
custom-fieldsinspectormetadataprofileusers
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is JSM Show User Metadata Safe to Use in 2026?

Generally Safe

Score 100/100

JSM Show User Metadata has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 23d ago
Risk Assessment

The static analysis of jsm-show-user-meta v4.8.0 indicates a strong security posture based on the provided metrics. There are no identified AJAX handlers, REST API routes, shortcodes, or cron events that could serve as entry points for attackers. Furthermore, the code signals show a commendable absence of dangerous functions, raw SQL queries, unescaped output, file operations, external HTTP requests, and crucially, any checks for nonces or capabilities. The taint analysis also reveals no identified flows with unsanitized paths or any critical or high severity issues.

The vulnerability history is equally positive, with no recorded CVEs, either historical or currently unpatched. This suggests a development team that is either highly proactive in preventing vulnerabilities or has not encountered any in the past. The lack of common vulnerability types reinforces this impression. Overall, jsm-show-user-meta v4.8.0 presents a very low risk profile due to its minimal attack surface, clean code signals, and unblemished vulnerability history. The absence of any identifiable security weaknesses in the provided static analysis and historical data is a significant strength.

Vulnerabilities
None known

JSM Show User Metadata Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

JSM Show User Metadata Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

JSM Show User Metadata Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
actioninitjsm-show-user-meta.php:50
actioninitjsm-show-user-meta.php:51
Maintenance & Trust

JSM Show User Metadata Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 11, 2026
PHP min version7.4.33
Downloads96K

Community Trust

Rating100/100
Number of ratings2
Active installs3K
Developer Profile

JSM Show User Metadata Developer Profile

JS Morisset

31 plugins · 33K total installs

93
trust score
Avg Security Score
99/100
Avg Patch Time
12 days
View full developer profile
Detection Fingerprints

How We Detect JSM Show User Metadata

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/jsm-show-user-meta/assets/js/backend/jsm-show-user-meta.js/wp-content/plugins/jsm-show-user-meta/assets/css/backend/jsm-show-user-meta.css
Script Paths
/wp-content/plugins/jsm-show-user-meta/assets/js/backend/jsm-show-user-meta.js
Version Parameters
jsm-show-user-meta/assets/js/backend/jsm-show-user-meta.js?ver=jsm-show-user-meta/assets/css/backend/jsm-show-user-meta.css?ver=

HTML / DOM Fingerprints

CSS Classes
jsm-show-user-meta-wrap
HTML Comments
<!-- JSM Show User Metadata --><!-- JSM Show User Metadata END -->
JS Globals
JSM_SUM_DATA
FAQ

Frequently Asked Questions about JSM Show User Metadata