Just Events Security & Risk Analysis

wordpress.org/plugins/just-events

Adds an Event post type to your WordPress powered site.

60 active installs v1.0.6 PHP 8.0+ WP 6.3+ Updated Apr 16, 2025
eventevents
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Just Events Safe to Use in 2026?

Generally Safe

Score 92/100

Just Events has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The "just-events" plugin v1.0.6 demonstrates a generally good security posture in several key areas. The absence of known CVEs and a clean vulnerability history suggest a history of responsible development. Furthermore, the plugin utilizes prepared statements for all SQL queries, significantly mitigating the risk of SQL injection vulnerabilities. The static analysis also reports zero AJAX handlers, REST API routes, shortcodes, or cron events without appropriate authentication or permission checks, indicating a controlled and minimal attack surface.

Key Concerns

  • Low percentage of properly escaped output
  • Taint flows with unsanitized paths
  • No nonce checks found
Vulnerabilities
None known

Just Events Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Just Events Release Timeline

v1.0.6Current
v1.0.5
Code Analysis
Analyzed Mar 16, 2026

Just Events Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
35
3 escaped
Nonce Checks
0
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

8% escaped38 total outputs
Data Flows · Security
2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths
admin_filters (includes\class-posts-columns.php:135)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Just Events Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
actionadmin_menuincludes\class-admin.php:37
actionadmin_initincludes\class-admin.php:40
Maintenance & Trust

Just Events Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedApr 16, 2025
PHP min version8.0
Downloads2K

Community Trust

Rating100/100
Number of ratings3
Active installs60
Developer Profile

Just Events Developer Profile

wpexplorer

15 plugins · 22K total installs

91
trust score
Avg Security Score
96/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Just Events

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/just-events/assets/css/admin.css/wp-content/plugins/just-events/assets/js/admin.js/wp-content/plugins/just-events/assets/css/frontend.css/wp-content/plugins/just-events/assets/js/frontend.js/wp-content/plugins/just-events/assets/js/editor.js
Script Paths
/wp-content/plugins/just-events/assets/js/admin.js/wp-content/plugins/just-events/assets/js/frontend.js/wp-content/plugins/just-events/assets/js/editor.js
Version Parameters
just-events/assets/css/admin.css?ver=just-events/assets/js/admin.js?ver=just-events/assets/css/frontend.css?ver=just-events/assets/js/frontend.js?ver=just-events/assets/js/editor.js?ver=

HTML / DOM Fingerprints

CSS Classes
just-events-admin-wrapjust-events-settings-fieldjust-events-frontend-eventjust-events-event-titlejust-events-event-datejust-events-event-timejust-events-event-contentjust-events-event-meta+2 more
HTML Comments
<!-- just_events_settings --><!-- Admin Settings --><!-- Frontend Event Output -->
Data Attributes
data-wp-event-iddata-event-start-datedata-event-end-date
JS Globals
justEventsFrontendjustEventsAdmin
REST Endpoints
/wp-json/just-events/v1/events
Shortcode Output
<div class="just-events-event-list"><div class="just-events-single-event">
FAQ

Frequently Asked Questions about Just Events