JVH Woody Snippets helper Security & Risk Analysis

wordpress.org/plugins/jvh-woody-snippets-helper

This plugin extends the Woody Snippets plugin. It will add the ability to add images to snippets and all library snippets will be on one page for easy …

40 active installs v1.2.2 PHP 7.4+ WP 5.0+ Updated Aug 4, 2021
jvh
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is JVH Woody Snippets helper Safe to Use in 2026?

Generally Safe

Score 85/100

JVH Woody Snippets helper has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 5yr ago
Risk Assessment

The plugin "jvh-woody-snippets-helper" v1.2.2 presents a generally positive security posture based on the static analysis. The absence of any reported CVEs and a clean vulnerability history further reinforces this. Notably, the plugin demonstrates good practices by utilizing prepared statements for all SQL queries and ensuring all outputs are properly escaped, which are crucial for preventing common web vulnerabilities like SQL injection and cross-site scripting. The attack surface is also reported as zero, with no AJAX handlers, REST API routes, shortcodes, or cron events exposed, suggesting a limited attack vector.

Key Concerns

  • Flows with unsanitized paths identified
  • File operations present without capability checks
  • Nonce checks missing on entry points
  • Capability checks missing on entry points
Vulnerabilities
None known

JVH Woody Snippets helper Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

JVH Woody Snippets helper Release Timeline

v1.2.2Current
v1.2.1
v1.2
v1.1
Code Analysis
Analyzed Mar 16, 2026

JVH Woody Snippets helper Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
1
External Requests
0
Bundled Libraries
0
Data Flows · Security
2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths
refreshCurrentPage (inc\AllLibrarySnippetsOnePage.php:59)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

JVH Woody Snippets helper Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
actionadmin_headinc\hide-delete-button.php:9
Maintenance & Trust

JVH Woody Snippets helper Maintenance & Trust

Maintenance Signals

WordPress version tested5.8.13
Last updatedAug 4, 2021
PHP min version7.4
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs40
Developer Profile

JVH Woody Snippets helper Developer Profile

jaapjvh

8 plugins · 470 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect JVH Woody Snippets helper

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/jvh-woody-snippets-helper/assets/css/hide-delete-button.css/wp-content/plugins/jvh-woody-snippets-helper/assets/js/hide-delete-button.js/wp-content/plugins/jvh-woody-snippets-helper/assets/css/show-images.css/wp-content/plugins/jvh-woody-snippets-helper/assets/js/show-images.js
Script Paths
/wp-content/plugins/jvh-woody-snippets-helper/assets/js/hide-delete-button.js/wp-content/plugins/jvh-woody-snippets-helper/assets/js/show-images.js
Version Parameters
jvh-woody-snippets-helper/assets/css/hide-delete-button.css?ver=jvh-woody-snippets-helper/assets/js/hide-delete-button.js?ver=jvh-woody-snippets-helper/assets/css/show-images.css?ver=jvh-woody-snippets-helper/assets/js/show-images.js?ver=

HTML / DOM Fingerprints

CSS Classes
jvh-woody-hide-delete-button-wrapper
Data Attributes
data-jvh-woody-id
FAQ

Frequently Asked Questions about JVH Woody Snippets helper