Languages Frontend Display Security & Risk Analysis

wordpress.org/plugins/languages-frontend-display

qTranslate-X extension. Enable/disable languages on frontend

10 active installs v0.0.4 PHP + WP 3.9+ Updated Dec 8, 2019
disablehidelanguageqtranslateqtranslate-x
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Languages Frontend Display Safe to Use in 2026?

Generally Safe

Score 85/100

Languages Frontend Display has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 6yr ago
Risk Assessment

The 'languages-frontend-display' v0.0.4 plugin exhibits a generally good security posture, adhering to several best practices. The absence of any known vulnerabilities (CVEs) and a clean vulnerability history are positive indicators. Static analysis reveals a small attack surface consisting of two AJAX handlers, both of which appear to have authorization checks, further bolstering its security. The use of prepared statements for all SQL queries is commendable, eliminating the risk of SQL injection through this vector. Nonce and capability checks are also present, demonstrating an effort to secure entry points.

Key Concerns

  • Dangerous function preg_replace(/e)
  • Output escaping is not fully implemented (61%)
Vulnerabilities
None known

Languages Frontend Display Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Languages Frontend Display Release Timeline

v0.0.4Current
v0.0.3
v0.0.2
v0.0.1
Code Analysis
Analyzed Mar 17, 2026

Languages Frontend Display Code Analysis

Dangerous Functions
2
Raw SQL Queries
0
0 prepared
Unescaped Output
54
83 escaped
Nonce Checks
3
Capability Checks
6
File Operations
1
External Requests
0
Bundled Libraries
0

Dangerous Functions Found

preg_replace(/e)preg_replace('/eincludes\composer\installers\src\Composer\Installers\MicroweberInstaller.php:105
preg_replace(/e)preg_replace('/eincludes\composer\installers\src\Composer\Installers\MicroweberInstaller.php:107

Output Escaping

61% escaped137 total outputs
Attack Surface

Languages Frontend Display Attack Surface

Entry Points2
Unprotected0

AJAX Handlers 2

authwp_ajax_cmb2_oembed_handlerincludes\webdevstudios\cmb2\includes\CMB2_Ajax.php:48
noprivwp_ajax_cmb2_oembed_handlerincludes\webdevstudios\cmb2\includes\CMB2_Ajax.php:49
WordPress Hooks 54
actioninitfunctions.php:21
actionadmin_initfunctions.php:66
actioninitfunctions.php:67
actioninitfunctions.php:113
actionadmin_initfunctions.php:209
actionadmin_menufunctions.php:210
actioncmb2_admin_initfunctions.php:212
actionadmin_initfunctions.php:391
actioninitfunctions.php:392
actionplugins_loadedincludes\jmarceli\integration-cmb2-qtranslate\cmb2-qtranslate.php:33
actionadmin_enqueue_scriptsincludes\jmarceli\integration-cmb2-qtranslate\cmb2-qtranslate.php:64
actioncmb2_admin_initincludes\webdevstudios\cmb2\example-functions.php:105
actioncmb2_admin_initincludes\webdevstudios\cmb2\example-functions.php:431
actioncmb2_admin_initincludes\webdevstudios\cmb2\example-functions.php:460
actioncmb2_admin_initincludes\webdevstudios\cmb2\example-functions.php:524
actioncmb2_admin_initincludes\webdevstudios\cmb2\example-functions.php:594
actioncmb2_admin_initincludes\webdevstudios\cmb2\example-functions.php:636
actioncmb2_initincludes\webdevstudios\cmb2\example-functions.php:691
filterwp_prepare_attachment_for_jsincludes\webdevstudios\cmb2\includes\CMB2.php:1130
actioncmb2_save_options-page_fieldsincludes\webdevstudios\cmb2\includes\CMB2_Ajax.php:51
filterget_post_metadataincludes\webdevstudios\cmb2\includes\CMB2_Ajax.php:140
filterupdate_post_metadataincludes\webdevstudios\cmb2\includes\CMB2_Ajax.php:143
filtercmb2_show_onincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:56
actionedit_form_topincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:88
actionedit_form_before_permalinkincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:92
actionedit_form_after_titleincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:96
actionedit_form_after_editorincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:100
actionadd_meta_boxesincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:104
actionadd_attachmentincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:107
actionedit_attachmentincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:108
actionsave_postincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:109
actionadd_meta_boxes_commentincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:120
actionedit_commentincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:121
filtermanage_edit-comments_columnsincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:124
actionmanage_comments_custom_columnincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:125
actionshow_user_profileincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:132
actionedit_user_profileincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:133
actionuser_new_formincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:134
actionpersonal_options_updateincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:136
actionedit_user_profile_updateincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:137
actionuser_registerincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:138
filtermanage_users_columnsincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:141
filtermanage_users_custom_columnincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:142
actioncreated_termincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:180
actionedited_termsincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:181
actiondelete_termincludes\webdevstudios\cmb2\includes\CMB2_hookup.php:182
actioncmb2_do_oembedincludes\webdevstudios\cmb2\includes\helper-functions.php:120
filteris_protected_metaincludes\webdevstudios\cmb2\includes\rest-api\CMB2_REST.php:118
actioninitincludes\webdevstudios\cmb2\init.php:120
actionadmin_initlanguages-frontend-display.php:45
actioninitlanguages-frontend-display.php:46
actionadmin_enqueue_scriptslanguages-frontend-display.php:57
actionadmin_noticeslanguages-frontend-display.php:82
actionplugins_loadedlanguages-frontend-display.php:85
Maintenance & Trust

Languages Frontend Display Maintenance & Trust

Maintenance Signals

WordPress version tested4.7.33
Last updatedDec 8, 2019
PHP min version
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Languages Frontend Display Developer Profile

jhotadhari

2 plugins · 30 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Languages Frontend Display

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/languages-frontend-display/dist/js/languages-frontend-display.min.js/wp-content/plugins/languages-frontend-display/dist/css/languages-frontend-display.min.css
Script Paths
/wp-content/plugins/languages-frontend-display/dist/js/languages-frontend-display.min.js
Version Parameters
languages-frontend-display/dist/js/languages-frontend-display.min.js?ver=languages-frontend-display/dist/css/languages-frontend-display.min.css?ver=

HTML / DOM Fingerprints

CSS Classes
lfd-language-selectorlfd-country-flags
Data Attributes
data-lfd-current-languagedata-lfd-language-selectordata-lfd-default-language
JS Globals
languagesFrontendDisplay
Shortcode Output
[languages_frontend_display]
FAQ

Frequently Asked Questions about Languages Frontend Display