Legal Services Management Security & Risk Analysis

wordpress.org/plugins/legal-services-management

Manage clients, cases, appointments, invoices & documents for law firms directly from WordPress.

0 active installs v2.0.0 PHP 7.4+ WP 5.6+ Updated Mar 4, 2026
appointmentscase-managementclient-portallaw-firmlegal
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Legal Services Management Safe to Use in 2026?

Generally Safe

Score 100/100

Legal Services Management has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "legal-services-management" plugin v2.0.0 exhibits a generally good security posture based on the static analysis. It effectively utilizes prepared statements for a majority of its SQL queries and properly escapes most of its output, indicating adherence to common WordPress security best practices. The absence of file operations and external HTTP requests further strengthens its security profile. Additionally, the plugin has no recorded vulnerability history, which suggests a commitment to security maintenance or a lack of prior discovery, both positive indicators.

Key Concerns

  • High number of unsanitized taint flows
  • Taint flows with high severity
  • SQL queries not using prepared statements
  • Insufficient nonce checks
Vulnerabilities
None known

Legal Services Management Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Legal Services Management Code Analysis

Dangerous Functions
0
Raw SQL Queries
26
44 prepared
Unescaped Output
21
371 escaped
Nonce Checks
3
Capability Checks
11
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

63% prepared70 total queries

Output Escaping

95% escaped392 total outputs
Data Flows
12 unsanitized

Data Flow Analysis

14 flows12 with unsanitized paths
render (includes\Admin\Appointments.php:12)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Legal Services Management Attack Surface

Entry Points8
Unprotected0

AJAX Handlers 2

authwp_ajax_lsm_submit_bookingincludes\Core\Handlers.php:20
noprivwp_ajax_lsm_submit_bookingincludes\Core\Handlers.php:21

Shortcodes 6

[lsm_booking_form] includes\Frontend\Shortcodes.php:12
[lsm_client_portal] includes\Frontend\Shortcodes.php:13
[lsm_lawyer_list] includes\Frontend\Shortcodes.php:14
[lsm_lawyer_dashboard] includes\Frontend\Shortcodes.php:15
[lsm_service_list] includes\Frontend\Shortcodes.php:16
[lsm_appointment_calendar] includes\Frontend\Shortcodes.php:17
WordPress Hooks 17
actionadmin_menuincludes\Admin\Menu.php:11
actionadmin_initincludes\Admin\Settings.php:11
actionrest_api_initincludes\Api\Rest.php:10
actionadmin_post_lsm_save_clientincludes\Core\Handlers.php:11
actionadmin_post_lsm_save_caseincludes\Core\Handlers.php:12
actionadmin_post_lsm_save_appointmentincludes\Core\Handlers.php:13
actionadmin_post_lsm_save_invoiceincludes\Core\Handlers.php:14
actionadmin_post_lsm_save_document_templateincludes\Core\Handlers.php:15
actionadmin_post_lsm_save_serviceincludes\Core\Handlers.php:16
actionadmin_post_lsm_delete_serviceincludes\Core\Handlers.php:17
actionuser_registerincludes\Core\Handlers.php:24
actionprofile_updateincludes\Core\Handlers.php:25
actioninitincludes\Core\Plugin.php:28
actionwp_enqueue_scriptsincludes\Frontend\Assets.php:11
actionadmin_enqueue_scriptsincludes\Frontend\Assets.php:12
actionlsm_hourly_cronincludes\Utilities\Cron.php:11
actionlsm_daily_cronincludes\Utilities\Cron.php:12

Scheduled Events 2

lsm_hourly_cron
lsm_daily_cron
Maintenance & Trust

Legal Services Management Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 4, 2026
PHP min version7.4
Downloads432

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Legal Services Management Developer Profile

Mati Ullah

2 plugins · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Legal Services Management

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/legal-services-management/assets/css/frontend.css/wp-content/plugins/legal-services-management/assets/js/frontend.js/wp-content/plugins/legal-services-management/assets/css/admin.css/wp-content/plugins/legal-services-management/assets/js/admin.js
Script Paths
/wp-content/plugins/legal-services-management/assets/js/frontend.js/wp-content/plugins/legal-services-management/assets/js/admin.js
Version Parameters
legal-services-management/assets/css/frontend.css?ver=legal-services-management/assets/js/frontend.js?ver=legal-services-management/assets/css/admin.css?ver=legal-services-management/assets/js/admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
lsm-booking-containerlsm-formlsm-client-portal-containerlsm-lawyer-list-containerlsm-lawyer-dashboard-containerlsm-service-list-containerlsm-appointment-calendar-container
Data Attributes
id="lsm-booking-form"id="lsm-client-portal"id="lsm-lawyer-list"id="lsm-lawyer-dashboard"id="lsm-service-list"id="lsm-appointment-calendar"
JS Globals
lsm_data
REST Endpoints
/wp-json/lsm/v1/clients/wp-json/lsm/v1/clients/(?P<id>\d+)
Shortcode Output
[lsm_booking_form][lsm_client_portal][lsm_lawyer_list][lsm_lawyer_dashboard]
FAQ

Frequently Asked Questions about Legal Services Management