Lewe Jira Connector Security & Risk Analysis

wordpress.org/plugins/lewe-jira-connector

The Lewe Jira Connector plugin connects to a Jira host (Server, Data Center or Cloud) and displays information from there on your WordPress site.

10 active installs v2.9.0 PHP 7.2+ WP 5.2+ Updated Unknown
lewe-jira-connector-interface-issue-ticket-api
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Lewe Jira Connector Safe to Use in 2026?

Generally Safe

Score 100/100

Lewe Jira Connector has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

The lewe-jira-connector plugin version 2.9.0 demonstrates a generally good security posture with a robust implementation of security best practices. The static analysis shows a lack of dangerous functions, all SQL queries utilizing prepared statements, and a very high percentage of properly escaped output, indicating careful coding. The presence of nonce and capability checks on its entry points further strengthens its defenses against common web attacks. The absence of any recorded vulnerabilities or CVEs is a significant positive indicator of its historical security.

Key Concerns

  • Flows with unsanitized paths detected
  • 10 external HTTP requests
  • Bundled TinyMCE library
Vulnerabilities
None known

Lewe Jira Connector Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Lewe Jira Connector Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
5
651 escaped
Nonce Checks
2
Capability Checks
4
File Operations
0
External Requests
10
Bundled Libraries
1

Bundled Libraries

TinyMCE

Output Escaping

99% escaped656 total outputs
Data Flows
3 unsanitized

Data Flow Analysis

5 flows3 with unsanitized paths
<lewe-jira-connector-admin-test-jira-login> (admin\partials\lewe-jira-connector-admin-test-jira-login.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Lewe Jira Connector Attack Surface

Entry Points4
Unprotected0

AJAX Handlers 2

authwp_ajax_jco_proxy_iconpublic\class-lewe-jira-connector-public.php:93
noprivwp_ajax_jco_proxy_iconpublic\class-lewe-jira-connector-public.php:94

Shortcodes 2

[jco-issue] includes\class-lewe-jira-connector-plugin.php:300
[jco-filter] includes\class-lewe-jira-connector-plugin.php:301
WordPress Hooks 18
actioninitincludes\class-lewe-jira-connector-plugin.php:218
actionafter_setup_themeincludes\class-lewe-jira-connector-plugin.php:221
filtermce_external_pluginsincludes\class-lewe-jira-connector-plugin.php:228
filtermce_buttonsincludes\class-lewe-jira-connector-plugin.php:229
actionplugins_loadedincludes\class-lewe-jira-connector-plugin.php:260
filterplugin_action_linksincludes\class-lewe-jira-connector-plugin.php:273
filterplugin_row_metaincludes\class-lewe-jira-connector-plugin.php:274
filtermanage_jira_host_posts_columnsincludes\class-lewe-jira-connector-plugin.php:275
actionadmin_enqueue_scriptsincludes\class-lewe-jira-connector-plugin.php:277
actionadmin_enqueue_scriptsincludes\class-lewe-jira-connector-plugin.php:278
actionadmin_menuincludes\class-lewe-jira-connector-plugin.php:279
actionadmin_initincludes\class-lewe-jira-connector-plugin.php:280
actioninitincludes\class-lewe-jira-connector-plugin.php:281
actionsave_post_jira_hostincludes\class-lewe-jira-connector-plugin.php:282
actionmanage_jira_host_posts_custom_columnincludes\class-lewe-jira-connector-plugin.php:283
actionin_plugin_update_message-lewe-jira-connector/lewe-jira-connector.phpincludes\class-lewe-jira-connector-plugin.php:284
actionwp_enqueue_scriptsincludes\class-lewe-jira-connector-plugin.php:297
actionwp_enqueue_scriptsincludes\class-lewe-jira-connector-plugin.php:298
Maintenance & Trust

Lewe Jira Connector Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedUnknown
PHP min version7.2
Downloads3K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Alternatives

Lewe Jira Connector Alternatives

No alternatives data available yet.

Developer Profile

Lewe Jira Connector Developer Profile

George Lewe

2 plugins · 210 total installs

86
trust score
Avg Security Score
89/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Lewe Jira Connector

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/lewe-jira-connector/global/css/lewe-jira-connector.css/wp-content/plugins/lewe-jira-connector/global/css/lewe-jira-connector-fa-all.css/wp-content/plugins/lewe-jira-connector/admin/css/lewe-jira-connector-admin.css/wp-content/plugins/lewe-jira-connector/admin/js/lewe-jira-connector-admin.js
Script Paths
/wp-content/plugins/lewe-jira-connector/admin/js/lewe-jira-connector-admin.js
Version Parameters
lewe-jira-connector-admin.js?ver=lewe-jira-connector.css?ver=lewe-jira-connector-fa-all.css?ver=lewe-jira-connector-admin.css?ver=

HTML / DOM Fingerprints

CSS Classes
lewe-jira-connector-admin
FAQ

Frequently Asked Questions about Lewe Jira Connector