Lexia Command Security & Risk Analysis

wordpress.org/plugins/lexia-command

A powerful, keyboard-driven command bar for WordPress. Supercharge your WordPress workflow with quick commands and searches.

0 active installs v1.1.0 PHP 7.4+ WP 6.0+ Updated Mar 3, 2025
command-barkeyboard-shortcutsproductivitysearchspotlight
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Lexia Command Safe to Use in 2026?

Generally Safe

Score 92/100

Lexia Command has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The lexia-command plugin v1.1.0 exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The plugin effectively implements numerous capability checks (9) and a nonce check (1), indicating a commitment to securing its entry points. Furthermore, all SQL queries utilize prepared statements, and there are no detected file operations or external HTTP requests, significantly reducing common attack vectors. The absence of any known CVEs or historical vulnerabilities further bolsters confidence in its security.

Key Concerns

  • Only 3 out of 4 outputs are properly escaped
  • One AJAX handler has no explicit auth check listed
  • Zero taint flows analyzed, potentially hiding issues
Vulnerabilities
None known

Lexia Command Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Lexia Command Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
3 escaped
Nonce Checks
1
Capability Checks
9
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

75% escaped4 total outputs
Attack Surface

Lexia Command Attack Surface

Entry Points5
Unprotected0

AJAX Handlers 1

authwp_ajax_dismiss_plugin_feedback_noticelexia-command.php:108

REST API Routes 4

GET/wp-json/lexia-command/v1/searchincludes\class-lexia-command.php:133
GET/wp-json/lexia-command/v1/install-pluginincludes\class-lexia-command.php:148
GET/wp-json/lexia-command/v1/activate-pluginincludes\class-lexia-command.php:163
GET/wp-json/lexia-command/v1/get-plugin-statusesincludes\class-lexia-command.php:179
WordPress Hooks 8
actionrest_api_initincludes\class-lexia-command.php:37
actionwp_enqueue_scriptsincludes\class-lexia-command.php:40
actionadmin_enqueue_scriptsincludes\class-lexia-command.php:41
actionwp_enqueue_scriptsincludes\class-lexia-command.php:46
actionwp_footerincludes\class-lexia-command.php:47
actionadmin_enqueue_scriptsincludes\class-lexia-command.php:50
actionadmin_footerincludes\class-lexia-command.php:51
actionadmin_noticeslexia-command.php:97
Maintenance & Trust

Lexia Command Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedMar 3, 2025
PHP min version7.4
Downloads818

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Lexia Command Developer Profile

Stephen Paul Samynathan

1 plugin · 0 total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Lexia Command

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/lexia-command/build/index.js/wp-content/plugins/lexia-command/build/index.css
Script Paths
/wp-content/plugins/lexia-command/build/index.js
Version Parameters
lexia-command/build/index.js?ver=lexia-command/build/index.css?ver=

HTML / DOM Fingerprints

JS Globals
lexiaCommandData
REST Endpoints
/wp-json/lexia-command/v1/search/wp-json/lexia-command/v1/install-plugin/wp-json/lexia-command/v1/activate-plugin
Shortcode Output
<div id="lexia-command-root"></div>
FAQ

Frequently Asked Questions about Lexia Command