Link Badges Security & Risk Analysis

wordpress.org/plugins/link-badges

Add document icons and file sizes to links

10 active installs v1.4 PHP + WP 3.0+ Updated Nov 17, 2020
anchor
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Link Badges Safe to Use in 2026?

Generally Safe

Score 85/100

Link Badges has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 5yr ago
Risk Assessment

The link-badges plugin v1.4 presents a generally good security posture based on the provided static analysis. The complete absence of entry points like AJAX handlers, REST API routes, shortcodes, and cron events, along with no identified dangerous functions or file operations, significantly reduces the potential attack surface. Furthermore, all SQL queries are properly prepared, mitigating risks of SQL injection. The vulnerability history is also clean, with no known CVEs, which is a positive indicator.

Key Concerns

  • Low output escaping coverage
  • External HTTP requests without context
  • Lack of nonce checks
  • Lack of capability checks
Vulnerabilities
None known

Link Badges Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Link Badges Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
22
6 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
2
Bundled Libraries
0

Output Escaping

21% escaped28 total outputs
Attack Surface

Link Badges Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 8
actionadmin_menulink-badges.php:37
filterinitlink-badges.php:60
filterlink_badgeslink-badges.php:74
filterthe_contentlink-badges.php:75
filterwidget_textlink-badges.php:76
filterlink_badges__anchorlink-badges.php:78
filterlink_badges__anchor_affixlink-badges.php:79
filterlink_badges__list_itemlink-badges.php:80
Maintenance & Trust

Link Badges Maintenance & Trust

Maintenance Signals

WordPress version tested5.5.0
Last updatedNov 17, 2020
PHP min version
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Link Badges Developer Profile

Marcus Downing

12 plugins · 440 total installs

84
trust score
Avg Security Score
86/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Link Badges

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/link-badges/link-badges.css
Script Paths
/wp-content/plugins/link-badges/scripts/link-badges-admin.js
Version Parameters
link-badges/link-badges.css?ver=link-badges/admin.css?ver=link-badges/scripts/link-badges-admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
link-badge
Data Attributes
link_badges__badge_typelink_badges__badge_icon
FAQ

Frequently Asked Questions about Link Badges