Booking Engine by Lodgify Security & Risk Analysis

wordpress.org/plugins/lodgify-booking-engine

Easy to use booking engine for your vacation rental website. List your rentals on your site and save on commissions (from big OTA's).

700 active installs v1.0.1 PHP 7.2+ WP 5.6+ Updated Aug 15, 2024
airbnbbooking-enginelodgifyvacation-homevacation-rental
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Booking Engine by Lodgify Safe to Use in 2026?

Generally Safe

Score 92/100

Booking Engine by Lodgify has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The lodgify-booking-engine plugin v1.0.1 exhibits a generally strong security posture based on the provided static analysis. The absence of any known CVEs and the plugin's record of no past vulnerabilities are positive indicators. The code analysis reveals good practices such as 100% use of prepared statements for SQL queries, a very high percentage of properly escaped output, and the presence of a nonce check. Crucially, there are no identified dangerous functions, file operations, or external HTTP requests, which significantly reduces the attack surface.

Key Concerns

  • No capability checks found
  • Some unescaped output detected
Vulnerabilities
None known

Booking Engine by Lodgify Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Booking Engine by Lodgify Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
16 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

94% escaped17 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
save_booking_form_code (class\LodgifyBF.php:218)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Booking Engine by Lodgify Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[lodgify_search_widget] class\LodgifyBF.php:29
WordPress Hooks 6
actionadmin_menuclass\LodgifyBF.php:25
actionadmin_enqueue_scriptsclass\LodgifyBF.php:26
actionadmin_post_lgf-admin-action-save-lodgify-booking-formclass\LodgifyBF.php:27
actioninitclass\LodgifyBF.php:30
actionadmin_footerclass\LodgifyBF.php:32
actionwp_footerclass\LodgifyBF.php:33
Maintenance & Trust

Booking Engine by Lodgify Maintenance & Trust

Maintenance Signals

WordPress version tested6.5.8
Last updatedAug 15, 2024
PHP min version7.2
Downloads55K

Community Trust

Rating80/100
Number of ratings4
Active installs700
Developer Profile

Booking Engine by Lodgify Developer Profile

canizbul

1 plugin · 700 total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Booking Engine by Lodgify

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/lodgify-booking-engine/dist/css/admin-style.css/wp-content/plugins/lodgify-booking-engine/dist/js/lodgify-block.js
Script Paths
/wp-content/plugins/lodgify-booking-engine/dist/js/lodgify-block.js
Version Parameters
lodgify-booking-engine/dist/css/admin-style.css?ver=lodgify-booking-engine/dist/js/lodgify-block.js?ver=lodgify_search_widget_script?ver=

HTML / DOM Fingerprints

Data Attributes
data-dates-check-in-labeldata-dates-check-out-labeldata-guests-counter-labeldata-location-input-labeldata-search-button-label
Shortcode Output
<div data-lodgify-widgetlodgify_search_widget
FAQ

Frequently Asked Questions about Booking Engine by Lodgify