Logo Slideshow Security & Risk Analysis

wordpress.org/plugins/logo-slideshow

Logo Slideshow is a nice Wordpress Slideshow for showing your Customer's Logos with Links.

60 active installs v1.0 PHP + WP 2.6+ Updated Sep 14, 2009
logologo-sliderlogo-slideshowslideshow
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Logo Slideshow Safe to Use in 2026?

Generally Safe

Score 85/100

Logo Slideshow has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 16yr ago
Risk Assessment

The "logo-slideshow" plugin v1.0 exhibits a generally positive security posture based on the provided static analysis. There are no identified dangerous functions, SQL queries are all prepared, and no external HTTP requests or file operations are performed. The complete absence of known CVEs and the lack of any recorded historical vulnerabilities are significant strengths. However, a major concern arises from the "output escaping" metric, with 0% of the 27 identified outputs being properly escaped. This indicates a high risk of Cross-Site Scripting (XSS) vulnerabilities, as user-supplied or dynamically generated content could be injected and executed within the browser. Despite the minimal attack surface and lack of direct code execution or SQL injection risks, the complete lack of output sanitization is a critical oversight that could be exploited.

Key Concerns

  • All outputs are unescaped
Vulnerabilities
None known

Logo Slideshow Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Logo Slideshow Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
27
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped27 total outputs
Attack Surface

Logo Slideshow Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
actionwp_headlogo-slideshow.php:22
actionadmin_menulogo-slideshow.php:23
Maintenance & Trust

Logo Slideshow Maintenance & Trust

Maintenance Signals

WordPress version tested2.8
Last updatedSep 14, 2009
PHP min version
Downloads13K

Community Trust

Rating100/100
Number of ratings1
Active installs60
Developer Profile

Logo Slideshow Developer Profile

IWEBIX

6 plugins · 240 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Logo Slideshow

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/logo-slideshow/css/image-slideshow.css/wp-content/plugins/logo-slideshow/scripts/image-slideshow.js
Script Paths
/wp-content/plugins/logo-slideshow/scripts/image-slideshow.js
Version Parameters
logo-slideshow/css/image-slideshow.css?ver=logo-slideshow/scripts/image-slideshow.js?ver=

HTML / DOM Fingerprints

CSS Classes
image-slideshow
FAQ

Frequently Asked Questions about Logo Slideshow