MantraBrain Starter Sites | MantraBrain Theme Demo Importer Security & Risk Analysis

wordpress.org/plugins/mantrabrain-starter-sites

Starter sites / Demo importer for MantraBrain Themes

1K active installs v1.1.8 PHP + WP 4.7+ Updated Jul 28, 2025
demo-importmantrabrainstarter-sites
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is MantraBrain Starter Sites | MantraBrain Theme Demo Importer Safe to Use in 2026?

Generally Safe

Score 100/100

MantraBrain Starter Sites | MantraBrain Theme Demo Importer has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8mo ago
Risk Assessment

The "mantrabrain-starter-sites" v1.1.8 plugin exhibits a generally good security posture, with no known vulnerabilities or critical security issues identified in taint analysis. The plugin demonstrates strong adherence to secure coding practices, evidenced by a high percentage of SQL queries using prepared statements and a significant majority of outputs being properly escaped. The absence of dangerous functions and bundled libraries further contributes to its positive security profile. However, the presence of one AJAX handler lacking authentication checks represents a notable weakness. While the overall attack surface is relatively small, this single unprotected entry point could be exploited by authenticated users or through other means to potentially execute unintended actions within the WordPress environment, depending on the functionality of that specific handler. The plugin's clean vulnerability history is encouraging, suggesting a proactive approach to security by its developers.

Key Concerns

  • AJAX handler without authentication checks
Vulnerabilities
None known

MantraBrain Starter Sites | MantraBrain Theme Demo Importer Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

MantraBrain Starter Sites | MantraBrain Theme Demo Importer Code Analysis

Dangerous Functions
0
Raw SQL Queries
1
6 prepared
Unescaped Output
27
88 escaped
Nonce Checks
6
Capability Checks
9
File Operations
13
External Requests
4
Bundled Libraries
0

SQL Query Safety

86% prepared7 total queries

Output Escaping

77% escaped115 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
ajax_import_demo (includes\class-mantrabrain-demo-importer.php:407)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
1 unprotected

MantraBrain Starter Sites | MantraBrain Theme Demo Importer Attack Surface

Entry Points5
Unprotected1

AJAX Handlers 5

authwp_ajax_query-demosincludes\class-mantrabrain-demo-importer.php:56
authwp_ajax_import-demoincludes\class-mantrabrain-demo-importer.php:57
authwp_ajax_footer-text-ratedincludes\class-mantrabrain-demo-importer.php:58
authwp_ajax_install-required-pluginincludes\functions.php:153
authwp_ajax_install_recommandedincludes\functions.php:412
WordPress Hooks 25
actionadmin_initincludes\admin\class-mantrabrain-admin-notices.php:15
actionadmin_noticesincludes\admin\class-mantrabrain-admin-notices.php:17
actionwp_dashboard_setupincludes\admin\dashboard\class-mantrabrain-admin-dashboard.php:124
actioninitincludes\class-mantrabrain-demo-importer.php:33
actioninitincludes\class-mantrabrain-demo-importer.php:34
actionadmin_menuincludes\class-mantrabrain-demo-importer.php:39
actionadmin_headincludes\class-mantrabrain-demo-importer.php:40
actionadmin_enqueue_scriptsincludes\class-mantrabrain-demo-importer.php:41
filteradmin_footer_textincludes\class-mantrabrain-demo-importer.php:50
filterwoocommerce_enable_setup_wizardincludes\class-mantrabrain-demo-importer.php:53
actionmantrabrain_ajax_demo_importedincludes\class-mantrabrain-demo-importer.php:61
actionmantrabrain_ajax_demo_importedincludes\class-mantrabrain-demo-importer.php:62
actionmantrabrain_ajax_demo_importedincludes\class-mantrabrain-demo-importer.php:63
filtermantrabrain_widget_demo_import_settingsincludes\class-mantrabrain-demo-importer.php:66
filtermantrabrain_customizer_demo_import_settingsincludes\class-mantrabrain-demo-importer.php:67
actioninitincludes\class-mantrabrain-starter-sites.php:111
filterplugin_row_metaincludes\class-mantrabrain-starter-sites.php:125
actionadmin_noticesincludes\class-mantrabrain-starter-sites.php:127
actionadmin_initincludes\functions.php:34
actionmantrabrain_ajax_before_demo_importincludes\functions.php:209
actionmantrabrain_ajax_before_demo_importincludes\functions.php:210
actionmantrabrain_ajax_before_demo_importincludes\functions.php:211
actionmantrabrain_ajax_demo_importedincludes\functions.php:258
filterimport_post_meta_keyincludes\importers\wordpress-importer\class-mantrabrain-wxr-importer.php:99
filterhttp_request_timeoutincludes\importers\wordpress-importer\class-mantrabrain-wxr-importer.php:100
Maintenance & Trust

MantraBrain Starter Sites | MantraBrain Theme Demo Importer Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedJul 28, 2025
PHP min version
Downloads61K

Community Trust

Rating0/100
Number of ratings0
Active installs1K
Developer Profile

MantraBrain Starter Sites | MantraBrain Theme Demo Importer Developer Profile

MantraBrain

11 plugins · 9K total installs

87
trust score
Avg Security Score
98/100
Avg Patch Time
88 days
View full developer profile
Detection Fingerprints

How We Detect MantraBrain Starter Sites | MantraBrain Theme Demo Importer

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/mantrabrain-starter-sites/assets/libs/sweetalert2/css/sweetalert2.css/wp-content/plugins/mantrabrain-starter-sites/assets/css/mantrabrain-starter-sites.css/wp-content/plugins/mantrabrain-starter-sites/assets/libs/sweetalert2/js/sweetalert2.js/wp-content/plugins/mantrabrain-starter-sites/assets/js/jquery-tiptip/jquery.tipTip.js/wp-content/plugins/mantrabrain-starter-sites/assets/js/admin/demo-updates.js/wp-content/plugins/mantrabrain-starter-sites/assets/js/admin/demo-importer.js
Script Paths
/wp-content/plugins/mantrabrain-starter-sites/assets/libs/sweetalert2/js/sweetalert2.js/wp-content/plugins/mantrabrain-starter-sites/assets/js/jquery-tiptip/jquery.tipTip.js/wp-content/plugins/mantrabrain-starter-sites/assets/js/admin/demo-updates.js/wp-content/plugins/mantrabrain-starter-sites/assets/js/admin/demo-importer.js
Version Parameters
mantrabrain-starter-sites/assets/libs/sweetalert2/css/sweetalert2.css?ver=mantrabrain-starter-sites/assets/css/mantrabrain-starter-sites.css?ver=mantrabrain-starter-sites/assets/libs/sweetalert2/js/sweetalert2.js?ver=mantrabrain-starter-sites/assets/js/jquery-tiptip/jquery.tipTip.js?ver=mantrabrain-starter-sites/assets/js/admin/demo-updates.js?ver=mantrabrain-starter-sites/assets/js/admin/demo-importer.js?ver=

HTML / DOM Fingerprints

CSS Classes
demo-importerhide-if-no-js
JS Globals
mb_starter_sites
FAQ

Frequently Asked Questions about MantraBrain Starter Sites | MantraBrain Theme Demo Importer