Met StarterKit Templates Security & Risk Analysis

wordpress.org/plugins/met-starter-templates

A vast library of free website layouts, including templates, patterns, sections, & completely responsive full-website pre-made starter kit.

10 active installs v3.0.1 PHP 7.4+ WP 6.1+ Updated Apr 7, 2026
elementor-templatesgutenberg-templatelanding-pagestarter-templatestemplates
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Met StarterKit Templates Safe to Use in 2026?

Generally Safe

Score 100/100

Met StarterKit Templates has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "met-starter-templates" plugin v3.0.1 exhibits a generally good security posture, with several positive indicators such as 100% of SQL queries using prepared statements and 100% of outputs being properly escaped. The absence of known vulnerabilities (CVEs) and critical taint flows further reinforces this. The presence of 10 capability checks suggests a reasonable effort towards access control. However, a significant concern lies within its attack surface. With a total of 11 REST API routes, 6 of these are exposed without explicit permission callbacks, presenting a potential avenue for unauthorized access or manipulation if these routes perform sensitive operations. While the static analysis did not reveal dangerous functions or unsanitized paths, the unprotected REST API endpoints warrant careful review to ensure no unintended data exposure or functionality can be exploited.

Key Concerns

  • REST API routes without permission callbacks
Vulnerabilities
None known

Met StarterKit Templates Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Met StarterKit Templates Release Timeline

v3.0.1Current
v3.0.0
v2.0.0
v1.0.0
Code Analysis
Analyzed Apr 16, 2026

Met StarterKit Templates Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
4 prepared
Unescaped Output
0
15 escaped
Nonce Checks
1
Capability Checks
10
File Operations
2
External Requests
2
Bundled Libraries
0

SQL Query Safety

100% prepared4 total queries

Output Escaping

100% escaped15 total outputs
Attack Surface
6 unprotected

Met StarterKit Templates Attack Surface

Entry Points11
Unprotected6

REST API Routes 11

GET/wp-json/mst/v1/header-footer-updateincludes/Admin/RestEndpoints/ElementsKitMenu.php:38
PUT/wp-json/mst/v1/ekit_widget_status_updateincludes/Admin/RestEndpoints/ElementsKitWidgetModuleStatusUpdate.php:20
GET/wp-json/mst/v1/favorite-templateincludes/Admin/RestEndpoints/FavoriteTemplateLibrary.php:23
GET/wp-json/mst/v1/fetch-url/includes/Admin/RestEndpoints/FetchWebsite.php:26
GET/wp-json/mst/v1/onboardincludes/Admin/RestEndpoints/OnboardData.php:28
POST/wp-json/mst/v1/activate-pluginsincludes/Admin/RestEndpoints/PluginActivator.php:30
POST/wp-json/mst/v1/process-downloadincludes/Admin/RestEndpoints/ProcessDownload.php:17
POST/wp-json/mst/v1/reset-theme-global-styles/includes/Admin/RestEndpoints/ResetThemeGlobalStyles.php:20
POST/wp-json/mst/v1/activate-themeincludes/Admin/RestEndpoints/Theme.php:29
GET/wp-json/mst/v1/unfiltered-permissionincludes/Admin/RestEndpoints/UnfilteredPermission.php:18
POST/wp-json/mst/v1/update-permalink/includes/Admin/RestEndpoints/UpdatePermalink.php:19
WordPress Hooks 21
actionadmin_menuincludes/Admin/AdminMenu.php:12
actionadmin_footerincludes/Admin/AdminMenu.php:13
actionadmin_enqueue_scriptsincludes/Admin/AdminScripts.php:12
actionrest_api_initincludes/Admin/RestEndpoints/ElementsKitLayoutManager.php:21
filterupload_mimesincludes/Admin/RestEndpoints/ElementsKitLayoutManager.php:22
filterwp_check_filetype_and_extincludes/Admin/RestEndpoints/ElementsKitLayoutManager.php:23
actionrest_api_initincludes/Admin/RestEndpoints/ElementsKitMenu.php:19
actionrest_api_initincludes/Admin/RestEndpoints/ElementsKitWidgetModuleStatusUpdate.php:16
actionrest_api_initincludes/Admin/RestEndpoints/FavoriteTemplateLibrary.php:10
actionrest_api_initincludes/Admin/RestEndpoints/FetchWebsite.php:12
actionrest_api_initincludes/Admin/RestEndpoints/GlobalSettings.php:13
filterrest_prepare_elementskit_templateincludes/Admin/RestEndpoints/GlobalSettings.php:14
actionrest_api_initincludes/Admin/RestEndpoints/OnboardData.php:13
actionrest_api_initincludes/Admin/RestEndpoints/PluginActivator.php:14
actionrest_api_initincludes/Admin/RestEndpoints/ProcessDownload.php:16
actionrest_api_initincludes/Admin/RestEndpoints/ResetThemeGlobalStyles.php:12
actionrest_api_initincludes/Admin/RestEndpoints/Theme.php:16
actionrest_api_initincludes/Admin/RestEndpoints/UnfilteredPermission.php:14
actionrest_api_initincludes/Admin/RestEndpoints/UpdatePermalink.php:14
actionadmin_initmet-starter-templates.php:135
actionplugins_loadedmet-starter-templates.php:136
Maintenance & Trust

Met StarterKit Templates Maintenance & Trust

Maintenance Signals

WordPress version tested7.0
Last updatedApr 7, 2026
PHP min version7.4
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Met StarterKit Templates Developer Profile

Roxnor

16 plugins · 3.1M total installs

73
trust score
Avg Security Score
92/100
Avg Patch Time
121 days
View full developer profile
Detection Fingerprints

How We Detect Met StarterKit Templates

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/met-starter-templates/build/admin.css/wp-content/plugins/met-starter-templates/build/admin.js/wp-content/plugins/met-starter-templates/build/style.css/wp-content/plugins/met-starter-templates/build/app.js
Version Parameters
met-starter-templates/build/admin.css?ver=met-starter-templates/build/admin.js?ver=met-starter-templates/build/style.css?ver=met-starter-templates/build/app.js?ver=

HTML / DOM Fingerprints

CSS Classes
met-starter-templates-admin-pagemst-admin-wrappermst-admin-contentmst-admin-sidebarmst-admin-mainmst-template-listmst-template-itemmst-template-thumb+3 more
HTML Comments
<!-- met-starter-templates admin page --><!-- met-starter-templates admin sidebar --><!-- met-starter-templates admin main content -->
Data Attributes
data-template-iddata-template-namedata-template-category
JS Globals
metStarterTemplatesAdminwindow.MetStarterTemplatesAdmin
REST Endpoints
/wp-json/met-starter-templates/v1/templates
FAQ

Frequently Asked Questions about Met StarterKit Templates