MooTools Security & Risk Analysis

wordpress.org/plugins/mootools

Safely adds the MooTools JavaScript framework to your WordPress generated pages.

20 active installs v1.0.3.4 PHP + WP 2.6+ Updated May 2, 2014
enqueueframeworkjavascriptmootoolswp_enqueue
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is MooTools Safe to Use in 2026?

Generally Safe

Score 85/100

MooTools has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 11yr ago
Risk Assessment

The "mootools" v1.0.3.4 plugin exhibits a strong security posture based on the provided static analysis. The absence of dangerous functions, SQL queries, file operations, and external HTTP requests, coupled with 100% prepared statements for any potential SQL and 100% output escaping, indicates a well-written codebase with respect to these common vulnerabilities. Furthermore, the plugin has no recorded vulnerabilities (CVEs), suggesting a history of stability and security. The limited attack surface, consisting of a single shortcode with no identified entry points lacking authentication or permission checks, further bolsters its security. The complete lack of taint analysis findings, including critical and high severity issues, further reinforces this positive assessment.

Key Concerns

  • No nonce checks implemented
  • No capability checks implemented
Vulnerabilities
None known

MooTools Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

MooTools Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

MooTools Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[mootools] mootools.php:20
WordPress Hooks 2
actionwp_headmootools.php:19
filterupdate_plugin_complete_actionsmootools.php:21
Maintenance & Trust

MooTools Maintenance & Trust

Maintenance Signals

WordPress version tested3.9.40
Last updatedMay 2, 2014
PHP min version
Downloads6K

Community Trust

Rating100/100
Number of ratings1
Active installs20
Developer Profile

MooTools Developer Profile

Tribulant Software

7 plugins · 19K total installs

71
trust score
Avg Security Score
89/100
Avg Patch Time
803 days
View full developer profile
Detection Fingerprints

How We Detect MooTools

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/mootools/js/mootools.js
Script Paths
/wp-content/plugins/mootools/js/mootools.js

HTML / DOM Fingerprints

JS Globals
MooTools$chk
Shortcode Output
<script type="text/javascript" language="javascript"> if ($chk(0)) { alert('MOO!'); } </script>
FAQ

Frequently Asked Questions about MooTools