Mortgage Calculators WP Security & Risk Analysis

wordpress.org/plugins/mortgage-calculators-wp

Mortgage Calculators WP provides users with a simple, elegant and responsive solution for users to calculate mortgage values.

3K active installs v1.60 PHP + WP 4.6+ Updated Oct 16, 2024
loan-calculatormortgagemortgage-calcmortgage-calculatorreal-estate
91
A · Safe
CVEs total2
Unpatched0
Last CVEApr 16, 2024
Safety Verdict

Is Mortgage Calculators WP Safe to Use in 2026?

Generally Safe

Score 91/100

Mortgage Calculators WP has a strong security track record. Known vulnerabilities have been patched promptly.

2 known CVEsLast CVE: Apr 16, 2024Updated 1yr ago
Risk Assessment

The "mortgage-calculators-wp" plugin v1.60 exhibits a mixed security posture. On the positive side, it demonstrates good practices with 100% of SQL queries using prepared statements, and an impressive 99% of output being properly escaped. The absence of dangerous functions, file operations, and external HTTP requests also contributes to a generally cleaner codebase. However, the presence of two AJAX handlers without authentication checks presents a significant concern, creating potential entry points for unauthorized actions.

Key Concerns

  • AJAX handlers without authentication checks
  • Past medium severity XSS vulnerabilities
Vulnerabilities
2

Mortgage Calculators WP Security Vulnerabilities

CVEs by Year

1 CVE in 2022
2022
1 CVE in 2024
2024
Patched Has unpatched

Severity Breakdown

Medium
2

2 total CVEs

CVE-2024-32581medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Mortgage Calculators WP <= 1.56 - Authenticated (Contributor+) Stored Cross-Site Scripting

Apr 16, 2024 Patched in 1.60 (9d)
CVE-2021-24904medium · 4.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Mortgage Calculators WP < 1.53 - Authenticated Stored Cross-Site Scripting

Jan 11, 2022 Patched in 1.53 (742d)
Code Analysis
Analyzed Mar 16, 2026

Mortgage Calculators WP Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
193 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

99% escaped194 total outputs
Attack Surface
2 unprotected

Mortgage Calculators WP Attack Surface

Entry Points3
Unprotected2

AJAX Handlers 2

authwp_ajax_mcwp_sendmailincludes\functions\functions.php:51
noprivwp_ajax_mcwp_sendmailincludes\functions\functions.php:52

Shortcodes 1

[mcwp] includes\shortcodes\mcwp.php:63
WordPress Hooks 10
actionnetwork_admin_edit_wpmc_update_network_optionsincludes\options\update_network_options.php:57
actioninitincludes\shortcodes\mcwp.php:65
actionafter_setup_thememortgage-calculators-wp.php:42
actionwp_enqueue_scriptsmortgage-calculators-wp.php:75
actionadmin_enqueue_scriptsmortgage-calculators-wp.php:86
actionwp_headmortgage-calculators-wp.php:88
filternetwork_admin_menumortgage-calculators-wp.php:114
actionadmin_menumortgage-calculators-wp.php:134
actionadmin_initmortgage-calculators-wp.php:142
actionwp_default_scriptsmortgage-calculators-wp.php:145
Maintenance & Trust

Mortgage Calculators WP Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedOct 16, 2024
PHP min version
Downloads30K

Community Trust

Rating94/100
Number of ratings10
Active installs3K
Developer Profile

Mortgage Calculators WP Developer Profile

8blocks

1 plugin · 3K total installs

73
trust score
Avg Security Score
91/100
Avg Patch Time
376 days
View full developer profile
Detection Fingerprints

How We Detect Mortgage Calculators WP

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/mortgage-calculators-wp/admin/admin.css/wp-content/plugins/mortgage-calculators-wp/admin/admin.js/wp-content/plugins/mortgage-calculators-wp/assets/bootstrap-slider/bootstrap-slider.css/wp-content/plugins/mortgage-calculators-wp/assets/bootstrap-slider/bootstrap-slider.js/wp-content/plugins/mortgage-calculators-wp/assets/css/wpmc.css/wp-content/plugins/mortgage-calculators-wp/assets/js/wpmc.js
Script Paths
/wp-content/plugins/mortgage-calculators-wp/admin/admin.js/wp-content/plugins/mortgage-calculators-wp/assets/bootstrap-slider/bootstrap-slider.js/wp-content/plugins/mortgage-calculators-wp/assets/js/wpmc.js
Version Parameters
mortgage-calculators-wp/admin/admin.css?ver=mortgage-calculators-wp/admin/admin.js?ver=mortgage-calculators-wp/assets/bootstrap-slider/bootstrap-slider.css?ver=mortgage-calculators-wp/assets/bootstrap-slider/bootstrap-slider.js?ver=mortgage-calculators-wp/assets/css/wpmc.css?ver=mortgage-calculators-wp/assets/js/wpmc.js?ver=

HTML / DOM Fingerprints

CSS Classes
mcalcmcalc-colormcalc-conventionalmcalc-fhamcalc-hamcalc-refimcalc-vaslider-handle+2 more
Data Attributes
name="cv"name="fha"name="va"name="mha"name="rc"id="id_cv"+4 more
JS Globals
mcwp_ajax
Shortcode Output
<form class="mcalc mcalc-conventional mcalc-color"<form class="mcalc mcalc-fha mcalc-color"<form class="mcalc mcalc-va mcalc-color"<form class="mcalc mcalc-ha mcalc-color"
FAQ

Frequently Asked Questions about Mortgage Calculators WP