Moving image slider Security & Risk Analysis

wordpress.org/plugins/moving-image-slider

Moving image slider wordpress plugin moves the image within the fixed frame. This script will create the attractive image slider in the page and get t …

30 active installs v1.1 PHP 5.0+ WP 5.0+ Updated Dec 1, 2022
imagemovingwidget
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Moving image slider Safe to Use in 2026?

Generally Safe

Score 85/100

Moving image slider has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3yr ago
Risk Assessment

The "moving-image-slider" v1.1 plugin demonstrates some positive security practices, particularly in its handling of SQL queries with a high percentage of prepared statements and the absence of external HTTP requests. The limited attack surface, with only one shortcode and no AJAX handlers or REST API routes present, is also a positive sign. However, the code analysis reveals significant concerns regarding output escaping, with only 36% of outputs being properly escaped. This could lead to cross-site scripting (XSS) vulnerabilities if user-supplied data is not sanitized before being displayed. Additionally, the complete lack of capability checks for its entry point (the shortcode) is a serious oversight, as it means any logged-in user, regardless of their role or permissions, could potentially interact with and manipulate the slider's functionality. The absence of known CVEs and past vulnerabilities is encouraging, suggesting a generally stable development history, but it does not mitigate the immediate risks identified in the static analysis.

Key Concerns

  • Low percentage of properly escaped outputs
  • No capability checks on entry points
Vulnerabilities
None known

Moving image slider Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Moving image slider Code Analysis

Dangerous Functions
0
Raw SQL Queries
1
20 prepared
Unescaped Output
54
31 escaped
Nonce Checks
3
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

95% prepared21 total queries

Output Escaping

36% escaped85 total outputs
Attack Surface

Moving image slider Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[moving-image-slider] moving-image-slider.php:34
WordPress Hooks 5
actionwp_enqueue_scriptsmoving-image-slider.php:36
actionplugins_loadedmoving-image-slider.php:37
actionwidgets_initmoving-image-slider.php:38
actionadmin_enqueue_scriptsmoving-image-slider.php:39
actionadmin_menumoving-image-slider.php:40
Maintenance & Trust

Moving image slider Maintenance & Trust

Maintenance Signals

WordPress version tested6.1.10
Last updatedDec 1, 2022
PHP min version5.0
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs30
Developer Profile

Moving image slider Developer Profile

gopiplus

52 plugins · 19K total installs

76
trust score
Avg Security Score
83/100
Avg Patch Time
70 days
View full developer profile
Detection Fingerprints

How We Detect Moving image slider

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/moving-image-slider/inc/moving-image-slider.css/wp-content/plugins/moving-image-slider/inc/jquery-moving-image-slider.js
Script Paths
/wp-content/plugins/moving-image-slider/pages/setting.js
Version Parameters
moving-image-slider/inc/moving-image-slider.css?ver=moving-image-slider/inc/jquery-moving-image-slider.js?ver=

HTML / DOM Fingerprints

CSS Classes
moving-image-sliderwidget_text moving-image-widget
Data Attributes
data-groupdata-iddata-descdata-widthdata-height
JS Globals
mislider_adminscripts
Shortcode Output
<div class='moving-image-slider' data-group='' data-id='' data-desc='' data-width='
FAQ

Frequently Asked Questions about Moving image slider