Muki Floating TOC Security & Risk Analysis

wordpress.org/plugins/muki-floating-toc

A floating table of contents for the left or right side of articles.

70 active installs v1.0.6 PHP 7.0+ WP 6.0+ Updated Sep 4, 2025
table-of-contents
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Muki Floating TOC Safe to Use in 2026?

Generally Safe

Score 100/100

Muki Floating TOC has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7mo ago
Risk Assessment

The "muki-floating-toc" plugin v1.0.6 exhibits a generally strong security posture based on the provided static analysis. There are no critical or high severity vulnerabilities identified in taint analysis, no dangerous functions are used, and all SQL queries are properly prepared. The plugin also demonstrates good output escaping practices, with a high percentage of outputs being properly escaped. Furthermore, the absence of known CVEs and a clean vulnerability history indicates a commitment to security by the developers or a lack of discovered exploitable weaknesses. The plugin's attack surface is minimal, with only a single shortcode identified as an entry point, and importantly, there are no unprotected entry points exposed.

Key Concerns

  • Nonce checks missing
  • Capability checks limited
Vulnerabilities
None known

Muki Floating TOC Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Muki Floating TOC Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
2
22 escaped
Nonce Checks
0
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

92% escaped24 total outputs
Attack Surface

Muki Floating TOC Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[muki_floating_toc] muki-floating-toc.php:307
WordPress Hooks 7
actionadmin_menuincludes\class-muki-floating-toc.php:30
actionadmin_initincludes\class-muki-floating-toc.php:31
actionplugins_loadedmuki-floating-toc.php:31
actionwp_enqueue_scriptsmuki-floating-toc.php:83
actionwp_footermuki-floating-toc.php:116
actionwp_enqueue_scriptsmuki-floating-toc.php:124
actionwp_footermuki-floating-toc.php:243
Maintenance & Trust

Muki Floating TOC Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedSep 4, 2025
PHP min version7.0
Downloads301

Community Trust

Rating90/100
Number of ratings2
Active installs70
Developer Profile

Muki Floating TOC Developer Profile

Muki Wu

7 plugins · 200 total installs

86
trust score
Avg Security Score
89/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Muki Floating TOC

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/muki-floating-toc/src/css/muki-floating-toc.css/wp-content/plugins/muki-floating-toc/src/js/muki-floating-toc.js
Script Paths
/wp-content/plugins/muki-floating-toc/src/js/muki-floating-toc.js
Version Parameters
muki-floating-toc/style.css?ver=1.0.6muki-floating-toc/script.js?ver=1.0.6

HTML / DOM Fingerprints

CSS Classes
muki-floating-tocmuki-toc-toolbarmuki-toc-pin-button
Data Attributes
aria-label="Article Table of Contents"
JS Globals
muki_floating_toc_settings
Shortcode Output
[muki_floating_toc]
FAQ

Frequently Asked Questions about Muki Floating TOC