Network Plugin Auditor Security & Risk Analysis

wordpress.org/plugins/network-plugin-auditor

For multisite/network installations only. Adds columns to your network admin to show which sites are using each plugin and theme.

80 active installs v1.10.1 PHP + WP 3.2.1+ Updated Oct 30, 2016
adminmultisitenetworkplugin-managementtheme-management
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Network Plugin Auditor Safe to Use in 2026?

Generally Safe

Score 85/100

Network Plugin Auditor has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9yr ago
Risk Assessment

The "network-plugin-auditor" v1.10.1 exhibits a strong security posture based on the provided static analysis. The plugin boasts zero identified entry points in its attack surface, meaning no direct mechanisms for external interaction like AJAX handlers, REST API routes, or shortcodes are exposed without authentication. This significantly limits the potential for unauthorized access or manipulation. Furthermore, the code signals reveal no dangerous functions, file operations, or external HTTP requests, indicating a clean and contained codebase. The absence of any recorded vulnerabilities, including CVEs, further bolsters its security reputation, suggesting a well-maintained and secure plugin. While the SQL query usage is not fully prepared (14% prepared), and output escaping could be more robust (75% properly escaped), these are relatively minor concerns given the extremely limited attack surface and lack of critical code signals. The plugin appears to have been developed with security in mind, prioritizing the minimization of exposed functionalities. The vulnerability history being completely clear is a significant positive indicator of its reliability and developer diligence.

Key Concerns

  • SQL queries not using prepared statements
  • Output escaping could be more comprehensive
Vulnerabilities
None known

Network Plugin Auditor Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Network Plugin Auditor Release Timeline

v1.10.1Current
v1.10
v1.9.1
v1.9
v1.8.1
v1.8
v1.7
v1.6
v1.5.2
v1.5.1
v1.5
v1.4
v1.3.2
v1.3.1
v1.3
v1.2
v1.1
v1.0.1
v1.0
Code Analysis
Analyzed Apr 16, 2026

Network Plugin Auditor Code Analysis

Dangerous Functions
0
Raw SQL Queries
6
1 prepared
Unescaped Output
5
15 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

14% prepared7 total queries

Output Escaping

75% escaped20 total outputs
Attack Surface

Network Plugin Auditor Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 12
actionnetwork_admin_noticesnetwork-plugin-auditor.php:19
actioninitnetwork-plugin-auditor.php:24
filtermanage_plugins-network_columnsnetwork-plugin-auditor.php:27
actionmanage_plugins_custom_columnnetwork-plugin-auditor.php:28
filtermanage_themes-network_columnsnetwork-plugin-auditor.php:31
actionmanage_themes_custom_columnnetwork-plugin-auditor.php:32
filtermanage_sites-network_columnsnetwork-plugin-auditor.php:35
actionmanage_sites_custom_columnnetwork-plugin-auditor.php:36
actionactivated_pluginnetwork-plugin-auditor.php:40
actiondeactivated_pluginnetwork-plugin-auditor.php:41
actionswitch_themenetwork-plugin-auditor.php:42
actionplugins_loadednetwork-plugin-auditor.php:607
Maintenance & Trust

Network Plugin Auditor Maintenance & Trust

Maintenance Signals

WordPress version tested4.6.30
Last updatedOct 30, 2016
PHP min version
Downloads46K

Community Trust

Rating100/100
Number of ratings22
Active installs80
Developer Profile

Network Plugin Auditor Developer Profile

Katherine Semel-Munson

1 plugin · 80 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Network Plugin Auditor

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/network-plugin-auditor/css/npa.css/wp-content/plugins/network-plugin-auditor/js/npa.js
Script Paths
/wp-content/plugins/network-plugin-auditor/js/npa.js
Version Parameters
network-plugin-auditor/css/npa.css?ver=network-plugin-auditor/js/npa.js?ver=

HTML / DOM Fingerprints

CSS Classes
npa-plugin-list-wrappernpa-theme-list-wrappernpa-site-list-wrapper
Data Attributes
data-npa-plugin-filedata-npa-theme-slug
JS Globals
npa_plugin_datanpa_theme_data
FAQ

Frequently Asked Questions about Network Plugin Auditor