Does ng-wp-rest have any unpatched vulnerabilities?

No. All known vulnerabilities in ng-wp-rest have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is ng-wp-rest compatible with WordPress 4.9.29?

According to WordPress.org data, ng-wp-rest 1.5.0 has been tested up to WordPress 4.9.29. Check the plugin's changelog for the latest compatibility information.

Is ng-wp-rest compatible with PHP 5.6+?

ng-wp-rest requires PHP 5.6 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is ng-wp-rest updated?

ng-wp-rest was last updated on Mar 26, 2018. Frequent updates are generally a positive security signal.

What is ng-wp-rest's security score?

ng-wp-rest has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

ng-wp-rest Security & Risk Analysis

wordpress.org/plugins/ng-wp-endpoints

Simple plugin to add rest endpoints to blog for working with a js framework.

0 active installs v1.5.0 PHP 5.6+ WP 4.0+ Updated Mar 26, 2018

rest-api-headless-cms

A · Safe

CVEs total0

Unpatched0

Last CVENever

Download

Safety Verdict

Is ng-wp-rest Safe to Use in 2026?

Generally Safe

Score 85/100

ng-wp-rest has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago

Risk Assessment

The "ng-wp-endpoints" plugin v1.5.0 exhibits a generally strong security posture based on the provided static analysis. The complete absence of exposed entry points like AJAX handlers, REST API routes, shortcodes, and cron events, coupled with the lack of file operations, external HTTP requests, and dangerous function usage, significantly limits the potential attack surface. Furthermore, all SQL queries are correctly prepared, indicating good database interaction practices. The plugin also shows no history of known vulnerabilities (CVEs), which is a positive sign of its development and maintenance.

Key Concerns

Output not properly escaped
Missing nonce checks
Missing capability checks

Vulnerabilities

None known

ng-wp-rest Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 17, 2026

ng-wp-rest Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

0 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

0% escaped2 total outputs

Attack Surface

ng-wp-rest Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 11

actionrest_api_initincludes\ng-wp-endpoints-add-fields.php:27

actionng_wp_rest_register_endpointsincludes\ng-wp-rest-custom-post-types-controller.php:29

actionng_wp_rest_register_endpointsincludes\ng-wp-rest-menus-controller.php:29

actionng_wp_rest_register_endpointsincludes\ng-wp-rest-sidebars-controller.php:28

actionadmin_initincludes\ng-wp-rest-sidebars-controller.php:29

actionsave_postincludes\ng-wp-rest-sidebars-controller.php:30

actionng_wp_rest_register_endpointsincludes\ng-wp-rest-widgets-controller.php:28

actionadmin_initng-wp-rest-controller.php:39

actionrest_api_initng-wp-rest-controller.php:95

actionadmin_noticesng-wp-rest-controller.php:107

actioninitng-wp-rest-controller.php:176

Maintenance & Trust

ng-wp-rest Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29

Last updatedMar 26, 2018

PHP min version5.6

Downloads1K

Community Trust

Rating100/100

Number of ratings1

Active installs0

Alternatives

ng-wp-rest Alternatives

No alternatives data available yet.

Developer Profile

ng-wp-rest Developer Profile

uiarch

1 plugin · 0 total installs

trust score

Avg Security Score

85/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect ng-wp-rest

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/ng-wp-endpoints/includes/ng-wp-interface.php/wp-content/plugins/ng-wp-endpoints/includes/ng-wp-abstract.php

HTML / DOM Fingerprints

REST Endpoints

/wp-json/ng-wp-endpoints/v1/custom-post-types/wp-json/ng-wp-endpoints/v1/custom-post-types/(?P<taxonomy_name>[a-zA-Z0-9_-]+)/wp-json/ng-wp-endpoints/v1/widgets/wp-json/ng-wp-endpoints/v1/widgets/(?P<widget_id>[a-zA-Z0-9_-]+)/wp-json/ng-wp-endpoints/v1/menus/wp-json/ng-wp-endpoints/v1/menus/(?P<location>[a-zA-Z0-9_-]+)/wp-json/ng-wp-endpoints/v1/sidebars

FAQ