Intercom Integration for WordPress Security & Risk Analysis

wordpress.org/plugins/obox-intercom

Obox Intercom is the best Intercom integration plugin for WordPress

10 active installs v1.1 PHP + WP 4.0+ Updated Jan 21, 2016
customer-supportintercom
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Intercom Integration for WordPress Safe to Use in 2026?

Generally Safe

Score 85/100

Intercom Integration for WordPress has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10yr ago
Risk Assessment

The obox-intercom plugin v1.1 exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The plugin has a minimal attack surface, with no identified AJAX handlers, REST API routes, shortcodes, or cron events that are unprotected. Furthermore, the code signals indicate good practices such as the absence of dangerous functions and file operations. All SQL queries are performed using prepared statements, and capability checks are present, contributing to a robust defense against common web vulnerabilities. The plugin also includes a nonce check, which is a crucial security measure for preventing CSRF attacks.

Key Concerns

  • Low output escaping coverage
  • Single external HTTP request without context
Vulnerabilities
None known

Intercom Integration for WordPress Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Intercom Integration for WordPress Release Timeline

v1.1Current
Code Analysis
Analyzed Mar 17, 2026

Intercom Integration for WordPress Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
30
2 escaped
Nonce Checks
1
Capability Checks
2
File Operations
0
External Requests
1
Bundled Libraries
0

SQL Query Safety

100% prepared2 total queries

Output Escaping

6% escaped32 total outputs
Attack Surface

Intercom Integration for WordPress Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 9
actioninitindex.php:20
actionadmin_noticesindex.php:48
actionadmin_menuindex.php:52
actionadmin_initindex.php:55
actionwp_footerindex.php:59
actionadmin_footerindex.php:60
actionadmin_noticesindex.php:63
actionnetwork_admin_noticesindex.php:64
actionadmin_enqueue_scriptsindex.php:67
Maintenance & Trust

Intercom Integration for WordPress Maintenance & Trust

Maintenance Signals

WordPress version tested4.3.34
Last updatedJan 21, 2016
PHP min version
Downloads2K

Community Trust

Rating100/100
Number of ratings5
Active installs10
Developer Profile

Intercom Integration for WordPress Developer Profile

Julio Potier

8 plugins · 2K total installs

80
trust score
Avg Security Score
89/100
Avg Patch Time
52 days
View full developer profile
Detection Fingerprints

How We Detect Intercom Integration for WordPress

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/obox-intercom/assets/js/admin.js/wp-content/plugins/obox-intercom/assets/css/admin.css
Script Paths
/wp-content/plugins/obox-intercom/assets/js/admin.js
Version Parameters
obox-intercom/assets/js/admin.js?ver=obox-intercom/assets/css/admin.css?ver=

HTML / DOM Fingerprints

CSS Classes
intercom_wp
FAQ

Frequently Asked Questions about Intercom Integration for WordPress