Passwordless Entry Security & Risk Analysis

wordpress.org/plugins/passwordless-entry

WordPress Passwordless Entry is a plugin which allows users to authenticate into a WordPress installation against an existing account, without knowled …

10 active installs v1.0 PHP + WP 5.7.0+ Updated May 1, 2021
authentication-passwordless-administration-admin-2fa
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Passwordless Entry Safe to Use in 2026?

Generally Safe

Score 85/100

Passwordless Entry has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 5yr ago
Risk Assessment

The "passwordless-entry" v1.0 plugin exhibits a generally good security posture based on the provided static analysis. The absence of dangerous functions, the exclusive use of prepared statements for SQL queries, and the complete output escaping are strong indicators of developers adhering to secure coding practices. Furthermore, the lack of any recorded vulnerabilities in its history suggests a mature and stable codebase. The plugin's limited attack surface, with only one shortcode and no AJAX handlers or REST API routes exposed without authentication, further contributes to its perceived safety.

Key Concerns

  • One file operation detected.
  • No nonce checks implemented.
  • No capability checks implemented.
Vulnerabilities
None known

Passwordless Entry Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Passwordless Entry Release Timeline

v1.0.1
v1.0.0
Code Analysis
Analyzed Apr 16, 2026

Passwordless Entry Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
1
External Requests
0
Bundled Libraries
0
Attack Surface

Passwordless Entry Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[ple] passwordless-entry.php:67
WordPress Hooks 1
actioninitpasswordless-entry.php:66
Maintenance & Trust

Passwordless Entry Maintenance & Trust

Maintenance Signals

WordPress version tested5.7.15
Last updatedMay 1, 2021
PHP min version
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Alternatives

Passwordless Entry Alternatives

No alternatives data available yet.

Developer Profile

Passwordless Entry Developer Profile

JohnoTheCoder

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Passwordless Entry

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/passwordless-entry/style.css/wp-content/plugins/passwordless-entry/script.js
Script Paths
/wp-content/plugins/passwordless-entry/script.js
Version Parameters
passwordless-entry/style.css?ver=passwordless-entry/script.js?ver=

HTML / DOM Fingerprints

HTML Comments
<!-- Passwordless Entry -->
Data Attributes
data-ple-iddata-ple-namedata-ple-email
JS Globals
ple_data
Shortcode Output
<form method="post" action=""><label for="ple-email">Email Address</label><input type="email" id="ple-email" name="ple_email" required><button type="submit">Request Passwordless Entry</button>
FAQ

Frequently Asked Questions about Passwordless Entry