PE Panels Security & Risk Analysis

wordpress.org/plugins/pe-panels

Show your posts and pages in tabbed or collapsible way !

600 active installs v1.09 PHP + WP 3.8+ Updated Sep 1, 2021
accordionpanelsresponsive-tabstabswidget
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is PE Panels Safe to Use in 2026?

Generally Safe

Score 85/100

PE Panels has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4yr ago
Risk Assessment

The 'pe-panels' plugin version 1.09 exhibits a concerning lack of security best practices despite an absence of known vulnerabilities. The static analysis reveals a significant weakness in output escaping, with only 31% of outputs being properly escaped. This indicates a high risk of Cross-Site Scripting (XSS) vulnerabilities, where attackers could inject malicious scripts into the site. Furthermore, the complete absence of nonce checks and capability checks across all entry points, combined with no explicit authorization checks on AJAX handlers or REST API routes, presents a broad attack surface for unauthorized actions. While the plugin utilizes prepared statements for its SQL queries, this alone does not mitigate the severe risk posed by the unescaped output and lack of authorization. The plugin's vulnerability history is clean, but this may be due to its limited adoption or the effectiveness of its obscurity rather than robust security.

Key Concerns

  • Low output escaping rate
  • Missing nonce checks on entry points
  • Missing capability checks on entry points
  • No authorization on AJAX handlers
  • No authorization on REST API routes
Vulnerabilities
None known

PE Panels Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

PE Panels Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
107
48 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

31% escaped155 total outputs
Attack Surface

PE Panels Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 5
actionafter_setup_themepe-panels.php:739
actionwp_enqueue_scriptspe-panels.php:887
actionadmin_enqueue_scriptspe-panels.php:896
actionwidgets_initpe-panels.php:905
actionplugins_loadedpe-panels.php:911
Maintenance & Trust

PE Panels Maintenance & Trust

Maintenance Signals

WordPress version tested5.8.13
Last updatedSep 1, 2021
PHP min version
Downloads8K

Community Trust

Rating0/100
Number of ratings0
Active installs600
Developer Profile

PE Panels Developer Profile

DJ-Extensions.com

5 plugins · 7K total installs

83
trust score
Avg Security Score
84/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect PE Panels

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/pe-panels/css/pe-panels.css/wp-content/plugins/pe-panels/js/pe-panels.js
Version Parameters
pe-panels/css/pe-panels.css?ver=pe-panels/js/pe-panels.js?ver=

HTML / DOM Fingerprints

CSS Classes
pe-panelspn-headingspn-listpn-clearfixpn-itempn-datepn-subtitlepn-contents+4 more
Data Attributes
data-responsivearia-labelrolearia-selectedaria-controlstabindex+2 more
FAQ

Frequently Asked Questions about PE Panels