Photo Competition Manager Security & Risk Analysis

wordpress.org/plugins/photo-competition-manager

Complete photography club competition platform. Handle submissions, member voting, public voting, email notifications, and beautiful results displays.

0 active installs v0.3.0 PHP 7.4+ WP 6.2+ Updated Feb 20, 2026
competitionsmember-managementphotographyshortcodesvoting
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Photo Competition Manager Safe to Use in 2026?

Generally Safe

Score 100/100

Photo Competition Manager has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "photo-competition-manager" plugin v0.3.0 exhibits a generally strong security posture, with a significant number of entry points (8) being protected by authentication checks. The high percentage of prepared statements for SQL queries (98%) and the substantial number of nonce checks (43) and capability checks (20) indicate a good understanding of WordPress security best practices. Furthermore, the absence of any known CVEs, past or present, suggests a history of secure development and maintenance.

Key Concerns

  • Taint flows with unsanitized paths
  • High severity taint flows
  • Lower percentage of properly escaped output
Vulnerabilities
None known

Photo Competition Manager Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Photo Competition Manager Code Analysis

Dangerous Functions
0
Raw SQL Queries
2
112 prepared
Unescaped Output
341
829 escaped
Nonce Checks
43
Capability Checks
20
File Operations
10
External Requests
0
Bundled Libraries
0

SQL Query Safety

98% prepared114 total queries

Output Escaping

71% escaped1170 total outputs
Data Flows
31 unsanitized

Data Flow Analysis

25 flows31 with unsanitized paths
<class-logs-controller> (admin\class-logs-controller.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Photo Competition Manager Attack Surface

Entry Points8
Unprotected0

AJAX Handlers 3

authwp_ajax_photo_comp_get_slideshow_imagespublic\class-slideshow-shortcode.php:72
authwp_ajax_photo_comp_slideshow_startpublic\class-slideshow-shortcode.php:73
authwp_ajax_photo_comp_slideshow_stoppublic\class-slideshow-shortcode.php:74

Shortcodes 5

[competition_results] public\class-results-shortcode.php:79
[competition_slideshow] public\class-slideshow-shortcode.php:71
[competition_top3] public\class-top3-shortcode.php:79
[competition_upload] public\class-upload-shortcode.php:103
[competition_voting] public\class-voting-shortcode.php:115
WordPress Hooks 28
actionadmin_menuadmin\class-admin-screen.php:126
actionadmin_enqueue_scriptsadmin\class-admin-screen.php:127
actionadmin_initadmin\class-competitions-controller.php:49
actionadmin_enqueue_scriptsadmin\class-competitions-controller.php:50
actionadmin_initadmin\class-email-templates-controller.php:29
actionadmin_enqueue_scriptsadmin\class-email-templates-controller.php:30
actionadmin_initadmin\class-export-screen.php:69
actionadmin_initadmin\class-logs-controller.php:60
actionadmin_enqueue_scriptsadmin\class-logs-controller.php:61
actionadmin_initadmin\class-members-controller.php:63
actionadmin_enqueue_scriptsadmin\class-members-controller.php:64
actionadmin_initadmin\class-results-controller.php:129
actionadmin_enqueue_scriptsadmin\class-results-controller.php:130
actionadmin_initadmin\class-settings-controller.php:57
actionadmin_enqueue_scriptsadmin\class-settings-controller.php:58
actionadmin_initadmin\class-setup-wizard-controller.php:29
actionadmin_initadmin\class-submissions-controller.php:94
actionadmin_enqueue_scriptsadmin\class-submissions-controller.php:95
actionadmin_initadmin\class-voting-controller.php:74
actionplugins_loadedincludes\class-plugin.php:65
actionrest_api_initincludes\class-plugin.php:90
actionphoto_comp_send_results_batchincludes\class-plugin.php:125
actionphoto_comp_cleanup_email_jobsincludes\class-plugin.php:128
actionphoto_competition_daily_cronincludes\Service\class-cron-handler.php:56
filterwp_mail_fromincludes\Support\class-email-configuration.php:56
filterwp_mail_from_nameincludes\Support\class-email-configuration.php:57
actionphpmailer_initincludes\Support\class-mailpit-smtp.php:35
actionwp_enqueue_scriptspublic\class-frontend.php:81

Scheduled Events 3

photo_comp_cleanup_email_jobs
photo_competition_daily_cron
photo_comp_send_results_batch
Maintenance & Trust

Photo Competition Manager Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 20, 2026
PHP min version7.4
Downloads279

Community Trust

Rating100/100
Number of ratings1
Active installs0
Developer Profile

Photo Competition Manager Developer Profile

Donncha O Caoimh (a11n)

12 plugins · 32K total installs

73
trust score
Avg Security Score
91/100
Avg Patch Time
4657 days
View full developer profile
Detection Fingerprints

How We Detect Photo Competition Manager

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/photo-competition-manager/assets/css/admin-slideshow.css/wp-content/plugins/photo-competition-manager/assets/js/admin-slideshow.js/wp-content/plugins/photo-competition-manager/assets/js/qrcode.js
Script Paths
/wp-content/plugins/photo-competition-manager/assets/js/admin-slideshow.js/wp-content/plugins/photo-competition-manager/assets/js/qrcode.js
Version Parameters
photo-competition-manager/assets/css/admin-slideshow.css?ver=photo-competition-manager/assets/js/admin-slideshow.js?ver=photo-competition-manager/assets/js/qrcode.js?ver=

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Photo Competition Manager