Does Profileir have any unpatched vulnerabilities?

No. All known vulnerabilities in Profileir have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Profileir compatible with WordPress 4.9.29?

According to WordPress.org data, Profileir 1.0 has been tested up to WordPress 4.9.29. Check the plugin's changelog for the latest compatibility information.

Is Profileir compatible with PHP 5.4.5+?

Profileir requires PHP 5.4.5 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Profileir updated?

Profileir was last updated on Feb 20, 2018. Frequent updates are generally a positive security signal.

What is Profileir's security score?

Profileir has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Profileir Security & Risk Analysis

wordpress.org/plugins/profileir

This plugin gets user images from Profile Avatar service. User email addresses are sending in MD5 hashed string to this service and it returns latest …

0 active installs v1.0 PHP 5.4.5+ WP 3.3+ Updated Feb 20, 2018

avatargravatarpersianpictureprofile

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Profileir Safe to Use in 2026?

Generally Safe

Score 85/100

Profileir has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago

Risk Assessment

The "profileir" v1.0 plugin exhibits a seemingly strong security posture based on the provided static analysis. The absence of any identified dangerous functions, raw SQL queries, or unescaped output suggests a good understanding of WordPress security best practices in its current version. The lack of external HTTP requests and a clean taint analysis further reinforce this positive initial impression, indicating no immediately obvious code-level vulnerabilities.

Key Concerns

No nonce checks found
No capability checks found

Vulnerabilities

None known

Profileir Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 17, 2026

Profileir Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

7 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

100% escaped7 total outputs

Attack Surface

Profileir Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 2

filterget_avatarprofileir.php:87

filteravatar_defaultsprofileir.php:95

Maintenance & Trust

Profileir Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29

Last updatedFeb 20, 2018

PHP min version5.4.5

Downloads1K

Community Trust

Rating0/100

Number of ratings0

Active installs0

Alternatives

Profileir Alternatives

AP Gravatars

ap-gravatars

A simple plugin that adds the gravatar photo associated with the user's email to their profile page... MultiSite compatable!

200 No CVEs

Advanced User Avatar | Custom Profile Picture Uploader for WordPress, WooCommerce, and BuddyPress

wpmake-advance-user-avatar

100

Adds an avatar upload field through a simple shortcode or block to let your site users upload a custom profile picture (avatar) directly from their de …

200 No CVEs