Progress Bar & Skill Bar Security & Risk Analysis

wordpress.org/plugins/progress-bar-wp

An awesome wordpress progress bar plugin helps writer and authors to show beautiful progress bar in percentage at any blog or post page.

2K active installs v1.5.0 PHP + WP 5.0+ Updated Dec 27, 2024
animated-progress-baranimated-skillbarpercentage-barprogress-barskill-bar
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Progress Bar & Skill Bar Safe to Use in 2026?

Generally Safe

Score 92/100

Progress Bar & Skill Bar has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The "progress-bar-wp" v1.5.0 plugin exhibits a mixed security posture. While it demonstrates good practices such as using prepared statements for all SQL queries and a very high percentage of properly escaped outputs, there are several areas of concern. The presence of a dangerous `unserialize` function, even without immediate evidence of exploitation in the provided taint analysis, warrants caution as it can lead to deserialization vulnerabilities if user-supplied data is processed. Furthermore, the existence of an unprotected AJAX handler significantly increases the attack surface, potentially allowing unauthorized users to trigger arbitrary actions within the plugin.

Key Concerns

  • Unprotected AJAX handler
  • Presence of dangerous unserialize function
Vulnerabilities
None known

Progress Bar & Skill Bar Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Progress Bar & Skill Bar Code Analysis

Dangerous Functions
7
Raw SQL Queries
0
0 prepared
Unescaped Output
1
158 escaped
Nonce Checks
2
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Dangerous Functions Found

unserialize$Settings = unserialize(get_post_meta( $post->ID, 'progressbar_wp_Shortcode_Settings', true));ink\admin\add-progress-bar.php:16
unserialize$data = unserialize(get_post_meta( $post->ID, 'progressbar_wp_data', true));ink\admin\add-progress-bar.php:18
unserialize$Settings = unserialize(get_post_meta( $PostId, 'progressbar_wp_Shortcode_Settings', true));ink\admin\custom-css.php:9
unserialize$Settings = unserialize(get_post_meta( $PostId, 'progressbar_wp_Shortcode_Settings', true));ink\admin\designs.php:7
unserialize$Settings = unserialize(get_post_meta( $PostID, 'progressbar_wp_Shortcode_Settings', true));ink\admin\settings.php:5
unserialize$Settings = unserialize(get_post_meta( $postId, 'progressbar_wp_Shortcode_Settings', true));template\content.php:9
unserialize$data = unserialize(get_post_meta(get_the_ID(), 'progressbar_wp_data', true));template\content.php:39

Output Escaping

99% escaped159 total outputs
Attack Surface
1 unprotected

Progress Bar & Skill Bar Attack Surface

Entry Points2
Unprotected1

AJAX Handlers 1

authwp_ajax_dazz_pb_b_dismiss_reviewink\install\installation.php:87

Shortcodes 1

[PROGRESSBAR_WP] template\shortcode.php:3
WordPress Hooks 11
actionadmin_enqueue_scriptsink\admin\menu.php:14
actioninitink\admin\menu.php:18
actionadd_meta_boxesink\admin\menu.php:19
actionadmin_initink\admin\menu.php:20
actionsave_postink\admin\menu.php:21
actionsave_postink\admin\menu.php:22
filtermanage_edit-wpsm_progressbar_r_columnsink\admin\menu.php:37
actionmanage_wpsm_progressbar_r_posts_custom_columnink\admin\menu.php:38
actionwp_enqueue_scriptsink\install\installation.php:18
actionadmin_noticesink\install\installation.php:20
actionin_admin_headerink\install\installation.php:268
Maintenance & Trust

Progress Bar & Skill Bar Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedDec 27, 2024
PHP min version
Downloads74K

Community Trust

Rating90/100
Number of ratings51
Active installs2K
Developer Profile

Progress Bar & Skill Bar Developer Profile

wpshopmart

8 plugins · 86K total installs

76
trust score
Avg Security Score
95/100
Avg Patch Time
986 days
View full developer profile
Detection Fingerprints

How We Detect Progress Bar & Skill Bar

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/progress-bar-wp/assets/js/color-picker.js/wp-content/plugins/progress-bar-wp/assets/css/panel-style.css/wp-content/plugins/progress-bar-wp/assets/css/rangeSlider.css/wp-content/plugins/progress-bar-wp/assets/css/sidebar.css/wp-content/plugins/progress-bar-wp/assets/css/bootstrap.css/wp-content/plugins/progress-bar-wp/assets/css/font-awesome/css/font-awesome.min.css/wp-content/plugins/progress-bar-wp/assets/js/rangeSlider.min.js/wp-content/plugins/progress-bar-wp/assets/js/bootstrap.min.js+17 more
Script Paths
wp-content/plugins/progress-bar-wp/assets/js/color-picker.jswp-content/plugins/progress-bar-wp/assets/js/rangeSlider.min.jswp-content/plugins/progress-bar-wp/assets/js/bootstrap.min.jswp-content/plugins/progress-bar-wp/assets/tooltip/jquery.darktooltip.jswp-content/plugins/progress-bar-wp/assets/codex/codemirror.jswp-content/plugins/progress-bar-wp/assets/codex/css.js+6 more

HTML / DOM Fingerprints

CSS Classes
wpsm_pb_wp_color_pickerwpsm_pb_wp_sidebarwpsm_pb_wp_rangesliderwpsm_pb_wp_bootstrapwpsm_pb_wp_font_awesomewpsm_pb_wp_tooltipwpsm_pb_wp_settingswpsm_pb_wp_codemirror+6 more
Data Attributes
data-default-color
JS Globals
progress_bar_wp_directory_urlprogress_bar_wp_text_domainwpsm_pb_wp_color_picker
FAQ

Frequently Asked Questions about Progress Bar & Skill Bar