Progress Skill Bar Security & Risk Analysis

wordpress.org/plugins/progress-skill-bar

Progress Bar is a powerful, robust and easy to represent your skills with progress bar percentage at any blog post or page.

10 active installs v1.0 PHP 5.6+ WP 5.1+ Updated Jun 17, 2023
our-progress-barprogress-barprogress-bar-showcaseprogress-itemsskill-progress-bar
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Progress Skill Bar Safe to Use in 2026?

Generally Safe

Score 85/100

Progress Skill Bar has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2yr ago
Risk Assessment

The "progress-skill-bar" plugin v1.0 exhibits a mixed security posture. On the positive side, it demonstrates strong adherence to secure coding practices with a very high percentage of properly escaped output and a majority of SQL queries utilizing prepared statements. The plugin also includes a decent number of nonce and capability checks, indicating an awareness of fundamental WordPress security mechanisms.

However, a significant concern arises from the presence of four unprotected AJAX handlers, which represent a considerable attack surface. The taint analysis also revealed one flow with an unsanitized path, though it was not classified as critical or high severity. The lack of any recorded vulnerabilities in its history is a positive indicator, suggesting a general level of stability. Nevertheless, the unprotected AJAX endpoints and the identified unsanitized path are potential entry points for attackers that require attention.

In conclusion, while the plugin has several strengths, particularly in output escaping and SQL practices, the unprotected AJAX handlers and the single unsanitized path flow introduce notable risks. Addressing these specific issues should be prioritized to improve the plugin's overall security.

Key Concerns

  • Unprotected AJAX handlers
  • Flows with unsanitized paths
Vulnerabilities
None known

Progress Skill Bar Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Progress Skill Bar Release Timeline

v1.0Current
Code Analysis
Analyzed Mar 17, 2026

Progress Skill Bar Code Analysis

Dangerous Functions
0
Raw SQL Queries
16
43 prepared
Unescaped Output
59
3511 escaped
Nonce Checks
12
Capability Checks
6
File Operations
6
External Requests
4
Bundled Libraries
0

SQL Query Safety

73% prepared59 total queries

Output Escaping

98% escaped3570 total outputs
Data Flows · Security
1 unsanitized

Data Flow Analysis

5 flows1 with unsanitized paths
<import-export-plugins> (settings\import-export-plugins.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
4 unprotected

Progress Skill Bar Attack Surface

Entry Points5
Unprotected4

AJAX Handlers 4

authwp_ajax_pbar_6310_team_member_infoindex.php:65
authwp_ajax_pbar_6310_team_member_detailsindex.php:75
noprivwp_ajax_pbar_6310_team_member_detailsindex.php:77
noprivwp_ajax_pbar_6310_team_member_detailsindex.php:80

Shortcodes 1

[pbar_6310_progress_bar] index.php:22
WordPress Hooks 6
actionadmin_menuindex.php:35
actionwp_enqueue_scriptsindex.php:72
actionwp_enqueue_scriptsindex.php:90
actionactivated_pluginindex.php:97
actionadmin_enqueue_scriptsindex.php:99
actionplugins_loadedindex.php:105
Maintenance & Trust

Progress Skill Bar Maintenance & Trust

Maintenance Signals

WordPress version tested6.2.9
Last updatedJun 17, 2023
PHP min version5.6
Downloads1K

Community Trust

Rating20/100
Number of ratings1
Active installs10
Developer Profile

Progress Skill Bar Developer Profile

wpmart

6 plugins · 13K total installs

76
trust score
Avg Security Score
96/100
Avg Patch Time
153 days
View full developer profile
Detection Fingerprints

How We Detect Progress Skill Bar

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/progress-skill-bar/assets/css/style.css/wp-content/plugins/progress-skill-bar/assets/css/jquery.minicolors.css/wp-content/plugins/progress-skill-bar/assets/css/fontselect.css/wp-content/plugins/progress-skill-bar/assets/css/style-01-10.css/wp-content/plugins/progress-skill-bar/assets/css/style-11-20.css/wp-content/plugins/progress-skill-bar/assets/css/style-21-30.css/wp-content/plugins/progress-skill-bar/assets/js/fontselect.js/wp-content/plugins/progress-skill-bar/assets/js/pbar-6310-admin-script.js+2 more
Script Paths
https://fonts.googleapis.com/css?family=Amaranthhttps://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.9.0/css/all.min.csshttps://cdnjs.cloudflare.com/ajax/libs/codemirror/5.48.0/codemirror.min.csshttps://cdnjs.cloudflare.com/ajax/libs/jquery-minicolors/2.3.4/jquery.minicolors.min.csshttps://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.csshttps://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js+2 more

HTML / DOM Fingerprints

CSS Classes
pbar_6310_progress_barpbar-6310-progress-barpbar-6310-template-01-10pbar-6310-template-11-20pbar-6310-template-21-30pbar-6310-progress-bar-manage-itemspbar-6310-progress-bar-import-exportpbar-6310-progress-bar-license+2 more
Data Attributes
data-id
JS Globals
pbar_6310_ajax_objectmy_ajax_object
REST Endpoints
/wp-json/progress-skill-bar/v1/data
Shortcode Output
[pbar_6310_progress_bar
FAQ

Frequently Asked Questions about Progress Skill Bar