Quick Table Security & Risk Analysis

wordpress.org/plugins/quick-table

Very simeple plugin to add shortcode that adds a basic table. Makes work faster, and sometimes cleaner, when you only need a simple one line table...

10 active installs v1.0.0 PHP + WP 3.0+ Updated Aug 8, 2014
shortcodetabletdtr
63
C · Use Caution
CVEs total1
Unpatched1
Last CVEMay 11, 2026
Safety Verdict

Is Quick Table Safe to Use in 2026?

Use With Caution

Score 63/100

Quick Table has 1 unpatched vulnerability. Evaluate alternatives or apply available mitigations.

1 known CVE 1 unpatched Last CVE: May 11, 2026Updated 11yr ago
Risk Assessment

The "quick-table" plugin v1.0.0 demonstrates a very strong security posture based on the provided static analysis. The code exhibits excellent security practices, with 100% of its SQL queries utilizing prepared statements and all outputs being properly escaped. Furthermore, there are no identified dangerous functions, file operations, or external HTTP requests, which significantly reduces the potential attack surface. The absence of any recorded vulnerabilities in its history further reinforces this positive assessment, suggesting a well-developed and secure plugin. The only entry point identified is a shortcode, which has no explicit auth checks mentioned but is not listed as unprotected. This plugin appears to be built with security in mind, adhering to best practices for code development.

Key Concerns

  • No explicit capability checks for shortcode
  • No nonce checks for shortcode
Vulnerabilities
1 published

Quick Table Security Vulnerabilities

CVEs by Year

1 CVE in 2026 · unpatched
2026
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2026-6237medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Quick Table <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute

May 11, 2026Unpatched
Version History

Quick Table Release Timeline

No version history available.
Code Analysis
Analyzed Mar 17, 2026

Quick Table Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Quick Table Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[qtbl] qtbl.php:21
Maintenance & Trust

Quick Table Maintenance & Trust

Maintenance Signals

WordPress version tested3.9.40
Last updatedAug 8, 2014
PHP min version
Downloads2K

Community Trust

Rating100/100
Number of ratings1
Active installs10
Developer Profile

Quick Table Developer Profile

rdcravens

3 plugins · 30 total installs

79
trust score
Avg Security Score
78/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Quick Table

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

Shortcode Output
<table><tr><td style="
FAQ

Frequently Asked Questions about Quick Table