Red5 Recorder Security & Risk Analysis

wordpress.org/plugins/red5-recorder

Red5 Recorder allows wordpress users to easily use Red5 Recorder Player on their website to record Video / Audio Streams as response and embed to webs …

10 active installs v1.10 PHP + WP 1.5+ Updated May 2, 2014
media-recorderred5-audiored5-recorderred5-video
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Red5 Recorder Safe to Use in 2026?

Generally Safe

Score 85/100

Red5 Recorder has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 12yr ago
Risk Assessment

The red5-recorder plugin v1.10 exhibits a generally good security posture based on the provided static analysis. The absence of known CVEs and a clean vulnerability history is a strong positive indicator. Furthermore, the plugin demonstrates sound development practices by not utilizing dangerous functions and ensuring all SQL queries are properly prepared, which mitigates the risk of SQL injection vulnerabilities. The attack surface is reported as zero, with no AJAX handlers, REST API routes, shortcodes, or cron events, suggesting a limited interaction with the WordPress core and user-facing elements.

Key Concerns

  • Unsanitized paths in taint flows
  • Output escaping not fully implemented
  • Missing nonce checks
  • Missing capability checks
Vulnerabilities
None known

Red5 Recorder Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Red5 Recorder Release Timeline

No version history available.
Code Analysis
Analyzed Mar 17, 2026

Red5 Recorder Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
1 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

50% escaped2 total outputs
Data Flows · Security
2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths
red5recorder_options (red5recorder.php:66)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Red5 Recorder Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
filterthe_contentred5recorder.php:185
actionadmin_menured5recorder.php:187
Maintenance & Trust

Red5 Recorder Maintenance & Trust

Maintenance Signals

WordPress version tested3.9.40
Last updatedMay 2, 2014
PHP min version
Downloads3K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Alternatives

Red5 Recorder Alternatives

No alternatives data available yet.

Developer Profile

Red5 Recorder Developer Profile

Sandeep Verma

10 plugins · 1K total installs

65
trust score
Avg Security Score
80/100
Avg Patch Time
392 days
View full developer profile
Detection Fingerprints

How We Detect Red5 Recorder

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

CSS Classes
fb-like-box
Data Attributes
data-hrefdata-widthdata-show-facesdata-streamdata-header
JS Globals
FB
Shortcode Output
<iframe src="http://red5.svnlabs.com/flex/index.php?key=
FAQ

Frequently Asked Questions about Red5 Recorder