Reviews for Tutor LMS Security & Risk Analysis

wordpress.org/plugins/reviews-tutor-lms

The Reviews for Tutor LMS plugin is an addon for Tutor LMS that allows you to manage course reviews.

300 active installs v1.0.2 PHP 7.4+ WP 6.4+ Updated Nov 20, 2024
reviewsreviews-addontutor-lms
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Reviews for Tutor LMS Safe to Use in 2026?

Generally Safe

Score 92/100

Reviews for Tutor LMS has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The static analysis of the 'reviews-tutor-lms' plugin version 1.0.2 reveals a generally good security posture. The plugin demonstrates strong adherence to secure coding practices by not utilizing dangerous functions, performing all external HTTP requests securely (none in this case), and ensuring all identified output is properly escaped. The limited number of SQL queries, with a high percentage using prepared statements, further indicates a commitment to preventing SQL injection vulnerabilities. The presence of nonce checks, although not exhaustive across all potential entry points (as there are none identified), is a positive sign.

Key Concerns

  • No capability checks found
  • Zero AJAX handlers without auth checks
  • Zero REST API routes without permission callbacks
  • Zero shortcodes
  • Zero cron events
  • No dangerous functions
  • 75% SQL queries using prepared statements
  • 100% output escaping
  • No file operations
  • No external HTTP requests
  • 3 nonce checks identified
  • No taint analysis findings
  • Zero known CVEs
Vulnerabilities
None known

Reviews for Tutor LMS Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Reviews for Tutor LMS Code Analysis

Dangerous Functions
0
Raw SQL Queries
2
6 prepared
Unescaped Output
0
28 escaped
Nonce Checks
3
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

75% prepared8 total queries

Output Escaping

100% escaped28 total outputs
Attack Surface

Reviews for Tutor LMS Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 3
actionadmin_noticesincludes\class-main.php:76
actiontutor_after_courses_menuincludes\class-main.php:78
actionplugins_loadedincludes\class-main.php:80
Maintenance & Trust

Reviews for Tutor LMS Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedNov 20, 2024
PHP min version7.4
Downloads4K

Community Trust

Rating100/100
Number of ratings1
Active installs300
Developer Profile

Reviews for Tutor LMS Developer Profile

Vlăduț Ilie

1 plugin · 300 total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Reviews for Tutor LMS

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/reviews-tutor-lms/assets/css/admin-reviews.css/wp-content/plugins/reviews-tutor-lms/assets/js/admin-reviews.js
Script Paths
/wp-content/plugins/reviews-tutor-lms/assets/js/admin-reviews.js
Version Parameters
reviews-tutor-lms/assets/css/admin-reviews.css?ver=reviews-tutor-lms/assets/js/admin-reviews.js?ver=

HTML / DOM Fingerprints

CSS Classes
wp-list-tablewidefatfixedstripedreviews-table
HTML Comments
<!-- Reviews table -->
Data Attributes
data-view
JS Globals
ReviewsTutorLMSAdmin
FAQ

Frequently Asked Questions about Reviews for Tutor LMS