Service Box – Icon Box Showcase Security & Risk Analysis

wordpress.org/plugins/service-box

Service Box plugin is display your service showcase on any WordPress post & page with unlimited color scheme using drag & drop Api

3K active installs v1.5.8 PHP + WP 5.0+ Updated Dec 26, 2024
icon-boxinfo-boxservice-boxservicesservices-showcase
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Service Box – Icon Box Showcase Safe to Use in 2026?

Generally Safe

Score 92/100

Service Box – Icon Box Showcase has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The 'service-box' v1.5.8 plugin demonstrates a generally good security posture, with a significant number of outputs properly escaped and no recorded vulnerabilities in its history. The use of prepared statements for all SQL queries and the absence of external HTTP requests are also positive security indicators. However, the presence of one AJAX handler without authentication checks presents a notable risk. The 'unserialize' function is also used, which can be a vector for vulnerabilities if not handled with extreme care, although no specific taint flows were identified in this analysis.

Key Concerns

  • Unprotected AJAX endpoint
  • Use of unserialize() function
Vulnerabilities
None known

Service Box – Icon Box Showcase Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Service Box – Icon Box Showcase Code Analysis

Dangerous Functions
8
Raw SQL Queries
0
0 prepared
Unescaped Output
15
380 escaped
Nonce Checks
2
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0

Dangerous Functions Found

unserialize$data = unserialize(get_post_meta( $post->ID, 'wpsm_servicebox_data', true));ink\admin\add-service-box.php:16
unserialize$Settings = unserialize(get_post_meta( $PostId, 'Wpsm_Servicebox_Shortcode_Settings', true));ink\admin\custom-css.php:27
unserialize$De_Settings = unserialize(get_option('servicebox_default_Settings'));ink\admin\design.php:59
unserialize$Wpsm_Servicebox_Settings = unserialize(get_post_meta( $PostId, 'Wpsm_Servicebox_Shortcode_Settings'ink\admin\design.php:60
unserialize$De_Settings = unserialize(get_option('servicebox_default_Settings'));ink\admin\settings.php:4
unserialize$Settings = unserialize(get_post_meta( $PostId, 'Wpsm_Servicebox_Shortcode_Settings', true));ink\admin\settings.php:6
unserialize$Shortcode_Settings = unserialize(get_post_meta( $post_id, 'Wpsm_Servicebox_Shortcode_Settings', trutemplate\content.php:11
unserialize$data = unserialize(get_post_meta( get_the_ID(), 'wpsm_servicebox_data', true));template\content.php:45

Output Escaping

96% escaped395 total outputs
Attack Surface
1 unprotected

Service Box – Icon Box Showcase Attack Surface

Entry Points2
Unprotected1

AJAX Handlers 1

authwp_ajax_wpsm_service_b_dismiss_reviewink\install\installation.php:88

Shortcodes 1

[WPSM_SERVICEBOX] template\shortcode.php:3
WordPress Hooks 14
actionadmin_enqueue_scriptsink\admin\menu.php:14
actioninitink\admin\menu.php:16
actionadd_meta_boxesink\admin\menu.php:17
actionadmin_initink\admin\menu.php:18
actionsave_postink\admin\menu.php:19
actionsave_postink\admin\menu.php:20
filtermanage_edit-wpsm_servicebox_r_columnsink\admin\menu.php:65
actionmanage_wpsm_servicebox_r_posts_custom_columnink\admin\menu.php:66
actionplugins_loadedink\install\installation.php:3
actionwp_enqueue_scriptsink\install\installation.php:17
filterwidget_textink\install\installation.php:18
actionadmin_noticesink\install\installation.php:20
actionin_admin_headerink\install\installation.php:278
actionadmin_menuservice-box.php:65
Maintenance & Trust

Service Box – Icon Box Showcase Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedDec 26, 2024
PHP min version
Downloads175K

Community Trust

Rating96/100
Number of ratings93
Active installs3K
Developer Profile

Service Box – Icon Box Showcase Developer Profile

wpshopmart

8 plugins · 86K total installs

76
trust score
Avg Security Score
95/100
Avg Patch Time
986 days
View full developer profile
Detection Fingerprints

How We Detect Service Box – Icon Box Showcase

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/service-box/assets/css/bootstrap.css/wp-content/plugins/service-box/assets/css/help.css/wp-content/plugins/service-box/assets/css/settings.css/wp-content/plugins/service-box/assets/js/color-picker.js/wp-content/plugins/service-box/assets/css/panel-style.css/wp-content/plugins/service-box/assets/modal/remodal.css/wp-content/plugins/service-box/assets/modal/remodal-default-theme.css/wp-content/plugins/service-box/assets/css/font-awesome/css/font-awesome.min.css+10 more
Script Paths
/wp-content/plugins/service-box/assets/js/color-picker.js/wp-content/plugins/service-box/assets/js/jquery-linedtextarea.js/wp-content/plugins/service-box/assets/js/bootstrap.js/wp-content/plugins/service-box/assets/tooltip/jquery.darktooltip.js/wp-content/plugins/service-box/assets/js/fontawesome-iconpicker.js/wp-content/plugins/service-box/assets/js/call-icon-picker.js+1 more

HTML / DOM Fingerprints

CSS Classes
wpsm_serviceboxadd_wpsm_service_b_designwpsm_servicebox_r
JS Globals
wpshopmart_service_box_directory_url
Shortcode Output
[WPSM_SERVICEBOX id=
FAQ

Frequently Asked Questions about Service Box – Icon Box Showcase