SheetDB – get your Google Spreadsheet data Security & Risk Analysis

wordpress.org/plugins/sheetdb

The SheetDB wordpress plugin allows you to easily add content from Google Spreadsheet to your wordpress site.

700 active installs v1.3.6 PHP 5.4+ WP 4.0+ Updated Feb 19, 2026
apigoogle-apigoogle-sheetsgoogle-spreadsheetsheetdb
99
A · Safe
CVEs total1
Unpatched0
Last CVEApr 1, 2025
Safety Verdict

Is SheetDB – get your Google Spreadsheet data Safe to Use in 2026?

Generally Safe

Score 99/100

SheetDB – get your Google Spreadsheet data has a strong security track record. Known vulnerabilities have been patched promptly.

1 known CVELast CVE: Apr 1, 2025Updated 1mo ago
Risk Assessment

The static analysis of sheetdb v1.3.6 indicates a generally robust security posture. The plugin demonstrates strong adherence to secure coding practices by exclusively using prepared statements for SQL queries and properly escaping all output. There are no detected dangerous functions, file operations, external HTTP requests, or vulnerabilities related to taint analysis, suggesting a low risk of common code injection or manipulation vulnerabilities. The absence of critical or high-severity vulnerabilities in its history, coupled with the fact that all known CVEs are patched, further reinforces this positive assessment.

Key Concerns

  • No nonce checks found
  • No capability checks found
Vulnerabilities
1

SheetDB – get your Google Spreadsheet data Security Vulnerabilities

CVEs by Year

1 CVE in 2025
2025
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2025-31873medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

SheetDB <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Apr 1, 2025 Patched in 1.3.5 (218d)
Code Analysis
Analyzed Mar 16, 2026

SheetDB – get your Google Spreadsheet data Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
14 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped14 total outputs
Attack Surface

SheetDB – get your Google Spreadsheet data Attack Surface

Entry Points2
Unprotected0

Shortcodes 2

[sheetdb] sheetdb.php:40
[sheetdb-slot] sheetdb.php:41
WordPress Hooks 1
actionwp_footersheetdb.php:43
Maintenance & Trust

SheetDB – get your Google Spreadsheet data Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.0
Last updatedFeb 19, 2026
PHP min version5.4
Downloads21K

Community Trust

Rating96/100
Number of ratings5
Active installs700
Developer Profile

SheetDB – get your Google Spreadsheet data Developer Profile

sheetdb

1 plugin · 700 total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
218 days
View full developer profile
Detection Fingerprints

How We Detect SheetDB – get your Google Spreadsheet data

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/sheetdb/assets/js/sheetdb-handlebars-1.2.6.js
Script Paths
assets/js/sheetdb-handlebars-1.2.6.js

HTML / DOM Fingerprints

Data Attributes
data-sheetdb-urldata-sheetdb-slotdata-sheetdb-sheetdata-sheetdb-limitdata-sheetdb-offsetdata-sheetdb-search+6 more
Shortcode Output
<div<span<p<h1
FAQ

Frequently Asked Questions about SheetDB – get your Google Spreadsheet data