SheetPoet – Spreadsheet Connector Security & Risk Analysis

wordpress.org/plugins/sheetpoet

A powerful plugin that connects your WordPress site to a companion Google Sheets Add-on for seamless data processing, automation, and synchronization.

0 active installs v1.0.4 PHP 7.4+ WP 5.9+ Updated Sep 15, 2025
automationdata-processingfunctionsgoogle-sheets
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is SheetPoet – Spreadsheet Connector Safe to Use in 2026?

Generally Safe

Score 100/100

SheetPoet – Spreadsheet Connector has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 6mo ago
Risk Assessment

The sheetpoet plugin v1.0.4 exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The absence of any known CVEs, critical or high severity taint flows, and the consistent use of prepared statements for all SQL queries are significant strengths. Furthermore, all identified output operations are properly escaped, and there are no file operations or external HTTP requests, which limits potential attack vectors. The presence of capability checks, although limited in number, suggests some consideration for access control.

Key Concerns

  • Zero nonce checks identified
  • Limited capability checks found
Vulnerabilities
None known

SheetPoet – Spreadsheet Connector Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

SheetPoet – Spreadsheet Connector Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
18 prepared
Unescaped Output
0
24 escaped
Nonce Checks
0
Capability Checks
3
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared18 total queries

Output Escaping

100% escaped24 total outputs
Attack Surface

SheetPoet – Spreadsheet Connector Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 7
actionadmin_footerincludes\classes\admin\assets-dev.php:48
actionadmin_enqueue_scriptsincludes\classes\admin\assets.php:14
actionadmin_menuincludes\classes\admin\menu.php:15
filterplugin_action_links_spgs/spgs.phpincludes\classes\admin\menu.php:17
filterplugin_action_links_spgs/spgs.phpincludes\classes\admin\menu.php:18
actionrest_api_initincludes\classes\api\api.php:43
actionplugins_loadedspgs.php:47
Maintenance & Trust

SheetPoet – Spreadsheet Connector Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedSep 15, 2025
PHP min version7.4
Downloads218

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

SheetPoet – Spreadsheet Connector Developer Profile

Quuantum

3 plugins · 90 total installs

91
trust score
Avg Security Score
95/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect SheetPoet – Spreadsheet Connector

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/sheetpoet/assets/css/spgs-admin.css/wp-content/plugins/sheetpoet/assets/js/spgs-admin.js/wp-content/plugins/sheetpoet/assets/js/spgs-frontend.js
Script Paths
/wp-content/plugins/sheetpoet/assets/js/spgs-admin.js/wp-content/plugins/sheetpoet/assets/js/spgs-frontend.js
Version Parameters
sheetpoet/assets/css/spgs-admin.css?ver=sheetpoet/assets/js/spgs-admin.js?ver=sheetpoet/assets/js/spgs-frontend.js?ver=

HTML / DOM Fingerprints

CSS Classes
spgs-settings-sectionspgs-settings-field
Data Attributes
data-spgs-triggerdata-spgs-sourcedata-spgs-targetdata-spgs-modedata-spgs-iddata-spgs-action+1 more
JS Globals
SPGS_AJAX_URLSPGS_ADMIN_URLSPGS_VERSION
REST Endpoints
/wp-json/spgs/v1/functions/wp-json/spgs/v1/keys/wp-json/spgs/v1/settings/wp-json/spgs/v1/logs/wp-json/spgs/v1/processes
Shortcode Output
[spgs-data-table[spgs-form[spgs-display
FAQ

Frequently Asked Questions about SheetPoet – Spreadsheet Connector