Does Shellshock Check have any unpatched vulnerabilities?

No published vulnerabilities and no findings under coordinated disclosure as of the latest data update. Always keep the plugin updated to the latest version.

Is Shellshock Check compatible with WordPress 4.3.34?

According to WordPress.org data, Shellshock Check 1.1.0 has been tested up to WordPress 4.3.34. Check the plugin's changelog for the latest compatibility information.

How often is Shellshock Check updated?

Shellshock Check was last updated on Sep 7, 2015. Frequent updates are generally a positive security signal.

What is Shellshock Check's security score?

Shellshock Check has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Shellshock Check Security & Risk Analysis

wordpress.org/plugins/shellshock-check

Test if the server is affected by the Shellshock vulnerability.

30 active installs v1.1.0 PHP + WP 3.0+ Updated Sep 7, 2015

securityshell-shockshellshock

A · Safe

CVEs total0

Unpatched0

Last CVENever

Download

Safety Verdict

Is Shellshock Check Safe to Use in 2026?

Generally Safe

Score 85/100

Shellshock Check has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10yr ago

Risk Assessment

The "shellshock-check" plugin, version 1.1.0, exhibits a generally good security posture due to its extremely limited attack surface and the absence of known vulnerabilities. The static analysis reveals no AJAX handlers, REST API routes, shortcodes, or cron events, meaning there are no readily exposed entry points for attackers. Furthermore, the plugin has a clean vulnerability history with zero recorded CVEs, indicating a history of secure development or infrequent security scrutiny.

Key Concerns

Dangerous function proc_open detected
Output escaping is not properly implemented
Missing nonce checks
Missing capability checks

Vulnerabilities

None known

Shellshock Check Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Version History

Shellshock Check Release Timeline

v1.1.0Current

Code Analysis

Analyzed Mar 16, 2026

Shellshock Check Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

0 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Dangerous Functions Found

proc_open$p = proc_open('bash -c "echo Test"', $desc, $pipes, null, $env);shellshock-check.php:30

proc_open$p = proc_open("rm -f echo; env 'x=() { (a)=>\' bash -c \"echo date +%Y\"; cat echo", $desc, $pipes,shellshock-check.php:53

Output Escaping

0% escaped1 total outputs

Attack Surface

Shellshock Check Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 2

actionadmin_menushellshock-check.php:156

actionadmin_initshellshock-check.php:157

Maintenance & Trust

Shellshock Check Maintenance & Trust

Maintenance Signals

WordPress version tested4.3.34

Last updatedSep 7, 2015

PHP min version

Downloads4K

Community Trust

Rating100/100

Number of ratings4

Active installs30

Alternatives

Shellshock Check Alternatives

Wordfence Security – Firewall, Malware Scan, and Login Security

wordfence

Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.

5.0M 12 CVEs

Hostinger Tools

hostinger

Simplified WordPress management. Manage site info, maintenance, security, & redirects.

3.0M 1 CVE

Jetpack – WP Security, Backup, Speed, & Growth

jetpack

Improve your WP security with powerful one-click tools like backup, WAF, and malware scan. Includes free tools like stats, CDN and social sharing.

3.0M 24 CVEs

Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

really-simple-ssl

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate.

3.0M 5 CVEs

All-In-One Security (AIOS) – Security and Firewall

all-in-one-wp-security-and-firewall

Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plugin designed especially for WordPress.

1.0M 27 CVEs

Developer Profile

Shellshock Check Developer Profile

Vladimir Prelovac

19 plugins · 29K total installs

trust score

Avg Security Score

84/100

Avg Patch Time

3145 days

View full developer profile

Detection Fingerprints

How We Detect Shellshock Check

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

CSS Classes

wrap

HTML Comments

Dummy option, to hook to the WordPress API and enforce security when submitting the form.

FAQ