Shift8 Portfolio Security & Risk Analysis

wordpress.org/plugins/shift8-portfolio

This is a Wordpress plugin that allows you to easily manage and showcase a grid of your portfolio items.

10 active installs v1.12 PHP + WP 3.0.1+ Updated Dec 22, 2021
artworkfull-width-galleryfull-width-portfoliofull-width-showcaseportfolio
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Shift8 Portfolio Safe to Use in 2026?

Generally Safe

Score 85/100

Shift8 Portfolio has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4yr ago
Risk Assessment

The shift8-portfolio plugin version 1.12 exhibits a generally positive security posture based on the provided static analysis. It demonstrates good practices by utilizing prepared statements for all SQL queries and incorporating nonce and capability checks for its entry points. The absence of dangerous functions, file operations, and external HTTP requests further contributes to its security. However, a significant concern is the relatively low percentage of properly escaped output (38%), indicating a potential for cross-site scripting (XSS) vulnerabilities if user-supplied data is not handled with sufficient sanitization before rendering. The lack of any recorded vulnerabilities in its history is a strong positive indicator, suggesting a mature and well-maintained codebase.

Key Concerns

  • Low percentage of properly escaped output
Vulnerabilities
None known

Shift8 Portfolio Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Shift8 Portfolio Release Timeline

No version history available.
Code Analysis
Analyzed Apr 16, 2026

Shift8 Portfolio Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
10
6 escaped
Nonce Checks
1
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared2 total queries

Output Escaping

38% escaped16 total outputs
Attack Surface

Shift8 Portfolio Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[shift8_portfolio] shift8-portfolio.php:92
WordPress Hooks 6
filtersingle_templatecomponents/custompost.php:4
actioninitcomponents/custompost.php:19
actionwp_enqueue_scriptscomponents/enqueuing.php:15
actionadmin_enqueue_scriptscomponents/enqueuing.php:28
actionadd_meta_boxescomponents/metabox.php:13
actionsave_postcomponents/metabox.php:133
Maintenance & Trust

Shift8 Portfolio Maintenance & Trust

Maintenance Signals

WordPress version tested5.8.13
Last updatedDec 22, 2021
PHP min version
Downloads2K

Community Trust

Rating74/100
Number of ratings3
Active installs10
Developer Profile

Shift8 Portfolio Developer Profile

shift8

16 plugins · 950 total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Shift8 Portfolio

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/shift8-portfolio/css/shift8_portfolio.css/wp-content/plugins/shift8-portfolio/css/shift8_portfolio_admin.css/wp-content/plugins/shift8-portfolio/js/shift8_portfolio_admin.js/wp-content/plugins/shift8-portfolio/bootstrap/css/bootstrap.min.css/wp-content/plugins/shift8-portfolio/css/featherlight.min.css/wp-content/plugins/shift8-portfolio/css/featherlight.gallery.min.css/wp-content/plugins/shift8-portfolio/js/featherlight.min.js/wp-content/plugins/shift8-portfolio/js/featherlight.gallery.min.js
Version Parameters
shift8_portfolio/style.css?ver=shift8bootstrap?ver=shift8flcss?ver=shift8flgallerycss?ver=shift8fljs?ver=shift8flgalleryjs?ver=shift8_portfolio_admin_css?ver=shift8_portfolio_admin_script?ver=

HTML / DOM Fingerprints

CSS Classes
shift8-portfolio-containershift8-portfolio-image-croppedshift8-portfolio-image-layershift8-portfolio-thumbshift8-portfolio-overlayshift8-portfolio-expandshift8_portfolio_image_containershift8_portfolio_image_src+2 more
Data Attributes
id="shift8-portfolio-id="shift8_portfolio_image"name="shift8_portfolio_image"id="shift8_portfolio_image_src"id="shift8_portfolio_image_button"id="shift8_portfolio_mobileimage"+3 more
JS Globals
jQuery("#shift8-portfolio-window.location
Shortcode Output
<div id="shift8-peffect" class="shift8-portfolio-container effects clearfix row" ><div class="col-lg- col-md- col-xs-12 shift8-portfolio-thumb"
FAQ

Frequently Asked Questions about Shift8 Portfolio