Shift8 Real Estate Listings for TRREB Security & Risk Analysis

wordpress.org/plugins/shift8-real-estate-listings-for-treb

Sync Toronto Real Estate Board (TRREB) listings via PropTx RESO Web API to WordPress posts automatically.

10 active installs v1.8.1 PHP 7.4+ WP 5.0+ Updated Mar 5, 2026
listingsmlstrproptxreal-estatetrreb
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Shift8 Real Estate Listings for TRREB Safe to Use in 2026?

Generally Safe

Score 100/100

Shift8 Real Estate Listings for TRREB has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

Based on the provided static analysis and vulnerability history, the "shift8-real-estate-listings-for-treb" plugin v1.8.1 appears to have a strong security posture. The code analysis indicates a significant effort to implement security best practices, with all detected AJAX handlers and shortcodes (though none were found) having proper authentication checks. Furthermore, the absence of dangerous functions, the exclusive use of prepared statements for SQL queries, and 100% output escaping suggest robust protection against common web vulnerabilities like SQL injection and XSS. The plugin also demonstrates good security hygiene with the presence of nonce and capability checks for its entry points.

Key Concerns

  • No identified security vulnerabilities in history
  • All AJAX handlers have auth checks
  • No REST API routes found
  • No shortcodes found
  • No taint flows with unsanitized paths
  • No dangerous functions detected
  • 100% SQL queries use prepared statements
  • 100% output properly escaped
  • Presence of nonce checks on entry points
  • Presence of capability checks on entry points
  • No bundled libraries (reduces risk of outdated dependencies)
Vulnerabilities
None known

Shift8 Real Estate Listings for TRREB Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Shift8 Real Estate Listings for TRREB Release Timeline

v1.8.1Current
v1.8.0
v1.7.4
v1.7.3
v1.7.2
v1.7.1
v1.7.0
v1.6.6
v1.6.5
v1.6.4
v1.6.2
Code Analysis
Analyzed Apr 16, 2026

Shift8 Real Estate Listings for TRREB Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
1044 escaped
Nonce Checks
8
Capability Checks
10
File Operations
6
External Requests
12
Bundled Libraries
0

Output Escaping

100% escaped1044 total outputs
Attack Surface

Shift8 Real Estate Listings for TRREB Attack Surface

Entry Points8
Unprotected0

AJAX Handlers 8

authwp_ajax_shift8_treb_test_api_connectionadmin/class-shift8-treb-admin.php:39
authwp_ajax_shift8_treb_manual_syncadmin/class-shift8-treb-admin.php:40
authwp_ajax_shift8_treb_reset_syncadmin/class-shift8-treb-admin.php:41
authwp_ajax_shift8_treb_get_citiesadmin/class-shift8-treb-admin.php:42
authwp_ajax_shift8_treb_test_api_connectiontrunk/admin/class-shift8-treb-admin.php:39
authwp_ajax_shift8_treb_manual_synctrunk/admin/class-shift8-treb-admin.php:40
authwp_ajax_shift8_treb_reset_synctrunk/admin/class-shift8-treb-admin.php:41
authwp_ajax_shift8_treb_get_citiestrunk/admin/class-shift8-treb-admin.php:42
WordPress Hooks 22
actionadmin_menuadmin/class-shift8-treb-admin.php:34
actionadmin_enqueue_scriptsadmin/class-shift8-treb-admin.php:36
actionadmin_noticesshift8-treb.php:130
actionplugins_loadedshift8-treb.php:177
filtercron_schedulesshift8-treb.php:184
actionshift8_treb_sync_listingsshift8-treb.php:187
actionshift8_treb_cleanup_terminatedshift8-treb.php:190
actionadmin_initshift8-treb.php:193
actionwp_enqueue_scriptsshift8-treb.php:201
actionwp_enqueue_scriptsshift8-treb.php:204
actionwp_enqueue_scriptsshift8-treb.php:207
actionadmin_menutrunk/admin/class-shift8-treb-admin.php:34
actionadmin_enqueue_scriptstrunk/admin/class-shift8-treb-admin.php:36
actionadmin_noticestrunk/shift8-treb.php:130
actionplugins_loadedtrunk/shift8-treb.php:177
filtercron_schedulestrunk/shift8-treb.php:184
actionshift8_treb_sync_listingstrunk/shift8-treb.php:187
actionshift8_treb_cleanup_terminatedtrunk/shift8-treb.php:190
actionadmin_inittrunk/shift8-treb.php:193
actionwp_enqueue_scriptstrunk/shift8-treb.php:201
actionwp_enqueue_scriptstrunk/shift8-treb.php:204
actionwp_enqueue_scriptstrunk/shift8-treb.php:207

Scheduled Events 4

shift8_treb_sync_listings
shift8_treb_cleanup_terminated
shift8_treb_sync_listings
shift8_treb_cleanup_terminated
Maintenance & Trust

Shift8 Real Estate Listings for TRREB Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedMar 5, 2026
PHP min version7.4
Downloads680

Community Trust

Rating100/100
Number of ratings1
Active installs10
Developer Profile

Shift8 Real Estate Listings for TRREB Developer Profile

shift8

16 plugins · 950 total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Shift8 Real Estate Listings for TRREB

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/shift8-real-estate-listings-for-treb/assets/css/shift8-treb-frontend.css/wp-content/plugins/shift8-real-estate-listings-for-treb/assets/css/shift8-treb-map.css/wp-content/plugins/shift8-real-estate-listings-for-treb/assets/js/shift8-treb-frontend.js/wp-content/plugins/shift8-real-estate-listings-for-treb/assets/js/shift8-treb-map.js
Version Parameters
/wp-content/plugins/shift8-real-estate-listings-for-treb/assets/css/shift8-treb-frontend.css?ver=/wp-content/plugins/shift8-real-estate-listings-for-treb/assets/css/shift8-treb-map.css?ver=/wp-content/plugins/shift8-real-estate-listings-for-treb/assets/js/shift8-treb-frontend.js?ver=/wp-content/plugins/shift8-real-estate-listings-for-treb/assets/js/shift8-treb-map.js?ver=

HTML / DOM Fingerprints

CSS Classes
shift8-treb-listing-mapshift8-treb-listing-detailsshift8-treb-map-canvasshift8-treb-listing-galleryshift8-treb-listing-gallery-image
Data Attributes
data-shift8-treb-map-optionsdata-shift8-treb-marker-optionsdata-shift8-treb-listing-id
JS Globals
shift8TrebFrontendshift8TrebMap
REST Endpoints
/wp-json/shift8-treb/v1/listings
Shortcode Output
[shift8_treb_listings][shift8_treb_listing_map]
FAQ

Frequently Asked Questions about Shift8 Real Estate Listings for TRREB