SiteLeads Security & Risk Analysis

wordpress.org/plugins/siteleads

Generate more leads with customizable floating contact buttons for phone, email, and WhatsApp communication.

10 active installs v1.0.0 PHP 7.4+ WP 6.4+ Updated Nov 6, 2025
conversionemailleadsphonewhatsapp
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is SiteLeads Safe to Use in 2026?

Generally Safe

Score 100/100

SiteLeads has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The 'siteleads' v1.0.0 plugin exhibits a strong security posture based on the provided static analysis. The absence of any identified dangerous functions, raw SQL queries, or unescaped output is a significant positive. Furthermore, the plugin demonstrates robust input validation and authorization practices by having zero unprotected AJAX handlers, REST API routes, shortcodes, or cron events, and a complete absence of any identified taint flows. The vulnerability history is also completely clean, with no known CVEs ever recorded for this plugin. This suggests a development team that is either highly security-conscious or has not yet encountered exploitable vulnerabilities. The only minor point of consideration is the bundling of Lodash, which, while common, should always be kept up-to-date to mitigate potential known vulnerabilities within the library itself, though no specific issues are indicated here.

Key Concerns

  • Bundled library Lodash
Vulnerabilities
None known

SiteLeads Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

SiteLeads Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
1

Bundled Libraries

Lodash
Attack Surface

SiteLeads Attack Surface

Entry Points0
Unprotected0
Maintenance & Trust

SiteLeads Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedNov 6, 2025
PHP min version7.4
Downloads159

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

SiteLeads Developer Profile

Extend Themes

59 plugins · 429K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
92 days
View full developer profile
Detection Fingerprints

How We Detect SiteLeads

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/siteleads/assets/css/admin.css/wp-content/plugins/siteleads/assets/css/frontend.css/wp-content/plugins/siteleads/assets/js/admin.js/wp-content/plugins/siteleads/assets/js/frontend.js
Script Paths
/wp-content/plugins/siteleads/assets/js/admin.js/wp-content/plugins/siteleads/assets/js/frontend.js
Version Parameters
siteleads/assets/css/admin.css?ver=siteleads/assets/css/frontend.css?ver=siteleads/assets/js/admin.js?ver=siteleads/assets/js/frontend.js?ver=

HTML / DOM Fingerprints

CSS Classes
siteleads-admin-pagesiteleads-form-buildersiteleads-form-wrapper
HTML Comments
<!-- SiteLeads Form Builder Start --><!-- SiteLeads Form Builder End --><!-- SiteLeads Frontend Form Start --><!-- SiteLeads Frontend Form End -->
Data Attributes
data-siteleads-form-iddata-siteleads-nonce
JS Globals
siteleads_ajax_object
REST Endpoints
/wp-json/siteleads/v1/forms/wp-json/siteleads/v1/submissions
Shortcode Output
[siteleads_form id="
FAQ

Frequently Asked Questions about SiteLeads