Sitewide (Admin) Header/Footer Security & Risk Analysis

wordpress.org/plugins/sitewide-admin-headerfooter

Change the header/footer of the front- and backend of WordPress Multisite

40 active installs v1.1 PHP + WP 3.0+ Updated Jul 10, 2011
adminfooterheadermultisitesitewide
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Sitewide (Admin) Header/Footer Safe to Use in 2026?

Generally Safe

Score 85/100

Sitewide (Admin) Header/Footer has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 14yr ago
Risk Assessment

The sitewide-admin-headerfooter plugin, version 1.1, exhibits a generally good security posture regarding its entry points and SQL handling. The static analysis reveals no detectable AJAX handlers, REST API routes, shortcodes, or cron events, significantly limiting the plugin's attack surface. Furthermore, all observed SQL queries are properly prepared, which is a strong defense against SQL injection vulnerabilities. The absence of known CVEs and historical vulnerabilities is also a positive indicator, suggesting a history of stable and secure development.

Key Concerns

  • 0% of output properly escaped
  • 0 capability checks on entry points
  • 1 unsanitized path in taint analysis
Vulnerabilities
None known

Sitewide (Admin) Header/Footer Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Sitewide (Admin) Header/Footer Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
7
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped7 total outputs
Data Flows
1 unsanitized

Data Flow Analysis

1 flows1 with unsanitized paths
<sitewide-header-footer> (sitewide-header-footer.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Sitewide (Admin) Header/Footer Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 6
actionwpmu_optionssitewide-header-footer.php:142
actionupdate_wpmu_optionssitewide-header-footer.php:145
actionadmin_headsitewide-header-footer.php:148
filteradmin_footer_textsitewide-header-footer.php:149
actionwp_headsitewide-header-footer.php:150
actionwp_footersitewide-header-footer.php:151
Maintenance & Trust

Sitewide (Admin) Header/Footer Maintenance & Trust

Maintenance Signals

WordPress version tested3.2.1
Last updatedJul 10, 2011
PHP min version
Downloads6K

Community Trust

Rating100/100
Number of ratings2
Active installs40
Developer Profile

Sitewide (Admin) Header/Footer Developer Profile

Philipp15b

1 plugin · 40 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Sitewide (Admin) Header/Footer

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

CSS Classes
large-text
Data Attributes
id="shf_admin_header_content"name="shf_admin_header_content"id="shf_admin_footer_content"name="shf_admin_footer_content"id="shf_header_content"name="shf_header_content"+2 more
FAQ

Frequently Asked Questions about Sitewide (Admin) Header/Footer