Smart Contact Card Security & Risk Analysis

wordpress.org/plugins/smart-contact-card

Shareable contact cards with QR codes and vCard via shortcode, Gutenberg block, and Elementor widget.

60 active installs v1.1.1 PHP 8.0+ WP 5.8+ Updated Jan 16, 2026
business-cardcontact-cardelementorqr-codevcard
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Smart Contact Card Safe to Use in 2026?

Generally Safe

Score 100/100

Smart Contact Card has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The smart-contact-card plugin version 1.1.1 exhibits a generally strong security posture based on the provided static analysis. The complete absence of dangerous functions, raw SQL queries, file operations, and external HTTP requests are positive indicators. The overwhelming majority of output is properly escaped, and nonce checks are implemented, demonstrating a good understanding of secure coding practices for many entry points. However, a notable concern is the complete lack of capability checks across all identified entry points. While the attack surface is small and appears to lack direct AJAX or REST API vulnerabilities, the presence of a shortcode without any permission checks means that any authenticated user could potentially interact with this functionality, which could lead to unexpected behavior or information disclosure if the shortcode's output is sensitive.

Key Concerns

  • No capability checks on entry points
Vulnerabilities
None known

Smart Contact Card Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Smart Contact Card Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
85 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

99% escaped86 total outputs
Attack Surface

Smart Contact Card Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[smartcc_contact] src\Shortcode\ContactShortcode.php:12
WordPress Hooks 11
actionadmin_noticessmart-contact-card.php:76
actionplugins_loadedsmart-contact-card.php:94
actionelementor/initsrc\Elementor\Config.php:79
actionadmin_noticessrc\Elementor\Config.php:96
actionadmin_noticessrc\Elementor\Config.php:102
actionadmin_noticessrc\Elementor\Config.php:108
actionelementor/widgets/registersrc\Elementor\Config.php:190
actionwp_enqueue_scriptssrc\plugin.php:19
actioninitsrc\Shortcode\ContactShortcode.php:11
actioninitsrc\Shortcode\ContactShortcode.php:16
filterthe_contentsrc\Shortcode\ContactShortcode.php:20
Maintenance & Trust

Smart Contact Card Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 16, 2026
PHP min version8.0
Downloads374

Community Trust

Rating0/100
Number of ratings0
Active installs60
Developer Profile

Smart Contact Card Developer Profile

Md Abul Bashar

33 plugins · 1K total installs

91
trust score
Avg Security Score
95/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Smart Contact Card

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/smart-contact-card/src/View/css/card.css
Version Parameters
smartcc-card?ver=0.1.0

HTML / DOM Fingerprints

Data Attributes
smartcc_vcf_wpnonce
Shortcode Output
[smartcc_contact
FAQ

Frequently Asked Questions about Smart Contact Card