Social Like Box Security & Risk Analysis

wordpress.org/plugins/social-like-box

A lightweight WordPress plugin that adds a Social Like Box widget and shortcode for Facebook, Instagram, Twitter (X), and LinkedIn with live preview.

10 active installs v1.1.1 PHP 7.0+ WP 5.4+ Updated Oct 19, 2025
facebookinstagramlike-boxsocial-likesocial-widget
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Social Like Box Safe to Use in 2026?

Generally Safe

Score 100/100

Social Like Box has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7mo ago
Risk Assessment

The "social-like-box" plugin version 1.1.1 exhibits a generally good security posture, adhering to several best practices. The static analysis reveals a limited attack surface with no unprotected entry points, indicating that authentication and capability checks are likely in place for the identified AJAX handler and shortcode. The plugin also demonstrates strong SQL hygiene, with all queries utilizing prepared statements, and a high percentage of output is properly escaped, mitigating common cross-site scripting (XSS) risks. Furthermore, the absence of any recorded vulnerabilities or CVEs suggests a history of stable and secure development. However, the taint analysis did reveal two flows with unsanitized paths. While no critical or high severity issues were flagged, these flows represent a potential weakness that could be exploited if an attacker can control the input data. The presence of nonce checks and capability checks further strengthens its security, but the unsanitized paths are a specific area for improvement.

Key Concerns

  • Taint flows with unsanitized paths
Vulnerabilities
None known

Social Like Box Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Social Like Box Release Timeline

v1.1.1Current
v1.1.0
v1.0.0
Code Analysis
Analyzed Apr 16, 2026

Social Like Box Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
13
153 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

92% escaped166 total outputs
Data Flows · Security
2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths
ajax_preview (includes/class-slbox-plugin.php:119)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Social Like Box Attack Surface

Entry Points2
Unprotected0

AJAX Handlers 1

authwp_ajax_slbox_preview_ajaxincludes/class-slbox-plugin.php:12

Shortcodes 1

[social_like_box] includes/class-slbox-plugin.php:11
WordPress Hooks 4
actionadmin_menuincludes/class-slbox-plugin.php:9
actionadmin_initincludes/class-slbox-plugin.php:10
actionwidgets_initsocial-like-box.php:25
actionwp_enqueue_scriptssocial-like-box.php:30
Maintenance & Trust

Social Like Box Maintenance & Trust

Maintenance Signals

WordPress version tested6.5.8
Last updatedOct 19, 2025
PHP min version7.0
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Social Like Box Developer Profile

Hasib Shahabuddin

1 plugin · 10 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Social Like Box

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/social-like-box/css/admin.css/wp-content/plugins/social-like-box/js/admin.js/wp-content/plugins/social-like-box/js/main.js
Script Paths
/wp-content/plugins/social-like-box/js/main.js/wp-content/plugins/social-like-box/js/admin.js
Version Parameters
social-like-box/js/main.js?ver=social-like-box/js/admin.js?ver=social-like-box/css/admin.css?ver=

HTML / DOM Fingerprints

CSS Classes
slbox-preview
Data Attributes
id="slbox-platform"id="slbox-page-url"id="slbox-width"id="slbox-width-unit"id="slbox-height"id="slbox-preview"
JS Globals
slbox_preview_nonce
REST Endpoints
/wp-json/social-like-box/v1/preview
Shortcode Output
[social_like_box]
FAQ

Frequently Asked Questions about Social Like Box