Does Structure Viewer have any unpatched vulnerabilities?

No. All known vulnerabilities in Structure Viewer have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Structure Viewer compatible with WordPress 6.9.4?

According to WordPress.org data, Structure Viewer 2.0 has been tested up to WordPress 6.9.4. Check the plugin's changelog for the latest compatibility information.

Is Structure Viewer compatible with PHP 7.2+?

Structure Viewer requires PHP 7.2 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Structure Viewer updated?

Structure Viewer was last updated on Dec 4, 2025. Frequent updates are generally a positive security signal.

What is Structure Viewer's security score?

Structure Viewer has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Structure Viewer Security & Risk Analysis

wordpress.org/plugins/structure-viewer

View, search, and export the complete file structure of your WordPress plugins and themes with an advanced file viewer.

10 active installs v2.0 PHP 7.2+ WP 5.0+ Updated Dec 4, 2025

debuggingdeveloper-toolsfile-structurepluginsthemes

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Structure Viewer Safe to Use in 2026?

Generally Safe

Score 100/100

Structure Viewer has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago

Risk Assessment

The 'structure-viewer' plugin v2.0 exhibits a generally strong security posture based on the static analysis. All identified entry points (5 AJAX handlers) appear to be protected by authentication checks, and the plugin utilizes prepared statements for all SQL queries, which is a significant strength. Furthermore, a high percentage (91%) of output is properly escaped, and nonces and capability checks are implemented. The absence of any known vulnerabilities in its history is also a positive indicator.

Key Concerns

Flows with unsanitized paths found
Two unsanitized path flows in taint analysis
3 File operations with potential path issues
Minor unescaped outputs detected

Vulnerabilities

None known

Structure Viewer Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 17, 2026

Structure Viewer Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

62 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

91% escaped68 total outputs

Data Flows

2 unsanitized

Data Flow Analysis

4 flows2 with unsanitized paths

structureviewer_admin_page (includes\admin.php:53)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

Structure Viewer Attack Surface

Entry Points5

Unprotected0

AJAX Handlers 5

authwp_ajax_structureviewer_get_available_file_typesincludes\helpers.php:181

authwp_ajax_structureviewer_exportincludes\scanner.php:262

authwp_ajax_structureviewer_copy_clipboardincludes\scanner.php:478

authwp_ajax_structureviewer_view_fileincludes\scanner.php:583

authwp_ajax_structureviewer_searchincludes\search.php:8

WordPress Hooks 2

actionadmin_menuincludes\admin.php:8

actionadmin_enqueue_scriptsstructure-viewer.php:36

Maintenance & Trust

Structure Viewer Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4

Last updatedDec 4, 2025

PHP min version7.2

Downloads543

Community Trust

Rating100/100

Number of ratings1

Active installs10

Alternatives

Structure Viewer Alternatives

Advanced Automatic Updates

automatic-updater

Adds extra options to WordPress' built-in Automatic Updates feature.

30K No CVEs

KP Zip Downloader

kp-zip-downloader

100

This plugin allows administrators to download installed plugins and themes as ZIP files directly from the WordPress dashboard.

2K No CVEs

Export Plugins and Templates

export-plugins-and-templates

Export Plugins and Templates allows you to export any template or plugin already installed in your WordPress.

1K No CVEs

WIP Custom Login

wip-custom-login

WIP Custom Login allows you to customize the login section of WordPress and you can replace the admin WordPress logo, set a background image and much …

800 2 CVEs

WP Disables Updates

wp-disable-updates

WP Disables Updates allow you to disables plugin or themes or wordpress core updates.

800 No CVEs

Developer Profile

Structure Viewer Developer Profile

Blincks

1 plugin · 10 total installs

trust score

Avg Security Score

100/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Structure Viewer

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/structure-viewer/assets/css/sv-styles.css/wp-content/plugins/structure-viewer/assets/css/sv-controls.css/wp-content/plugins/structure-viewer/assets/js/sv-main.js/wp-content/plugins/structure-viewer/assets/js/sv-scanner.js/wp-content/plugins/structure-viewer/assets/js/sv-search.js/wp-content/plugins/structure-viewer/assets/js/sv-filters.js

Script Paths

/wp-content/plugins/structure-viewer/assets/js/sv-main.js/wp-content/plugins/structure-viewer/assets/js/sv-scanner.js/wp-content/plugins/structure-viewer/assets/js/sv-search.js/wp-content/plugins/structure-viewer/assets/js/sv-filters.js

Version Parameters

structure-viewer/sv-styles.css?ver=structure-viewer/sv-controls.css?ver=structure-viewer/sv-main.js?ver=structure-viewer/sv-scanner.js?ver=structure-viewer/sv-search.js?ver=structure-viewer/sv-filters.js?ver=

HTML / DOM Fingerprints

CSS Classes

sv-icon-phpsv-icon-jssv-icon-csssv-icon-htmlsv-icon-jsonsv-icon-xmlsv-icon-txtsv-icon-md+4 more

Data Attributes

data-name

JS Globals

STRUCTUREVIEWER_AJAX_URLSTRUCTUREVIEWER_NONCESTRUCTUREVIEWER_VERSIONSTRUCTUREVIEWER_PLUGIN_SLUGSTRUCTUREVIEWER_PLUGIN_URL

FAQ