Surbma | Infusionsoft Shortcode Security & Risk Analysis

wordpress.org/plugins/surbma-infusionsoft-shortcode

A simple shortcode to include Infusionsoft forms into WordPress.

10 active installs v2.0.2 PHP 7.0+ WP 5.1+ Updated Jun 22, 2026
infusionsoftshortcode
99
A · Safe
CVEs total1
Unpatched0
Last CVEJun 26, 2026
Safety Verdict

Is Surbma | Infusionsoft Shortcode Safe to Use in 2026?

Generally Safe

Score 99/100

Surbma | Infusionsoft Shortcode has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.

1 known CVELast CVE: Jun 26, 2026Updated 2mo ago
Risk Assessment

The surbma-infusionsoft-shortcode plugin v2.0 demonstrates a generally strong security posture based on the provided static analysis. It lacks dangerous functions, uses prepared statements exclusively for SQL queries, and appears to properly escape all output. There are no file operations or external HTTP requests, and crucially, no known vulnerabilities (CVEs) have been recorded for this plugin. The absence of taint analysis findings further reinforces this positive assessment, suggesting no immediate risks related to unsanitized data flows.

Vulnerabilities
1 published

Surbma | Infusionsoft Shortcode Security Vulnerabilities

CVEs by Year

1 CVE in 2026
2026
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2026-11597medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Surbma | Infusionsoft Shortcode <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

Jun 26, 2026 Patched in 2.0.2 (1d)
Version History

Surbma | Infusionsoft Shortcode Release Timeline

v2.0.2Current
v2.0.11 CVE
v2.01 CVE
v1.2.41 CVE
v1.2.31 CVE
v1.2.21 CVE
v1.2.11 CVE
v1.2.01 CVE
Code Analysis
Analyzed Mar 17, 2026

Surbma | Infusionsoft Shortcode Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Surbma | Infusionsoft Shortcode Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[infusionsoft-form] surbma-infusionsoft-shortcode.php:37
WordPress Hooks 1
actionplugins_loadedsurbma-infusionsoft-shortcode.php:28
Maintenance & Trust

Surbma | Infusionsoft Shortcode Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedJun 22, 2026
PHP min version7.0
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Surbma | Infusionsoft Shortcode Developer Profile

Surbma

28 plugins · 30K total installs

81
trust score
Avg Security Score
90/100
Avg Patch Time
76 days
View full developer profile
Detection Fingerprints

How We Detect Surbma | Infusionsoft Shortcode

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

Shortcode Output
<script type="text/javascript" src="https://.infusionsoft.com/app/form/iframe/"></script>
FAQ

Frequently Asked Questions about Surbma | Infusionsoft Shortcode