TableCrafter – Data to Beautiful Tables Security & Risk Analysis

wordpress.org/plugins/tablecrafter-wp-data-tables

Transform JSON APIs, Google Sheets & CSV into accessible WordPress tables. Mobile-first design with touch gestures and WCAG 2.1 compliance.

0 active installs v3.5.4 PHP 8.0+ WP 5.0+ Updated Feb 11, 2026
accessibilityapijsontablewcag
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is TableCrafter – Data to Beautiful Tables Safe to Use in 2026?

Generally Safe

Score 100/100

TableCrafter – Data to Beautiful Tables has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "tablecrafter-wp-data-tables" v3.5.4 plugin exhibits a strong security posture based on the provided static analysis and vulnerability history. The complete absence of unpatched CVEs and the plugin's history of no recorded vulnerabilities are highly positive indicators of robust development and maintenance practices. The plugin also demonstrates good coding standards by exclusively using prepared statements for SQL queries and implementing capability checks and nonce checks on its entry points. The attack surface, while present, is fully protected, and there are no identified critical or high-severity taint flows, indicating a well-handled data sanitization process.

Key Concerns

  • Unsanitized paths in taint flows
  • Partially unescaped output (19% of outputs)
Vulnerabilities
None known

TableCrafter – Data to Beautiful Tables Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

TableCrafter – Data to Beautiful Tables Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
16 prepared
Unescaped Output
31
134 escaped
Nonce Checks
11
Capability Checks
12
File Operations
25
External Requests
11
Bundled Libraries
0

SQL Query Safety

100% prepared16 total queries

Output Escaping

81% escaped165 total outputs
Data Flows
2 unsanitized

Data Flow Analysis

6 flows2 with unsanitized paths
handle_export_ajax (includes\class-tc-export-handler-enhanced.php:377)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

TableCrafter – Data to Beautiful Tables Attack Surface

Entry Points22
Unprotected0

AJAX Handlers 17

authwp_ajax_tc_export_dataincludes\class-tc-export-handler-enhanced.php:78
noprivwp_ajax_tc_export_dataincludes\class-tc-export-handler-enhanced.php:79
authwp_ajax_tc_download_exportincludes\class-tc-export-handler-enhanced.php:80
noprivwp_ajax_tc_download_exportincludes\class-tc-export-handler-enhanced.php:81
authwp_ajax_tc_virtual_scroll_dataincludes\class-tc-performance-optimizer.php:330
noprivwp_ajax_tc_virtual_scroll_dataincludes\class-tc-performance-optimizer.php:331
authwp_ajax_tc_proxy_fetchtablecrafter.php:165
noprivwp_ajax_tc_proxy_fetchtablecrafter.php:166
authwp_ajax_tc_subscribe_leadtablecrafter.php:173
noprivwp_ajax_tc_subscribe_leadtablecrafter.php:174
authwp_ajax_tc_export_datatablecrafter.php:177
noprivwp_ajax_tc_export_datatablecrafter.php:178
authwp_ajax_tc_download_exporttablecrafter.php:179
noprivwp_ajax_tc_download_exporttablecrafter.php:180
authwp_ajax_tc_elementor_previewtablecrafter.php:183
noprivwp_ajax_tc_elementor_previewtablecrafter.php:184
authwp_ajax_tc_save_airtable_tokentablecrafter.php:187

REST API Routes 4

POST/wp-json/tablecrafter/v1/collaboration/joinincludes\class-tc-collaboration.php:52
POST/wp-json/tablecrafter/v1/collaboration/leaveincludes\class-tc-collaboration.php:58
POST/wp-json/tablecrafter/v1/collaboration/broadcastincludes\class-tc-collaboration.php:64
POST/wp-json/tablecrafter/v1/collaboration/syncincludes\class-tc-collaboration.php:70

Shortcodes 1

[tablecrafter] tablecrafter.php:158
WordPress Hooks 24
actionrest_api_initincludes\class-tc-collaboration.php:37
actionwp_enqueue_scriptsincludes\class-tc-collaboration.php:38
actionwp_enqueue_scriptsincludes\class-tc-collaboration.php:39
actiontablecrafter_cleanup_collaboration_sessionsincludes\class-tc-collaboration.php:42
actionelementor/widgets/registerincludes\class-tc-elementor-widget.php:854
actionelementor/widgets/widgets_registeredincludes\class-tc-elementor-widget.php:857
actiontc_cleanup_export_filesincludes\class-tc-export-handler-enhanced.php:84
actionwp_enqueue_scriptsincludes\class-tc-performance-optimizer.php:38
filtertablecrafter_render_dataincludes\class-tc-performance-optimizer.php:39
actionadmin_noticestablecrafter.php:22
actionelementor/loadedtablecrafter.php:89
actionelementor/elements/categories_registeredtablecrafter.php:95
actionelementor/widgets/registertablecrafter.php:101
actionelementor/widgets/widgets_registeredtablecrafter.php:102
actioninittablecrafter.php:155
actionadmin_enqueue_scriptstablecrafter.php:156
actioninittablecrafter.php:157
actionadmin_menutablecrafter.php:159
actionadmin_inittablecrafter.php:160
actionwp_headtablecrafter.php:161
actionadmin_headtablecrafter.php:162
actiontc_refresher_crontablecrafter.php:169
actiontc_refresh_single_sourcetablecrafter.php:170
filterwp_kses_allowed_protocolstablecrafter.php:2374

Scheduled Events 4

tablecrafter_cleanup_collaboration_sessions
tc_cleanup_export_files
tc_refresher_cron
tc_refresh_single_source
Maintenance & Trust

TableCrafter – Data to Beautiful Tables Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedFeb 11, 2026
PHP min version8.0
Downloads1K

Community Trust

Rating100/100
Number of ratings2
Active installs0
Developer Profile

TableCrafter – Data to Beautiful Tables Developer Profile

Fahad Murtaza

3 plugins · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect TableCrafter – Data to Beautiful Tables

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about TableCrafter – Data to Beautiful Tables