TC Bootstrap Carousel Security & Risk Analysis

wordpress.org/plugins/tc-bootstrap-carousel

Twitter Bootstrap based professional WordPress carousel plugin on click installation.use the shortcode where want to use

10 active installs v1.0 PHP + WP 3.0.1+ Updated Apr 12, 2016
boostrap-carouselbootstrap-carousel-sliderbootstrap-responsive-sliderbootstrap-sliderthemescode
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is TC Bootstrap Carousel Safe to Use in 2026?

Generally Safe

Score 85/100

TC Bootstrap Carousel has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9yr ago
Risk Assessment

The tc-bootstrap-carousel v1.0 plugin exhibits a generally good security posture based on the provided static analysis. It demonstrates strong practices by avoiding dangerous functions, utilizing prepared statements for all SQL queries, and not performing file operations or external HTTP requests. The absence of known vulnerabilities in its history further contributes to this positive assessment. However, there are notable areas for improvement that introduce potential risks. The plugin lacks any nonce checks or capability checks, meaning that its single shortcode entry point is entirely unprotected against unauthorized access or manipulation. Additionally, a significant portion of its output (33%) is not properly escaped, which could lead to cross-site scripting (XSS) vulnerabilities if malicious data is introduced through user-controllable inputs that are then rendered without proper sanitization.

Key Concerns

  • No capability checks on entry points
  • No nonce checks on entry points
  • Unescaped output detected (33%)
Vulnerabilities
None known

TC Bootstrap Carousel Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

TC Bootstrap Carousel Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
3
6 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

67% escaped9 total outputs
Attack Surface

TC Bootstrap Carousel Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[tc-bcarousel] public\tc-bcarousel-view.php:8
WordPress Hooks 4
actionadmin_menuadmin\tc-bcarousel-setting.php:12
actionadmin_initadmin\tc-bcarousel-setting.php:23
actionwp_enqueue_scriptstc-bootstrap-carousel.php:29
actiondo_meta_boxestc-bootstrap-carousel.php:41
Maintenance & Trust

TC Bootstrap Carousel Maintenance & Trust

Maintenance Signals

WordPress version tested4.3.34
Last updatedApr 12, 2016
PHP min version
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

TC Bootstrap Carousel Developer Profile

themesCode

4 plugins · 250 total installs

71
trust score
Avg Security Score
88/100
Avg Patch Time
176 days
View full developer profile
Detection Fingerprints

How We Detect TC Bootstrap Carousel

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/tc-bootstrap-carousel/assets/css/tc-bcarousel-main.css
Version Parameters
tc-bcarousel-main?ver=

HTML / DOM Fingerprints

CSS Classes
tc-carousel-titletc-carousel-title-sm
Data Attributes
data-ride="carousel"
Shortcode Output
<div id="tc-bcarousel-id" class="carousel slide" data-ride="carousel">
FAQ

Frequently Asked Questions about TC Bootstrap Carousel