TomS Image Slider Security & Risk Analysis

wordpress.org/plugins/toms-image-slider

Simple Image Slider block.

400 active installs v1.1.5 PHP 7.0+ WP 5.8+ Updated Mar 17, 2023
blockgallery-blockimage-blockimage-from-url-block
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is TomS Image Slider Safe to Use in 2026?

Generally Safe

Score 85/100

TomS Image Slider has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3yr ago
Risk Assessment

The "toms-image-slider" v1.1.5 plugin exhibits a generally strong security posture based on the static analysis provided. There are no detected AJAX handlers, REST API routes, shortcodes, or cron events, indicating a very limited attack surface. The absence of dangerous functions, file operations, and external HTTP requests further reinforces this. Crucially, all detected SQL queries utilize prepared statements, a best practice for preventing SQL injection vulnerabilities. Taint analysis also shows no identified flows with unsanitized paths, which is a positive sign.

Key Concerns

  • 100% of outputs are not properly escaped
  • No capability checks implemented
  • No nonce checks implemented
Vulnerabilities
None known

TomS Image Slider Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

TomS Image Slider Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped1 total outputs
Attack Surface

TomS Image Slider Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
actioninittoms-image-slider.php:20
Maintenance & Trust

TomS Image Slider Maintenance & Trust

Maintenance Signals

WordPress version tested6.1.10
Last updatedMar 17, 2023
PHP min version7.0
Downloads12K

Community Trust

Rating70/100
Number of ratings2
Active installs400
Developer Profile

TomS Image Slider Developer Profile

TomS Caprice

7 plugins · 1K total installs

86
trust score
Avg Security Score
89/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect TomS Image Slider

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/toms-image-slider/build/index.js/wp-content/plugins/toms-image-slider/build/index.css/wp-content/plugins/toms-image-slider/img/default.png/wp-content/plugins/toms-image-slider/build/frontend.js/wp-content/plugins/toms-image-slider/build/frontend.css
Script Paths
wp-content/plugins/toms-image-slider/build/index.jswp-content/plugins/toms-image-slider/build/frontend.js

HTML / DOM Fingerprints

CSS Classes
tomsneddontoms-image-slider
JS Globals
tomsSlieshowDefaultFromPHP
Shortcode Output
<div class="tomsneddon"> <div id="toms-image-slider" class="toms-image-slider"> <pre style="display: none; opacity: 0;">
FAQ

Frequently Asked Questions about TomS Image Slider