Total CrUX Security & Risk Analysis

wordpress.org/plugins/total-crux

Measure and store real-user experience (UX) metrics directly from visitors browsers using Google's Core Web Vitals.

10 active installs v1.0.2 PHP 7.4+ WP 5.8+ Updated Feb 10, 2026
core-web-vitalsgoogleperformanceseouser-experience
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Total CrUX Safe to Use in 2026?

Generally Safe

Score 100/100

Total CrUX has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The 'total-crux' plugin v1.0.2 exhibits a generally strong security posture based on the provided static analysis. It demonstrates good practices by employing prepared statements for all SQL queries and a high percentage of properly escaped output. The absence of dangerous functions and external HTTP requests further contributes to its positive security profile. Furthermore, the plugin has no recorded vulnerability history, suggesting a commitment to security or simply a lack of discovered issues, both of which are favorable signs.

Key Concerns

  • Lack of capability checks on entry points
  • Limited nonce checks on entry points
Vulnerabilities
None known

Total CrUX Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Total CrUX Release Timeline

v1.0.2Current
v1.0.1
v1.0.0
Code Analysis
Analyzed Apr 16, 2026

Total CrUX Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
9 prepared
Unescaped Output
5
131 escaped
Nonce Checks
2
Capability Checks
0
File Operations
1
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared9 total queries

Output Escaping

96% escaped136 total outputs
Attack Surface

Total CrUX Attack Surface

Entry Points4
Unprotected0

AJAX Handlers 4

authwp_ajax_tcrux_save_metrictotal-crux.php:81
noprivwp_ajax_tcrux_save_metrictotal-crux.php:82
authwp_ajax_tcrux_filter_by_urltotal-crux.php:83
noprivwp_ajax_tcrux_filter_by_urltotal-crux.php:84
WordPress Hooks 8
actionadmin_menutotal-crux.php:75
actionadmin_enqueue_scriptstotal-crux.php:78
actionadmin_enqueue_scriptstotal-crux.php:79
actionwp_footertotal-crux.php:80
actiontcrux_cron_cleanup_old_datatotal-crux.php:86
actiontcrux_cron_cache_urlstotal-crux.php:87
actioninittotal-crux.php:88
filterload_textdomain_mofiletotal-crux.php:89

Scheduled Events 2

tcrux_cron_cleanup_old_data
tcrux_cron_cache_urls
Maintenance & Trust

Total CrUX Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 10, 2026
PHP min version7.4
Downloads411

Community Trust

Rating100/100
Number of ratings1
Active installs10
Developer Profile

Total CrUX Developer Profile

elartedelaweb

1 plugin · 10 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Total CrUX

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/total-crux/admin/assets/js/vendor/web-vitals.js/wp-content/plugins/total-crux/admin/assets/js/web-vitals-data.js
Script Paths
/wp-content/plugins/total-crux/admin/assets/js/vendor/web-vitals.js/wp-content/plugins/total-crux/admin/assets/js/web-vitals-data.js
Version Parameters
total-crux/admin/assets/js/web-vitals-data.js?ver=

HTML / DOM Fingerprints

JS Globals
tcrux_webVitalsData
FAQ

Frequently Asked Questions about Total CrUX