Does TradeJournal WP have any unpatched vulnerabilities?

No. All known vulnerabilities in TradeJournal WP have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is TradeJournal WP compatible with WordPress 6.9.4?

According to WordPress.org data, TradeJournal WP 1.2.2 has been tested up to WordPress 6.9.4. Check the plugin's changelog for the latest compatibility information.

Is TradeJournal WP compatible with PHP 7.0+?

TradeJournal WP requires PHP 7.0 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is TradeJournal WP updated?

TradeJournal WP was last updated on Mar 1, 2026. Frequent updates are generally a positive security signal.

What is TradeJournal WP's security score?

TradeJournal WP has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

TradeJournal WP Security & Risk Analysis

wordpress.org/plugins/tradejournal

A trade journal plugin for WordPress to import, manage, and analyze NinjaTrader CSV trade data with detailed daily logs and performance summaries.

10 active installs v1.2.2 PHP 7.0+ WP 5.0+ Updated Mar 1, 2026

csv-importninjatradertrade-journaltradingtrading-platform

A · Safe

CVEs total0

Unpatched0

Last CVENever

Download

Safety Verdict

Is TradeJournal WP Safe to Use in 2026?

Generally Safe

Score 100/100

TradeJournal WP has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago

Risk Assessment

The "tradejournal" v1.2.2 plugin exhibits a generally strong security posture based on the provided static analysis. The plugin demonstrates good practices by not utilizing dangerous functions, performing all SQL queries using prepared statements, and having a high percentage of properly escaped output. Furthermore, the absence of file operations and external HTTP requests reduces potential attack vectors. The plugin also incorporates security measures like nonce and capability checks, which are positive indicators.

Key Concerns

Limited attack surface with all entry points protected
All SQL queries use prepared statements
High percentage of properly escaped output
No dangerous functions used
No file operations
No external HTTP requests
No known vulnerabilities in history
No unsanitized paths in taint analysis
Good use of nonce checks
Good use of capability checks
Lack of vulnerabilities in history indicates maturity
Effective taint analysis with no critical findings

Vulnerabilities

None known

TradeJournal WP Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 17, 2026

TradeJournal WP Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

96 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

88% escaped109 total outputs

Data Flows

All sanitized

Data Flow Analysis

4 flows

tjwp_update_trades_page_callback (includes\admin.php:18)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

TradeJournal WP Attack Surface

Entry Points1

Unprotected0

Shortcodes 1

[tradejournal_posts] includes\shortcodes.php:101

WordPress Hooks 16

actionadmin_menuincludes\admin.php:16

actionadmin_menuincludes\admin.php:118

actionadd_attachmentincludes\helpers.php:53

actionadd_meta_boxesincludes\meta-box.php:16

actionadmin_menuincludes\options.php:19

actionadmin_initincludes\options.php:210

actioninitincludes\post-types.php:18

filterthe_contentincludes\template-functions.php:107

actionwp_footerincludes\template-functions.php:109

actionwp_enqueue_scriptstradejournal.php:54

actionsave_posttradejournal.php:104

actionwp_enqueue_scriptstradejournal.php:128

actionwp_enqueue_scriptstradejournal.php:138

actionwp_enqueue_scriptstradejournal.php:173

actionadmin_enqueue_scriptstradejournal.php:207

actionadmin_enqueue_scriptstradejournal.php:214

Maintenance & Trust

TradeJournal WP Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4

Last updatedMar 1, 2026

PHP min version7.0

Downloads1K

Community Trust

Rating0/100

Number of ratings0

Active installs10

Alternatives

TradeJournal WP Alternatives

WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets

wp-all-import

Easily import any file of any size into any plugin, post type, custom field, or taxonomy. Supports WooCommerce, ACF, images, galleries, users, real es …

100K 22 CVEs

Product Import Export for WooCommerce – Import Export Product CSV Suite

product-import-export-for-woo

Easily import/export WooCommerce products (simple, grouped, external/affiliate) via CSV. Transfer product data, including images, reviews, categories, …

90K 7 CVEs

WP All Import – Import Add-On for ACF

csv-xml-import-for-acf

100

Drag & drop to import any CSV, Excel, XML, or Google Sheets file into Advanced Custom Fields. Supports repeaters, flexible content, galleries, and …

40K No CVEs

WP All Import – Product Import for WooCommerce

woocommerce-xml-csv-product-import

100

Drag & drop to import products from any CSV, XML, Excel, or Google Sheets file. Supports variations, images, attributes, brands, and more with pow …

20K No CVEs

WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress

wp-ultimate-csv-importer

Effortlessly import, export, and migrate your WordPress data with WP Ultimate CSV Importer. This all-in-one solution supports CSV, XML, and Excel file …

20K 26 CVEs

Developer Profile

TradeJournal WP Developer Profile

Laith Sinawi

3 plugins · 50 total installs

trust score

Avg Security Score

95/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect TradeJournal WP

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/tradejournal/assets/css/style.css/wp-content/plugins/tradejournal/assets/js/isotope.pkgd.min.js/wp-content/plugins/tradejournal/assets/js/imagesloaded.pkgd.min.js/wp-content/plugins/tradejournal/assets/css/photoswipe.css/wp-content/plugins/tradejournal/assets/js/photoswipe.umd.min.js/wp-content/plugins/tradejournal/assets/js/photoswipe-lightbox.umd.min.js/wp-content/plugins/tradejournal/assets/css/footable.standalone.min.css/wp-content/plugins/tradejournal/assets/js/footable.min.js+2 more

Script Paths

/wp-content/plugins/tradejournal/assets/js/isotope.pkgd.min.js/wp-content/plugins/tradejournal/assets/js/imagesloaded.pkgd.min.js/wp-content/plugins/tradejournal/assets/js/photoswipe.umd.min.js/wp-content/plugins/tradejournal/assets/js/photoswipe-lightbox.umd.min.js/wp-content/plugins/tradejournal/assets/js/footable.min.js/wp-content/plugins/tradejournal/assets/js/custom.js+1 more

HTML / DOM Fingerprints

CSS Classes

tradejournal-poststradejournal-posttradejournal-table

JS Globals

tradeJournal

FAQ