Trail Status Security & Risk Analysis

wordpress.org/plugins/trail-status

Display the status of trails on your website.

10 active installs v2.2.1 PHP 5.6+ WP 5.8+ Updated Jan 17, 2026
bikinghikingoutdoorstrailtrails
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Trail Status Safe to Use in 2026?

Generally Safe

Score 100/100

Trail Status has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The 'trail-status' plugin v2.2.1 exhibits a mixed security posture. While it lacks a history of known vulnerabilities (CVEs) and does not appear to contain critical taint analysis findings, several areas of concern are highlighted by the static analysis. A significant weakness is the presence of an unprotected AJAX handler, which represents a direct attack vector. Additionally, the low percentage of properly escaped output (8%) indicates a high risk of cross-site scripting (XSS) vulnerabilities. The reliance on raw SQL queries for 47% of its database interactions also presents a risk of SQL injection if not handled carefully.

Key Concerns

  • Unprotected AJAX handler found
  • Low percentage of properly escaped output
  • Significant use of raw SQL queries
  • Bundled library 'DataTables' without version check
Vulnerabilities
None known

Trail Status Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Trail Status Code Analysis

Dangerous Functions
0
Raw SQL Queries
7
8 prepared
Unescaped Output
74
6 escaped
Nonce Checks
7
Capability Checks
5
File Operations
0
External Requests
1
Bundled Libraries
1

Bundled Libraries

DataTables

SQL Query Safety

53% prepared15 total queries

Output Escaping

8% escaped80 total outputs
Attack Surface
1 unprotected

Trail Status Attack Surface

Entry Points3
Unprotected1

AJAX Handlers 1

authwp_ajax_otgts2_update_statustrail-status.php:30

Shortcodes 2

[trail-status] trail-status.php:33
[trail-status-blocks] trail-status.php:34
WordPress Hooks 4
actionwp_loadedtrail-status.php:23
actionwidgets_inittrail-status.php:24
actionadmin_enqueue_scriptstrail-status.php:28
actionadmin_menutrail-status.php:29
Maintenance & Trust

Trail Status Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 17, 2026
PHP min version5.6
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Trail Status Developer Profile

Chris - On the Grid Web Design LLC

3 plugins · 10 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Trail Status

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/trail-status/trail-status.min.css

HTML / DOM Fingerprints

CSS Classes
otgts2-widgetotgts2-widget-headerotgts2-widget-titleotgts2-widget-statusotgts2-widget-trail-nameotgts2-widget-trail-status-textotgts2-widget-trail-status-colorotgts2-widget-status-unknown+33 more
HTML Comments
<!-- Begin Trail Status Widget --><!-- Begin Trail Status Blocks --><!-- Begin Trail Status Table -->
Data Attributes
data-trail-status-id
JS Globals
otgts2_ajax_object
Shortcode Output
[trail-status][trail-status-blocks]
FAQ

Frequently Asked Questions about Trail Status