Ubecube 3D Security & Risk Analysis

wordpress.org/plugins/ubecube-3d-widget

Ubecube 3D lets you to display 1 to 6 short texts in sequence. Useful for communicate News or what you want.

10 active installs v1.1 PHP + WP 3.5.1+ Updated Nov 24, 2013
3dcubenewswidget
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Ubecube 3D Safe to Use in 2026?

Generally Safe

Score 85/100

Ubecube 3D has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 12yr ago
Risk Assessment

The ubecube-3d-widget plugin v1.1 exhibits a generally positive security posture based on the provided static analysis. The absence of any identified dangerous functions, SQL queries without prepared statements, external HTTP requests, and file operations is commendable. Furthermore, the lack of known CVEs and a clean vulnerability history suggest a history of responsible development or minimal exposure. However, a significant concern arises from the extremely low percentage of properly escaped output. With 31 outputs analyzed and only 13% properly escaped, this indicates a high potential for Cross-Site Scripting (XSS) vulnerabilities. Although the static analysis did not report any specific taint flows, the inherent risk from unescaped output is substantial and could be exploited if malicious input reaches these output points.

Key Concerns

  • Low output escaping percentage
Vulnerabilities
None known

Ubecube 3D Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Ubecube 3D Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
27
4 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

13% escaped31 total outputs
Attack Surface

Ubecube 3D Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 4
actionwp_enqueue_scriptsubecube_3d.php:299
actionwp_enqueue_scriptsubecube_3d.php:300
actionwidgets_initubecube_3d.php:301
actionplugins_loadedubecube_3d.php:302
Maintenance & Trust

Ubecube 3D Maintenance & Trust

Maintenance Signals

WordPress version tested3.7.41
Last updatedNov 24, 2013
PHP min version
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Ubecube 3D Developer Profile

JacopoG

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Ubecube 3D

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/ubecube-3d-widget/img/transparent.png

HTML / DOM Fingerprints

CSS Classes
cube_3dubecubeNavpreviousNewshideButtondotsScrollContainerdotsScrollnextNewspauseLoop
HTML Comments
<!-- START Cube Container --><!-- END Cube Container --><!-- START 3D Cube --><!-- END 3D Cube -->+16 more
Data Attributes
id="ubecube_3d"class="cube_3d showFront"class="ubecubeNav"class="previousNews hideButton"class="dotsScrollContainer"class="dotsScroll showFront on"+7 more
FAQ

Frequently Asked Questions about Ubecube 3D