WP-Safety

Spin Wheel – Lucky Wheel, Giveaway & Coupon Popup Security & Risk Analysis

wordpress.org/plugins/ultimate-spin-wheel

Interactive gamified popup. Let users spin to win on a lucky wheel, fortune wheel, or coupon wheel. Capture WordPress leads & boost WooCommerce sales.

10 active installs v2.0.6 PHP 7.4+ WP 6.1+ Updated Jun 6, 2026
couponfortune-wheellucky-wheelspin-wheelwoocommerce
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Spin Wheel – Lucky Wheel, Giveaway & Coupon Popup Safe to Use in 2026?

Generally Safe

Score 100/100

Spin Wheel – Lucky Wheel, Giveaway & Coupon Popup has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The 'ultimate-spin-wheel' v2.0.4 plugin exhibits a generally good security posture based on the provided static analysis and vulnerability history. The vast majority of SQL queries utilize prepared statements, and output escaping is consistently applied, indicating a strong adherence to secure coding practices. The plugin also demonstrates a responsible approach to WordPress security by including nonce and capability checks on most of its entry points. Furthermore, the absence of any recorded CVEs or past vulnerabilities is a positive indicator of its historical security reliability and the development team's likely commitment to addressing potential issues.

Key Concerns

  • AJAX handler without authentication check
Vulnerabilities
None known

Spin Wheel – Lucky Wheel, Giveaway & Coupon Popup Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Spin Wheel – Lucky Wheel, Giveaway & Coupon Popup Release Timeline

v2.0.6Current
v2.0.5
v2.0.4
v2.0.3
v2.0.2
v1.0.5
v1.0.4
Code Analysis
Analyzed Mar 17, 2026

Spin Wheel – Lucky Wheel, Giveaway & Coupon Popup Code Analysis

Dangerous Functions
0
Raw SQL Queries
10
76 prepared
Unescaped Output
8
391 escaped
Nonce Checks
27
Capability Checks
20
File Operations
3
External Requests
2
Bundled Libraries
0

SQL Query Safety

88% prepared86 total queries

Output Escaping

98% escaped399 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

7 flows
dci_sdk_insights (dci\insights.php:567)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
1 unprotected

Spin Wheel – Lucky Wheel, Giveaway & Coupon Popup Attack Surface

Entry Points26
Unprotected1

AJAX Handlers 26

authwp_ajax_dci_sdk_insightsdci\insights.php:40
authwp_ajax_dci_sdk_dismiss_noticedci\insights.php:41
authwp_ajax_dci_sdk_insights_deactivate_feedbackdci\insights.php:42
authwp_ajax_uspw_duplicate_campaignincludes\core\class-campaigns.php:29
authwp_ajax_ultimate_spin_wheel_get_entriesincludes\core\class-entries.php:22
authwp_ajax_ultimate_spin_wheel_delete_entryincludes\core\class-entries.php:23
authwp_ajax_ultimate_spin_wheel_bulk_delete_entriesincludes\core\class-entries.php:24
authwp_ajax_ultimate_spin_wheel_export_entriesincludes\core\class-entries.php:25
authwp_ajax_ultimate_spin_wheel_clear_cacheincludes\core\class-entries.php:26
authwp_ajax_ultimate_spin_wheel_update_entry_statusincludes\core\class-entries.php:28
authwp_ajax_ultimate_spin_wheel_block_identityincludes\core\class-entries.php:30
authwp_ajax_ultimate_spin_wheel_unblock_identityincludes\core\class-entries.php:31
authwp_ajax_ultimate_spin_wheel_reportsincludes\core\class-reports.php:17
noprivwp_ajax_ultimate_spin_wheel_reportsincludes\core\class-reports.php:18
authwp_ajax_ultimate_spin_wheel_get_global_settingsincludes\core\class-settings.php:17
authwp_ajax_ultimate_spin_wheel_update_global_settingsincludes\core\class-settings.php:18
authwp_ajax_ultimate_spin_wheel_sc_imp_countincludes\core\class-spin-wheel.php:21
noprivwp_ajax_ultimate_spin_wheel_sc_imp_countincludes\core\class-spin-wheel.php:22
authwp_ajax_ultimate_spin_wheel_spinnedincludes\core\class-spin-wheel.php:24
noprivwp_ajax_ultimate_spin_wheel_spinnedincludes\core\class-spin-wheel.php:25
authwp_ajax_ultimate_spin_wheel_check_identityincludes\core\class-spin-wheel.php:27
noprivwp_ajax_ultimate_spin_wheel_check_identityincludes\core\class-spin-wheel.php:28
authwp_ajax_ultimate_spin_wheel_process_spinincludes\core\class-spin-wheel.php:30
noprivwp_ajax_ultimate_spin_wheel_process_spinincludes\core\class-spin-wheel.php:31
authwp_ajax_rc_sdk_insightsincludes\feedbacks\notice.php:46
authwp_ajax_rc_sdk_dismiss_noticeincludes\feedbacks\notice.php:47
WordPress Hooks 25
actionadmin_enqueue_scriptsdci\insights.php:207
actionadmin_noticesdci\insights.php:215
actionadmin_noticesdci\insights.php:227
actionin_admin_headerdci\insights.php:233
actionadmin_enqueue_scriptsdci\insights.php:261
actionin_admin_headerdci\insights.php:270
actionadmin_menuincludes\admin\class-menu.php:28
actionwp_dashboard_setupincludes\class-admin-feeds.php:21
actionwp_loadedincludes\core\class-spin-wheel.php:33
actionwpincludes\core\class-spin-wheel.php:34
actionwp_enqueue_scriptsincludes\core\class-spin-wheel.php:39
actionwp_headincludes\core\class-spin-wheel.php:40
actionwp_footerincludes\core\class-spin-wheel.php:41
actionadmin_enqueue_scriptsincludes\feedbacks\notice.php:125
actionadmin_noticesincludes\feedbacks\notice.php:128
actionadmin_enqueue_scriptsplugin.php:259
actionadmin_enqueue_scriptsplugin.php:260
actionadmin_enqueue_scriptsplugin.php:261
actionedit_form_after_titleplugin.php:262
filteradmin_body_classplugin.php:263
actionadd_meta_boxesplugin.php:264
filterscreen_layout_columnsplugin.php:265
actioninitultimate-spin-wheel.php:77
actionadmin_initultimate-spin-wheel.php:186
actionadmin_initultimate-spin-wheel.php:217
Maintenance & Trust

Spin Wheel – Lucky Wheel, Giveaway & Coupon Popup Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedJun 6, 2026
PHP min version7.4
Downloads956

Community Trust

Rating0/100
Number of ratings0
Active installs10
Alternatives

Spin Wheel – Lucky Wheel, Giveaway & Coupon Popup Alternatives

Lucky Wheel for WooCommerce – Spin a Sale

Lucky Wheel for WooCommerce – Spin a Sale

woo-lucky-wheel

A
97

Engage customers with a fun spin-the-wheel game! Collect emails and reward them with discount coupons instantly.

1K 2 CVEs
Spin Wheel – Interactive spinning wheel that offers coupons

Spin Wheel – Interactive spinning wheel that offers coupons

spin-wheel

A
99

The Spin Wheel plugin allows you to engage your visitors with an interactive spinning wheel that offers coupons and other rewards.

400 1 CVE
Spin Wheel Pop Up

Spin Wheel Pop Up

crazyrocket-pop-ups

A
85

Wheel and gamified popups for WooCommerce! Grow your email list and sales.

100 No CVEs
HexCoupon – Advanced Tools for WooCommerce Coupons, BOGO, Store Credit, Loyalty Programs, and More

HexCoupon – Advanced Tools for WooCommerce Coupons, BOGO, Store Credit, Loyalty Programs, and More

hex-coupon-for-woocommerce

A
92

Extend coupon functionality in your Woocommerce store.

0 No CVEs
Spin Rewards for WooCommerce

Spin Rewards for WooCommerce

spin-rewards-for-woocommerce

A
100

Grow sales and email signups with a customizable spin‑the‑wheel game that instantly awards discount coupons in WooCommerce.

0 No CVEs
Developer Profile

Spin Wheel – Lucky Wheel, Giveaway & Coupon Popup Developer Profile

wowDevs

8 plugins · 2K total installs

99
trust score
Avg Security Score
98/100
Avg Patch Time
5 days
View full developer profile
Detection Fingerprints

How We Detect Spin Wheel – Lucky Wheel, Giveaway & Coupon Popup

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/ultimate-spin-wheel/dci/assets/css/dci.css/wp-content/plugins/ultimate-spin-wheel/includes/feedbacks/assets/rc.css
Version Parameters
ultimate-spin-wheel/dci/assets/css/dci.css?ver=ultimate-spin-wheel/includes/feedbacks/assets/rc.css?ver=

HTML / DOM Fingerprints

Data Attributes
data-dci-sdk-versiondata-dci-plugin-iddata-dci-plugin-namedata-dci-plugin-icondata-dci-api-endpointdata-dci-slug+5 more
JS Globals
dci_dynamic_initrc_dynamic_init
REST Endpoints
/wp-json/dci/v1/data-insights
FAQ

Frequently Asked Questions about Spin Wheel – Lucky Wheel, Giveaway & Coupon Popup