UniCard Security & Risk Analysis

wordpress.org/plugins/unicard

UniCard - A block plugin that can be used to create a card block with featured image, title, description fields. All fields are optional.

30 active installs v1.0.2 PHP 5.2.0+ WP 5.2.0+ Updated Unknown
custom-card-blockgutenberg
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is UniCard Safe to Use in 2026?

Generally Safe

Score 100/100

UniCard has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

The static analysis of the 'unicard' plugin v1.0.2 reveals a generally strong security posture with no immediate red flags identified in the code. The absence of dangerous functions, the exclusive use of prepared statements for SQL queries, and complete output escaping indicate good development practices. Furthermore, the lack of file operations, external HTTP requests, and importantly, the absence of any identified vulnerability history (CVEs) or recorded common vulnerability types, are all positive indicators. The plugin presents a minimal attack surface with no exposed entry points requiring authentication checks.

Key Concerns

  • No identified vulnerabilities in history
  • No critical or high severity taint flows
  • No dangerous functions used
  • All SQL queries use prepared statements
  • All output properly escaped
  • No file operations detected
  • No external HTTP requests detected
  • No capability checks found
  • No nonce checks found
  • No AJAX handlers without auth checks
  • No REST API routes without permission callbacks
  • No shortcodes detected
  • No cron events detected
  • No bundled libraries detected
Vulnerabilities
None known

UniCard Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

UniCard Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

UniCard Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
actioninitsrc\init.php:93
Maintenance & Trust

UniCard Maintenance & Trust

Maintenance Signals

WordPress version tested5.3.21
Last updatedUnknown
PHP min version5.2.0
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs30
Developer Profile

UniCard Developer Profile

khleomix

1 plugin · 30 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect UniCard

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/unicard/build/index.js/wp-content/plugins/unicard/build/index.asset.php
Script Paths
/wp-content/plugins/unicard/build/index.js
Version Parameters
unicard/build/index.js?ver=

HTML / DOM Fingerprints

CSS Classes
wp-block-unicard-unicard
FAQ

Frequently Asked Questions about UniCard