vBPress Security & Risk Analysis

wordpress.org/plugins/vbpress

vBPress seamlessly integrates WordPress with vBulletin

10 active installs v0.2 PHP + WP 3.0.5+ Updated Jan 24, 2012
bridgecommentforumintegrateloginmember
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is vBPress Safe to Use in 2026?

Generally Safe

Score 85/100

vBPress has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 14yr ago
Risk Assessment

The "vbpress" v0.2 plugin exhibits a strong security posture from a static analysis perspective, showing no dangerous functions, no raw SQL queries, and no file operations or external HTTP requests. The absence of known vulnerabilities in its history is also a positive indicator. However, the analysis reveals a critical weakness: 100% of its output is not properly escaped. This means that any data outputted by the plugin to the user interface could be susceptible to cross-site scripting (XSS) attacks if that data originates from an untrusted source or has not been sanitized prior to output. While the attack surface is currently zero, indicating no exposed AJAX handlers, REST API routes, shortcodes, or cron events, this could change with future updates.

Key Concerns

  • Output not properly escaped
Vulnerabilities
None known

vBPress Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

vBPress Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped1 total outputs
Attack Surface

vBPress Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 7
actionadmin_menuvbpress.php:38
actionuser_registervbpress.php:44
actionwp_authenticatevbpress.php:45
actionwp_loginvbpress.php:50
actioninitvbpress.php:334
actionadmin_initvbpress.php:335
actioninitvbpress.php:366
Maintenance & Trust

vBPress Maintenance & Trust

Maintenance Signals

WordPress version tested3.3.2
Last updatedJan 24, 2012
PHP min version
Downloads3K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

vBPress Developer Profile

Aaron Forgue

2 plugins · 70 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect vBPress

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

Shortcode Output
require( dirname( __FILE__ ) . '/core/views/settings.php' );require( dirname( __FILE__ ) . '/core/views/option_section_general.php' );require( dirname( __FILE__ ) . '/core/views/option_field_vbpress_enabled.php' );require( dirname( __FILE__ ) . '/core/views/option_field_vbulletin_path.php' );
FAQ

Frequently Asked Questions about vBPress