Wally Monitor Security & Risk Analysis

wordpress.org/plugins/wally-monitor

Complete accessibility auditing tool for WordPress. Scan your entire site for WCAG 2.1 compliance issues and improve SEO rankings.

0 active installs v1.0.3 PHP 7.4+ WP 5.0+ Updated Jan 18, 2026
a11yaccessibilityauditseowcag
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Wally Monitor Safe to Use in 2026?

Generally Safe

Score 100/100

Wally Monitor has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The "wally-monitor" plugin v1.0.3 demonstrates a strong security posture based on the provided static analysis. The plugin has no known vulnerabilities in its history, indicating a history of secure development. The static analysis reveals no critical or high-severity taint flows, a low number of file operations, and a negligible number of external HTTP requests. The majority of SQL queries utilize prepared statements, and output escaping is nearly perfect. The presence of numerous nonce and capability checks on its AJAX handlers is also a positive sign of secure coding practices. The plugin's attack surface is limited to AJAX handlers, and all identified entry points are protected with authentication checks. There are no identified risks in the provided static analysis or vulnerability history, suggesting this plugin is currently well-secured.

Vulnerabilities
None known

Wally Monitor Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Wally Monitor Code Analysis

Dangerous Functions
0
Raw SQL Queries
1
10 prepared
Unescaped Output
1
54 escaped
Nonce Checks
8
Capability Checks
5
File Operations
1
External Requests
2
Bundled Libraries
0

SQL Query Safety

91% prepared11 total queries

Output Escaping

98% escaped55 total outputs
Data Flows
All sanitized

Data Flow Analysis

4 flows
wally_monitor_settings_page_html (wally-monitor.php:235)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Wally Monitor Attack Surface

Entry Points6
Unprotected0

AJAX Handlers 6

authwp_ajax_wally_refresh_seo_metaboxwally-monitor.php:94
authwp_ajax_wally_get_site_urlswally-monitor.php:423
authwp_ajax_wally_analyze_urlwally-monitor.php:448
authwp_ajax_wally_save_full_reportwally-monitor.php:566
authwp_ajax_wally_save_editor_reportwally-monitor.php:689
authwp_ajax_wally_process_contentwally-monitor.php:733
WordPress Hooks 14
filterwpseo_pre_analysis_post_contentincludes\class-wally-seo-integration.php:78
filterwpseo_titleincludes\class-wally-seo-integration.php:79
filterrank_math/researches/testsincludes\class-wally-seo-integration.php:82
filterrank_math/frontend/scoreincludes\class-wally-seo-integration.php:83
actionadd_meta_boxesincludes\class-wally-seo-integration.php:86
filterwally_accessibility_scoreincludes\class-wally-seo-integration.php:89
actionadmin_noticesincludes\class-wally-seo-integration.php:92
actionadmin_menuwally-monitor.php:159
actionadmin_enqueue_scriptswally-monitor.php:383
filterthe_contentwally-monitor.php:728
filterthe_contentwally-monitor.php:729
actionadmin_initwally-monitor.php:806
actionadd_meta_boxeswally-monitor.php:819
actionsave_postwally-monitor.php:847
Maintenance & Trust

Wally Monitor Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 18, 2026
PHP min version7.4
Downloads103

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Wally Monitor Developer Profile

equallyze

1 plugin · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Wally Monitor

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wally-monitor/assets/css/wally-monitor-admin.css/wp-content/plugins/wally-monitor/assets/js/wally-monitor-admin.js/wp-content/plugins/wally-monitor/assets/images/logo.png
Script Paths
/wp-content/plugins/wally-monitor/assets/js/wally-monitor-admin.js
Version Parameters
wally-monitor/assets/css/wally-monitor-admin.css?ver=wally-monitor/assets/js/wally-monitor-admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
wally-monitor-wrapwally-run-full-scanwally-full-scan-progresswally-report-containerreport-headerwally-summarywally-resultswally-history-chart-container+2 more
Data Attributes
data-wally-post-id
JS Globals
wally_monitor_ajax_object
REST Endpoints
/wp-json/wally-monitor/v1/scan/wp-json/wally-monitor/v1/history/wp-json/wally-monitor/v1/settings
FAQ

Frequently Asked Questions about Wally Monitor