Deploy Webhook Button Security & Risk Analysis

wordpress.org/plugins/webhook-netlify-deploy

Easily deploy static sites using Wordpress and Netlify

100 active installs v1.1.3 PHP + WP 4.4.0+ Updated Sep 22, 2019
deploygatsbyjsnetlifystaticwebhook
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Deploy Webhook Button Safe to Use in 2026?

Generally Safe

Score 85/100

Deploy Webhook Button has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 6yr ago
Risk Assessment

The "webhook-netlify-deploy" plugin v1.1.3 exhibits a strong security posture based on the provided static analysis. There are no identified dangerous functions, SQL injection vulnerabilities due to prepared statements, or file operations that could be exploited. The absence of known CVEs and vulnerabilities in its history is also a positive indicator. However, a significant concern arises from the output escaping analysis: 0% of the 5 total outputs are properly escaped. This indicates a potential for Cross-Site Scripting (XSS) vulnerabilities, where unsanitized data outputted to the browser could be manipulated by attackers. While the attack surface appears to be minimal and protected, the lack of output escaping represents a critical weakness that could be leveraged.

Key Concerns

  • 0% output escaping on 5 outputs
Vulnerabilities
None known

Deploy Webhook Button Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Deploy Webhook Button Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
5
0 escaped
Nonce Checks
0
Capability Checks
5
File Operations
0
External Requests
1
Bundled Libraries
0

Output Escaping

0% escaped5 total outputs
Attack Surface

Deploy Webhook Button Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 12
actionadmin_menunetlify-webhook-deploy.php:47
actionadmin_initnetlify-webhook-deploy.php:50
actionadmin_initnetlify-webhook-deploy.php:51
actionadmin_initnetlify-webhook-deploy.php:52
actionadmin_footernetlify-webhook-deploy.php:53
actionadmin_bar_menunetlify-webhook-deploy.php:54
actionupdate_option_enable_scheduled_buildsnetlify-webhook-deploy.php:57
actionupdate_option_select_schedule_buildsnetlify-webhook-deploy.php:58
actionupdate_option_select_time_buildnetlify-webhook-deploy.php:59
actionwpnetlify-webhook-deploy.php:62
filtercron_schedulesnetlify-webhook-deploy.php:65
actionscheduled_netlify_buildnetlify-webhook-deploy.php:68

Scheduled Events 1

scheduled_netlify_build
Maintenance & Trust

Deploy Webhook Button Maintenance & Trust

Maintenance Signals

WordPress version tested5.2.24
Last updatedSep 22, 2019
PHP min version
Downloads5K

Community Trust

Rating100/100
Number of ratings1
Active installs100
Developer Profile

Deploy Webhook Button Developer Profile

Luke Secomb

1 plugin · 100 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Deploy Webhook Button

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

Data Attributes
id="build_button"id="build_status"id="build_img_link"id="build_img"id="deploy_id"id="deploy_finish_time"+5 more
JS Globals
window.webhook_urlwindow.netlify_user_agentwindow.netlify_api_keywindow.netlify_site_id
REST Endpoints
/api/v1/sites/
FAQ

Frequently Asked Questions about Deploy Webhook Button