WEN Skill Charts Security & Risk Analysis

wordpress.org/plugins/wen-skill-charts

Show animated skill bar and circle

600 active installs v1.6 PHP + WP 4.8+ Updated Apr 5, 2026
animatedanimationbarcircleskill
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WEN Skill Charts Safe to Use in 2026?

Generally Safe

Score 100/100

WEN Skill Charts has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The wen-skill-charts v1.5.3 plugin exhibits a generally strong security posture, adhering to many best practices. The static analysis reveals a very small attack surface with a single shortcode, and importantly, no unauthenticated entry points. The code demonstrates a commitment to security by utilizing prepared statements for all SQL queries and a high percentage of properly escaped output. Furthermore, the presence of nonce and capability checks suggests a good effort in securing its functionalities. The absence of dangerous functions, file operations, and external HTTP requests further contributes to its robust security profile. The vulnerability history is also entirely clean, with no recorded CVEs, which is a significant positive indicator. This suggests that the plugin has either been diligently maintained and secured or has not been a target for widespread exploitation.

While the plugin's security is commendable, a complete absence of taint analysis flows is noted. Although the static analysis did not find any unsanitized paths or critical/high severity issues, a comprehensive taint analysis can sometimes reveal subtle vulnerabilities missed by other methods, especially in more complex codebases. However, given the limited attack surface and the existing security controls, the current risk appears very low. The plugin's strengths lie in its adherence to core WordPress security principles, such as proper input validation and output sanitization for its identified entry points, and its lack of historical vulnerabilities.

Vulnerabilities
None known

WEN Skill Charts Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

WEN Skill Charts Release Timeline

v1.6Current
v1.5.3
v1.5.2
v1.5.1
v1.5
v1.4
v1.3.3
v1.3.2
v1.3.1
v1.3.0
v1.2
v1.1
v1.0.0
Code Analysis
Analyzed Mar 16, 2026

WEN Skill Charts Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
6
136 escaped
Nonce Checks
2
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

96% escaped142 total outputs
Attack Surface

WEN Skill Charts Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[wsc] includes\class-wen-skill-charts-shortcode.php:31
WordPress Hooks 16
actionplugins_loadedincludes\class-wen-skill-charts.php:152
actionadmin_enqueue_scriptsincludes\class-wen-skill-charts.php:179
actionadmin_enqueue_scriptsincludes\class-wen-skill-charts.php:180
filterpost_row_actionsincludes\class-wen-skill-charts.php:188
filterpost_updated_messagesincludes\class-wen-skill-charts.php:191
actionadmin_head-post.phpincludes\class-wen-skill-charts.php:194
actionadmin_head-post-new.phpincludes\class-wen-skill-charts.php:195
actionadd_meta_boxesincludes\class-wen-skill-charts.php:198
actionsave_postincludes\class-wen-skill-charts.php:199
actionsave_postincludes\class-wen-skill-charts.php:200
actionadmin_footerincludes\class-wen-skill-charts.php:203
actionwp_enqueue_scriptsincludes\class-wen-skill-charts.php:218
actionwp_enqueue_scriptsincludes\class-wen-skill-charts.php:219
filterinitincludes\class-wen-skill-charts.php:222
filterwidget_textincludes\class-wen-skill-charts.php:225
filterwidget_textincludes\class-wen-skill-charts.php:226
Maintenance & Trust

WEN Skill Charts Maintenance & Trust

Maintenance Signals

WordPress version tested7.0
Last updatedApr 5, 2026
PHP min version
Downloads34K

Community Trust

Rating90/100
Number of ratings6
Active installs600
Developer Profile

WEN Skill Charts Developer Profile

WEN Themes

63 plugins · 34K total installs

100
trust score
Avg Security Score
100/100
Avg Patch Time
6 days
View full developer profile
Detection Fingerprints

How We Detect WEN Skill Charts

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wen-skill-charts/css/wen-skill-charts-admin.css/wp-content/plugins/wen-skill-charts/js/wen-skill-charts-admin.js/wp-content/plugins/wen-skill-charts/js/wen-skill-charts-custom.js/wp-content/plugins/wen-skill-charts/js/wen-skill-charts-tab.js/wp-content/plugins/wen-skill-charts/js/wen-skill-charts-form.js
Script Paths
wp-content/plugins/wen-skill-charts/js/wen-skill-charts-admin.jswp-content/plugins/wen-skill-charts/js/wen-skill-charts-custom.jswp-content/plugins/wen-skill-charts/js/wen-skill-charts-tab.jswp-content/plugins/wen-skill-charts/js/wen-skill-charts-form.js
Version Parameters
wen-skill-charts-admin.css?ver=wen-skill-charts-admin.js?ver=wen-skill-charts-custom.js?ver=wen-skill-charts-tab.js?ver=wen-skill-charts-form.js?ver=

HTML / DOM Fingerprints

Data Attributes
data-color-startdata-color-enddata-percentdata-track-colordata-bar-colordata-size+12 more
JS Globals
WSC_OBJ
Shortcode Output
[wsc id=
FAQ

Frequently Asked Questions about WEN Skill Charts