Widgets in Menu for WordPress Security & Risk Analysis

wordpress.org/plugins/widgets-in-menu

Allows you to add Widgets in WordPress Navigation Menus

9K active installs v1.0.0 PHP + WP 3.5+ Updated Jun 27, 2018
custom-linkmenuswidgets
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Widgets in Menu for WordPress Safe to Use in 2026?

Generally Safe

Score 85/100

Widgets in Menu for WordPress has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7yr ago
Risk Assessment

The "widgets-in-menu" plugin v1.0.0 exhibits a generally strong security posture based on the static analysis. It utilizes prepared statements for all SQL queries, includes a nonce check, and performs capability checks on its single AJAX handler, which is a good practice. Furthermore, the absence of known vulnerabilities in its history suggests a history of stable and secure development. The plugin also avoids risky operations like file manipulation, external HTTP requests, and bundling libraries.

Key Concerns

  • Output escaping not properly implemented
Vulnerabilities
None known

Widgets in Menu for WordPress Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Widgets in Menu for WordPress Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
3
0 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped3 total outputs
Attack Surface

Widgets in Menu for WordPress Attack Surface

Entry Points1
Unprotected0

AJAX Handlers 1

authwp_ajax_add-menu-itemclasses\class-yawp-wim.php:234
WordPress Hooks 7
filterwalker_nav_menu_start_elclasses\class-yawp-wim-walker.php:18
actionplugins_loadedclasses\class-yawp-wim.php:26
actionwidgets_initclasses\class-yawp-wim.php:29
actionadmin_initclasses\class-yawp-wim.php:32
actionadmin_enqueue_scriptsclasses\class-yawp-wim.php:35
filterwp_setup_nav_menu_itemclasses\class-yawp-wim.php:38
actionadmin_initclasses\class-yawp-wim.php:41
Maintenance & Trust

Widgets in Menu for WordPress Maintenance & Trust

Maintenance Signals

WordPress version tested4.7.32
Last updatedJun 27, 2018
PHP min version
Downloads106K

Community Trust

Rating96/100
Number of ratings21
Active installs9K
Developer Profile

Widgets in Menu for WordPress Developer Profile

Saurabh

1 plugin · 9K total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Widgets in Menu for WordPress

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/widgets-in-menu/assets/css/widgets-in-menu.css/wp-content/plugins/widgets-in-menu/assets/js/widgets-in-menu.js
Script Paths
/wp-content/plugins/widgets-in-menu/assets/js/widgets-in-menu.js
Version Parameters
widgets-in-menu/assets/css/widgets-in-menu.css?ver=widgets-in-menu/assets/js/widgets-in-menu.js?ver=

HTML / DOM Fingerprints

CSS Classes
yawp_wimyawp_wim_widgetyawp_wim_title
Data Attributes
data-menu-item-objectdata-menu-item-typedata-menu-item-widget-number
FAQ

Frequently Asked Questions about Widgets in Menu for WordPress