Live Clock Widget Security & Risk Analysis

wordpress.org/plugins/wordpress-clock

Display a modern, responsive analog or digital clock using shortcode or widget. No Flash, pure JavaScript.

80 active installs v2.3 PHP + WP 4.0+ Updated Nov 10, 2025
analogclockdigitalshortcodewidget
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Live Clock Widget Safe to Use in 2026?

Generally Safe

Score 100/100

Live Clock Widget has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The wordpress-clock plugin v2.3 exhibits a generally strong security posture based on the provided static analysis. The absence of dangerous functions, file operations, external HTTP requests, and the consistent use of prepared statements for SQL queries are all positive indicators. A high percentage of properly escaped output further mitigates the risk of cross-site scripting vulnerabilities. The plugin also has a clean vulnerability history with no known CVEs, suggesting good development practices and diligent patching if issues were to arise.

Key Concerns

  • No nonce checks found
  • No capability checks found
  • One shortcode with no auth checks
  • Slightly low output escaping (92%)
Vulnerabilities
None known

Live Clock Widget Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Live Clock Widget Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
4
44 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

92% escaped48 total outputs
Attack Surface

Live Clock Widget Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[wpclock] wp-clock.php:63
WordPress Hooks 2
actionwp_enqueue_scriptswp-clock.php:19
actionwidgets_initwp-clock.php:144
Maintenance & Trust

Live Clock Widget Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedNov 10, 2025
PHP min version
Downloads11K

Community Trust

Rating100/100
Number of ratings1
Active installs80
Developer Profile

Live Clock Widget Developer Profile

Mervin Praison

7 plugins · 3K total installs

79
trust score
Avg Security Score
100/100
Avg Patch Time
266 days
View full developer profile
Detection Fingerprints

How We Detect Live Clock Widget

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wordpress-clock/css/clock.css/wp-content/plugins/wordpress-clock/js/clock.js
Script Paths
/wp-content/plugins/wordpress-clock/js/clock.js
Version Parameters
wordpress-clock/css/clock.css?ver=wordpress-clock/js/clock.js?ver=

HTML / DOM Fingerprints

CSS Classes
wpclock-containerwpclock-analogwpclock-facewpclock-hour-handwpclock-minute-handwpclock-second-handwpclock-centerwpclock-digital+3 more
Data Attributes
data-typedata-sizedata-timezone
Shortcode Output
<div class="wpclock-container wpclock-id="wpclock-data-type="data-size="
FAQ

Frequently Asked Questions about Live Clock Widget