WP Energy Usage Calculator Security & Risk Analysis

wordpress.org/plugins/wp-energy-usage-calculator

An easy and flexible way for your users to calculate their energy usage/consumption.

60 active installs v0.1.2 PHP + WP 4.0+ Updated Jan 23, 2019
calculatorconsumptionenergysavingsusage
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WP Energy Usage Calculator Safe to Use in 2026?

Generally Safe

Score 85/100

WP Energy Usage Calculator has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7yr ago
Risk Assessment

The wp-energy-usage-calculator plugin, at version 0.1.2, presents a mixed security posture. On the positive side, there are no recorded vulnerabilities (CVEs) and the static analysis reveals a small attack surface with no apparent AJAX handlers or REST API routes exposed without authentication. Furthermore, no dangerous functions, file operations, external HTTP requests, or bundled libraries were identified, which are generally good indicators. However, significant concerns arise from the code signals. The plugin utilizes SQL queries without prepared statements, and critically, none of its output is properly escaped. This lack of output escaping is a major red flag, opening the door to Cross-Site Scripting (XSS) vulnerabilities, where malicious scripts could be injected into the output displayed to users. The absence of nonce and capability checks also means that any entry point, even the single shortcode, lacks fundamental WordPress security mechanisms to verify user intent and permissions.

Key Concerns

  • SQL queries without prepared statements
  • No output escaping
  • No nonce checks
  • No capability checks
Vulnerabilities
None known

WP Energy Usage Calculator Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

WP Energy Usage Calculator Code Analysis

Dangerous Functions
0
Raw SQL Queries
2
0 prepared
Unescaped Output
11
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

0% prepared2 total queries

Output Escaping

0% escaped11 total outputs
Attack Surface

WP Energy Usage Calculator Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[wpeuc] public\class-wpeuc-public.php:20
WordPress Hooks 7
actionwp_enqueue_scriptswpeuc.php:44
actionwp_enqueue_scriptswpeuc.php:45
actioninitwpeuc.php:46
actionadmin_enqueue_scriptswpeuc.php:50
actionadmin_enqueue_scriptswpeuc.php:51
actionadmin_menuwpeuc.php:52
actionadmin_initwpeuc.php:53
Maintenance & Trust

WP Energy Usage Calculator Maintenance & Trust

Maintenance Signals

WordPress version tested5.0.25
Last updatedJan 23, 2019
PHP min version
Downloads3K

Community Trust

Rating0/100
Number of ratings0
Active installs60
Developer Profile

WP Energy Usage Calculator Developer Profile

Nicholas Kajoh

1 plugin · 60 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect WP Energy Usage Calculator

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-energy-usage-calculator/wpeuc-admin.css/wp-content/plugins/wp-energy-usage-calculator/wpeuc-admin.js
Script Paths
/wp-content/plugins/wp-energy-usage-calculator/wpeuc-admin.js
Version Parameters
wp-energy-usage-calculator/wpeuc-admin.js?ver=wp-energy-usage-calculator/wpeuc-admin.css?ver=

HTML / DOM Fingerprints

CSS Classes
form-control
Data Attributes
name="wpeuc_options[calc_name]"name="wpeuc_options[calc_desc]"name="wpeuc_options[calc_instructions]"
FAQ

Frequently Asked Questions about WP Energy Usage Calculator