WP Featherlight Disabled Security & Risk Analysis

wordpress.org/plugins/wp-featherlight-disabled

The most lightweight WordPress lightbox plugin...and the featherlight CSS/JS (only 7kb) is automatically disabled unless you manually enable within ea …

2K active installs v1.0.4 PHP + WP 4.0+ Updated May 14, 2025
galleryimagejqueryjquery-lightboxlightbox
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WP Featherlight Disabled Safe to Use in 2026?

Generally Safe

Score 100/100

WP Featherlight Disabled has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10mo ago
Risk Assessment

The "wp-featherlight-disabled" plugin v1.0.4 exhibits a strong security posture based on the provided static analysis. It demonstrates excellent adherence to secure coding practices by having zero AJAX handlers, REST API routes, shortcodes, or cron events that constitute an attack surface. Furthermore, the code signals indicate a lack of dangerous functions, file operations, and external HTTP requests, which are common vectors for exploitation. The plugin also properly escapes all outputs and includes nonce and capability checks, further reinforcing its security. The absence of any known vulnerabilities in its history further strengthens this positive assessment, suggesting a well-maintained and secure codebase. While the plugin appears very secure, the single SQL query not using prepared statements presents a minor concern. If this query were to ever handle user-supplied data in a future iteration, it could become a significant vulnerability.

Key Concerns

  • SQL query not using prepared statements
Vulnerabilities
None known

WP Featherlight Disabled Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

WP Featherlight Disabled Code Analysis

Dangerous Functions
0
Raw SQL Queries
1
0 prepared
Unescaped Output
0
1 escaped
Nonce Checks
1
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

0% prepared1 total queries

Output Escaping

100% escaped1 total outputs
Attack Surface

WP Featherlight Disabled Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 13
actionadd_meta_boxesadmin\class-meta.php:171
actionsave_postadmin\class-meta.php:175
actionwp_enqueue_scriptsincludes\class-plugin.php:192
actionwp_enqueue_scriptsincludes\class-plugin.php:199
actionwp_enqueue_scriptsincludes\class-plugin.php:206
actionbody_classincludes\class-plugin.php:213
actionadmin_head-plugins.phpincludes\class-plugin.php:228
actionpost_submitbox_misc_actionsincludes\class-plugin.php:235
actionpost_submitbox_misc_actionsincludes\class-plugin.php:242
actionsave_postincludes\class-plugin.php:249
filterwp_featherlight_load_cssincludes\class-scripts.php:216
filterwp_featherlight_load_jsincludes\class-scripts.php:217
actionplugins_loadedwp-featherlight.php:26
Maintenance & Trust

WP Featherlight Disabled Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedMay 14, 2025
PHP min version
Downloads17K

Community Trust

Rating100/100
Number of ratings3
Active installs2K
Developer Profile

WP Featherlight Disabled Developer Profile

treeflips

6 plugins · 3K total installs

88
trust score
Avg Security Score
100/100
Avg Patch Time
59 days
View full developer profile
Detection Fingerprints

How We Detect WP Featherlight Disabled

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-featherlight-disabled/assets/css/wp-featherlight.css/wp-content/plugins/wp-featherlight-disabled/assets/js/wp-featherlight.js
Script Paths
/wp-content/plugins/wp-featherlight-disabled/assets/js/wp-featherlight.js
Version Parameters
wp-featherlight-disabled/assets/css/wp-featherlight.css?ver=wp-featherlight-disabled/assets/js/wp-featherlight.js?ver=

HTML / DOM Fingerprints

CSS Classes
wp-featherlightwp-featherlight-gallery
Data Attributes
data-featherlight
FAQ

Frequently Asked Questions about WP Featherlight Disabled