WP Giosg Security & Risk Analysis

wordpress.org/plugins/wp-giosg

This plugin integrates the live chat from giosg.com.

10 active installs v2.1.0 PHP 7.4+ WP 3.1.0+ Updated Nov 4, 2025
customer-supportgiosglive-chatwoocommerce
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WP Giosg Safe to Use in 2026?

Generally Safe

Score 100/100

WP Giosg has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 6mo ago
Risk Assessment

The "wp-giosg" plugin version 2.1.0 exhibits a generally positive security posture with no recorded vulnerabilities and a diligent use of prepared statements for SQL queries. The absence of dangerous functions, external HTTP requests, and known CVEs suggests a mature development process. However, the static analysis reveals a significant concern regarding output escaping, with 0% of the 10 identified outputs being properly escaped. This oversight creates a considerable risk of Cross-Site Scripting (XSS) vulnerabilities, as unsanitized output can be injected and executed in a user's browser. While the presence of nonce checks and capability checks on its two AJAX handlers is commendable, the lack of proper output escaping remains a critical weakness that could be exploited.

Key Concerns

  • Unescaped output found
Vulnerabilities
None known

WP Giosg Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

WP Giosg Release Timeline

v2.1.0Current
v2.0.0
v1.0.3
Code Analysis
Analyzed Mar 17, 2026

WP Giosg Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
10
0 escaped
Nonce Checks
2
Capability Checks
1
File Operations
1
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped10 total outputs
Attack Surface

WP Giosg Attack Surface

Entry Points2
Unprotected0

AJAX Handlers 2

authwp_ajax_giosg_update_cartsrc\Plugin.php:107
noprivwp_ajax_giosg_update_cartsrc\Plugin.php:108
WordPress Hooks 9
actionafter_setup_themebootstrap.php:45
filterplugin_action_linkssrc\Plugin.php:88
filterplugin_row_metasrc\Plugin.php:89
actionadmin_initsrc\Plugin.php:97
actionadmin_menusrc\Plugin.php:98
actionin_admin_headersrc\Plugin.php:99
actionadmin_post_wp_giosg_save_settingssrc\Plugin.php:100
actionwp_headsrc\Plugin.php:103
actionwp_headsrc\Plugin.php:106
Maintenance & Trust

WP Giosg Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedNov 4, 2025
PHP min version7.4
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

WP Giosg Developer Profile

cyclonecode

5 plugins · 10K total installs

94
trust score
Avg Security Score
92/100
Avg Patch Time
1 days
View full developer profile
Detection Fingerprints

How We Detect WP Giosg

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-giosg/js/basket.js
Script Paths
wp-giosg/js/basket.js
Version Parameters
wp-giosg/bootstrap.php?ver=2.1.0wp-giosg/js/basket.js?ver=2.1.0

HTML / DOM Fingerprints

CSS Classes
wp-giosggiosg
Data Attributes
data-wp-giosg-settings-name
JS Globals
wp_giosg
FAQ

Frequently Asked Questions about WP Giosg