WP-Nafudakake Dojo Rank Board Generator Security & Risk Analysis

wordpress.org/plugins/wp-nafudakake-dojo-rank-board-generator

Generates an attractive, traditional Japanese rank board (nafudakake) for your dojo or school website using shortcodes.

10 active installs v2.01 11/14/2017 PHP + WP 4.0.1+ Updated Nov 15, 2017
dojomartial-artrankschoolshortcode
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WP-Nafudakake Dojo Rank Board Generator Safe to Use in 2026?

Generally Safe

Score 85/100

WP-Nafudakake Dojo Rank Board Generator has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago
Risk Assessment

The "wp-nafudakake-dojo-rank-board-generator" plugin v2.01 (released 11/14/2017) exhibits a mixed security posture. On the positive side, it demonstrates good practices by not utilizing dangerous functions, performing all SQL queries using prepared statements, and including nonce checks for its AJAX handlers. The absence of known CVEs and past vulnerabilities is also a strong indicator of a generally well-maintained codebase regarding external threats. However, a significant concern arises from the output escaping analysis, where only 41% of outputs are properly escaped. This leaves a considerable portion of the plugin's output potentially vulnerable to cross-site scripting (XSS) attacks if user-supplied data is not meticulously handled before being rendered to the browser. Additionally, the presence of a single unsanitized taint flow, while not classified as critical or high, warrants further investigation as it could represent a pathway for unexpected data manipulation or injection.

Key Concerns

  • Insufficient output escaping
  • Taint flow with unsanitized path
Vulnerabilities
None known

WP-Nafudakake Dojo Rank Board Generator Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

WP-Nafudakake Dojo Rank Board Generator Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
10
7 escaped
Nonce Checks
2
Capability Checks
3
File Operations
0
External Requests
1
Bundled Libraries
0

Output Escaping

41% escaped17 total outputs
Data Flows
1 unsanitized

Data Flow Analysis

4 flows1 with unsanitized paths
nafu_check_browser_version (code\admin.php:15)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

WP-Nafudakake Dojo Rank Board Generator Attack Surface

Entry Points4
Unprotected0

AJAX Handlers 2

authwp_ajax_nafu_actioncode\admin.php:112
authwp_ajax_nafu_saveactioncode\admin.php:151

Shortcodes 2

[rank_board] wp-nafudakake.php:129
[rank-board] wp-nafudakake.php:130
WordPress Hooks 7
actionwp_enqueue_scriptscode\admin.php:61
actionadmin_initcode\admin.php:62
actionadmin_menucode\admin.php:63
actionwp_enqueue_scriptscode\admin.php:88
actionadmin_footercode\admin.php:105
actionwp_enqueue_scriptscode\admin.php:198
actionadmin_menucode\admin.php:205
Maintenance & Trust

WP-Nafudakake Dojo Rank Board Generator Maintenance & Trust

Maintenance Signals

WordPress version tested4.6.30
Last updatedNov 15, 2017
PHP min version
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

WP-Nafudakake Dojo Rank Board Generator Developer Profile

ghagen

2 plugins · 40 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect WP-Nafudakake Dojo Rank Board Generator

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-nafudakake-dojo-rank-board-generator/styles/wp-nafudakake.css/wp-content/plugins/wp-nafudakake-dojo-rank-board-generator/wp-nafu.js/wp-content/plugins/wp-nafudakake-dojo-rank-board-generator/styles/wp-nafu-admin.css/wp-content/plugins/wp-nafudakake-dojo-rank-board-generator/wp-nafu-admin.js/wp-content/plugins/wp-nafudakake-dojo-rank-board-generator/styles/wp-nafudakake-safari.css
Script Paths
/wp-content/plugins/wp-nafudakake-dojo-rank-board-generator/wp-nafu.js/wp-content/plugins/wp-nafudakake-dojo-rank-board-generator/wp-nafu-admin.js
Version Parameters
wp-nafu.js?ver=wp-nafu-admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
nafu_tooltipnafu_tooltiptextrank_boardrank_row_verticalnafu_orientation
Data Attributes
id="rank_board"id="slatrowclass="rank_row_verticalclass="nafu_orientation
JS Globals
nafu_slatheightnafu_slatwidthnafu_slatspacingnafu_fontsizenafu_layouttype
Shortcode Output
<div id="rank_board"><ul id="slatrow<li class="<div class="nafu_orientation">
FAQ

Frequently Asked Questions about WP-Nafudakake Dojo Rank Board Generator