WP Install From Web Security & Risk Analysis

wordpress.org/plugins/wp-plugin-management

WP Install Plugin From Web allows you to install any plugin from a URL. All you need to do is to insert a specific URL and click the Install button.

300 active installs v1.10.1 PHP + WP 2.0+ Updated May 29, 2025
manage-pluginplugin-installplugin-uploadsecurityzip
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is WP Install From Web Safe to Use in 2026?

Generally Safe

Score 100/100

WP Install From Web has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10mo ago
Risk Assessment

The "wp-plugin-management" v1.10.1 plugin exhibits a strong security posture based on the provided static analysis and vulnerability history. The absence of any identified vulnerabilities in its history, coupled with a clean bill of health in the static analysis regarding critical taint flows, dangerous functions, and raw SQL queries, suggests a well-developed and secure plugin. The presence of nonce and capability checks, along with the use of prepared statements for SQL, are excellent security practices that significantly mitigate common WordPress plugin attack vectors.

Key Concerns

  • 50% of output escaping is not properly escaped
Vulnerabilities
None known

WP Install From Web Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

WP Install From Web Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
2
2 escaped
Nonce Checks
1
Capability Checks
1
File Operations
4
External Requests
0
Bundled Libraries
0

Output Escaping

50% escaped4 total outputs
Attack Surface

WP Install From Web Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 4
actionadmin_enqueue_scriptswp-plugin-management.php:13
actionadmin_menuwp-plugin-management.php:18
actioninstall_plugins_uploadwp-plugin-management.php:71
actionadmin_initwp-plugin-management.php:143
Maintenance & Trust

WP Install From Web Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedMay 29, 2025
PHP min version
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs300
Developer Profile

WP Install From Web Developer Profile

safetydev

1 plugin · 300 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect WP Install From Web

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

CSS Classes
install-helpdashicons-warning
Data Attributes
onclick="EnableBttn()"
JS Globals
EnableBttn
FAQ

Frequently Asked Questions about WP Install From Web