WP SHA1 Security & Risk Analysis

wordpress.org/plugins/wp-sha1

Authenticate SHA1 passwords too.

10 active installs v1.0 PHP + WP + Updated May 24, 2012
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WP SHA1 Safe to Use in 2026?

Generally Safe

Score 85/100

WP SHA1 has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 13yr ago
Risk Assessment

The wp-sha1 plugin v1.0 exhibits an exceptionally strong security posture based on the provided static analysis data. The absence of any identified attack surface, dangerous functions, SQL queries (or 100% use of prepared statements), file operations, external HTTP requests, or taint flows indicates a meticulously crafted codebase that avoids common vulnerabilities. Furthermore, the plugin correctly implements output escaping and demonstrates no known historical vulnerabilities, suggesting a history of secure development and maintenance. The plugin's strength lies in its apparent lack of functionality that would introduce typical WordPress plugin vulnerabilities. While this is a highly positive sign, it also implies that the plugin likely has minimal features, which could be a trade-off for its security. However, based solely on the provided data, the plugin is highly secure.

Vulnerabilities
None known

WP SHA1 Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

WP SHA1 Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

WP SHA1 Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
filtercheck_passwordwpsha1.php:73
Maintenance & Trust

WP SHA1 Maintenance & Trust

Maintenance Signals

WordPress version tested
Last updatedMay 24, 2012
PHP min version
Downloads1K

Community Trust

Rating100/100
Number of ratings1
Active installs10
Alternatives

WP SHA1 Alternatives

No alternatives data available yet.

Developer Profile

WP SHA1 Developer Profile

bruno.sousa

2 plugins · 20 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect WP SHA1

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about WP SHA1