wp-webservices Security & Risk Analysis

wordpress.org/plugins/wp-webservices

This plugin extends the basic webservices exposed by WordPress.

10 active installs v1.0 PHP + WP 2.9+ Updated Aug 12, 2011
remote-apiwebservicesxmlrpc
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is wp-webservices Safe to Use in 2026?

Generally Safe

Score 85/100

wp-webservices has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 14yr ago
Risk Assessment

The 'wp-webservices' v1.0 plugin exhibits a strong security posture based on the provided static analysis. The code signals indicate a diligent approach to security, with all identified outputs being properly escaped and a complete absence of dangerous functions, file operations, and external HTTP requests. Notably, the plugin has 35 capability checks, suggesting robust access control mechanisms are in place. The complete lack of SQL queries executed without prepared statements further enhances its security.

Vulnerabilities
None known

wp-webservices Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

wp-webservices Release Timeline

No version history available.
Code Analysis
Analyzed Mar 17, 2026

wp-webservices Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
3 escaped
Nonce Checks
0
Capability Checks
35
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped3 total outputs
Attack Surface

wp-webservices Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
filterxmlrpc_methodswp-webservices.php:152
Maintenance & Trust

wp-webservices Maintenance & Trust

Maintenance Signals

WordPress version tested3.2.1
Last updatedAug 12, 2011
PHP min version
Downloads3K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

wp-webservices Developer Profile

Prasath Nadarajah

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect wp-webservices

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-webservices/wp-webservices.php

HTML / DOM Fingerprints

REST Endpoints
/wp-json/wp-webservices/v1/settings/wp-json/wp-webservices/v1/users/wp-json/wp-webservices/v1/posts/wp-json/wp-webservices/v1/terms/wp-json/wp-webservices/v1/taxonomies
FAQ

Frequently Asked Questions about wp-webservices