Jinkosoft Security & Risk Analysis

wordpress.org/plugins/yps-bundle

Connect your Jinkosoft account and embed booking, lead capture, review, and store locator widgets in WordPress without adding heavy app logic to your …

0 active installs v1.2.0 PHP 7.4+ WP 5.0+ Updated Mar 18, 2026
bookinglead-capturereviewsstore-locatorwidgets
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Jinkosoft Safe to Use in 2026?

Generally Safe

Score 100/100

Jinkosoft has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The 'yps-bundle' v1.2.0 plugin exhibits a strong security posture based on the provided static analysis. It effectively utilizes WordPress security best practices by implementing nonce checks and capability checks for all identified AJAX entry points, and all SQL queries are protected by prepared statements. The plugin also demonstrates a high level of output escaping, with an impressive 99% of outputs being properly escaped, significantly reducing the risk of cross-site scripting (XSS) vulnerabilities. The absence of any recorded vulnerabilities in its history further reinforces this positive security assessment.

Vulnerabilities
None known

Jinkosoft Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Jinkosoft Release Timeline

v1.2.0Current
v1.1.0
v1.0.0
Code Analysis
Analyzed Apr 16, 2026

Jinkosoft Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
83 escaped
Nonce Checks
4
Capability Checks
4
File Operations
1
External Requests
4
Bundled Libraries
0

Output Escaping

99% escaped84 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

2 flows
ajax_resolve_account (includes/class-yps-admin.php:334)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Jinkosoft Attack Surface

Entry Points4
Unprotected0

AJAX Handlers 4

authwp_ajax_yps_bundle_resolve_accountincludes/class-yps-admin.php:17
authwp_ajax_yps_bundle_disconnectincludes/class-yps-admin.php:18
authwp_ajax_yps_bundle_create_tenantincludes/class-yps-admin.php:19
authwp_ajax_yps_bundle_save_widget_settingsincludes/class-yps-admin.php:20
WordPress Hooks 4
actionadmin_menuincludes/class-yps-admin.php:14
actionadmin_enqueue_scriptsincludes/class-yps-admin.php:15
actionwp_enqueue_scriptsincludes/class-yps-frontend.php:10
actionplugins_loadedyps-bundle.php:244
Maintenance & Trust

Jinkosoft Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedMar 18, 2026
PHP min version7.4
Downloads223

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Jinkosoft Developer Profile

yourplugins

2 plugins · 60 total installs

81
trust score
Avg Security Score
82/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Jinkosoft

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/yps-bundle/assets/css/yps-bundle-admin.css/wp-content/plugins/yps-bundle/assets/js/yps-bundle-admin.js
Script Paths
/wp-content/plugins/yps-bundle/assets/js/yps-bundle-admin.js
Version Parameters
yps-bundle/assets/css/yps-bundle-admin.css?ver=yps-bundle/assets/js/yps-bundle-admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
yps-bundle-admin-noticeyps-bundle-admin-pageyps-bundle-settings-wrapyps-bundle-widget-row
HTML Comments
YPS BUNDLE ADMIN AREA STARTYPS BUNDLE ADMIN AREA ENDJinkosoft Widget Wrapper STARTJinkosoft Widget Wrapper END
Data Attributes
data-yps-widget-typedata-yps-form-slugdata-yps-slugdata-yps-widget-settings
JS Globals
ypsBundleAdminypsBundleSettings
REST Endpoints
/wp-json/yps-bundle/v1/settings/wp-json/yps-bundle/v1/tenants
Shortcode Output
<div class="jinkosoft-widget" data-yps-widget-type="locatemystore"></div><div class="jinkosoft-widget" data-yps-widget-type="slotflow" data-yps-form-slug="<div class="jinkosoft-widget" data-yps-widget-type="leadcapture" data-yps-form-slug="<div class="jinkosoft-widget" data-yps-widget-type="reviewwidget" data-yps-form-slug="
FAQ

Frequently Asked Questions about Jinkosoft