YU STORY Security & Risk Analysis

wordpress.org/plugins/yu-story

Yu Story is a WordPress plugin that lets you create and share interactive stories with ease, enhancing your site with engaging visual narratives.

0 active installs v1.0.0 PHP 7.4+ WP 5.0.0+ Updated Feb 5, 2024
engagementinteractivenarrativestoryvisual
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is YU STORY Safe to Use in 2026?

Generally Safe

Score 85/100

YU STORY has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2yr ago
Risk Assessment

The 'yu-story' v1.0.0 plugin exhibits a strong security posture based on the provided static analysis and vulnerability history. The code analysis reveals no dangerous functions, SQL injection vulnerabilities, or insecure file operations. All SQL queries utilize prepared statements, and output is properly escaped, which are excellent practices for preventing common web vulnerabilities. The presence of a nonce check and a capability check further bolsters its security by mitigating cross-site request forgery and unauthorized access.

The lack of any critical or high-severity taint flows is a significant positive indicator. The plugin also has no recorded vulnerabilities, including critical or high severity ones, nor has it had any previously. This history suggests a well-developed and security-conscious approach to its creation and maintenance.

Overall, 'yu-story' v1.0.0 appears to be a secure plugin. Its limited attack surface, absence of concerning code signals, and clean vulnerability history paint a picture of a well-hardened piece of software. While no plugin can be declared impenetrable, the current data indicates a very low risk profile.

Vulnerabilities
None known

YU STORY Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

YU STORY Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
7 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped7 total outputs
Attack Surface

YU STORY Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[yu_story] yu-story.php:83
WordPress Hooks 5
actioninityu-story.php:33
actionadd_meta_boxesyu-story.php:105
actionsave_postyu-story.php:127
actionwp_enqueue_scriptsyu-story.php:134
actionplugins_loadedyu-story.php:140
Maintenance & Trust

YU STORY Maintenance & Trust

Maintenance Signals

WordPress version tested6.4.8
Last updatedFeb 5, 2024
PHP min version7.4
Downloads529

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

YU STORY Developer Profile

Yusuf

1 plugin · 0 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect YU STORY

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/yu-story/css/style.css/wp-content/plugins/yu-story/js/story.js
Script Paths
/wp-content/plugins/yu-story/js/story.js
Version Parameters
yu-story/style.css?ver=yu-story/story.js?ver=

HTML / DOM Fingerprints

CSS Classes
story-thumbnailstory-thumbnail-titlestory-containerstorystory-text
Data Attributes
data-indexdata-story-link
Shortcode Output
<div id="story-overlay"<div id="story-thumbnails"<div class="story-thumbnail"<img src="
FAQ

Frequently Asked Questions about YU STORY