Custom plugin security review

Custom and niche plugins are a common entry point for attacks. We review the code for SQL injection, XSS, missing permission checks and unsafe file handling.

You receive a report with severity ratings and fixes.

What's included

• Code review of one plugin
• OWASP-based checklist
• Severity-rated findings
• Fix recommendations

Not included

• Implementing fixes (quoted separately)
• Penetration testing of the whole site

FAQ

Can you fix the issues?
Yes, we quote the fixes after the review.

How large a plugin can you review?
Up to about 5,000 lines of code in this package.