Total Findings
29
Security Grade
Coding Score
100/100
OikoGuard is a WordPress security plugin that implements two-factor authentication, login monitoring, and hardening features. The codebase demonstrates strong security practices overall: all database queries use prepared statements, output is consistently escaped with context-appropriate functions, and nonce verification protects all form actions. The plugin includes proper GDPR privacy tooling with exporters and erasers. The primary architectural concern is the deliberate decision to store raw attacker-controlled IP addresses and user agents without sanitization, relying entirely on output escaping for safety. This pattern extends to the GDPR export callback where IP and user-agent values are placed into a JSON export file without any escaping, creating a low-severity stored data risk. Otherwise, the code is well-structured and follows WordPress coding standards.
Show your audit status in your README or website.
[](https://wphealthkit.com/directory/oiko-guard)
Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.
Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.
Claim This PluginGet a comprehensive security audit for your WordPress plugin or theme. Upload your zip and get results in minutes.
Start Free AuditProduction Ready
Needs WorkWP.org Ready
Needs ChangesCompliance
Needs WorkCoding Standards
100/100