Qaiyo Social Video Embed

v1.0.0WordPress PluginAudited Todaydeepseek-v4-flash

HIGH

WP.org

Total Findings

Security Grade

Security Findings

Critical0

High1

Medium16

Low7

Info3

Executive Summary

Free-tier AI cap reached. This report contains deterministic-scanner findings only. Upgrade to a paid tier for security / quality / accessibility AI engine analysis.

Security Report Card

PHP Compatibility

Requires PHP 8.0Declared minimum: 7.4Mismatch detected

Categories with Findings

PerformanceType Safetyhook-wiringInternationalizationsecurityCoding StandardsTheme StandardsPlugin ConflictsWordPress CompatibilityPlugin Lifecycle

Plugin Info

Audit Count: 1
Type: plugin

Embed Audit Badge

Show your audit status in your README or website.

[![Qaiyo Social Video Embed security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/qaiyo-social-video-embed)](https://wphealthkit.com/directory/qaiyo-social-video-embed)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update? See the update-safety verdict for Qaiyo Social Video Embed

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

Audit Your Plugin

Get a comprehensive security audit for your WordPress plugin or theme. Upload your zip and get results in minutes.

Start Free Audit

PHP Compatibility

Requires PHP 8.0Declared minimum: 7.4Mismatch detected

Categories with Findings

PerformanceType Safetyhook-wiringInternationalizationsecurityCoding StandardsTheme StandardsPlugin ConflictsWordPress CompatibilityPlugin Lifecycle

Positive Observations

Transient caching with configurable TTL for video metadata and channel feeds
Conditional admin asset loading only on plugin's own page
Use of Provider pattern for extensibility
Proper use of nonce and capability checks in admin cache clear action
Fallback data for failed oEmbed requests with short cache
Click-to-play strategy to defer iframe loading