How many vulnerabilities does SMRK Toolkit have?

The audit found 179 findings: 0 critical, 20 high, 124 medium severity.

Should I use SMRK Toolkit?

Based on the latest audit (grade D, risk HIGH), review the 179 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

SMRK Toolkit

Q: Is SMRK Toolkit secure?

WP HealthKit's independent audit rates SMRK Toolkit overall risk as HIGH with a report-card grade of D.

Audited at release

v1.0.6WordPress PluginAudited Today

A free modular WordPress toolkit by SMRK studio — enable only the modules you actually need.

HIGH

Total Findings

179

Security Grade

Coding Score

92/100

Security Findings

179

Critical0

High20

Medium124

Low31

Info4

Executive Summary

Is SMRK Toolkit secure? In WP HealthKit's independent 2026 audit, SMRK Toolkit received an overall risk of HIGH and a report-card grade of D across 179 findings (0 critical, 20 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

Readiness

Coding Standards

92/100

PHP Compatibility

Requires PHP 8.0Declared minimum: 8.0

Categories with Findings

PerformanceDatabaseCoding StandardsFile SecurityAuth & AuthorizationDependency SecuritySQL InjectionType SafetyWooCommerce CompatibilityInternationalizationAccessibilityDependenciesSecurityTheme StandardsAI-Generated CodeWordPress CompatibilityPlugin Conflictscompatibility

Plugin Info

Audit Count: 1
Type: plugin

Embed

Show your audit status in your README or website.

[![SMRK Toolkit security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/smrk-toolkit)](https://wphealthkit.com/directory/smrk-toolkit)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

Readiness

Coding Standards

92/100

PHP Compatibility

Requires PHP 8.0Declared minimum: 8.0

SMRK Toolkit

Security Findings

Executive Summary

Security Report Card

Readiness

PHP Compatibility

Categories with Findings

Plugin Info

Embed

Are you the developer?

Audit Your Plugin

Readiness

PHP Compatibility

Categories with Findings