How many vulnerabilities does VocalStack have?

The audit found 84 findings: 5 critical, 6 high, 28 medium severity.

Should I use VocalStack?

Based on the latest audit (grade D, risk CRITICAL), review the 84 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

VocalStack

Q: Is VocalStack secure?

WP HealthKit's independent audit rates VocalStack overall risk as CRITICAL with a report-card grade of D.

Audited at release

v0.1.0WordPress PluginAudited Today

Transcribe the audio and video in your Media Library, and show transcripts and captions on your site.

CRITICAL

Total Findings

Security Grade

Security Findings

Critical5

High6

Medium28

Low39

Info6

Executive Summary

Is VocalStack secure? In WP HealthKit's independent 2026 audit, VocalStack received an overall risk of CRITICAL and a report-card grade of D across 84 findings (5 critical, 6 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

PHP Compatibility

Requires PHP 8.1Declared minimum: 8.1

Categories with Findings

SecuritycompatibilityHardcoded SecretsPerformanceDatabaseCoding StandardsCross-Site ScriptingDependency SecurityDependenciesType SafetyPlugin ConflictsHook WiringInternationalizationTheme StandardsPHP CompatibilityWordPress CompatibilityPlugin Lifecycle

Plugin Info

Audit Count: 1
Type: plugin

Embed

Show your audit status in your README or website.

[![VocalStack security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/vocalstack)](https://wphealthkit.com/directory/vocalstack)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

PHP Compatibility

Requires PHP 8.1Declared minimum: 8.1

VocalStack

Security Findings

Executive Summary

Security Report Card

PHP Compatibility

Categories with Findings

Plugin Info

Embed

Are you the developer?

Audit Your Plugin

PHP Compatibility

Categories with Findings