ACF Permalinks Security & Risk Analysis

wordpress.org/plugins/acf-permalinks

Plugin allows to use ACF values in permalink structure by adding %field_fieldname%, for posts, pages and custom post types.

300 active installs v1.0.0 PHP 5.3+ WP 4.5.0+ Updated Oct 24, 2018
acfadvanced-custom-fieldscustom-fieldspermalinkpermalinks
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is ACF Permalinks Safe to Use in 2026?

Generally Safe

Score 85/100

ACF Permalinks has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7yr ago
Risk Assessment

Based on the static analysis and vulnerability history, the acf-permalinks plugin version 1.0.0 exhibits an exceptionally strong security posture. The absence of any identified attack surface points, such as AJAX handlers, REST API routes, shortcodes, or cron events, significantly minimizes potential entry vectors for attackers. Furthermore, the code analysis reveals a complete lack of dangerous functions, all SQL queries utilizing prepared statements, and all output being properly escaped. There are no file operations, external HTTP requests, or any indications of missing nonce or capability checks within the analyzed code. This comprehensive adherence to secure coding practices, coupled with a clean vulnerability history, suggests a low-risk plugin.

Vulnerabilities
None known

ACF Permalinks Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

ACF Permalinks Release Timeline

v1.0.0Current
v0.0.1
Code Analysis
Analyzed Mar 16, 2026

ACF Permalinks Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

ACF Permalinks Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 3
actionadmin_noticesincludes\admin\plugin-dependency-notice.php:34
filterwpcfp_get_post_metadata_singleincludes\main.php:43
actionplugins_loadedincludes\main.php:49
Maintenance & Trust

ACF Permalinks Maintenance & Trust

Maintenance Signals

WordPress version tested5.0.25
Last updatedOct 24, 2018
PHP min version5.3
Downloads5K

Community Trust

Rating100/100
Number of ratings1
Active installs300
Developer Profile

ACF Permalinks Developer Profile

athlan

2 plugins · 900 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect ACF Permalinks

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about ACF Permalinks