Add Hierarchy (parent) to post Security & Risk Analysis

wordpress.org/plugins/add-hierarchy-parent-to-post

PLUGIN IS DISCONTINUED!

300 active installs v4.0 PHP + WP 4.4+ Updated May 22, 2024
hierarchypageparentpermalinkpost
92
A · Safe
CVEs total1
Unpatched0
Last CVEAug 1, 2022
Safety Verdict

Is Add Hierarchy (parent) to post Safe to Use in 2026?

Generally Safe

Score 92/100

Add Hierarchy (parent) to post has a strong security track record. Known vulnerabilities have been patched promptly.

1 known CVELast CVE: Aug 1, 2022Updated 1yr ago
Risk Assessment

The 'add-hierarchy-parent-to-post' plugin v4.0 exhibits a mixed security posture. On one hand, it demonstrates good practices by having a seemingly small attack surface with no identified AJAX handlers, REST API routes, shortcodes, or cron events that lack authentication checks. The majority of its SQL queries also utilize prepared statements, which is a positive sign. However, the presence of a dangerous `unserialize` function is a significant concern, as it can lead to critical vulnerabilities if user-supplied data is passed to it without proper sanitization. The taint analysis revealing a high-severity flow with unsanitized paths further exacerbates this risk, indicating that data intended for deserialization might not be adequately validated.

Key Concerns

  • Dangerous function detected (unserialize)
  • Taint flow with unsanitized paths (high severity)
  • Moderate output escaping (50% properly escaped)
  • 1 medium severity vulnerability in history
Vulnerabilities
1

Add Hierarchy (parent) to post Security Vulnerabilities

CVEs by Year

1 CVE in 2022
2022
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

WF-0dd1706c-fb3b-4a5d-947a-435954eb0b15-add-hierarchy-parent-to-postmedium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Add Hierarchy (parent) to post <= 3.12 - Reflected Cross-Site Scripting

Aug 1, 2022 Patched in 3.13 (540d)
Code Analysis
Analyzed Mar 16, 2026

Add Hierarchy (parent) to post Code Analysis

Dangerous Functions
1
Raw SQL Queries
15
46 prepared
Unescaped Output
81
80 escaped
Nonce Checks
5
Capability Checks
2
File Operations
19
External Requests
4
Bundled Libraries
0

Dangerous Functions Found

unserializeif ( @unserialize($serialized_string) !== false ) return $serialized_string;library.php:3798

SQL Query Safety

75% prepared61 total queries

Output Escaping

50% escaped161 total outputs
Data Flows
6 unsanitized

Data Flow Analysis

8 flows6 with unsanitized paths
force_redirect_to_https (library.php:101)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Add Hierarchy (parent) to post Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 45
actionregistered_post_typeindex.php:64
actioninitindex.php:71
filterpre_post_linkindex.php:74
actionregistered_post_typeindex.php:81
filterpre_get_postsindex.php:86
actionregistered_post_typeindex.php:87
actioninitindex.php:92
actioncurrent_screenindex.php:96
actioninitindex.php:177
filterpage_attributes_dropdown_pages_argsindex.php:329
filterregister_post_type_argsindex.php:334
filterget_pagesindex.php:345
actionwp_headlibrary.php:4753
actionadmin_headlibrary.php:4754
actionwp_enqueue_scriptslibrary_wp.php:73
actionadmin_enqueue_scriptslibrary_wp.php:74
actionadmin_footerlibrary_wp.php:148
actioninitlibrary_wp.php:163
actionadmin_initlibrary_wp.php:210
filtermce_external_pluginslibrary_wp.php:212
filtermce_buttons_2library_wp.php:213
filtertiny_mce_versionlibrary_wp.php:215
actionwplibrary_wp.php:231
actionplugins_loadedlibrary_wp.php:540
actionwplibrary_wp.php:550
actionwp_footerlibrary_wp.php:700
actioninitlibrary_wp.php:711
actionwp_loadedlibrary_wp.php:854
actionshutdownlibrary_wp.php:859
actioninitlibrary_wp.php:1725
actionadmin_headlibrary_wp.php:1736
actioncurrent_screenlibrary_wp.php:1737
actionwplibrary_wp.php:1746
filterupload_mimeslibrary_wp.php:1752
filterwp_handle_uploadlibrary_wp.php:1753
actioninitlibrary_wp.php:1815
actionnetwork_admin_menulibrary_wp.php:1905
actionadmin_menulibrary_wp.php:1907
actionactivated_pluginlibrary_wp.php:1909
actionnetwork_admin_noticeslibrary_wp.php:2096
actionadmin_noticeslibrary_wp.php:2097
filterwp_php_error_messagelibrary_wp.php:2180
actionwp_footerlibrary_wp.php:2368
filterwidget_textlibrary_wp.php:2392
filtersite_transient_update_pluginslibrary_wp.php:3266
Maintenance & Trust

Add Hierarchy (parent) to post Maintenance & Trust

Maintenance Signals

WordPress version tested6.5.8
Last updatedMay 22, 2024
PHP min version
Downloads11K

Community Trust

Rating74/100
Number of ratings6
Active installs300
Developer Profile

Add Hierarchy (parent) to post Developer Profile

ttodua

4 plugins · 2K total installs

71
trust score
Avg Security Score
88/100
Avg Patch Time
271 days
View full developer profile
Detection Fingerprints

How We Detect Add Hierarchy (parent) to post

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/add-hierarchy-parent-to-post/style.css/wp-content/plugins/add-hierarchy-parent-to-post/admin.css
Script Paths
/wp-content/plugins/add-hierarchy-parent-to-post/admin.js
Version Parameters
add-hierarchy-parent-to-post/style.css?ver=add-hierarchy-parent-to-post/admin.js?ver=add-hierarchy-parent-to-post/admin.css?ver=

HTML / DOM Fingerprints

HTML Comments
<!-- Add Hierarchy (parent) to post --><!-- Start URL hierarchy --><!-- Add PARENT FIELD to POST TYPE support -->
Data Attributes
data-plugin-path
JS Globals
ahtpp_data
FAQ

Frequently Asked Questions about Add Hierarchy (parent) to post