Advance Canonical URL Security & Risk Analysis

wordpress.org/plugins/advance-canonical-url

Advanced Canonical URL is a powerful WordPress plugin designed to enhance your website’s SEO by preventing duplicate content issues.

2K active installs v1.0.4 PHP 7.3+ WP 5.2+ Updated May 19, 2025
canonicalcanonical-urlduplicateduplicate-contenturl
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Advance Canonical URL Safe to Use in 2026?

Generally Safe

Score 100/100

Advance Canonical URL has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10mo ago
Risk Assessment

The "advance-canonical-url" plugin v1.0.4 demonstrates a strong security posture in several key areas. The static analysis reveals no exploitable attack surface through common entry points like AJAX, REST API, shortcodes, or cron events. Furthermore, the code utilizes prepared statements for all its SQL queries and includes nonce and capability checks, indicating good development practices for protecting against common web vulnerabilities. The absence of any recorded vulnerabilities in its history further reinforces this positive outlook.

Key Concerns

  • Unsanitized paths in taint flows
  • Output not always properly escaped
Vulnerabilities
None known

Advance Canonical URL Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Advance Canonical URL Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
3
10 escaped
Nonce Checks
1
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

77% escaped13 total outputs
Data Flows
2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths
acu_the_real_deal (includes\advance-canonical-url.php:246)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Advance Canonical URL Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 8
actionadmin_menuincludes\advance-canonical-url.php:31
actionadmin_initincludes\advance-canonical-url.php:32
actionwp_headincludes\advance-canonical-url.php:36
actionadmin_enqueue_scriptsincludes\canonical-meta-box.php:27
actionload-post.phpincludes\canonical-meta-box.php:28
actionload-post-new.phpincludes\canonical-meta-box.php:29
actionadd_meta_boxesincludes\canonical-meta-box.php:44
actionsave_postincludes\canonical-meta-box.php:45
Maintenance & Trust

Advance Canonical URL Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedMay 19, 2025
PHP min version7.3
Downloads18K

Community Trust

Rating80/100
Number of ratings4
Active installs2K
Developer Profile

Advance Canonical URL Developer Profile

Usman Ali Qureshi

4 plugins · 5K total installs

93
trust score
Avg Security Score
98/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Advance Canonical URL

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/advance-canonical-url/css/acu_admin.css
Version Parameters
advance-canonical-url/css/acu_admin.css?ver=

HTML / DOM Fingerprints

CSS Classes
acu_default_can_urldefault_can_urldefault_can_url_descacu_meta_box_containeracu_adv_can_url
HTML Comments
Intruders aren't allowed.
Data Attributes
acu_canonical_meta_box_nonce
FAQ

Frequently Asked Questions about Advance Canonical URL