Advanced Posts/Page Security & Risk Analysis

wordpress.org/plugins/advanced-posts-per-page

Fine grained control of how many of your posts appear on each of the various WordPress archive pages.

4K active installs v1.0 PHP + WP 3.4+ Updated Jul 18, 2012
archivearchivesposts-per-page
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Advanced Posts/Page Safe to Use in 2026?

Generally Safe

Score 85/100

Advanced Posts/Page has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 13yr ago
Risk Assessment

The "advanced-posts-per-page" v1.0 plugin exhibits a strong security posture based on the provided static analysis. The absence of any identified attack surface, dangerous functions, direct SQL queries, unescaped output, file operations, or external HTTP requests is highly commendable. Furthermore, the lack of any recorded vulnerabilities, past or present, suggests a well-maintained and secure codebase. This indicates a commitment to secure coding practices by the developers. The taint analysis also returned zero findings, reinforcing the impression of a secure plugin. The plugin's strength lies in its minimal, well-protected entry points and absence of common vulnerability vectors. However, the very limited scope of the analysis (0 taint flows analyzed, 0 AJAX handlers, etc.) means that while the *visible* code is secure, there might be undetected complex or indirect vulnerabilities. The complete absence of nonce and capability checks across all entry points, although the entry points themselves are zero, is a theoretical weakness that would be a significant concern if any entry points were present and exposed.

Key Concerns

  • No nonce checks identified
  • No capability checks identified
Vulnerabilities
None known

Advanced Posts/Page Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Advanced Posts/Page Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
7 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped7 total outputs
Attack Surface

Advanced Posts/Page Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
filterpre_get_postsinc\front.php:24
actionadmin_initinc\settings.php:30
Maintenance & Trust

Advanced Posts/Page Maintenance & Trust

Maintenance Signals

WordPress version tested3.5.2
Last updatedJul 18, 2012
PHP min version
Downloads5K

Community Trust

Rating0/100
Number of ratings0
Active installs4K
Developer Profile

Advanced Posts/Page Developer Profile

chrisguitarguy

8 plugins · 9K total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Advanced Posts/Page

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/advanced-posts-per-page/css/style.css/wp-content/plugins/advanced-posts-per-page/js/script.js
Script Paths
/wp-content/plugins/advanced-posts-per-page/js/script.js
Version Parameters
advanced-posts-per-page/css/style.css?ver=advanced-posts-per-page/js/script.js?ver=

HTML / DOM Fingerprints

CSS Classes
cdappp-settings-sectioncdappp-control-groupcdappp-post-count-input
Data Attributes
data-cdappp-post-count
JS Globals
cdappp_vars
FAQ

Frequently Asked Questions about Advanced Posts/Page