Assign Missing Categories Security & Risk Analysis

wordpress.org/plugins/assign-missing-categories

Assigns the default category to all posts that have no category after you've converted your categories to tags.

20 active installs v1.2 PHP + WP 2.3+ Updated Dec 15, 2014
categories
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Assign Missing Categories Safe to Use in 2026?

Generally Safe

Score 85/100

Assign Missing Categories has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 11yr ago
Risk Assessment

The "assign-missing-categories" plugin, version 1.2, exhibits a strong security posture based on the provided static analysis and vulnerability history. The plugin has no recorded CVEs, indicating a lack of publicly known vulnerabilities. Furthermore, the static analysis reveals a remarkably small attack surface, with zero AJAX handlers, REST API routes, shortcodes, or cron events. This inherently limits the potential for attackers to find entry points into the plugin's functionality. The code signals also show positive signs, with no dangerous functions identified and a complete absence of taint analysis flows, suggesting that data is handled securely and does not pose immediate risks of injection or manipulation.

Key Concerns

  • SQL queries without prepared statements
  • Output escaping not properly implemented
  • Missing nonce checks on AJAX
  • Lack of capability checks on potential entry points
Vulnerabilities
None known

Assign Missing Categories Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Assign Missing Categories Release Timeline

v1.2Current
v1.1
v1.0
Code Analysis
Analyzed Mar 16, 2026

Assign Missing Categories Code Analysis

Dangerous Functions
0
Raw SQL Queries
1
0 prepared
Unescaped Output
2
0 escaped
Nonce Checks
0
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

0% prepared1 total queries

Output Escaping

0% escaped2 total outputs
Attack Surface

Assign Missing Categories Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
actionadmin_menuassign-missing-categories.php:37
Maintenance & Trust

Assign Missing Categories Maintenance & Trust

Maintenance Signals

WordPress version tested4.1.42
Last updatedDec 15, 2014
PHP min version
Downloads5K

Community Trust

Rating100/100
Number of ratings8
Active installs20
Developer Profile

Assign Missing Categories Developer Profile

Stephanie Leary

16 plugins · 17K total installs

68
trust score
Avg Security Score
84/100
Avg Patch Time
2856 days
View full developer profile
Detection Fingerprints

How We Detect Assign Missing Categories

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/assign-missing-categories/assign-missing-categories.php

HTML / DOM Fingerprints

CSS Classes
wrap
FAQ

Frequently Asked Questions about Assign Missing Categories