Does Atlasly Content Manager have any unpatched vulnerabilities?

No. All known vulnerabilities in Atlasly Content Manager have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Atlasly Content Manager compatible with WordPress 6.9.4?

According to WordPress.org data, Atlasly Content Manager 1.0.0 has been tested up to WordPress 6.9.4. Check the plugin's changelog for the latest compatibility information.

Is Atlasly Content Manager compatible with PHP 7.4+?

Atlasly Content Manager requires PHP 7.4 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Atlasly Content Manager updated?

Atlasly Content Manager was last updated on Unknown. Frequent updates are generally a positive security signal.

What is Atlasly Content Manager's security score?

Atlasly Content Manager has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Atlasly Content Manager Security & Risk Analysis

wordpress.org/plugins/atlasly-content-manager

Schema-driven content types, entries, REST API, GraphQL, and form capture for modern WordPress projects.

0 active installs v1.0.0 PHP 7.4+ WP 5.0+ Updated Unknown

custom-fieldsform-submissionsgraphqlheadless-cmsrest-api

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Atlasly Content Manager Safe to Use in 2026?

Generally Safe

Score 100/100

Atlasly Content Manager has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs

Risk Assessment

The 'atlasly-content-manager' plugin v1.0.0 presents a significant security risk due to a large number of unprotected entry points. While the plugin demonstrates good practices in terms of SQL query preparation and output escaping, the absence of authentication and permission checks on a vast majority of its AJAX handlers and REST API routes creates a wide attack surface. This means that any unauthenticated user could potentially interact with these endpoints, leading to unintended actions or data exposure. The taint analysis, while not revealing critical or high-severity issues, did identify flows with unsanitized paths, which, when combined with the lack of input validation, could be exploited.

Key Concerns

High number of unprotected AJAX handlers
High number of unprotected REST API routes
Flows with unsanitized paths detected

Vulnerabilities

None known

Atlasly Content Manager Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 17, 2026

Atlasly Content Manager Code Analysis

Dangerous Functions

Raw SQL Queries

66 prepared

Unescaped Output

76 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

69% prepared95 total queries

Output Escaping

97% escaped78 total outputs

Data Flows

3 unsanitized

Data Flow Analysis

7 flows3 with unsanitized paths

render (includes\Admin\Pages\SetupWizard.php:12)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

25 unprotected

Atlasly Content Manager Attack Surface

Entry Points30

Unprotected25

AJAX Handlers 6

authwp_ajax_atlasly_setupincludes\Core\Loader.php:44

authwp_ajax_atlasly_reset_setupincludes\Core\Loader.php:45

authwp_ajax_atlasly_save_security_settingsincludes\Core\Loader.php:46

authwp_ajax_atlasly_save_webhooksincludes\Core\Loader.php:47

authwp_ajax_atlasly_save_corsincludes\Core\Loader.php:48

authwp_ajax_atlasly_sync_contentincludes\Core\Network.php:14

REST API Routes 24

POST/wp-json/atlasly/v1/form-captureincludes\FormProxy.php:27

POST/wp-json/atlasly/v1/hubspot/webhookincludes\Integrations\HubSpot.php:15

GET/wp-json/atlasly/v1/content-types/bulk-deleteincludes\Rest\ContentTypesController.php:26

GET/wp-json/atlasly/v1/content-typesincludes\Rest\ContentTypesController.php:30

GET/wp-json/atlasly/v1/content-types/(?P<id>\d+)includes\Rest\ContentTypesController.php:35

GET/wp-json/atlasly/v1/content-types/(?P<id>\d+)/schemaincludes\Rest\ContentTypesController.php:40

GET/wp-json/atlasly/v1/field-typesincludes\Rest\ContentTypesController.php:44

GET/wp-json/atlasly/v1/dashboardincludes\Rest\DashboardController.php:15

GET/wp-json/atlasly/v1/entries/bulk-deleteincludes\Rest\EntriesController.php:17

GET/wp-json/atlasly/v1/entries/bulk-updateincludes\Rest\EntriesController.php:21

GET/wp-json/atlasly/v1/content-types/(?P<type_id>\d+)/entriesincludes\Rest\EntriesController.php:25

GET/wp-json/atlasly/v1/entries/(?P<id>\d+)includes\Rest\EntriesController.php:31

GET/wp-json/atlasly/v1/entries/(?P<id>\d+)/duplicateincludes\Rest\EntriesController.php:37

GET/wp-json/atlasly/v1/uploadincludes\Rest\FileUploadController.php:16

GET/wp-json/atlasly/v1/files/(?P<id>\d+)includes\Rest\FileUploadController.php:20

GET/wp-json/atlasly/v1/entries/pollincludes\Rest\FormGeneratorController.php:16

GET/wp-json/atlasly/v1/graphqlincludes\Rest\GraphQLController.php:15

GET/wp-json/atlasly/v1/export/content-typesincludes\Rest\ImportExportController.php:16

GET/wp-json/atlasly/v1/export/entries/(?P<type_id>\d+)includes\Rest\ImportExportController.php:20

GET/wp-json/atlasly/v1/export/(?P<format>csv|json|xml)/(?P<type_id>\d+)includes\Rest\ImportExportController.php:24

GET/wp-json/atlasly/v1/import/content-typesincludes\Rest\ImportExportController.php:28

GET/wp-json/atlasly/v1/import/entries/(?P<type_id>\d+)includes\Rest\ImportExportController.php:32

GET/wp-json/atlasly/v1/relationships/(?P<type_id>\d+)includes\Rest\RelationshipController.php:15

GET/wp-json/atlasly/v1/search/entriesincludes\Rest\RelationshipController.php:19

WordPress Hooks 35

actionplugins_loadedatlasly-content-manager.php:28

actionadmin_menuincludes\Admin\Pages\Integration.php:13

actionrest_api_initincludes\Core\ApiSecurity.php:11

filterrest_pre_dispatchincludes\Core\ApiSecurity.php:12

actionsend_headersincludes\Core\ApiSecurity.php:13

filterrest_pre_serve_requestincludes\Core\ApiSecurity.php:17

actionadmin_menuincludes\Core\Loader.php:34

actionadmin_enqueue_scriptsincludes\Core\Loader.php:35

actionrest_api_initincludes\Core\Loader.php:36

actionrest_api_initincludes\Core\Loader.php:37

actionrest_api_initincludes\Core\Loader.php:38

actionrest_api_initincludes\Core\Loader.php:39

actionrest_api_initincludes\Core\Loader.php:40

actionrest_api_initincludes\Core\Loader.php:41

actionrest_api_initincludes\Core\Loader.php:42

actionrest_api_initincludes\Core\Loader.php:43

actionnetwork_admin_menuincludes\Core\Network.php:13

actioninitincludes\Core\Permissions.php:11

actionwp_enqueue_scriptsincludes\Core\RealTime.php:11

actionadmin_enqueue_scriptsincludes\Core\RealTime.php:12

filterheartbeat_receivedincludes\Core\RealTime.php:13

actionatlasly_entry_createdincludes\Core\RealTime.php:14

actionatlasly_entry_updatedincludes\Core\RealTime.php:15

actionrest_api_initincludes\Core\Security.php:11

filterrest_request_before_callbacksincludes\Core\Security.php:19

actionplugins_loadedincludes\Core\Version.php:14

actionupgrader_process_completeincludes\Core\Version.php:15

actionatlasly_entry_createdincludes\Core\Webhooks.php:13

actionatlasly_entry_updatedincludes\Core\Webhooks.php:14

actionatlasly_entry_deletedincludes\Core\Webhooks.php:15

actionwp_enqueue_scriptsincludes\FormProxy.php:11

actionrest_api_initincludes\FormProxy.php:12

actionrest_api_initincludes\Integrations\HubSpot.php:11

filterrest_request_before_callbacksincludes\Rest\ContentTypesController.php:19

filterupload_dirincludes\Rest\FileUploadController.php:75

Maintenance & Trust

Atlasly Content Manager Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4

Last updatedUnknown

PHP min version7.4

Downloads179

Community Trust

Rating0/100

Number of ratings0

Active installs0

Alternatives

Atlasly Content Manager Alternatives

WPGraphQL

wp-graphql

WPGraphQL adds a flexible and powerful GraphQL API to WordPress, enabling efficient querying and interaction with your site's data.

30K 6 CVEs

MB Rest API

mb-rest-api

100

Get and update Meta Box custom fields to the WordPress REST API responses.

1K No CVEs

Nullify empty fields for ACF

wp-acf-nullify-gatsby

Set Advanced Custom Fields (ACF) empty field value as null instead of false to avoid GraphQL error in GatsbyJS.

90 No CVEs

WP REST API Custom Fields

wp-rest-api-custom-fields

Shows Advanced Custom Field output to the WP REST API for posts, pages, taxonomies and users.

70 No CVEs

ng-wp-rest

ng-wp-endpoints

Simple plugin to add rest endpoints to blog for working with a js framework.

0 No CVEs

Developer Profile

Atlasly Content Manager Developer Profile

ashwathama

1 plugin · 0 total installs

trust score

Avg Security Score

100/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Atlasly Content Manager

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/atlasly-content-manager/assets/css/admin.css/wp-content/plugins/atlasly-content-manager/assets/css/entries.css/wp-content/plugins/atlasly-content-manager/assets/js/admin.js/wp-content/plugins/atlasly-content-manager/assets/js/webhooks.js

Script Paths

/wp-content/plugins/atlasly-content-manager/assets/js/admin.js/wp-content/plugins/atlasly-content-manager/assets/js/webhooks.js

Version Parameters

atlasly-content-manager/assets/css/admin.css?ver=atlasly-content-manager/assets/css/entries.css?ver=atlasly-content-manager/assets/js/admin.js?ver=atlasly-content-manager/assets/js/webhooks.js?ver=

HTML / DOM Fingerprints

Data Attributes

atlasly_ajaxatlasly_settingsatlasly_webhooks_data

JS Globals