Annotation Plugin Security & Risk Analysis

wordpress.org/plugins/bbcode-annotator

Creates an annotation link to take out "unneeded" text.

10 active installs v0.3 PHP + WP 2.7.1+ Updated Mar 4, 2009
annotatepagepagespostposts
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Annotation Plugin Safe to Use in 2026?

Generally Safe

Score 85/100

Annotation Plugin has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 17yr ago
Risk Assessment

The bbcode-annotator plugin v0.3 exhibits an exceptionally strong security posture based on the provided static analysis and vulnerability history. The plugin has zero identified entry points for attack, including AJAX handlers, REST API routes, shortcodes, and cron events. Furthermore, the code demonstrates adherence to secure coding practices, with no dangerous functions, zero SQL queries executed without prepared statements, and all output properly escaped. The absence of file operations, external HTTP requests, and critical taint analysis findings further reinforces this positive assessment. The plugin also has no recorded vulnerability history, indicating a consistent track record of security. While the lack of nonces and capability checks on the non-existent entry points might seem like a concern, it is mitigated by the fact that there are no entry points to exploit in the first place. This plugin appears to be a very secure offering.

Vulnerabilities
None known

Annotation Plugin Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Annotation Plugin Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Annotation Plugin Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
filterthe_contentannotate.php:185
filterthe_excerptannotate.php:186
Maintenance & Trust

Annotation Plugin Maintenance & Trust

Maintenance Signals

WordPress version tested2.7.1
Last updatedMar 4, 2009
PHP min version
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Annotation Plugin Developer Profile

radii

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Annotation Plugin

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/bbcode-annotator/style.css/wp-content/plugins/bbcode-annotator/bbcode-annotator.js
Script Paths
/wp-content/plugins/bbcode-annotator/bbcode-annotator.js
Version Parameters
ver=0.3

HTML / DOM Fingerprints

Data Attributes
id="annote_id="annotation_
Shortcode Output
<sup id="annote_<strong id="annotation_
FAQ

Frequently Asked Questions about Annotation Plugin