Blocks Scanner Security & Risk Analysis

wordpress.org/plugins/blocks-scanner

Easily scan and list the Gutenberg blocks used on your site. Quickly edit or view the posts that use the blocks.

40 active installs v1.0.3 PHP 7.2+ WP 5.2+ Updated Feb 3, 2025
blockseditorfindgutenbergscan
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Blocks Scanner Safe to Use in 2026?

Generally Safe

Score 92/100

Blocks Scanner has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The "blocks-scanner" plugin, version 1.0.3, exhibits a generally strong security posture based on the provided static analysis. It has zero recorded vulnerabilities, a clean vulnerability history, and a limited attack surface. Notably, there are no AJAX handlers, REST API routes, shortcodes, or cron events, which significantly reduces the potential entry points for attackers. Furthermore, all SQL queries utilize prepared statements, and there are no file operations or external HTTP requests, indicating good practices in these critical areas. The presence of a nonce check is also a positive sign for input validation.

Key Concerns

  • Improper output escaping (41% unescaped)
  • Lack of capability checks for entry points
Vulnerabilities
None known

Blocks Scanner Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Blocks Scanner Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
21
30 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

59% escaped51 total outputs
Attack Surface

Blocks Scanner Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
actionadmin_menublocks-scanner.php:17
actionadmin_enqueue_scriptsblocks-scanner.php:28
Maintenance & Trust

Blocks Scanner Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedFeb 3, 2025
PHP min version7.2
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs40
Developer Profile

Blocks Scanner Developer Profile

taha.tr

3 plugins · 140 total installs

92
trust score
Avg Security Score
97/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Blocks Scanner

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/blocks-scanner/build/script.min.js/wp-content/plugins/blocks-scanner/build/styles.min.css
Script Paths
/wp-content/plugins/blocks-scanner/build/script.min.js
Version Parameters
blocks-scanner/build/script.min.js?ver=blocks-scanner/build/styles.min.css?ver=

HTML / DOM Fingerprints

CSS Classes
blocks_scannerdhn-groupblock-name-searchblock-names-listcategory-filterpostType-filtertitle-filtercontent-nav+4 more
Data Attributes
data-type="number"data-type="string"data-type="date"
FAQ

Frequently Asked Questions about Blocks Scanner