Blocks Scanner Security & Risk Analysis

wordpress.org/plugins/blocks-scanner

Easily scan and list the Gutenberg blocks used on your site. Quickly edit or view the posts that use the blocks.

50 active installs v1.0.4 PHP 7.2+ WP 5.2+ Updated Apr 29, 2026
blockseditorfindgutenbergscan
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Blocks Scanner Safe to Use in 2026?

Generally Safe

Score 100/100

Blocks Scanner has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The "blocks-scanner" plugin, version 1.0.3, exhibits a generally strong security posture based on the provided static analysis. It has zero recorded vulnerabilities, a clean vulnerability history, and a limited attack surface. Notably, there are no AJAX handlers, REST API routes, shortcodes, or cron events, which significantly reduces the potential entry points for attackers. Furthermore, all SQL queries utilize prepared statements, and there are no file operations or external HTTP requests, indicating good practices in these critical areas. The presence of a nonce check is also a positive sign for input validation.

Key Concerns

  • Improper output escaping (41% unescaped)
  • Lack of capability checks for entry points
Vulnerabilities
None known

Blocks Scanner Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Blocks Scanner Release Timeline

v1.0.4Current
v1.0.3
v1.0.2
v1.0.1
v1.0
v0.9.1
v0.9
v0.8
Code Analysis
Analyzed Mar 16, 2026

Blocks Scanner Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
21
30 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

59% escaped51 total outputs
Attack Surface

Blocks Scanner Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
actionadmin_menublocks-scanner.php:17
actionadmin_enqueue_scriptsblocks-scanner.php:28
Maintenance & Trust

Blocks Scanner Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedApr 29, 2026
PHP min version7.2
Downloads3K

Community Trust

Rating0/100
Number of ratings0
Active installs50
Developer Profile

Blocks Scanner Developer Profile

taha.tr

3 plugins · 150 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Blocks Scanner

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/blocks-scanner/build/script.min.js/wp-content/plugins/blocks-scanner/build/styles.min.css
Script Paths
/wp-content/plugins/blocks-scanner/build/script.min.js
Version Parameters
blocks-scanner/build/script.min.js?ver=blocks-scanner/build/styles.min.css?ver=

HTML / DOM Fingerprints

CSS Classes
blocks_scannerdhn-groupblock-name-searchblock-names-listcategory-filterpostType-filtertitle-filtercontent-nav+4 more
Data Attributes
data-type="number"data-type="string"data-type="date"
FAQ

Frequently Asked Questions about Blocks Scanner