Blocks to Shortcode – Use blocks everywhere: in page templates, Elementor, etc. Security & Risk Analysis

wordpress.org/plugins/blocks-to-shortcode

Easily convert blocks into shortcodes and reuse them anywhere on your site - in posts, pages, widgets, templates, and page builders like Elementor.

300 active installs v0.12 PHP 7.2+ WP 6.2+ Updated Jan 25, 2026
content-reuseelementor-blocksgutenberg-in-shortcodegutenberg-shortcodeuse-blocks-anywhere
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Blocks to Shortcode – Use blocks everywhere: in page templates, Elementor, etc. Safe to Use in 2026?

Generally Safe

Score 100/100

Blocks to Shortcode – Use blocks everywhere: in page templates, Elementor, etc. has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The "blocks-to-shortcode" plugin v0.12 presents a generally good security posture based on the provided static analysis and vulnerability history. The absence of any known CVEs and a clean vulnerability history indicate a mature and well-maintained codebase. The static analysis reveals a very limited attack surface, with only one shortcode and no AJAX handlers or REST API routes. Crucially, there are no identified flows with unsanitized paths in the taint analysis, and no dangerous functions are present. All SQL queries use prepared statements, and file operations are absent, further mitigating common attack vectors. The plugin also demonstrates good practices with capability checks in place for its entry points.

Key Concerns

  • Potential for unescaped output
  • Missing nonce checks on shortcode
  • Bundled outdated library (Freemius v1.0)
Vulnerabilities
None known

Blocks to Shortcode – Use blocks everywhere: in page templates, Elementor, etc. Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Blocks to Shortcode – Use blocks everywhere: in page templates, Elementor, etc. Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
3 escaped
Nonce Checks
0
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
1

Bundled Libraries

Freemius1.0

Output Escaping

75% escaped4 total outputs
Attack Surface

Blocks to Shortcode – Use blocks everywhere: in page templates, Elementor, etc. Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[btsc] includes\Register.php:11
WordPress Hooks 5
actioninitblocks-to-shortcode.php:44
actionenqueue_block_assetsblocks-to-shortcode.php:45
actionenqueue_block_editor_assetsblocks-to-shortcode.php:46
actioninitincludes\Register.php:10
actionadmin_enqueue_scriptsincludes\Register.php:14
Maintenance & Trust

Blocks to Shortcode – Use blocks everywhere: in page templates, Elementor, etc. Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 25, 2026
PHP min version7.2
Downloads3K

Community Trust

Rating100/100
Number of ratings6
Active installs300
Developer Profile

Blocks to Shortcode – Use blocks everywhere: in page templates, Elementor, etc. Developer Profile

Plugin Envision

5 plugins · 5K total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Blocks to Shortcode – Use blocks everywhere: in page templates, Elementor, etc.

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/blocks-to-shortcode/public/css/aos.css/wp-content/plugins/blocks-to-shortcode/public/js/aos.js
Version Parameters
blocks-to-shortcode/style.css?ver=blocks-to-shortcode/script.js?ver=

HTML / DOM Fingerprints

Data Attributes
pevPostShortCodepevPostShortCode-copyPEVPostShortCode
JS Globals
btscAdminUrlbtscWusul
Shortcode Output
[btsc id=
FAQ

Frequently Asked Questions about Blocks to Shortcode – Use blocks everywhere: in page templates, Elementor, etc.