WP-Safety

BP Post Status Security & Risk Analysis

wordpress.org/plugins/bp-post-status

Adds BuddyPress status options for posts - Group posts (public, site members only and group only, Members Only, Followers, Following and Friends only …

10 active installs v2.0.3 PHP + WP + Updated Unknown
buddypressfriends-only-postsgroup-postsgroupsmembers-only-posts
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is BP Post Status Safe to Use in 2026?

Generally Safe

Score 100/100

BP Post Status has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

The bp-post-status plugin v2.0.3 exhibits a strong security posture based on the provided static analysis and vulnerability history. The code demonstrates excellent adherence to secure coding practices, with all SQL queries utilizing prepared statements, a high percentage of output escaping, and numerous nonce and capability checks. The absence of file operations and external HTTP requests further reduces potential attack vectors. The taint analysis showing zero flows with unsanitized paths is a significant positive indicator of robust input validation and sanitization.

Vulnerabilities
None known

BP Post Status Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

BP Post Status Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
16 prepared
Unescaped Output
23
488 escaped
Nonce Checks
7
Capability Checks
52
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared16 total queries

Output Escaping

95% escaped511 total outputs
Attack Surface

BP Post Status Attack Surface

Entry Points5
Unprotected0

AJAX Handlers 4

authwp_ajax_bpps_home_pageincludes\core\bpps-ajax.php:41
authwp_ajax_bpps_delete_postincludes\core\bpps-ajax.php:73
authwp_ajax_bpps_publish_postincludes\core\bpps-ajax.php:128
authwp_ajax_bpps_make_stickyincludes\core\bpps-ajax.php:172

Shortcodes 1

[bppss_group_posts] includes\core\bpps-shortcodes.php:20
WordPress Hooks 67
actioninitincludes\bp-statuses.php:218
actioninitincludes\bp-statuses.php:220
actionplugins_loadedincludes\bp-statuses.php:228
actionplugins_loadedincludes\bp-statuses.php:319
actionbp_register_activity_actionsincludes\buddypress\bp-activity.php:39
actiongroups_create_group_postincludes\buddypress\bp-activity.php:42
actionsave_postincludes\buddypress\bp-activity.php:44
actionsave_postincludes\buddypress\bp-activity.php:45
actionsave_postincludes\buddypress\bp-activity.php:48
actiondelete_postincludes\buddypress\bp-activity.php:51
actionplugins_loadedincludes\buddypress\bp-activity.php:521
actionbp_core_install_emailsincludes\buddypress\bp-emails.php:77
actionwp_insert_commentincludes\buddypress\bp-emails.php:109
actiontransition_post_statusincludes\buddypress\bp-emails.php:244
actionplugins_loadedincludes\buddypress\bp-friends.php:96
actiongroups_group_settings_editedincludes\buddypress\bp-group-admin.php:43
actiongroups_update_groupincludes\buddypress\bp-group-admin.php:45
actionbp_before_group_settings_adminincludes\buddypress\bp-group-admin.php:46
actionplugins_loadedincludes\buddypress\bp-group-admin.php:581
actiongroups_setup_navincludes\buddypress\bp-groups.php:40
actionbp_headincludes\buddypress\bp-groups.php:43
filterbp_groups_default_extensionincludes\buddypress\bp-groups.php:46
actionwp_enqueue_scriptsincludes\buddypress\bp-groups.php:49
filterbp_current_user_canincludes\buddypress\bp-groups.php:52
filterbp_nouveau_nav_has_countincludes\buddypress\bp-groups.php:55
filterbp_nouveau_get_nav_countincludes\buddypress\bp-groups.php:56
actionbp_template_contentincludes\buddypress\bp-groups.php:701
actionbp_template_contentincludes\buddypress\bp-groups.php:715
actionbp_template_contentincludes\buddypress\bp-groups.php:734
actionbp_template_contentincludes\buddypress\bp-groups.php:853
actionplugins_loadedincludes\buddypress\bp-groups.php:945
actionbp_setup_navincludes\buddypress\bp-members.php:22
actionbp_setup_admin_barincludes\buddypress\bp-members.php:23
actionbp_template_titleincludes\buddypress\bp-members.php:124
actionbp_template_contentincludes\buddypress\bp-members.php:125
actionbp_template_titleincludes\buddypress\bp-members.php:146
actionbp_template_contentincludes\buddypress\bp-members.php:147
actionbp_template_titleincludes\buddypress\bp-members.php:168
actionbp_template_contentincludes\buddypress\bp-members.php:169
filterbp_notifications_get_registered_componentsincludes\buddypress\bp-notifications.php:40
filterbp_notifications_get_notifications_for_userincludes\buddypress\bp-notifications.php:41
actionplugins_loadedincludes\buddypress\bp-notifications.php:649
actionadmin_menuincludes\core\bpps-admin-options.php:33
actionadmin_initincludes\core\bpps-admin-options.php:90
actionplugins_loadedincludes\core\bpps-admin-options.php:865
actionpost_linkincludes\core\bpps-filters.php:44
actionsave_postincludes\core\bpps-functions.php:33
actioncomment_formincludes\core\bpps-functions.php:1014
actionbp_before_group_blog_post_contentincludes\core\bpps-functions.php:1035
filtercomments_openincludes\core\bpps-functions.php:1040
actionbp_after_group_blog_contentincludes\core\bpps-functions.php:1044
filterwp_titleincludes\core\bpps-functions.php:1050
actioninitincludes\core\bpps-post-status.php:45
filterdisplay_post_statesincludes\core\bpps-post-status.php:48
filterbp-post-status_filterincludes\core\bpps-post-status.php:51
actionplugins_loadedincludes\core\bpps-post-status.php:54
actionpre_get_postsincludes\core\bpps-post-status.php:57
actionpre_get_postsincludes\core\bpps-post-status.php:60
filterthe_permalinkincludes\core\bpps-post-status.php:63
actionadmin_enqueue_scriptsincludes\inc\admin\classes\class-bp-statuses-admin.php:161
actionadd_meta_boxesincludes\inc\admin\classes\class-bp-statuses-admin.php:163
filterpress_this_save_postincludes\inc\admin\classes\class-bp-statuses-admin.php:169
actioninitincludes\inc\core\custom.php:74
filterthe_contentincludes\inc\core\custom.php:126
actioninitincludes\inc\core\custom.php:194
actionadmin_noticesloader.php:25
actionplugins_loadedloader.php:33
Maintenance & Trust

BP Post Status Maintenance & Trust

Maintenance Signals

WordPress version tested6.6.5
Last updatedUnknown
PHP min version
Downloads6K

Community Trust

Rating100/100
Number of ratings2
Active installs10
Alternatives

BP Post Status Alternatives

Registration Options for BuddyPress

Registration Options for BuddyPress

bp-registration-options

A
85

Moderate new BuddyPress members and fight BuddyPress spam.

1K No CVEs
BuddyPress Group Email Subscription

BuddyPress Group Email Subscription

buddypress-group-email-subscription

A
92

This powerful plugin allows users to receive email notifications of group activity. Weekly or daily digests are available.

1K No CVEs
Wbcom Designs – Shortcodes & Elementor Widgets For BuddyPress

Wbcom Designs – Shortcodes & Elementor Widgets For BuddyPress

shortcodes-for-buddypress

A
100

This plugin generates shortcodes for Listing Activity Streams, Members, and Groups on any website post or page.

700 No CVEs
BuddyPress Default Data

BuddyPress Default Data

bp-default-data

A
92

Plugin will create lots of users, messages, friends connections, groups, topics, activity items, profile data - useful for testing purpose.

400 No CVEs
BuddyPress Groups Extras

BuddyPress Groups Extras

buddypress-groups-extras

A
91

Introduce custom fields and custom pages to your BuddyPress-powered groups.

400 1 CVE
Developer Profile

BP Post Status Developer Profile

Venutius

20 plugins · 640 total installs

89
trust score
Avg Security Score
93/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect BP Post Status

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/bp-post-status/includes/js/bpps-posts-pages.js
Script Paths
/wp-content/plugins/bp-post-status/includes/js/bpps-posts-pages.js

HTML / DOM Fingerprints

CSS Classes
errornotice-error6is-dismissible
Data Attributes
data-bp-nonce
JS Globals
bpps_translatemy_ajax_object
FAQ

Frequently Asked Questions about BP Post Status