Bulk Convert Post Format Security & Risk Analysis

wordpress.org/plugins/bulk-convert-post-format

Bulk convert posts in a category to a selected post format.

100 active installs v1.1.5 PHP 7.2+ WP 5.2+ Updated Dec 9, 2025
bulk-convertpost-formats
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Bulk Convert Post Format Safe to Use in 2026?

Generally Safe

Score 100/100

Bulk Convert Post Format has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The "bulk-convert-post-format" v1.1.5 plugin exhibits a strong security posture based on the provided static analysis. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events with insecure implementations significantly limits the plugin's attack surface. Furthermore, the code signals indicate robust security practices, including 100% use of prepared statements for SQL queries, proper output escaping, and the presence of nonce checks. The lack of dangerous functions and file operations further strengthens this positive assessment. The vulnerability history is also completely clean, with no known CVEs, which suggests a well-maintained and secure codebase over time. The taint analysis also reveals no critical or high-severity issues, reinforcing the confidence in the plugin's safety. Overall, this plugin appears to be very secure and well-developed with minimal to no discernible security risks.

Vulnerabilities
None known

Bulk Convert Post Format Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Bulk Convert Post Format Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
25 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped25 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
category_to_post_format_page (bulk-convert-post-format.php:29)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Bulk Convert Post Format Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
actionadmin_menubulk-convert-post-format.php:18
Maintenance & Trust

Bulk Convert Post Format Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 9, 2025
PHP min version7.2
Downloads9K

Community Trust

Rating88/100
Number of ratings8
Active installs100
Developer Profile

Bulk Convert Post Format Developer Profile

Razorfrog Web Design

4 plugins · 420 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Bulk Convert Post Format

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/bulk-convert-post-format/post_to_url.js
Script Paths
/wp-content/plugins/bulk-convert-post-format/post_to_url.js

HTML / DOM Fingerprints

CSS Classes
bulk-convert-post-format
JS Globals
post_to_url
FAQ

Frequently Asked Questions about Bulk Convert Post Format