Catch Under Construction Security & Risk Analysis

wordpress.org/plugins/catch-under-construction

This WordPress maintenance mode plugin helps you display informative under construction page in an elegant manner with easy customization

100 active installs v1.4.5 PHP + WP 5.9+ Updated Feb 25, 2026
coming-soonlanding-pagemaintenance-modemaintenance-pageunder-construction
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Catch Under Construction Safe to Use in 2026?

Generally Safe

Score 100/100

Catch Under Construction has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The "catch-under-construction" plugin v1.4.5 exhibits a strong security posture based on the provided static analysis and vulnerability history. The plugin has a minimal attack surface with all identified entry points (AJAX handlers) protected by authorization checks. The code demonstrates good practices by exclusively using prepared statements for SQL queries and having a very high rate of properly escaped output. The absence of dangerous functions, file operations, and external HTTP requests further contributes to its secure design. Additionally, robust implementation of nonce and capability checks indicates a conscious effort to prevent common WordPress attack vectors.

The taint analysis reveals no unsanitized paths, which is a positive indicator of the plugin's resistance to injection-type vulnerabilities. The vulnerability history is also clean, with no known CVEs recorded, suggesting a stable and well-maintained codebase over time. The complete lack of recorded vulnerabilities, common types, or recent issues reinforces the impression of a secure plugin.

Overall, "catch-under-construction" v1.4.5 appears to be a secure plugin. Its strengths lie in its well-protected entry points, secure coding practices for data handling and output, and a clean vulnerability track record. There are no immediate red flags or significant security concerns identified in the provided data. The plugin's minimal attack surface and thorough use of security checks make it a reliable choice from a security perspective.

Vulnerabilities
None known

Catch Under Construction Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Catch Under Construction Release Timeline

v1.5
v1.4.5Current
v1.4.4
v1.4.3
v1.4.2
v1.4.1
v1.4
v1.3.4
v1.3.3
v1.3.2
v1.3.1
v1.3
v1.2
v1.1
v1.0.1
v1.0.0
Code Analysis
Analyzed Mar 16, 2026

Catch Under Construction Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
5
120 escaped
Nonce Checks
4
Capability Checks
9
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

96% escaped125 total outputs
Attack Surface

Catch Under Construction Attack Surface

Entry Points3
Unprotected0

AJAX Handlers 3

authwp_ajax_query-themesincludes\CatchThemesThemePlugin.php:11
authwp_ajax_customize_load_themesincludes\CatchThemesThemePlugin.php:21
authwp_ajax_ctp_switchincludes\ctp-tabs-removal.php:85
WordPress Hooks 20
actioninitcatch-under-construction.php:197
actiontemplate_redirectcatch-under-construction.php:204
actionadmin_enqueue_scriptsincludes\CatchThemesThemePlugin.php:13
actioncustomize_registerincludes\CatchThemesThemePlugin.php:16
filterinstall_plugins_tabsincludes\CatchThemesThemePlugin.php:23
filterinstall_plugins_table_api_args_catchpluginsincludes\CatchThemesThemePlugin.php:24
actioninstall_plugins_catchpluginsincludes\CatchThemesThemePlugin.php:25
actionplugins_loadedincludes\class-catch-under-construction.php:131
actionadmin_enqueue_scriptsincludes\class-catch-under-construction.php:146
actionadmin_enqueue_scriptsincludes\class-catch-under-construction.php:148
actionadmin_menuincludes\class-catch-under-construction.php:150
actionadmin_initincludes\class-catch-under-construction.php:152
filterplugin_action_linksincludes\class-catch-under-construction.php:154
filterplugin_row_metaincludes\class-catch-under-construction.php:156
actionwp_enqueue_scriptsincludes\class-catch-under-construction.php:171
actionwp_enqueue_scriptsincludes\class-catch-under-construction.php:173
actionadmin_initincludes\class-catch-under-construction.php:175
actionadmin_initincludes\class-catch-under-construction.php:177
actionadmin_bar_menuincludes\class-catch-under-construction.php:179
actionadmin_initincludes\ctp-tabs-removal.php:17
Maintenance & Trust

Catch Under Construction Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 25, 2026
PHP min version
Downloads5K

Community Trust

Rating0/100
Number of ratings0
Active installs100
Developer Profile

Catch Under Construction Developer Profile

Catch Plugins

9 plugins · 29K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
798 days
View full developer profile
Detection Fingerprints

How We Detect Catch Under Construction

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/catch-under-construction/public/css/construction-display.css/wp-content/plugins/catch-under-construction/public/js/countdown.js/wp-content/plugins/catch-under-construction/public/js/construction-display.js/wp-content/plugins/catch-under-construction/public/partials/images/background.jpg/wp-content/plugins/catch-under-construction/public/partials/images/logo.png
Script Paths
/wp-content/plugins/catch-under-construction/public/js/countdown.js/wp-content/plugins/catch-under-construction/public/js/construction-display.js
Version Parameters
catch-under-construction/public/css/construction-display.css?ver=catch-under-construction/public/js/countdown.js?ver=catch-under-construction/public/js/construction-display.js?ver=

HTML / DOM Fingerprints

CSS Classes
construction-display-wrapcuc-content-wrapcuc-logo-wrapcuc-titlecuc-descriptioncuc-countdown-wrapcuc-social-wrapcuc-contact-wrap
HTML Comments
<!-- Include the admin functionalities. --><!-- If this file is called directly, abort. --><!-- The plugin bootstrap file --><!-- If this file is called directly, abort. -->+7 more
Data Attributes
data-daysdata-hoursdata-minutesdata-seconds
JS Globals
cuc_countdown_timer_argscuc_countdown_timer
FAQ

Frequently Asked Questions about Catch Under Construction