WP-Safety

Category Posts in Custom Menu Security & Risk Analysis

wordpress.org/plugins/category-posts-in-custom-menu

Dynamic menus: List all posts from a category in your menu. Also works for tags, custom taxonomies as well as pages and custom post types.

2K active installs v3.0.5 PHP 7.4+ WP 5.4+ Updated Dec 3, 2025
automaticcategorydynamicmenusubmenu
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Category Posts in Custom Menu Safe to Use in 2026?

Generally Safe

Score 100/100

Category Posts in Custom Menu has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The "category-posts-in-custom-menu" plugin version 3.0.5 exhibits a seemingly strong security posture based on the provided static analysis. There are no identified AJAX handlers, REST API routes, shortcodes, or cron events, which significantly limits the potential attack surface. Furthermore, the absence of dangerous functions, file operations, and external HTTP requests is a positive indicator. The fact that all SQL queries utilize prepared statements is also commendable.

Key Concerns

  • Insufficient output escaping
  • Lack of nonce checks
  • Lack of capability checks
Vulnerabilities
None known

Category Posts in Custom Menu Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Category Posts in Custom Menu Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
12
3 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

20% escaped15 total outputs
Attack Surface

Category Posts in Custom Menu Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 16
filterwp_nav_menu_objectscategory-posts-in-custom-menu.php:50
actionadmin_enqueue_scriptscategory-posts-in-custom-menu.php:54
actionadmin_enqueue_scriptscategory-posts-in-custom-menu.php:55
actionwp_nav_menu_item_custom_fieldscategory-posts-in-custom-menu.php:56
actionwp_update_nav_menu_itemcategory-posts-in-custom-menu.php:57
actioncustomize_controls_enqueue_scriptscategory-posts-in-custom-menu.php:60
actioncustomize_controls_enqueue_scriptscategory-posts-in-custom-menu.php:61
actionwp_nav_menu_item_custom_fields_customize_templatecategory-posts-in-custom-menu.php:62
filterwp_setup_nav_menu_itemcategory-posts-in-custom-menu.php:63
actioncustomize_registercategory-posts-in-custom-menu.php:64
actioncustomize_save_aftercategory-posts-in-custom-menu.php:65
actionenqueue_block_editor_assetscategory-posts-in-custom-menu.php:68
actionblock_core_navigation_render_inner_blockscategory-posts-in-custom-menu.php:69
filterplugin_row_metacategory-posts-in-custom-menu.php:72
filterauto_update_plugincategory-posts-in-custom-menu.php:75
filterget_post_metadatacategory-posts-in-custom-menu.php:632
Maintenance & Trust

Category Posts in Custom Menu Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 3, 2025
PHP min version7.4
Downloads104K

Community Trust

Rating96/100
Number of ratings43
Active installs2K
Alternatives

Category Posts in Custom Menu Alternatives

JC Submenu

JC Submenu

jc-submenu

A
85

JC Submenu plugin allows you to automatically populate your navigation menus with custom post_types, taxonomies, or child pages.

4K No CVEs
Login or Logout Menu Item

Login or Logout Menu Item

login-or-logout-menu-item

A
100

Add a dynamic "Login" or "Logout" menu item to any WordPress Menu and control redirects.

20K 1 CVE
Advanced Sidebar Menu

Advanced Sidebar Menu

advanced-sidebar-menu

A
100

Fully automatic sidebar menus.

10K No CVEs
Iks Menu – WordPress Category Accordion Menu & FAQs

Iks Menu – WordPress Category Accordion Menu & FAQs

iks-menu

A
100

Super customizable WordPress plugin for displaying custom menus, taxonomy/category terms and FAQs as accordion menu (with images support).

10K No CVEs
User Admin Simplifier

User Admin Simplifier

user-admin-simplifier

A
85

Lets any Administrator simplify the WordPress Admin interface, on a per-user basis, by turning specific menu/submenu sections off.

10K No CVEs
Developer Profile

Category Posts in Custom Menu Developer Profile

Diana van de Laarschot

3 plugins · 4K total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Category Posts in Custom Menu

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/category-posts-in-custom-menu/css/cpcm-admin-menu.css/wp-content/plugins/category-posts-in-custom-menu/css/cpcm-customize.css/wp-content/plugins/category-posts-in-custom-menu/js/cpcm-admin-menu.js/wp-content/plugins/category-posts-in-custom-menu/js/cpcm-customize.js/wp-content/plugins/category-posts-in-custom-menu/js/cpcm-block-editor.js
Version Parameters
category-posts-in-custom-menu/css/cpcm-admin-menu.css?ver=category-posts-in-custom-menu/css/cpcm-customize.css?ver=category-posts-in-custom-menu/js/cpcm-admin-menu.js?ver=category-posts-in-custom-menu/js/cpcm-customize.js?ver=category-posts-in-custom-menu/js/cpcm-block-editor.js?ver=

HTML / DOM Fingerprints

CSS Classes
cpcm-customize-fields
HTML Comments
<!-- This is the template for the custom fields -->
Data Attributes
data-cpcm-unfolddata-cpcm-typedata-cpcm-iddata-cpcm-item-countdata-cpcm-orderby
JS Globals
cpcm_admin_menu_params
FAQ

Frequently Asked Questions about Category Posts in Custom Menu