Custom Help Security & Risk Analysis

wordpress.org/plugins/custom-help

Plugin to add custom documentation to all admin pages.

10 active installs v1.0.1 PHP 5.5+ WP 3.0.1+ Updated Jul 27, 2022
documentationhelpmanagementsupport
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Custom Help Safe to Use in 2026?

Generally Safe

Score 85/100

Custom Help has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3yr ago
Risk Assessment

The "custom-help" plugin version 1.0.1 exhibits an excellent security posture based on the provided static analysis. The complete absence of dangerous functions, the use of prepared statements for all SQL queries, and 100% proper output escaping are significant strengths. Furthermore, the lack of file operations, external HTTP requests, and the controlled attack surface with no entry points (AJAX, REST API, shortcodes, cron) without authorization checks are highly commendable practices. Taint analysis showing zero unsanitized flows further reinforces its robust security.

Key Concerns

  • No nonce checks implemented
  • No capability checks implemented
Vulnerabilities
None known

Custom Help Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Custom Help Release Timeline

No version history available.
Code Analysis
Analyzed Apr 16, 2026

Custom Help Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
3 prepared
Unescaped Output
0
51 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared3 total queries

Output Escaping

100% escaped51 total outputs
Attack Surface

Custom Help Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 4
actionplugins_loadedincludes/class-custom-help.php:31
actionadmin_enqueue_scriptsincludes/class-custom-help.php:38
actionadmin_enqueue_scriptsincludes/class-custom-help.php:39
filtercontextual_helpincludes/class-custom-help.php:40
Maintenance & Trust

Custom Help Maintenance & Trust

Maintenance Signals

WordPress version tested6.0.11
Last updatedJul 27, 2022
PHP min version5.5
Downloads926

Community Trust

Rating100/100
Number of ratings4
Active installs10
Developer Profile

Custom Help Developer Profile

codents

2 plugins · 1K total installs

74
trust score
Avg Security Score
93/100
Avg Patch Time
200 days
View full developer profile
Detection Fingerprints

How We Detect Custom Help

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/custom-help/assets/scripts/custom-help-admin.min.js/wp-content/plugins/custom-help/assets/css/custom-help-admin.min.css
Script Paths
/wp-content/plugins/custom-help/assets/scripts/custom-help-admin.min.js
Version Parameters
custom-help-admin.min.css?ver=custom-help-admin.min.js?ver=

HTML / DOM Fingerprints

CSS Classes
custom-help-content-wrappercustom-help-edit-button
HTML Comments
<!-- help_tab_content.php -->
Data Attributes
data-custom-help-pagedata-custom-help-post-type
JS Globals
window.customhelp
REST Endpoints
/wp-json/wp/v2/users
FAQ

Frequently Asked Questions about Custom Help