Custom Meta Field Security & Risk Analysis

wordpress.org/plugins/custom-meta-field

Custom Meta Field

10 active installs v1.0.1 PHP 7.0+ WP 4.6+ Updated Feb 2, 2025
custom-fieldcustom-meta-fieldmeta-boxrepeater
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Custom Meta Field Safe to Use in 2026?

Generally Safe

Score 92/100

Custom Meta Field has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

Based on the provided static analysis and vulnerability history, the "custom-meta-field" plugin v1.0.1 exhibits a strong security posture. The absence of any identified dangerous functions, raw SQL queries, unescaped output, or file operations indicates a well-written and secure codebase. The plugin also demonstrates good practice by implementing nonce checks and capability checks where appropriate, and the taint analysis shows no unsanitized flows, further reinforcing its robustness. The plugin's history of zero known CVEs is a significant positive indicator, suggesting consistent security awareness and maintenance from its developers. While the attack surface is currently zero, indicating no readily exploitable entry points from the analyzed components, this also means the plugin has limited functionality exposed. Overall, this plugin appears to be very secure, with no immediate threats identified from the given data. Its strengths lie in its clean code, absence of vulnerabilities, and adherence to security best practices.

Vulnerabilities
None known

Custom Meta Field Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Custom Meta Field Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
22 escaped
Nonce Checks
2
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped22 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
custom_mf_callback (includes\admin\class-custom-mf-settings.php:74)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Custom Meta Field Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 6
actionadmin_enqueue_scriptscustom-meta-field.php:100
actionplugins_loadedcustom-meta-field.php:134
actionadmin_menuincludes\admin\class-custom-mf-settings.php:57
actionadd_meta_boxesincludes\admin\class-custom-mf.php:22
actionsave_postincludes\admin\class-custom-mf.php:23
actionplugins_loadedincludes\class-custom-mf-run.php:153
Maintenance & Trust

Custom Meta Field Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedFeb 2, 2025
PHP min version7.0
Downloads560

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Custom Meta Field Developer Profile

Megha Shah

2 plugins · 50 total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Custom Meta Field

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/custom-meta-field/css/custom-mf-admin.css/wp-content/plugins/custom-meta-field/js/solid.js/wp-content/plugins/custom-meta-field/js/fontawesome.js/wp-content/plugins/custom-meta-field/js/custom-mf-admin.js
Script Paths
/wp-content/plugins/custom-meta-field/js/solid.js/wp-content/plugins/custom-meta-field/js/fontawesome.js/wp-content/plugins/custom-meta-field/js/custom-mf-admin.js
Version Parameters
custom-meta-field/css/custom-mf-admin.css?ver=custom-meta-field/js/custom-mf-admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
updated-settings
Data Attributes
bis_skin_checked
JS Globals
custom_mf_ajax_nonce
FAQ

Frequently Asked Questions about Custom Meta Field