Custom Search URL Security & Risk Analysis

wordpress.org/plugins/custom-search-url-nice-search-extension

Plugin lets you replace default search page syntax "?s" in wordpress search page with the word you choose.

10 active installs v1 PHP + WP 3.3+ Updated Oct 14, 2012
s-replacecanonicalcustom-searchredirectsearch-url
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Custom Search URL Safe to Use in 2026?

Generally Safe

Score 85/100

Custom Search URL has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 13yr ago
Risk Assessment

The static analysis of the 'custom-search-url-nice-search-extension' plugin version 1 reveals a remarkably clean code base with no identified vulnerabilities. The plugin exhibits strong security practices by avoiding dangerous functions, utilizing prepared statements for all SQL queries, and ensuring all output is properly escaped. Furthermore, there are no file operations or external HTTP requests, and the absence of any identified taint flows indicates that user-supplied data is not being mishandled. The lack of any historical vulnerabilities, including critical or high severity ones, further reinforces this positive security posture. The plugin's attack surface is also minimal, with no unprotected entry points through AJAX handlers, REST API routes, shortcodes, or cron events. While the lack of explicit capability and nonce checks on the identified entry points is a minor point of consideration, it is mitigated by the fact that there are zero such entry points in the first place. Overall, this plugin appears to be very securely developed, with no immediate security concerns based on the provided analysis.

Vulnerabilities
None known

Custom Search URL Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Custom Search URL Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Custom Search URL Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
actioninitcustomsearchurl.php:14
Maintenance & Trust

Custom Search URL Maintenance & Trust

Maintenance Signals

WordPress version tested3.4.2
Last updatedOct 14, 2012
PHP min version
Downloads5K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Custom Search URL Developer Profile

mccomf

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Custom Search URL

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Custom Search URL