Custom Translation Files Security & Risk Analysis

wordpress.org/plugins/custom-translation-files

Allows you to set custom translation files for a particular text domain.

0 active installs v1.0.0 PHP 5.2.4+ WP 3.4+ Updated Oct 31, 2018
localizationmotext-domaintranslatetranslation
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Custom Translation Files Safe to Use in 2026?

Generally Safe

Score 85/100

Custom Translation Files has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7yr ago
Risk Assessment

The "custom-translation-files" plugin v1.0.0 exhibits a mixed security posture. On the positive side, the plugin demonstrates good practices by utilizing prepared statements for all its SQL queries and incorporating capability checks in multiple instances. The absence of known CVEs and any recorded vulnerability history is also a strong indicator of its current stability and developer diligence.

However, there are notable areas for concern. The static analysis reveals a significant finding in the taint analysis: 5 out of 6 analyzed flows involve unsanitized paths. While no critical or high severity issues were flagged in this analysis, this pattern strongly suggests a potential for path traversal vulnerabilities if these unsanitized paths are not handled with extreme care when interacting with the file system. Furthermore, the output escaping is only properly implemented for 52% of outputs, which could lead to cross-site scripting (XSS) vulnerabilities if user-supplied data is not adequately sanitized before being displayed.

In conclusion, while the plugin benefits from a clean vulnerability history and good SQL hygiene, the presence of unsanitized paths in taint flows and inconsistent output escaping represent the most significant risks. Addressing these specific code-level concerns is crucial for improving the plugin's overall security.

Key Concerns

  • Unsanitized paths in taint flows
  • Low percentage of properly escaped output
Vulnerabilities
None known

Custom Translation Files Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Custom Translation Files Release Timeline

v1.0.0Current
Code Analysis
Analyzed Apr 16, 2026

Custom Translation Files Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
5 prepared
Unescaped Output
49
53 escaped
Nonce Checks
2
Capability Checks
9
File Operations
12
External Requests
4
Bundled Libraries
0

SQL Query Safety

100% prepared5 total queries

Output Escaping

52% escaped102 total outputs
Data Flows · Security
5 unsanitized

Data Flow Analysis

6 flows5 with unsanitized paths
_getWPRemotePostStatus (include/library/apf/factory/_common/form/field_type/AdminPageFramework_FieldType_system.php:138)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Custom Translation Files Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 82
actionadmin_noticescustom-translation-files.php:262
actioncurrent_screeninclude/library/apf/factory/_common/_abstract/AdminPageFramework_Factory.php:32
actionadmin_headinclude/library/apf/factory/_common/_abstract/_controller/AdminPageFramework_HelpPane_Base.php:12
actionin_admin_footerinclude/library/apf/factory/_common/_abstract/_controller/AdminPageFramework_Link_Base.php:16
filteradmin_footer_textinclude/library/apf/factory/_common/_abstract/_controller/AdminPageFramework_Link_Base.php:65
filterupdate_footerinclude/library/apf/factory/_common/_abstract/_controller/AdminPageFramework_Link_Base.php:66
actionadmin_enqueue_scriptsinclude/library/apf/factory/_common/_abstract/_controller/AdminPageFramework_Resource_Base.php:20
actionadmin_enqueue_scriptsinclude/library/apf/factory/_common/_abstract/_controller/AdminPageFramework_Resource_Base.php:21
actioncustomize_controls_print_footer_scriptsinclude/library/apf/factory/_common/_abstract/_controller/AdminPageFramework_Resource_Base.php:24
actioncustomize_controls_print_footer_scriptsinclude/library/apf/factory/_common/_abstract/_controller/AdminPageFramework_Resource_Base.php:25
actionadmin_footerinclude/library/apf/factory/_common/_abstract/_controller/AdminPageFramework_Resource_Base.php:26
actionadmin_footerinclude/library/apf/factory/_common/_abstract/_controller/AdminPageFramework_Resource_Base.php:27
actionadmin_print_footer_scriptsinclude/library/apf/factory/_common/_abstract/_controller/AdminPageFramework_Resource_Base.php:28
actionadmin_print_footer_scriptsinclude/library/apf/factory/_common/_abstract/_controller/AdminPageFramework_Resource_Base.php:29
filterscript_loader_srcinclude/library/apf/factory/_common/_abstract/_controller/AdminPageFramework_Resource_Base.php:30
filterstyle_loader_srcinclude/library/apf/factory/_common/_abstract/_controller/AdminPageFramework_Resource_Base.php:31
filterclean_urlinclude/library/apf/factory/_common/_abstract/_controller/AdminPageFramework_Resource_Base.php:43
actionwp_enqueue_scriptsinclude/library/apf/factory/_common/_abstract/_view/AdminPageFramework_Factory___Script_Base.php:18
actionin_admin_footerinclude/library/apf/factory/_common/_abstract/_view/AdminPageFramework_PageLoadInfo_Base.php:18
actionshutdowninclude/library/apf/factory/_common/form/_model/AdminPageFramework_Form_Model___LastInput.php:24
actionshutdowninclude/library/apf/factory/_common/form/_model/AdminPageFramework_Form_Model___LastInput.php:49
actionwp_enqueue_scriptsinclude/library/apf/factory/_common/form/_view/resource/AdminPageFramework_Form_View__Resource.php:24
actionwp_enqueue_scriptsinclude/library/apf/factory/_common/form/_view/resource/AdminPageFramework_Form_View__Resource.php:25
actionwp_footerinclude/library/apf/factory/_common/form/_view/resource/AdminPageFramework_Form_View__Resource.php:27
actionwp_footerinclude/library/apf/factory/_common/form/_view/resource/AdminPageFramework_Form_View__Resource.php:28
actionwp_print_footer_scriptsinclude/library/apf/factory/_common/form/_view/resource/AdminPageFramework_Form_View__Resource.php:29
actionwp_print_footer_scriptsinclude/library/apf/factory/_common/form/_view/resource/AdminPageFramework_Form_View__Resource.php:30
actionadmin_enqueue_scriptsinclude/library/apf/factory/_common/form/_view/resource/AdminPageFramework_Form_View__Resource.php:34
actionadmin_enqueue_scriptsinclude/library/apf/factory/_common/form/_view/resource/AdminPageFramework_Form_View__Resource.php:35
actioncustomize_controls_print_footer_scriptsinclude/library/apf/factory/_common/form/_view/resource/AdminPageFramework_Form_View__Resource.php:37
actioncustomize_controls_print_footer_scriptsinclude/library/apf/factory/_common/form/_view/resource/AdminPageFramework_Form_View__Resource.php:38
actionadmin_footerinclude/library/apf/factory/_common/form/_view/resource/AdminPageFramework_Form_View__Resource.php:39
actionadmin_footerinclude/library/apf/factory/_common/form/_view/resource/AdminPageFramework_Form_View__Resource.php:40
actionadmin_print_footer_scriptsinclude/library/apf/factory/_common/form/_view/resource/AdminPageFramework_Form_View__Resource.php:41
actionadmin_print_footer_scriptsinclude/library/apf/factory/_common/form/_view/resource/AdminPageFramework_Form_View__Resource.php:42
actionshutdowninclude/library/apf/factory/_common/form/error/AdminPageFramework_Form___FieldError.php:27
actionshutdowninclude/library/apf/factory/_common/form/error/AdminPageFramework_Form___FieldError.php:46
filtermedia_upload_tabsinclude/library/apf/factory/_common/form/field_type/AdminPageFramework_FieldType_color.php:84
filtergettextinclude/library/apf/factory/_common/form/field_type/AdminPageFramework_FieldType_color.php:94
actionshutdowninclude/library/apf/factory/_common/form/notice/AdminPageFramework_Form___SubmitNotice.php:30
actionwp_loadedinclude/library/apf/factory/admin_page/AdminPageFramework.php:18
actionadmin_headinclude/library/apf/factory/admin_page/_controller/AdminPageFramework_HelpPane_admin_page.php:14
filterplugin_row_metainclude/library/apf/factory/admin_page/_controller/AdminPageFramework_Link_admin_page.php:21
filterwp_mail_content_typeinclude/library/apf/factory/admin_page/_model/AdminPageFramework_FormEmail.php:23
filterwp_mail_frominclude/library/apf/factory/admin_page/_model/AdminPageFramework_FormEmail.php:26
filterwp_mail_from_nameinclude/library/apf/factory/admin_page/_model/AdminPageFramework_FormEmail.php:29
actioncurrent_screeninclude/library/apf/factory/admin_page/_model/delegate/AdminPageFramework_Model_Menu__RegisterMenu.php:96
filterupdate_footerinclude/library/apf/factory/admin_page/_view/AdminPageFramework_PageLoadInfo_admin_page.php:20
actionadmin_headinclude/library/apf/factory/admin_page/_view/AdminPageFramework_View__PageMetaboxEnabler.php:11
filterwp_insert_attachment_datainclude/library/apf/factory/meta_box/AdminPageFramework_MetaBox.php:46
filterwp_insert_post_datainclude/library/apf/factory/meta_box/AdminPageFramework_MetaBox.php:48
filterredirect_post_locationinclude/library/apf/factory/meta_box/AdminPageFramework_MetaBox.php:85
actionin_admin_footerinclude/library/apf/factory/network_admin_page/_view/AdminPageFramework_PageLoadInfo_network_admin_page.php:12
filterupdate_footerinclude/library/apf/factory/network_admin_page/_view/AdminPageFramework_PageLoadInfo_network_admin_page.php:29
actionadmin_enqueue_scriptsinclude/library/apf/factory/post_type/AdminPageFramework_PostType.php:69
actionadmin_menuinclude/library/apf/factory/post_type/AdminPageFramework_PostType.php:124
actionthe_contentinclude/library/apf/factory/post_type/AdminPageFramework_PostType.php:126
actionrestrict_manage_postsinclude/library/apf/factory/post_type/AdminPageFramework_PostType.php:129
actionrestrict_manage_postsinclude/library/apf/factory/post_type/AdminPageFramework_PostType.php:130
filterparse_queryinclude/library/apf/factory/post_type/AdminPageFramework_PostType.php:131
filterpost_row_actionsinclude/library/apf/factory/post_type/AdminPageFramework_PostType.php:132
actionadmin_headinclude/library/apf/factory/post_type/AdminPageFramework_PostType.php:133
actioninitinclude/library/apf/factory/post_type/AdminPageFramework_PostType.php:292
actionget_edit_post_linkinclude/library/apf/factory/post_type/_controller/AdminPageFramework_Link_post_type.php:11
actionregistered_post_typeinclude/library/apf/factory/post_type/_model/AdminPageFramework_PostType_Model__FlushRewriteRules.php:15
actionshutdowninclude/library/apf/factory/post_type/_model/AdminPageFramework_PostType_Model__FlushRewriteRules.php:34
actionadmin_menuinclude/library/apf/factory/post_type/_model/AdminPageFramework_PostType_Model__SubMenuOrder.php:14
actionadmin_menuinclude/library/apf/factory/post_type/_model/AdminPageFramework_PostType_Model__SubMenuOrder.php:15
filterupdate_footerinclude/library/apf/factory/post_type/_view/AdminPageFramework_PageLoadInfo_post_type.php:21
actionshow_user_profileinclude/library/apf/factory/user_meta/AdminPageFramework_UserMeta.php:23
actionedit_user_profileinclude/library/apf/factory/user_meta/AdminPageFramework_UserMeta.php:24
actionuser_new_forminclude/library/apf/factory/user_meta/AdminPageFramework_UserMeta.php:25
actionpersonal_options_updateinclude/library/apf/factory/user_meta/AdminPageFramework_UserMeta.php:26
actionedit_user_profile_updateinclude/library/apf/factory/user_meta/AdminPageFramework_UserMeta.php:27
actionuser_registerinclude/library/apf/factory/user_meta/AdminPageFramework_UserMeta.php:28
actioninitinclude/library/apf/utility/plugin_bootstrap/AdminPageFramework_PluginBootstrap.php:34
actionadmin_enqueue_scriptsinclude/library/apf/utility/pointer_tool_tip/AdminPageFramework_PointerToolTip.php:32
actionadmin_print_footer_scriptsinclude/library/apf/utility/pointer_tool_tip/AdminPageFramework_PointerToolTip.php:99
actionadmin_noticesinclude/library/apf/utility/requirement/AdminPageFramework_Requirement.php:74
actionadmin_noticesinclude/library/apf/utility/requirement/AdminPageFramework_Requirement.php:92
filterload_textdomain_mofileinclude/main/CustomTranslationFiles_Setter.php:27
filterupload_mimesinclude/main/admin/CustomTranslationFiles_AdminPage___CustomUploadFileTypes.php:21
Maintenance & Trust

Custom Translation Files Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29
Last updatedOct 31, 2018
PHP min version5.2.4
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Custom Translation Files Developer Profile

miunosoft

17 plugins · 2K total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Custom Translation Files

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/custom-translation-files/css//wp-content/plugins/custom-translation-files/js/
Script Paths
/wp-content/plugins/custom-translation-files/js/custom-translation-files.js
Version Parameters
custom-translation-files/css/custom-translation-files.css?ver=custom-translation-files/js/custom-translation-files.js?ver=

HTML / DOM Fingerprints

JS Globals
CustomTranslationFiles_Registry
FAQ

Frequently Asked Questions about Custom Translation Files