Diasposter Security & Risk Analysis

wordpress.org/plugins/diasposter

Diasposter cross-posts your WordPress entries to Diaspora. Changes to your WordPress posts are reflected in your Diaspora posts.

10 active installs v0.1.9 PHP + WP 3.5+ Updated May 25, 2015
crosspostdiasporapostpost-formatspublishing
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Diasposter Safe to Use in 2026?

Generally Safe

Score 85/100

Diasposter has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10yr ago
Risk Assessment

The "diasposter" plugin v0.1.9 presents a seemingly strong security posture based on the provided static analysis. A significant strength is the complete absence of identified vulnerabilities in its history, suggesting a mature or low-risk development process. Furthermore, the code analysis indicates a diligent approach to security, with all SQL queries utilizing prepared statements, a high percentage of output being properly escaped, and the presence of nonce and capability checks. The attack surface is also remarkably small, with no identified AJAX handlers, REST API routes, shortcodes, or cron events exposed without proper authorization.

Key Concerns

  • High percentage of unescaped output is a concern
  • Lack of taint analysis is a limitation
Vulnerabilities
None known

Diasposter Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Diasposter Release Timeline

v0.1.9Current
Code Analysis
Analyzed Apr 16, 2026

Diasposter Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
10 prepared
Unescaped Output
21
231 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared10 total queries

Output Escaping

92% escaped252 total outputs
Attack Surface

Diasposter Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 16
actionplugins_loadeddiasposter.php:18
actioninitdiasposter.php:19
actionadmin_initdiasposter.php:20
actionadmin_menudiasposter.php:21
actionadmin_enqueue_scriptsdiasposter.php:22
actionadmin_headdiasposter.php:23
actionadmin_noticesdiasposter.php:24
actionadd_meta_boxesdiasposter.php:25
actionsave_postdiasposter.php:26
actionbefore_delete_postdiasposter.php:27
actiondelete_commentdiasposter.php:28
filterpost_row_actionsdiasposter.php:35
filterplugin_row_metadiasposter.php:36
filterget_avatardiasposter.php:37
filtersyn_add_linksdiasposter.php:38
actionadmin_noticesdiasposter.php:44
Maintenance & Trust

Diasposter Maintenance & Trust

Maintenance Signals

WordPress version tested4.2.39
Last updatedMay 25, 2015
PHP min version
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Diasposter Developer Profile

Meitar

15 plugins · 2K total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Diasposter

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/diasposter/css/diasposter.css/wp-content/plugins/diasposter/js/diasposter.js
Script Paths
/wp-content/plugins/diasposter/js/diasposter.js
Version Parameters
diasposter/css/diasposter.css?ver=diasposter/js/diasposter.js?ver=

HTML / DOM Fingerprints

CSS Classes
diasposter-meta-boxdiasposter-settings
Data Attributes
data-diasposter-user-accountsdata-diasposter-passwords
JS Globals
Diasposter
FAQ

Frequently Asked Questions about Diasposter