Dynamic Custom Header Replacement Security & Risk Analysis

wordpress.org/plugins/dynamic-custom-header-replacement

Allows the custom header image to be replaced by the featured image of the current post or page.

10 active installs v1.2 PHP + WP 4.6+ Updated Jun 26, 2017
custom-headerfeatured-imageheader-imagetwenty-seventeen
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Dynamic Custom Header Replacement Safe to Use in 2026?

Generally Safe

Score 85/100

Dynamic Custom Header Replacement has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago
Risk Assessment

Based on the provided static analysis and vulnerability history, the "dynamic-custom-header-replacement" plugin v1.2 exhibits a strong security posture. The static analysis reveals an absence of identified attack surface points, dangerous functions, raw SQL queries, file operations, external HTTP requests, and crucial security checks like nonce and capability checks. This indicates a well-developed plugin that adheres to secure coding practices, prioritizing the sanitization and validation of any potential inputs or operations. The taint analysis also shows no identified vulnerabilities, further bolstering this assessment.

The vulnerability history further reinforces the plugin's security. With zero known CVEs and no recorded past vulnerabilities, the plugin has a clean track record. This suggests diligent maintenance and a proactive approach to security by the developers. The lack of common vulnerability types also indicates a focus on preventing known attack vectors. Overall, the plugin appears to be a robust and secure option, with no immediate security concerns identified in the provided data.

Vulnerabilities
None known

Dynamic Custom Header Replacement Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Dynamic Custom Header Replacement Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Dynamic Custom Header Replacement Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
filterget_header_image_tagdynamic-custom-header-replacement.php:20
Maintenance & Trust

Dynamic Custom Header Replacement Maintenance & Trust

Maintenance Signals

WordPress version tested4.8.28
Last updatedJun 26, 2017
PHP min version
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Dynamic Custom Header Replacement Developer Profile

enteractie

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Dynamic Custom Header Replacement

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Dynamic Custom Header Replacement