Easy PHP Settings Security & Risk Analysis

wordpress.org/plugins/easy-php-settings

An easy way to manage common PHP INI settings and WordPress debugging constants from the WordPress admin panel.

1K active installs v1.1.4 PHP 7.2+ WP 5.0+ Updated Mar 14, 2026
debuginiperformancephp-settingswp-config
97
A · Safe
CVEs total1
Unpatched0
Last CVEMar 6, 2026
Safety Verdict

Is Easy PHP Settings Safe to Use in 2026?

Generally Safe

Score 97/100

Easy PHP Settings has a strong security track record. Known vulnerabilities have been patched promptly.

1 known CVELast CVE: Mar 6, 2026Updated 20d ago
Risk Assessment

The static analysis of easy-php-settings v1.1.4 reveals a generally strong security posture. The plugin boasts a zero-count for direct attack surface entry points like AJAX handlers, REST API routes, shortcodes, and cron events, which is excellent. Furthermore, the code signals indicate a good adoption of secure coding practices, with a high percentage of SQL queries using prepared statements and output being properly escaped. The presence of nonce and capability checks further bolsters its defensive mechanisms. However, the analysis does flag one file operation and four external HTTP requests, which could potentially be points of concern if not handled with extreme care.

Key Concerns

  • One high severity vulnerability historically
  • One file operation detected
  • Four external HTTP requests detected
Vulnerabilities
1

Easy PHP Settings Security Vulnerabilities

CVEs by Year

1 CVE in 2026
2026
Patched Has unpatched

Severity Breakdown

High
1

1 total CVE

CVE-2026-3352high · 7.2Improper Control of Generation of Code ('Code Injection')

Easy PHP Settings <= 1.0.4 - Authenticated (Administrator+) PHP Code Injection via 'wp_memory_limit' Setting

Mar 6, 2026 Patched in 1.0.5 (1d)
Code Analysis
Analyzed Mar 16, 2026

Easy PHP Settings Code Analysis

Dangerous Functions
0
Raw SQL Queries
2
20 prepared
Unescaped Output
11
139 escaped
Nonce Checks
8
Capability Checks
11
File Operations
1
External Requests
4
Bundled Libraries
0

SQL Query Safety

91% prepared22 total queries

Output Escaping

93% escaped150 total outputs
Attack Surface

Easy PHP Settings Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 13
actioninitclass-easy-php-settings.php:117
actioninitclass-easy-php-settings.php:118
actioninitclass-easy-php-settings.php:119
actionadmin_enqueue_scriptsclass-easy-php-settings.php:123
actionadmin_initclass-easy-php-settings.php:126
actionadmin_enqueue_scriptsclass-easy-php-settings.php:127
actionupgrader_process_completeincludes\plugin-tracker-integration.php:239
actioninitincludes\plugin-tracker-integration.php:260
actionwp_dashboard_setupincludes\plugin-tracker-integration.php:299
actionadmin_noticesincludes\plugin-tracker-integration.php:343
actionadmin_initincludes\plugin-tracker-integration.php:376
actionadmin_initmodules\class-module-general-settings.php:26
actionadmin_initmodules\class-module-tools.php:24
Maintenance & Trust

Easy PHP Settings Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 14, 2026
PHP min version7.2
Downloads5K

Community Trust

Rating100/100
Number of ratings2
Active installs1K
Developer Profile

Easy PHP Settings Developer Profile

shahadul878

1 plugin · 1K total installs

98
trust score
Avg Security Score
97/100
Avg Patch Time
1 days
View full developer profile
Detection Fingerprints

How We Detect Easy PHP Settings

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/easy-php-settings/css/easy-php-settings.css/wp-content/plugins/easy-php-settings/js/easy-php-settings.js/wp-content/plugins/easy-php-settings/css/easy-php-settings-frontend.css/wp-content/plugins/easy-php-settings/js/easy-php-settings-frontend.js
Script Paths
/wp-content/plugins/easy-php-settings/js/easy-php-settings.js/wp-content/plugins/easy-php-settings/js/easy-php-settings-frontend.js
Version Parameters
easy-php-settings/css/easy-php-settings.css?ver=easy-php-settings/js/easy-php-settings.js?ver=easy-php-settings/css/easy-php-settings-frontend.css?ver=easy-php-settings/js/easy-php-settings-frontend.js?ver=

HTML / DOM Fingerprints

CSS Classes
easy-php-settings-pageeasy-php-settings-tabeasy-php-settings-tab-contenteps-setting-inputeps-labeleps-description
Data Attributes
data-eps-setting-key
JS Globals
easy_php_settings_ajax_object
REST Endpoints
/wp-json/easy-php-settings/v1/settings
FAQ

Frequently Asked Questions about Easy PHP Settings