Enhanced Search Form Security & Risk Analysis

wordpress.org/plugins/enhanced-search-form

Enhance wordpress search form to allow searching posts in certain category(s), month archive(s) or tag(s).

30 active installs v0.5 PHP + WP 2.8+ Updated Dec 3, 2014
enhanced-search-form-pluginformsearchsidebarwidget
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Enhanced Search Form Safe to Use in 2026?

Generally Safe

Score 85/100

Enhanced Search Form has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 11yr ago
Risk Assessment

The "enhanced-search-form" plugin version 0.5 presents a mixed security picture. On the positive side, it demonstrates strong practices in database interaction, with all SQL queries utilizing prepared statements, and no known past vulnerabilities or CVEs recorded, suggesting a generally stable and well-maintained codebase in those areas. There are also no external HTTP requests or file operations, which reduces the attack surface related to remote code execution or file manipulation.

Key Concerns

  • Output not properly escaped
  • No nonce checks
  • No capability checks
  • Unsanitized paths in taint flows
Vulnerabilities
None known

Enhanced Search Form Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Enhanced Search Form Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
1 prepared
Unescaped Output
1
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared1 total queries

Output Escaping

0% escaped1 total outputs
Data Flows
3 unsanitized

Data Flow Analysis

3 flows3 with unsanitized paths
esf_search_filter (enhanced-search-form.php:42)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Enhanced Search Form Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 4
actioninitenhanced-search-form.php:167
filterpre_get_postsenhanced-search-form.php:169
filterget_search_formenhanced-search-form.php:171
actionwp_enqueue_scriptsenhanced-search-form.php:173
Maintenance & Trust

Enhanced Search Form Maintenance & Trust

Maintenance Signals

WordPress version tested4.0.38
Last updatedDec 3, 2014
PHP min version
Downloads15K

Community Trust

Rating60/100
Number of ratings2
Active installs30
Developer Profile

Enhanced Search Form Developer Profile

Ono Oogami

1 plugin · 30 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Enhanced Search Form

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/enhanced-search-form/css/style.css/wp-content/plugins/enhanced-search-form/js/script.js
Script Paths
/wp-content/plugins/enhanced-search-form/js/script.js
Version Parameters
enhanced-search-form/css/style.css?ver=enhanced-search-form/js/script.js?ver=

HTML / DOM Fingerprints

CSS Classes
esf_wrapperesf_catesf_archesf_tagesf_advancedesf_search_options
Data Attributes
esf_advancedesf_search_options
FAQ

Frequently Asked Questions about Enhanced Search Form