Extra Classes Security & Risk Analysis

wordpress.org/plugins/extra-classes

Adds classes for selected menu states such as highlighting categories when viewing a blog post or parent page when viewing an attachment page.

30 active installs v0.3.1 PHP + WP 3.7+ Updated Apr 23, 2015
classclassescssmenustyles
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Extra Classes Safe to Use in 2026?

Generally Safe

Score 85/100

Extra Classes has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 11yr ago
Risk Assessment

The "extra-classes" plugin version 0.3.1 exhibits a remarkably clean static analysis report. There are no identified AJAX handlers, REST API routes, shortcodes, or cron events, resulting in a zero-total attack surface. Furthermore, the code demonstrates excellent security practices with zero dangerous functions, 100% prepared SQL statements, and 100% properly escaped output. File operations, external HTTP requests, and the use of nonces or capability checks are also absent, contributing to a low-risk profile in this regard. The taint analysis further reinforces this positive assessment, showing no identified flows with unsanitized paths across any severity levels. The vulnerability history is equally clean, with no known CVEs recorded for this plugin, indicating a historical lack of security flaws. This plugin appears to be exceptionally well-developed from a security perspective based on the provided data.

Vulnerabilities
None known

Extra Classes Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Extra Classes Release Timeline

v0.3.1Current
v0.3
v0.2
v0.1
Code Analysis
Analyzed Apr 16, 2026

Extra Classes Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Extra Classes Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 5
actionplugins_loadedextra-classes.php:34
filterwp_nav_menu_objectsextra-classes.php:51
filterbody_classmodules/body.php:8
actionwpmodules/menu-selector.php:23
filterwp_nav_menu_objectsmodules/menu-selector.php:24
Maintenance & Trust

Extra Classes Maintenance & Trust

Maintenance Signals

WordPress version tested4.2.39
Last updatedApr 23, 2015
PHP min version
Downloads3K

Community Trust

Rating100/100
Number of ratings3
Active installs30
Developer Profile

Extra Classes Developer Profile

Ben Huson

18 plugins · 21K total installs

90
trust score
Avg Security Score
85/100
Avg Patch Time
2 days
View full developer profile
Detection Fingerprints

How We Detect Extra Classes

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/extra-classes/modules/body.php/wp-content/plugins/extra-classes/modules/menu-selector.php

HTML / DOM Fingerprints

CSS Classes
current-page-ancestorcurrent_page_ancestorcurrent-page-parentcurrent_page_parentcurrent-menu-ancestorcurrent-menu-parentmagic
Data Attributes
data-menu-item-parent
FAQ

Frequently Asked Questions about Extra Classes