Flush Opcache with Varnish Security & Risk Analysis

wordpress.org/plugins/flush-opcache-with-varnish

Flush Opcache with Varnish automatically flushes the PHP Opcache when one of the "Empty Cache" buttons that Mika Epstein's excellent Va …

10 active installs v1.1.2 PHP 5.5.0+ WP 3.0.1+ Updated Jan 14, 2018
cacheopcachevarnish
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Flush Opcache with Varnish Safe to Use in 2026?

Generally Safe

Score 85/100

Flush Opcache with Varnish has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago
Risk Assessment

The "flush-opcache-with-varnish" v1.1.2 plugin exhibits a strong security posture based on the provided static analysis. The complete absence of attack surface points such as AJAX handlers, REST API routes, shortcodes, and cron events significantly limits potential entry vectors for attackers. Furthermore, the code signals are overwhelmingly positive, with no dangerous functions, all SQL queries utilizing prepared statements, and all output properly escaped. The plugin also demonstrates good security practice with the presence of two nonce checks, which are crucial for preventing CSRF attacks. The lack of known CVEs and a clean vulnerability history further bolster its security reputation, indicating a well-maintained and secure codebase. The absence of taint analysis issues and file operations is also a positive sign. However, the complete absence of capability checks, while potentially acceptable for a plugin with no user-facing interaction, could be a minor concern if the plugin were to evolve to include any administrative functions. Overall, the plugin appears very secure with no apparent exploitable vulnerabilities based on this analysis.

Vulnerabilities
None known

Flush Opcache with Varnish Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Flush Opcache with Varnish Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
2
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Flush Opcache with Varnish Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
actionshutdownflush-opcache-with-varnish.php:115
actionadmin_initflush-opcache-with-varnish.php:118
Maintenance & Trust

Flush Opcache with Varnish Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29
Last updatedJan 14, 2018
PHP min version5.5.0
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Flush Opcache with Varnish Developer Profile

johnnyb

2 plugins · 20 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Flush Opcache with Varnish

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

HTML Comments
Copyright 2017: John Beales This file is part of Flush Opcache with Varnish, a plugin for WordPress. Flush Opcache with Varnish is free software: you can redistribute it and/or modify it under the terms of the Apache License 2.0 license.+40 more
FAQ

Frequently Asked Questions about Flush Opcache with Varnish