autometa's FORMA Security & Risk Analysis

wordpress.org/plugins/forma

It generates comment forms in posts simply via: [forma].

0 active installs v2.2 PHP + WP 3.0.0+ Updated Jan 18, 2018
automationcommentcomment-formformshortcode
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is autometa's FORMA Safe to Use in 2026?

Generally Safe

Score 85/100

autometa's FORMA has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago
Risk Assessment

The static analysis of the "forma" plugin v2.2 reveals a generally strong security posture, with no immediately apparent vulnerabilities in the analyzed code. The absence of dangerous functions, raw SQL queries, file operations, and external HTTP requests are all positive indicators. Furthermore, the 100% output escaping and use of prepared statements for SQL queries demonstrate good coding practices that mitigate common web application risks. The plugin also shows no recorded history of vulnerabilities, which suggests a commitment to security or a lack of prior exploitation.

Vulnerabilities
None known

autometa's FORMA Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

autometa's FORMA Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

autometa's FORMA Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[forma] forma.php:34
Maintenance & Trust

autometa's FORMA Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29
Last updatedJan 18, 2018
PHP min version
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

autometa's FORMA Developer Profile

JorgeAmVF

7 plugins · 90 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect autometa's FORMA

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

CSS Classes
autometa
Data Attributes
id="forma"
Shortcode Output
<span id="forma" class="autometa">
FAQ

Frequently Asked Questions about autometa's FORMA