Genesis Simple Comments Security & Risk Analysis

wordpress.org/plugins/genesis-simple-comments

Genesis Menu options with custom menu, categories, pages, and primary/secondary nav extras.

200 active installs v1.0.1 PHP + WP 3.0+ Updated Jan 23, 2012
commentsgenesisgenesiswpstudiopress
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Genesis Simple Comments Safe to Use in 2026?

Generally Safe

Score 85/100

Genesis Simple Comments has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 14yr ago
Risk Assessment

The genesis-simple-comments plugin, version 1.0.1, exhibits a generally strong security posture in several key areas. The static analysis reveals no identified dangerous functions, no SQL queries that are not prepared, and no file operations or external HTTP requests. The complete absence of a discernible attack surface (AJAX handlers, REST API routes, shortcodes, cron events) is a significant positive, indicating minimal points of entry for potential exploitation. The lack of any recorded vulnerabilities or CVEs in its history further reinforces this perception of a stable and secure plugin.

Key Concerns

  • Low percentage of properly escaped output
  • No nonce checks implemented
  • No capability checks implemented
Vulnerabilities
None known

Genesis Simple Comments Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Genesis Simple Comments Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
79
11 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

12% escaped90 total outputs
Attack Surface

Genesis Simple Comments Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 17
filterntg_settings_builderadmin.php:8
actionadmin_menuclasses\admin-builder.php:47
actiongenesis_settings_sanitizer_initclasses\admin-builder.php:127
actionadmin_headclasses\admin-builder.php:415
actionadmin_enqueue_scriptsclasses\admin-builder.php:416
actionadmin_headclasses\admin-builder.php:446
filtergenesis_title_commentsoutput.php:6
filtergenesis_no_comments_textoutput.php:17
filtergenesis_comments_closed_textoutput.php:25
filtergenesis_title_pingsoutput.php:33
filtergenesis_no_pings_textoutput.php:44
filtergenesis_comment_list_argsoutput.php:52
filtercomment_author_says_textoutput.php:63
filtergenesis_comment_awaiting_moderationoutput.php:71
filtergenesis_comment_form_argsoutput.php:79
actionadmin_initplugin.php:25
actiongenesis_initplugin.php:141
Maintenance & Trust

Genesis Simple Comments Maintenance & Trust

Maintenance Signals

WordPress version tested3.3.2
Last updatedJan 23, 2012
PHP min version
Downloads12K

Community Trust

Rating100/100
Number of ratings1
Active installs200
Developer Profile

Genesis Simple Comments Developer Profile

Nick the Geek

6 plugins · 3K total installs

86
trust score
Avg Security Score
88/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Genesis Simple Comments

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/genesis-simple-comments/css/genesis-simple-comments.css/wp-content/plugins/genesis-simple-comments/js/genesis-simple-comments.js
Script Paths
/wp-content/plugins/genesis-simple-comments/js/genesis-simple-comments.js
Version Parameters
genesis-simple-comments/css/genesis-simple-comments.css?ver=genesis-simple-comments/js/genesis-simple-comments.js?ver=

HTML / DOM Fingerprints

CSS Classes
genesis-simple-comments
JS Globals
gsc
FAQ

Frequently Asked Questions about Genesis Simple Comments