JSM Show Comment Metadata Security & Risk Analysis

wordpress.org/plugins/jsm-show-comment-meta

Show comment metadata in a metabox when editing comments - a great tool for debugging issues with comment metadata.

40 active installs v4.8.0 PHP 7.4.33+ WP 6.0+ Updated Mar 11, 2026
commentscustom-fieldsdebuginspectormetadata
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is JSM Show Comment Metadata Safe to Use in 2026?

Generally Safe

Score 100/100

JSM Show Comment Metadata has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 23d ago
Risk Assessment

The jsm-show-comment-meta plugin v4.8.0 exhibits a strong security posture based on the provided static analysis. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events with unprotected entry points is a significant positive. Furthermore, the code signals indicate good development practices, with no dangerous functions, 100% use of prepared statements for SQL queries, and complete output escaping. There are also no file operations or external HTTP requests, further reducing the attack surface. The lack of any recorded vulnerabilities in its history further reinforces this positive assessment.

Vulnerabilities
None known

JSM Show Comment Metadata Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

JSM Show Comment Metadata Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

JSM Show Comment Metadata Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
actioninitjsm-show-comment-meta.php:50
actioninitjsm-show-comment-meta.php:51
Maintenance & Trust

JSM Show Comment Metadata Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 11, 2026
PHP min version7.4.33
Downloads8K

Community Trust

Rating100/100
Number of ratings1
Active installs40
Developer Profile

JSM Show Comment Metadata Developer Profile

JS Morisset

31 plugins · 33K total installs

93
trust score
Avg Security Score
99/100
Avg Patch Time
12 days
View full developer profile
Detection Fingerprints

How We Detect JSM Show Comment Metadata

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/jsm-show-comment-meta/css/scm-admin.css/wp-content/plugins/jsm-show-comment-meta/js/scm-admin.js
Script Paths
/wp-content/plugins/jsm-show-comment-meta/js/scm-admin.js
Version Parameters
jsm-show-comment-meta/css/scm-admin.css?ver=jsm-show-comment-meta/js/scm-admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
jsm-scm-comment-data
HTML Comments
<!-- JSM Show Comment Metadata v4.8.0 --><!-- JSM SCM --><!-- JSM SCM Comment Metadata (jsm-scm-comment-data) -->
Data Attributes
data-jsm-scm-post-iddata-jsm-scm-comment-id
JS Globals
jsm_scm_data
FAQ

Frequently Asked Questions about JSM Show Comment Metadata