LH Allow Shortcodes Security & Risk Analysis

wordpress.org/plugins/lh-allow-shortcodes

Enable dynamic links within existing Gutenberg blocks

0 active installs v1.00 PHP + WP 5.0+ Updated Jul 31, 2022
blocksdynamicgutenberghtmlshortcode
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is LH Allow Shortcodes Safe to Use in 2026?

Generally Safe

Score 85/100

LH Allow Shortcodes has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3yr ago
Risk Assessment

The "lh-allow-shortcodes" plugin v1.00 exhibits a very strong security posture based on the provided static analysis and vulnerability history. The code analysis shows zero attack surface points, no dangerous functions, and all SQL queries (though none were found) would have been prepared. Furthermore, all outputs are properly escaped, and there are no file operations or external HTTP requests. The absence of taint analysis findings, critical or otherwise, is also a significant positive indicator. This suggests a plugin that has been developed with security best practices in mind, prioritizing input validation and output sanitization. The lack of any recorded vulnerabilities, past or present, further reinforces this assessment. While the plugin's functionality itself might be limited (indicated by the zero attack surface), the developer's apparent diligence in securing the code is commendable. There are no immediate security concerns raised by the provided data.

Vulnerabilities
None known

LH Allow Shortcodes Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

LH Allow Shortcodes Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

LH Allow Shortcodes Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 3
filterthe_contentlh-allow-shortcodes.php:70
actionwp_body_openlh-allow-shortcodes.php:77
actionplugins_loadedlh-allow-shortcodes.php:103
Maintenance & Trust

LH Allow Shortcodes Maintenance & Trust

Maintenance Signals

WordPress version tested6.0.11
Last updatedJul 31, 2022
PHP min version
Downloads969

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

LH Allow Shortcodes Developer Profile

shawfactor

77 plugins · 15K total installs

91
trust score
Avg Security Score
87/100
Avg Patch Time
7 days
View full developer profile
Detection Fingerprints

How We Detect LH Allow Shortcodes

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

Shortcode Output
do_shortcode($href)
FAQ

Frequently Asked Questions about LH Allow Shortcodes