LH RSS Shortcode Security & Risk Analysis

wordpress.org/plugins/lh-rss-shortcode

A simple plugin to display RSS feeds in posts and pages using a shortcode.

40 active installs v1.00 PHP + WP 4.0+ Updated May 14, 2019
atomfeedfetch_rssrssshortcode
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is LH RSS Shortcode Safe to Use in 2026?

Generally Safe

Score 85/100

LH RSS Shortcode has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 6yr ago
Risk Assessment

The "lh-rss-shortcode" v1.00 plugin exhibits an excellent security posture based on the provided static analysis. The absence of any detected dangerous functions, SQL queries without prepared statements, or unescaped output are strong indicators of good coding practices. Furthermore, the lack of file operations, external HTTP requests, and the complete absence of any vulnerability history suggest a mature and well-maintained codebase. The plugin's attack surface is effectively zero, with no entry points identified that are unprotected. There are no recorded CVEs, further reinforcing its secure reputation.

Vulnerabilities
None known

LH RSS Shortcode Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

LH RSS Shortcode Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
10 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped10 total outputs
Attack Surface

LH RSS Shortcode Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
actioninitlh-rss-shortcode.php:93
Maintenance & Trust

LH RSS Shortcode Maintenance & Trust

Maintenance Signals

WordPress version tested5.2.24
Last updatedMay 14, 2019
PHP min version
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs40
Developer Profile

LH RSS Shortcode Developer Profile

shawfactor

77 plugins · 15K total installs

91
trust score
Avg Security Score
87/100
Avg Patch Time
7 days
View full developer profile
Detection Fingerprints

How We Detect LH RSS Shortcode

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

Shortcode Output
<div class="lh-rss-shortcode-container">
FAQ

Frequently Asked Questions about LH RSS Shortcode