Linkify Posts Security & Risk Analysis

wordpress.org/plugins/linkify-posts

Turn a string, list, or array of post IDs and/or slugs into a list of links to those posts. Provides a widget and template tag.

10 active installs v2.6 PHP + WP 3.3+ Updated Apr 28, 2025
linklinkifypostpostswidget
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Linkify Posts Safe to Use in 2026?

Generally Safe

Score 92/100

Linkify Posts has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The plugin 'linkify-posts' v2.6 demonstrates a very strong security posture based on the provided static analysis and vulnerability history. There are no identified attack vectors through AJAX, REST API, shortcodes, or cron events. The code signals are also exceptionally positive, with no dangerous functions, all SQL queries using prepared statements, and all output properly escaped. The absence of file operations, external HTTP requests, and critical checks like nonce and capability checks further contribute to this robust security.

The taint analysis shows zero flows, indicating no vulnerabilities related to unsanitized input being used in sensitive operations. The vulnerability history is also clean, with no recorded CVEs of any severity. This lack of historical vulnerabilities suggests a development team that is either highly security-conscious or has historically not introduced exploitable flaws.

Overall, 'linkify-posts' v2.6 appears to be a very secure plugin. The comprehensive lack of identified issues across static analysis, taint analysis, and historical vulnerabilities points to a well-developed and secure piece of software. There are no discernible weaknesses based on the provided data, and thus no deductions are warranted.

Vulnerabilities
None known

Linkify Posts Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Linkify Posts Release Timeline

v2.6Current
v2.5
v2.4.1
v2.4
v2.3.6
v2.3.5
v2.3.4
v2.3.3
v2.3.2
v2.3.1
v2.3
v2.2.3
v2.2.2
v2.2.1
v2.2
v2.1.4
v2.1.3
v2.1.2
v2.1.1
v2.1
Code Analysis
Analyzed Mar 17, 2026

Linkify Posts Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
37 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped37 total outputs
Attack Surface

Linkify Posts Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
actionc2c_linkify_postslinkify-posts.php:115
actionwidgets_initlinkify-posts.widget.php:103
Maintenance & Trust

Linkify Posts Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedApr 28, 2025
PHP min version
Downloads5K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Linkify Posts Developer Profile

Scott Reilly

63 plugins · 92K total installs

71
trust score
Avg Security Score
88/100
Avg Patch Time
374 days
View full developer profile
Detection Fingerprints

How We Detect Linkify Posts

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/linkify-posts/linkify-posts.css/wp-content/plugins/linkify-posts/linkify-posts.js
Script Paths
/wp-content/plugins/linkify-posts/linkify-posts.js
Version Parameters
linkify-posts/linkify-posts.css?ver=linkify-posts/linkify-posts.js?ver=

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Linkify Posts