List YARPP Block Security & Risk Analysis

wordpress.org/plugins/list-yarpp-block

Adds a block that lists yarpp related posts.

10 active installs v2.6 PHP + WP 5.9+ Updated Nov 28, 2025
blockfull-site-editinggutenbergrelated-postsyarpp
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is List YARPP Block Safe to Use in 2026?

Generally Safe

Score 100/100

List YARPP Block has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The static analysis of the "list-yarpp-block" plugin v2.6 reveals an exceptionally clean codebase with no identified entry points that are exposed without authentication or permission checks. The absence of dangerous functions, raw SQL queries, file operations, and external HTTP requests further strengthens its security posture. All output is properly escaped, and there are no indications of taint flows with unsanitized paths, suggesting robust input validation and sanitization practices within the analyzed code.

The vulnerability history is also entirely clear, with no recorded CVEs of any severity. This indicates a strong track record of security within the plugin, suggesting that its development team prioritizes security or that the plugin's functionality inherently limits potential attack vectors. The plugin exhibits excellent security practices, with no apparent weaknesses in the analyzed code or its past security record.

In conclusion, the "list-yarpp-block" plugin v2.6 demonstrates a very strong security posture. The static analysis shows a lack of common vulnerabilities and exposed attack surfaces, and the vulnerability history is spotless. This combination points to a highly secure plugin. Any further analysis would require a deeper dive into the plugin's runtime behavior and user interaction flows, but based on the provided static data, the plugin appears to be very safe to use.

Vulnerabilities
None known

List YARPP Block Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

List YARPP Block Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
4 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped4 total outputs
Attack Surface

List YARPP Block Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
actioninityarpp_block.php:29
Maintenance & Trust

List YARPP Block Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedNov 28, 2025
PHP min version
Downloads4K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

List YARPP Block Developer Profile

Marc Tönsing

14 plugins · 11K total installs

97
trust score
Avg Security Score
95/100
Avg Patch Time
1 days
View full developer profile
Detection Fingerprints

How We Detect List YARPP Block

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/list-yarpp-block/build/index.js/wp-content/plugins/list-yarpp-block/build/index.css
Script Paths
/wp-content/plugins/list-yarpp-block/build/index.js
Version Parameters
list-yarpp-block/build/index.js?ver=list-yarpp-block/build/index.css?ver=

HTML / DOM Fingerprints

CSS Classes
wp-block-list-yarpp-blocknotice
Data Attributes
data-block="list-yarpp-block/list-yarpp-block"
Shortcode Output
<ul class=" wp-block-latest-posts__list is-grid columns-3 wp-block-latest-posts"><div class="wp-block-latest-posts__featured-image">
FAQ

Frequently Asked Questions about List YARPP Block