Markdown Comment Block Security & Risk Analysis

wordpress.org/plugins/markdown-comment-block

Add markdown inspired comments to posts that render only within the block editor.

300 active installs v1.0.0 PHP 7.0+ WP 5.7+ Updated Jul 14, 2024
blockblockscommentsgutenbergmarkdown
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Markdown Comment Block Safe to Use in 2026?

Generally Safe

Score 92/100

Markdown Comment Block has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

Based on the static analysis and vulnerability history, the 'markdown-comment-block' plugin v1.0.0 exhibits a very strong security posture. The code analysis reveals no dangerous functions, file operations, or external HTTP requests. Importantly, all SQL queries, though few, are properly prepared, and all outputs are correctly escaped. The absence of any identified taint flows, particularly those with unsanitized paths or critical/high severity, further bolsters this positive assessment. The plugin also demonstrates a minimal attack surface, with zero identified entry points like AJAX handlers, REST API routes, or shortcodes. Furthermore, its vulnerability history is clean, with no recorded CVEs, suggesting a history of secure development and maintenance. The lack of any nonces or capability checks on entry points is notable given there are no entry points. This indicates a highly secure plugin with no apparent weaknesses based on the provided data.

Vulnerabilities
None known

Markdown Comment Block Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Markdown Comment Block Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Markdown Comment Block Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
actioninitmarkdown-comment-block.php:30
Maintenance & Trust

Markdown Comment Block Maintenance & Trust

Maintenance Signals

WordPress version tested6.6.5
Last updatedJul 14, 2024
PHP min version7.0
Downloads9K

Community Trust

Rating100/100
Number of ratings1
Active installs300
Developer Profile

Markdown Comment Block Developer Profile

Rich Tabor

5 plugins · 1K total installs

88
trust score
Avg Security Score
91/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Markdown Comment Block

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/markdown-comment-block/build/index.js/wp-content/plugins/markdown-comment-block/build/style-index.css
Script Paths
/wp-content/plugins/markdown-comment-block/build/index.js
Version Parameters
markdown-comment-block/build/index.js?ver=markdown-comment-block/build/style-index.css?ver=

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Markdown Comment Block