MAS Static Content Security & Risk Analysis

wordpress.org/plugins/mas-static-content

MAS Static Content is a free plugin that allows you to to create a custom post type static content and use it with shortcode.

10K active installs v1.1.2 PHP 7.4+ WP 6.7+ Updated Nov 3, 2025
cptmegamenustatic-content
99
A · Safe
CVEs total1
Unpatched0
Last CVESep 24, 2024
Safety Verdict

Is MAS Static Content Safe to Use in 2026?

Generally Safe

Score 99/100

MAS Static Content has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.

1 known CVELast CVE: Sep 24, 2024Updated 6mo ago
Risk Assessment

The "mas-static-content" plugin v1.1.2 presents a generally positive security posture based on the static analysis. Its attack surface is notably clean, with no AJAX handlers, REST API routes, shortcodes, or cron events exposed. The code also demonstrates good practices in handling SQL queries exclusively through prepared statements and shows a reasonable level of output escaping. The presence of a capability check, albeit only one, is a positive indicator of some access control being implemented.

Key Concerns

  • Unescaped output detected
  • No nonce checks detected
  • Known medium severity CVE exists
Vulnerabilities
1 published

MAS Static Content Security Vulnerabilities

CVEs by Year

1 CVE in 2024
2024
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2024-8483medium · 4.3Exposure of Sensitive Information to an Unauthorized Actor

MAS Static Content <= 1.0.8 - Authenticated (Contributor+) Private Static Content Page Disclosure

Sep 24, 2024 Patched in 1.0.9 (1d)
Version History

MAS Static Content Release Timeline

v1.1.2Current
v1.1.1
v1.1.0
v1.0.9
v1.0.81 CVE
v1.0.71 CVE
v1.0.61 CVE
v1.0.51 CVE
v1.0.41 CVE
v1.0.31 CVE
v1.0.21 CVE
v1.0.11 CVE
v1.0.01 CVE
Code Analysis
Analyzed Mar 16, 2026

MAS Static Content Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
2 escaped
Nonce Checks
0
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

67% escaped3 total outputs
Attack Surface

MAS Static Content Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 11
actioninitincludes\class-mas-static-content-post-types.php:22
filtermanage_mas_static_content_posts_columnsincludes\class-mas-static-content-post-types.php:23
actionmanage_mas_static_content_posts_custom_columnincludes\class-mas-static-content-post-types.php:24
filterrest_api_allowed_post_typesincludes\class-mas-static-content-post-types.php:25
actionmas_static_content_after_register_post_typeincludes\class-mas-static-content-post-types.php:26
actionmas_static_content_flush_rewrite_rulesincludes\class-mas-static-content-post-types.php:27
filtergutenberg_can_edit_post_typeincludes\class-mas-static-content-post-types.php:28
actioninitincludes\class-mas-static-content.php:99
actioninitincludes\class-mas-static-content.php:100
actioninitmas-static-content.php:36
actionenqueue_block_editor_assetsmas-static-content.php:74
Maintenance & Trust

MAS Static Content Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedNov 3, 2025
PHP min version7.4
Downloads381K

Community Trust

Rating100/100
Number of ratings1
Active installs10K
Developer Profile

MAS Static Content Developer Profile

MadrasThemes

7 plugins · 25K total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
14 days
View full developer profile
Detection Fingerprints

How We Detect MAS Static Content

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/mas-static-content/build/index.js
Script Paths
/wp-content/plugins/mas-static-content/build/index.js
Version Parameters
mas-static-content/build/index.js?ver=

HTML / DOM Fingerprints

CSS Classes
mas-static-content
JS Globals
mas_static_content
REST Endpoints
/wp-json/mas-static-content/v1/static-content
Shortcode Output
<input class="mas-static-content-shortcode-input" style="width:80%;" type="text" readonly="" onfocus="this.select()" onClick="this.select()" value="[mas_static_content id=&quot;
FAQ

Frequently Asked Questions about MAS Static Content