MAS Static Content Security & Risk Analysis

wordpress.org/plugins/mas-static-content

MAS Static Content is a free plugin that allows you to to create a custom post type static content and use it with shortcode.

10K active installs v1.1.2 PHP 7.4+ WP 6.7+ Updated Nov 3, 2025
cptmegamenustatic-content
99
A · Safe
CVEs total1
Unpatched0
Last CVESep 24, 2024
Safety Verdict

Is MAS Static Content Safe to Use in 2026?

Generally Safe

Score 99/100

MAS Static Content has a strong security track record. Known vulnerabilities have been patched promptly.

1 known CVELast CVE: Sep 24, 2024Updated 5mo ago
Risk Assessment

The "mas-static-content" plugin v1.1.2 presents a generally positive security posture based on the static analysis. Its attack surface is notably clean, with no AJAX handlers, REST API routes, shortcodes, or cron events exposed. The code also demonstrates good practices in handling SQL queries exclusively through prepared statements and shows a reasonable level of output escaping. The presence of a capability check, albeit only one, is a positive indicator of some access control being implemented.

Key Concerns

  • Unescaped output detected
  • No nonce checks detected
  • Known medium severity CVE exists
Vulnerabilities
1

MAS Static Content Security Vulnerabilities

CVEs by Year

1 CVE in 2024
2024
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2024-8483medium · 4.3Exposure of Sensitive Information to an Unauthorized Actor

MAS Static Content <= 1.0.8 - Authenticated (Contributor+) Private Static Content Page Disclosure

Sep 24, 2024 Patched in 1.0.9 (1d)
Code Analysis
Analyzed Mar 16, 2026

MAS Static Content Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
2 escaped
Nonce Checks
0
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

67% escaped3 total outputs
Attack Surface

MAS Static Content Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 11
actioninitincludes\class-mas-static-content-post-types.php:22
filtermanage_mas_static_content_posts_columnsincludes\class-mas-static-content-post-types.php:23
actionmanage_mas_static_content_posts_custom_columnincludes\class-mas-static-content-post-types.php:24
filterrest_api_allowed_post_typesincludes\class-mas-static-content-post-types.php:25
actionmas_static_content_after_register_post_typeincludes\class-mas-static-content-post-types.php:26
actionmas_static_content_flush_rewrite_rulesincludes\class-mas-static-content-post-types.php:27
filtergutenberg_can_edit_post_typeincludes\class-mas-static-content-post-types.php:28
actioninitincludes\class-mas-static-content.php:99
actioninitincludes\class-mas-static-content.php:100
actioninitmas-static-content.php:36
actionenqueue_block_editor_assetsmas-static-content.php:74
Maintenance & Trust

MAS Static Content Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedNov 3, 2025
PHP min version7.4
Downloads378K

Community Trust

Rating100/100
Number of ratings1
Active installs10K
Developer Profile

MAS Static Content Developer Profile

MadrasThemes

7 plugins · 25K total installs

95
trust score
Avg Security Score
93/100
Avg Patch Time
2 days
View full developer profile
Detection Fingerprints

How We Detect MAS Static Content

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/mas-static-content/build/index.js
Script Paths
/wp-content/plugins/mas-static-content/build/index.js
Version Parameters
mas-static-content/build/index.js?ver=

HTML / DOM Fingerprints

CSS Classes
mas-static-content
JS Globals
mas_static_content
REST Endpoints
/wp-json/mas-static-content/v1/static-content
Shortcode Output
<input class="mas-static-content-shortcode-input" style="width:80%;" type="text" readonly="" onfocus="this.select()" onClick="this.select()" value="[mas_static_content id=&quot;
FAQ

Frequently Asked Questions about MAS Static Content