Simplest comment spam catcher Security & Risk Analysis

wordpress.org/plugins/mhm-catch-comment-spam

Add a hidden “honeypot” field to comment forms, to help combat comment spam.

10 active installs v1.0.5 PHP + WP 4.0+ Updated Dec 2, 2025
comment-spamcomment_form_after_fieldsformpreprocess_commentspam
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Simplest comment spam catcher Safe to Use in 2026?

Generally Safe

Score 100/100

Simplest comment spam catcher has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 5mo ago
Risk Assessment

The mhm-catch-comment-spam plugin v1.0.5 exhibits an excellent security posture based on the provided static analysis. The absence of any identified dangerous functions, SQL queries executed without prepared statements, unsanitized output, file operations, external HTTP requests, or nonce/capability checks in the analyzed code signals a rigorous adherence to secure coding practices. Furthermore, the taint analysis revealing zero unsanitized flows indicates a strong defensive mechanism against common injection vulnerabilities. The plugin's vulnerability history is also clean, with no recorded CVEs, further reinforcing its current security trustworthiness.

Vulnerabilities
None known

Simplest comment spam catcher Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Simplest comment spam catcher Release Timeline

v1.0.5Current
v1.0.4
v1.0.3.1
v1.0.3
v1.0.2.1
v1.0.2
v1.0.1
v1.0
Code Analysis
Analyzed Apr 16, 2026

Simplest comment spam catcher Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Simplest comment spam catcher Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
filterpreprocess_commentindex.php:16
actioncomment_form_after_fieldsindex.php:17
Maintenance & Trust

Simplest comment spam catcher Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.0
Last updatedDec 2, 2025
PHP min version
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Simplest comment spam catcher Developer Profile

Mark Howells-Mead

10 plugins · 2K total installs

91
trust score
Avg Security Score
96/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Simplest comment spam catcher

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/mhm-catch-comment-spam/mhm-catch-comment-spam.php
Version Parameters
mhm-catch-comment-spam/mhm-catch-comment-spam.php?ver=

HTML / DOM Fingerprints

Shortcode Output
<input type="hidden" name="mhmcatchcommentspam" />
FAQ

Frequently Asked Questions about Simplest comment spam catcher