MPress Security & Risk Analysis

wordpress.org/plugins/mpress

MPress, convert your WordPress website to Mobile Application.

0 active installs v1.0.0 PHP 7.0+ WP 4.5+ Updated Jun 27, 2018
mobile-appsmpresswordpress-to-mobile
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is MPress Safe to Use in 2026?

Generally Safe

Score 85/100

MPress has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7yr ago
Risk Assessment

The "mpress" v1.0.0 plugin exhibits a strong security posture based on the provided static analysis and vulnerability history. The complete absence of identified CVEs and the plugin's version history suggest a well-maintained and secure codebase. The static analysis reveals no critical vulnerabilities such as dangerous functions, raw SQL queries, or unprotected entry points like AJAX handlers, REST API routes, or shortcodes. Furthermore, the taint analysis shows no critical or high-severity unsanitized flows, indicating robust input validation and sanitization practices. The use of prepared statements for SQL queries and the presence of capability checks are positive security indicators.

Key Concerns

  • Bundled outdated library (Guzzle v1.1)
  • Only 67% of output properly escaped
  • No nonce checks on potential entry points
Vulnerabilities
None known

MPress Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

MPress Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
11
22 escaped
Nonce Checks
0
Capability Checks
1
File Operations
0
External Requests
1
Bundled Libraries
1

Bundled Libraries

Guzzle1.1

Output Escaping

67% escaped33 total outputs
Attack Surface

MPress Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 9
actionpost_submitbox_misc_actionsadmin\class-mpress-admin-metabox.php:80
actionsave_postadmin\class-mpress-admin-metabox.php:81
actionupdate_postadmin\class-mpress-admin-metabox.php:82
actionadmin_menuadmin\class-mpress-admin.php:77
actionadmin_initadmin\class-mpress-admin.php:78
actionplugins_loadedincludes\class-mpress.php:155
actionadmin_enqueue_scriptsincludes\class-mpress.php:171
actionadmin_enqueue_scriptsincludes\class-mpress.php:172
actionrest_api_initrest-api\class-mpress-rest-api.php:81
Maintenance & Trust

MPress Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29
Last updatedJun 27, 2018
PHP min version7.0
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

MPress Developer Profile

Debabrata Karfa

1 plugin · 0 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect MPress

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/mpress/admin/css/mpress-admin.css
Script Paths
/wp-content/plugins/mpress/admin/js/mpress-admin.js
Version Parameters
mpress-admin.css?ver=mpress-admin.js?ver=

HTML / DOM Fingerprints

REST Endpoints
/mpress/v1
FAQ

Frequently Asked Questions about MPress