Plugin Name: Multi Editor Posts Control Security & Risk Analysis

wordpress.org/plugins/multi-editor-posts-control

This plugin allow in a multi auhtor blog, to lock posts by editor permission level.

10 active installs v1.5 PHP + WP 2.7.0+ Updated Dec 21, 2010
authoreditorlockmodifiedpost
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Plugin Name: Multi Editor Posts Control Safe to Use in 2026?

Generally Safe

Score 85/100

Plugin Name: Multi Editor Posts Control has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 15yr ago
Risk Assessment

Based on the provided static analysis and vulnerability history, the 'multi-editor-posts-control' plugin version 1.5 exhibits an exceptionally strong security posture. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events, coupled with zero critical, high, medium, or low severity vulnerabilities in its history, suggests a very well-hardened plugin. The code analysis further reinforces this, showing no dangerous functions, all SQL queries utilizing prepared statements, and 100% proper output escaping. The lack of file operations, external HTTP requests, nonce checks, capability checks, and bundled libraries further minimizes the potential attack surface and risk of introducing vulnerabilities through third-party code.

The most notable strength is the plugin's complete lack of observable attack vectors and the thorough application of security best practices within its code. The absence of any known vulnerabilities or even past issues is a significant positive indicator. However, it is crucial to acknowledge that a static analysis provides a snapshot and cannot guarantee absolute security. The zero count for nonce checks and capability checks, while not indicating a present vulnerability in this specific version due to the lack of entry points, does mean that if any new entry points were to be added in future versions without careful consideration, there would be no built-in checks for authentication or authorization.

Vulnerabilities
None known

Plugin Name: Multi Editor Posts Control Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Plugin Name: Multi Editor Posts Control Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Plugin Name: Multi Editor Posts Control Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
filteruser_has_capMultiEditorPostsControl.php:106
Maintenance & Trust

Plugin Name: Multi Editor Posts Control Maintenance & Trust

Maintenance Signals

WordPress version tested3.0.5
Last updatedDec 21, 2010
PHP min version
Downloads3K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Plugin Name: Multi Editor Posts Control Developer Profile

giangel84

5 plugins · 1K total installs

90
trust score
Avg Security Score
94/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Plugin Name: Multi Editor Posts Control

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Plugin Name: Multi Editor Posts Control