Ninja Forms Merge Tag Addon Security & Risk Analysis

wordpress.org/plugins/nf-merge-tag-addon

Add new merge tags for WordPress Ninja Forms. More Tags are coming soon!

40 active installs v2.8 PHP 7.0+ WP 4.9+ Updated Jan 26, 2022
addonmerge-tagninja-formsninjaformswordpress-content
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Ninja Forms Merge Tag Addon Safe to Use in 2026?

Generally Safe

Score 85/100

Ninja Forms Merge Tag Addon has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4yr ago
Risk Assessment

The nf-merge-tag-addon v2.8 plugin exhibits a strong security posture based on the provided static analysis and vulnerability history. The plugin has zero known CVEs and demonstrates good coding practices, including 100% of SQL queries using prepared statements and a high percentage (89%) of output properly escaped. The absence of file operations, external HTTP requests, and a clean taint analysis further bolster its security. The presence of nonces and capability checks indicates an effort to protect its entry points, although the static analysis reports zero entry points, which could imply these checks are present but not actively triggered by the analyzed code paths. There are no reported vulnerabilities in its history, suggesting a consistent focus on security by the developers.

Vulnerabilities
None known

Ninja Forms Merge Tag Addon Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Ninja Forms Merge Tag Addon Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
10
81 escaped
Nonce Checks
5
Capability Checks
13
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

89% escaped91 total outputs
Attack Surface

Ninja Forms Merge Tag Addon Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 34
actionplugins_loadedinc\i18n\nf-translation.php:8
actioninitinc\merges\contents\class.nfmergecontent.php:18
actionadmin_initinc\merges\contents\class.nfmergecontent.php:19
actionadmin_noticesinc\merges\contents\merge-content-loader.php:7
actionadmin_noticesinc\merges\contents\merge-content-loader.php:11
actionadmin_initinc\merges\contents\merge-content-loader.php:14
actionninja_forms_loadedinc\merges\contents\merge-content-loader.php:23
actioninitinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:268
filterload_textdomain_mofileinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:269
actioninitinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:272
actionadmin_menuinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:421
actionadmin_headinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:422
filterinstall_plugin_complete_actionsinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:425
filterupdate_plugin_complete_actionsinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:426
actionadmin_noticesinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:429
actionadmin_initinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:430
actionadmin_enqueue_scriptsinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:431
actionload-plugins.phpinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:436
actionswitch_themeinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:439
actionswitch_themeinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:442
actionadmin_initinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:447
actionswitch_themeinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:452
actionload_textdomain_mofileinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:475
filterupgrader_source_selectioninc\plugin-check\plugin-install\class-tgm-plugin-activation.php:889
actionplugins_loadedinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:2112
filtertgmpa_table_data_itemsinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:2236
filterupgrader_source_selectioninc\plugin-check\plugin-install\class-tgm-plugin-activation.php:2977
actionadmin_initinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:3147
actionupgrader_process_completeinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:3242
filterupgrader_post_installinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:3301
filterupgrader_post_installinc\plugin-check\plugin-install\class-tgm-plugin-activation.php:3446
actiontgmpa_registerinc\plugin-check\plugin-install\nfmta-required.php:49
actionadmin_noticesinc\plugin-check\pluginchecker.php:8
actionadmin_initinc\plugin-check\pluginchecker.php:11
Maintenance & Trust

Ninja Forms Merge Tag Addon Maintenance & Trust

Maintenance Signals

WordPress version tested5.9.13
Last updatedJan 26, 2022
PHP min version7.0
Downloads6K

Community Trust

Rating100/100
Number of ratings1
Active installs40
Developer Profile

Ninja Forms Merge Tag Addon Developer Profile

Benjamin Zekavica

3 plugins · 41K total installs

73
trust score
Avg Security Score
91/100
Avg Patch Time
201 days
View full developer profile
Detection Fingerprints

How We Detect Ninja Forms Merge Tag Addon

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/nf-merge-tag-addon/inc/plugin-check/plugin-install/nfmta-required.php/wp-content/plugins/nf-merge-tag-addon/inc/plugin-check/pluginchecker-messages.php/wp-content/plugins/nf-merge-tag-addon/inc/plugin-check/pluginchecker.php/wp-content/plugins/nf-merge-tag-addon/inc/merges/contents/merge-content-loader.php

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Ninja Forms Merge Tag Addon