Okto Shareable Draft Previews Security & Risk Analysis

wordpress.org/plugins/okto-shareable-draft-previews

Share draft posts privately with secure, time-limited links — no login required.

40 active installs v1.0.1 PHP 7.4+ WP 6.2+ Updated Apr 17, 2026
draft-previewoktopreview-linkshare-draftshareable-draft
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Okto Shareable Draft Previews Safe to Use in 2026?

Generally Safe

Score 100/100

Okto Shareable Draft Previews has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The 'okto-shareable-draft-previews' plugin v1.0.0 demonstrates a strong security posture based on the provided static analysis. All identified entry points, including AJAX handlers and REST API routes, have proper authentication and permission checks, which is a significant strength. Furthermore, the code adheres to secure coding practices by exclusively using prepared statements for SQL queries and properly escaping all output, leaving no apparent room for SQL injection or cross-site scripting vulnerabilities through these vectors. The absence of file operations and external HTTP requests also reduces the attack surface. The plugin's vulnerability history is clean, with no recorded CVEs, indicating a well-maintained and secure codebase to date.

Vulnerabilities
None known

Okto Shareable Draft Previews Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Okto Shareable Draft Previews Release Timeline

v1.0.1Current
v1.0.0
Code Analysis
Analyzed Apr 16, 2026

Okto Shareable Draft Previews Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
18 prepared
Unescaped Output
0
202 escaped
Nonce Checks
5
Capability Checks
8
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared18 total queries

Output Escaping

100% escaped202 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

7 flows
ajax_update_link_expiry (includes/class-osdp-expiry-admin.php:436)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Okto Shareable Draft Previews Attack Surface

Entry Points6
Unprotected0

AJAX Handlers 5

authwp_ajax_osdp_update_link_expiryincludes/class-osdp-expiry-admin.php:14
authwp_ajax_osdp_quick_edit_saveincludes/class-osdp-expiry-admin.php:15
authwp_ajax_osdp_create_linkincludes/class-osdp-metabox.php:10
authwp_ajax_osdp_revoke_linkincludes/class-osdp-metabox.php:11
authwp_ajax_osdp_update_expiryincludes/class-osdp-metabox.php:12

REST API Routes 1

POST/wp-json/osdp/v1/linksincludes/class-osdp-rest-api.php:12
WordPress Hooks 16
actionadmin_noticesincludes/class-osdp-compatibility.php:8
actionadmin_menuincludes/class-osdp-expiry-admin.php:11
actionadmin_initincludes/class-osdp-expiry-admin.php:12
actionadmin_enqueue_scriptsincludes/class-osdp-expiry-admin.php:13
actionadd_meta_boxesincludes/class-osdp-metabox.php:8
actionadmin_enqueue_scriptsincludes/class-osdp-metabox.php:9
filterquery_varsincludes/class-osdp-preview-handler.php:11
actiontemplate_redirectincludes/class-osdp-preview-handler.php:14
actionwp_headincludes/class-osdp-preview-handler.php:96
actionwp_enqueue_scriptsincludes/class-osdp-preview-handler.php:102
actionrest_api_initincludes/class-osdp-rest-api.php:8
actionadmin_menuincludes/class-osdp-settings.php:8
actionadmin_initincludes/class-osdp-settings.php:9
actionwp_headincludes/class-osdp-utils.php:36
actionadmin_initokto-shareable-draft-previews.php:36
actioninitokto-shareable-draft-previews.php:43
Maintenance & Trust

Okto Shareable Draft Previews Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.5
Last updatedApr 17, 2026
PHP min version7.4
Downloads482

Community Trust

Rating100/100
Number of ratings1
Active installs40
Developer Profile

Okto Shareable Draft Previews Developer Profile

oktohut

1 plugin · 40 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Okto Shareable Draft Previews

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/okto-shareable-draft-previews/assets/js/osdp-expiry-admin.js
Script Paths
/wp-content/plugins/okto-shareable-draft-previews/assets/js/osdp-expiry-admin.js
Version Parameters
okto-shareable-draft-previews/assets/js/osdp-expiry-admin.js?ver=okto-shareable-draft-previews.php?ver=

HTML / DOM Fingerprints

CSS Classes
osdp-expiry-admin-containerstatus-activestatus-revokedstatus-expired
JS Globals
osdp_expiry_ajax
REST Endpoints
/wp-json/osdp/v1/generate-preview-link/wp-json/osdp/v1/revoke-preview-link/wp-json/osdp/v1/regenerate-preview-link
FAQ

Frequently Asked Questions about Okto Shareable Draft Previews