Post Calendar by Gelform Security & Risk Analysis

wordpress.org/plugins/post-calendar-gelform

View your posts on a calendar and schedule posts with ease.

30 active installs v1765989260 PHP 7.2+ WP 5.2+ Updated Dec 17, 2025
calendareditorial-calendarpostsschedule-posts
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Post Calendar by Gelform Safe to Use in 2026?

Generally Safe

Score 100/100

Post Calendar by Gelform has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The "post-calendar-gelform" plugin v1765989260 demonstrates a strong security posture based on the provided static analysis. The plugin exhibits excellent practices by having zero AJAX handlers, REST API routes, shortcodes, or cron events, significantly minimizing its attack surface. Furthermore, the absence of dangerous functions, the exclusive use of prepared statements for SQL queries, and 100% proper output escaping are all positive indicators. The presence of nonce and capability checks, even with a small attack surface, suggests a thoughtful approach to access control.

Vulnerabilities
None known

Post Calendar by Gelform Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Post Calendar by Gelform Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
103 escaped
Nonce Checks
5
Capability Checks
5
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped103 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
<post-calendar-gelform> (post-calendar-gelform.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Post Calendar by Gelform Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 12
actionadmin_menupost-calendar-gelform.php:37
actionadmin_menupost-calendar-gelform.php:38
actionadmin_menupost-calendar-gelform.php:39
actionadmin_footerpost-calendar-gelform.php:40
actionadmin_enqueue_scriptspost-calendar-gelform.php:41
actionadmin_post_update_post_datepost-calendar-gelform.php:42
actionadmin_initpost-calendar-gelform.php:43
actionadmin_post_gelform_postcal_hide_heropost-calendar-gelform.php:45
actionadmin_post_gelform_postcal_show_heropost-calendar-gelform.php:46
actionadmin_post_gelform_postcal_hide_calendar_welcomepost-calendar-gelform.php:47
actionadmin_post_gelform_postcal_show_calendar_welcomepost-calendar-gelform.php:48
actioncurrent_screenpost-calendar-gelform.php:49
Maintenance & Trust

Post Calendar by Gelform Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 17, 2025
PHP min version7.2
Downloads558

Community Trust

Rating100/100
Number of ratings4
Active installs30
Developer Profile

Post Calendar by Gelform Developer Profile

gelform

1 plugin · 30 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Post Calendar by Gelform

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/post-calendar-gelform/css/style.css/wp-content/plugins/post-calendar-gelform/js/calendar.js/wp-content/plugins/post-calendar-gelform/js/admin-button.js
Script Paths
js/calendar.jsjs/admin-button.js
Version Parameters
post-calendar-gelform/css/style.css?ver=post-calendar-gelform/js/calendar.js?ver=post-calendar-gelform/js/admin-button.js?ver=

HTML / DOM Fingerprints

CSS Classes
gelform-post-calendar-wrapgelform-calendar-headergelform-calendar-bodygelform-calendar-daygelform-post-preview
HTML Comments
<!-- Gelform Post Calendar Options --><!-- Gelform Post Calendar Settings --><!-- Gelform Admin Button -->
Data Attributes
data-post-typedata-monthdata-yeardata-post-id
JS Globals
gelformPostCalSettingspostCalendarButtonData
FAQ

Frequently Asked Questions about Post Calendar by Gelform