Post Call to Action Security & Risk Analysis

wordpress.org/plugins/post-call-to-action

Increase online conversions with a "Call to Action" bar at the bottom of your blog posts. Customize the button text and colors.

10 active installs v1.0.1 PHP + WP 4.6+ Updated Unknown
admincall-to-actionnavigationpage-linkseo
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Post Call to Action Safe to Use in 2026?

Generally Safe

Score 100/100

Post Call to Action has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

The "post-call-to-action" plugin v1.0.1 exhibits a generally strong security posture based on the provided static analysis. The plugin demonstrates adherence to good practices by not utilizing dangerous functions, performing all SQL queries using prepared statements, and conducting file operations. The absence of external HTTP requests and the presence of nonce and capability checks are also positive indicators. However, a significant concern arises from the low percentage of properly escaped output, with only 42% being secure. This leaves a substantial portion of the plugin's output potentially vulnerable to Cross-Site Scripting (XSS) attacks if user-supplied data is not adequately sanitized before being displayed.

Key Concerns

  • Low percentage of output escaping
Vulnerabilities
None known

Post Call to Action Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Post Call to Action Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
22
16 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

42% escaped38 total outputs
Attack Surface

Post Call to Action Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 7
filterthe_contentincludes\display.php:39
actionwp_enqueue_scriptsincludes\display.php:166
actionadd_meta_boxesincludes\metabox.php:30
actionsave_postincludes\metabox.php:81
actionadmin_initincludes\settings.php:33
actionadmin_menuincludes\settings.php:51
actionadmin_enqueue_scriptsincludes\settings.php:165
Maintenance & Trust

Post Call to Action Maintenance & Trust

Maintenance Signals

WordPress version tested5.0.25
Last updatedUnknown
PHP min version
Downloads3K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Post Call to Action Developer Profile

srumery

2 plugins · 10K total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
27 days
View full developer profile
Detection Fingerprints

How We Detect Post Call to Action

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/post-call-to-action/css/rum-post-cta.css
Version Parameters
rum-post-cta.css?ver=1.0.1

HTML / DOM Fingerprints

CSS Classes
rum-post-cta-imagerum-post-cta-metarum-post-cta-textrum-post-cta-buttoncta-btnrum-post-cta-clearfix
Data Attributes
id="rum-post-cta-box"class="cta-btn"class="rum-post-cta-img"
FAQ

Frequently Asked Questions about Post Call to Action