Post Filter allows you to replace all bad words with good ones in all post types with simple settings and easy to use interface.

10 active installs v1.1.0 PHP + WP 1.0.0+ Updated Oct 26, 2019
bad-word-filtercensorcontent-censorshipcontent-filterprofanity-filter
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Post Filter Safe to Use in 2026?

Generally Safe

Score 85/100

Post Filter has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 6yr ago
Risk Assessment

The plugin "post-filter-filter-any-contents-with-specific-words" v1.1.0 exhibits a strong security posture based on the provided static analysis and vulnerability history. There are no identified vulnerabilities in its history, and the code analysis reveals no dangerous functions, SQL injection risks through prepared statements, or insecure file operations. Furthermore, the plugin demonstrates good practices by including nonce and capability checks, and all external HTTP requests are absent. The limited attack surface is also a positive indicator.

While the absence of taint analysis flows with unsanitized paths and a clean vulnerability history are excellent signs, the only potential area for concern lies in the output escaping, where 15% of the 20 outputs are not properly escaped. This could theoretically lead to cross-site scripting (XSS) vulnerabilities in specific, albeit limited, scenarios. However, given the plugin's otherwise robust security measures, the risk is mitigated. Overall, this plugin appears to be well-developed from a security perspective, with strengths significantly outweighing its minor potential weaknesses.

Key Concerns

  • Unescaped output found
Vulnerabilities
None known

Post Filter Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Post Filter Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
3
17 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

85% escaped20 total outputs
Attack Surface

Post Filter Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 6
actionadmin_menucupcode-options.php:4
actionadmin_enqueue_scriptscupcode-options.php:5
actionplugins_loadedcupcode-options.php:16
actionadmin_noticescupcode-options.php:119
actionadmin_post_save_postfilter_settingscupcode-options.php:122
filterwp_insert_post_datacupcode-post-filter.php:84
Maintenance & Trust

Post Filter Maintenance & Trust

Maintenance Signals

WordPress version tested5.2.24
Last updatedOct 26, 2019
PHP min version
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Post Filter Developer Profile

cupcode

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Post Filter

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/post-filter-filter-any-contents-with-specific-words/assets/main.css/wp-content/plugins/post-filter-filter-any-contents-with-specific-words/assets/amaran.min.css/wp-content/plugins/post-filter-filter-any-contents-with-specific-words/assets/main.js/wp-content/plugins/post-filter-filter-any-contents-with-specific-words/assets/jquery.amaran.min.js
Script Paths
/wp-content/plugins/post-filter-filter-any-contents-with-specific-words/assets/main.js/wp-content/plugins/post-filter-filter-any-contents-with-specific-words/assets/jquery.amaran.min.js

HTML / DOM Fingerprints

JS Globals
postfilter_main_js
FAQ

Frequently Asked Questions about Post Filter