Post Meta Searcher Security & Risk Analysis

wordpress.org/plugins/post-meta-searcher

When activated, forces any WordPress Search Query to query against post meta data as part of the search criteria.

100 active installs v1.2 PHP + WP 2.5+ Updated Dec 6, 2013
advanced-searchcustom-field-searchcustom-searchmeta-searchsearch
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Post Meta Searcher Safe to Use in 2026?

Generally Safe

Score 85/100

Post Meta Searcher has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 12yr ago
Risk Assessment

The post-meta-searcher plugin v1.2 exhibits a remarkably clean static analysis report, with no identified entry points that are unprotected by authentication or capability checks. The code adheres strictly to secure coding practices, showing no dangerous functions, all SQL queries utilize prepared statements, and all outputs are properly escaped. Furthermore, there are no file operations, external HTTP requests, or bundled libraries, which significantly reduces the potential attack surface and the risk of introducing vulnerabilities through third-party code.

The plugin also boasts a clean vulnerability history, with no recorded CVEs of any severity. This indicates a history of secure development and maintenance. The absence of critical or high-severity taint flows further reinforces the perception of a secure codebase. While the lack of any identified entry points might suggest a very limited functionality, the overall security posture appears to be excellent, with no immediate risks detected based on the provided data. The plugin demonstrates a strong commitment to security by implementing best practices throughout its development.

In conclusion, the post-meta-searcher plugin v1.2 presents a very low-risk profile. Its adherence to secure coding standards, absence of critical vulnerabilities in static analysis and history, and limited attack surface are all positive indicators. The only potential area of note, though not a direct security risk indicated by the data, is the complete lack of identified entry points, which could suggest a limited scope of functionality. However, for its intended purpose, the plugin appears to be securely implemented.

Vulnerabilities
None known

Post Meta Searcher Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Post Meta Searcher Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Post Meta Searcher Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 3
filterposts_join_requestinit.php:27
filterposts_distinct_requestinit.php:28
actionposts_where_requestinit.php:34
Maintenance & Trust

Post Meta Searcher Maintenance & Trust

Maintenance Signals

WordPress version tested3.7.41
Last updatedDec 6, 2013
PHP min version
Downloads5K

Community Trust

Rating100/100
Number of ratings4
Active installs100
Developer Profile

Post Meta Searcher Developer Profile

lukerollans

4 plugins · 710 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Post Meta Searcher

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Post Meta Searcher