PostMeta Viewer – Custom Fields Inspector Security & Risk Analysis

wordpress.org/plugins/postmeta-viewer

A powerful debugging tool for WordPress developers to inspect and analyze post meta (custom fields) across posts, pages, and custom post types.

20 active installs v1.0 PHP 7.4+ WP 5.6+ Updated Jan 12, 2026
acfcustom-fieldsdebuggingdeveloper-toolspost-meta
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is PostMeta Viewer – Custom Fields Inspector Safe to Use in 2026?

Generally Safe

Score 100/100

PostMeta Viewer – Custom Fields Inspector has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The postmeta-viewer v1.0 plugin exhibits a strong security posture based on the provided static analysis. It demonstrates excellent adherence to secure coding practices, with no identified dangerous functions, file operations, or external HTTP requests. Notably, all SQL queries are properly prepared, and a high percentage of output is correctly escaped, minimizing the risk of cross-site scripting (XSS) vulnerabilities. The absence of any known CVEs or past vulnerabilities further reinforces its secure standing. The plugin's attack surface is also commendably small and appears to be well-protected, with no unprotected entry points identified.

Key Concerns

  • No capability checks found
  • Low number of nonce checks
Vulnerabilities
None known

PostMeta Viewer – Custom Fields Inspector Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

PostMeta Viewer – Custom Fields Inspector Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
5 prepared
Unescaped Output
2
78 escaped
Nonce Checks
2
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared5 total queries

Output Escaping

98% escaped80 total outputs
Data Flows
All sanitized

Data Flow Analysis

1 flows
<admin-page> (admin\views\admin-page.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

PostMeta Viewer – Custom Fields Inspector Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 10
filterposts_whereincludes\class-postmeta-viewer-filters.php:112
actionadmin_enqueue_scriptsincludes\class-postmeta-viewer.php:30
actionadmin_enqueue_scriptsincludes\class-postmeta-viewer.php:31
actionadmin_menuincludes\class-postmeta-viewer.php:32
actionadmin_initincludes\class-postmeta-viewer.php:33
actionadmin_noticesincludes\class-postmeta-viewer.php:34
actionadd_meta_boxesincludes\class-postmeta-viewer.php:37
actionadmin_noticespostmeta-viewer.php:27
actionadmin_noticespostmeta-viewer.php:78
actionplugins_loadedpostmeta-viewer.php:109
Maintenance & Trust

PostMeta Viewer – Custom Fields Inspector Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 12, 2026
PHP min version7.4
Downloads178

Community Trust

Rating0/100
Number of ratings0
Active installs20
Developer Profile

PostMeta Viewer – Custom Fields Inspector Developer Profile

wpwebguru

2 plugins · 30 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect PostMeta Viewer – Custom Fields Inspector

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/postmeta-viewer/assets/css/admin-style.css/wp-content/plugins/postmeta-viewer/assets/js/admin-script.js
Script Paths
/wp-content/plugins/postmeta-viewer/assets/js/admin-script.js
Version Parameters
postmeta-viewer/assets/css/admin-style.css?ver=postmeta-viewer/assets/js/admin-script.js?ver=

HTML / DOM Fingerprints

CSS Classes
postmeta-viewer-meta-box
FAQ

Frequently Asked Questions about PostMeta Viewer – Custom Fields Inspector