Purgely Security & Risk Analysis

wordpress.org/plugins/purgely

A plugin to manage Fastly caching behavior and purging.

10 active installs v1.0.1 PHP + WP 4.2.0+ Updated Jun 15, 2016
cache-invalidationcachingfastlypage-cache
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Purgely Safe to Use in 2026?

Generally Safe

Score 85/100

Purgely has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9yr ago
Risk Assessment

The "purgely" v1.0.1 plugin exhibits an excellent security posture based on the provided static analysis. The complete absence of any detected attack surface, dangerous functions, raw SQL queries, unescaped output, or file operations is highly commendable. The plugin also demonstrates strong security awareness by utilizing prepared statements for all SQL queries and ensuring all output is properly escaped. The single external HTTP request is a minor point of interest but, without further context, does not present an immediate risk. The lack of any recorded vulnerability history further reinforces its robust security. However, the absence of nonce checks and capability checks across its entry points, while currently not a direct issue due to the zero attack surface, represents a potential future risk should the plugin's functionality expand or new entry points be introduced without proper authorization controls. This is a significant strength in its current state, but a point of caution for future development.

Key Concerns

  • Missing nonce checks
  • Missing capability checks
Vulnerabilities
None known

Purgely Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Purgely Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
30 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
1
Bundled Libraries
0

Output Escaping

100% escaped30 total outputs
Attack Surface

Purgely Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 7
actionwppurgely.php:140
actionwppurgely.php:152
actionwppurgely.php:155
actionwppurgely.php:158
actionplugins_loadedpurgely.php:166
actionadmin_menusrc\settings-page.php:38
actionadmin_initsrc\settings-page.php:39
Maintenance & Trust

Purgely Maintenance & Trust

Maintenance Signals

WordPress version tested4.3.34
Last updatedJun 15, 2016
PHP min version
Downloads16K

Community Trust

Rating100/100
Number of ratings1
Active installs10
Developer Profile

Purgely Developer Profile

Zack Tollman

6 plugins · 1K total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Purgely

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/purgely/src/css/admin.css/wp-content/plugins/purgely/src/css/frontend.css
Script Paths
/wp-content/plugins/purgely/src/js/admin.js/wp-content/plugins/purgely/src/js/frontend.js
Version Parameters
purgely/src/css/admin.css?ver=purgely/src/css/frontend.css?ver=purgely/src/js/admin.js?ver=purgely/src/js/frontend.js?ver=

HTML / DOM Fingerprints

HTML Comments
<!-- Purgely Admin Settings -->
Data Attributes
data-purgely-purge-url
JS Globals
PurgelyAdmin
REST Endpoints
/wp-json/purgely/v1/purge
FAQ

Frequently Asked Questions about Purgely