Does Raw HTML have any unpatched vulnerabilities?

No published vulnerabilities and no findings under coordinated disclosure as of the latest data update. Always keep the plugin updated to the latest version.

Is Raw HTML compatible with WordPress 6.7.5?

According to WordPress.org data, Raw HTML 1.6.4 has been tested up to WordPress 6.7.5. Check the plugin's changelog for the latest compatibility information.

How often is Raw HTML updated?

Raw HTML was last updated on Nov 11, 2024. Frequent updates are generally a positive security signal.

What is Raw HTML's security score?

Raw HTML has a WP-Safety security score of 92/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Raw HTML Security & Risk Analysis

wordpress.org/plugins/raw-html

Lets you use raw HTML or any other code in your posts. You can also disable smart quotes and other automatic formatting on a per-post basis.

10K active installs v1.6.4 PHP + WP 2.8+ Updated Nov 11, 2024

cssformattinghtmljavascriptposts

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Raw HTML Safe to Use in 2026?

Generally Safe

Score 92/100

Raw HTML has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago

Risk Assessment

The "raw-html" plugin v1.6.4 exhibits a generally strong security posture based on the provided static analysis. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events significantly limits the attack surface. Furthermore, the code demonstrates good security practices by utilizing prepared statements for all SQL queries and incorporating nonce and capability checks. The taint analysis revealing no unsanitized paths or critical/high severity flows is also a very positive indicator.

Key Concerns

Output escaping not fully implemented

Vulnerabilities

None known

Raw HTML Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Version History

Raw HTML Release Timeline

v1.6.4Current

v1.6.3

v1.6.2

v1.6.1

v1.6

v1.5.1

v1.5

v1.4.16

v1.4.15

v1.4.14

v1.4.13

v1.4.12

v1.4.11

v1.4.10

v1.4.9

v1.4.8

v1.4.7

v1.4.6

v1.4.5

v1.4.4

Code Analysis

Analyzed Mar 16, 2026

Raw HTML Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

10 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

67% escaped15 total outputs

Data Flows · Security

All sanitized

Data Flow Analysis

2 flows

ajax_save_callback (include\screen-options\screen-options.php:189)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

Raw HTML Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 15

actionallinclude\formatting-override.php:190

actionparse_queryinclude\formatting-override.php:193

actionadmin_menuinclude\formatting-override.php:196

actionsave_postinclude\formatting-override.php:197

actioncurrent_screeninclude\screen-options\screen-options.php:28

filterscreen_settingsinclude\screen-options\screen-options.php:29

actionadmin_print_scriptsinclude\screen-options\screen-options.php:30

filterthe_contentinclude\tag-handler.php:162

filterthe_contentinclude\tag-handler.php:177

filtergdlr_the_contentinclude\tag-handler.php:180

filtergdlr_the_contentinclude\tag-handler.php:181

actionplugins_loadedinclude\tag-handler.php:183

filterthe_editor_contentinclude\tag-handler.php:207

filterthe_editor_contentinclude\tag-handler.php:208

actionadmin_noticesraw_html.php:32

Maintenance & Trust

Raw HTML Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5

Last updatedNov 11, 2024

PHP min version

Downloads587K

Community Trust

Rating86/100

Number of ratings33

Active installs10K

Alternatives

Raw HTML Alternatives

Code Embed

simple-embed-code

Code Embed provides a very easy and efficient way to embed code (JavaScript, CSS and HTML) in your posts and pages.

10K 4 CVEs

WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript

wp-super-minify

100

A lightweight plugin that automatically minifies, compresses, and caches HTML, CSS, and JavaScript on demand to improve your website’s load speed.

9K 1 CVE

WebberZone Snippetz – Header, Body and Footer manager

add-to-all

The ultimate snippet manager for WordPress. Create and manage custom HTML, CSS, or JS code snippets and control where and when they are displayed.

2K 1 CVE

CM Header and Footer – Add custom scripts and styles to your header and footer with ease

cm-header-footer-script-loader

Add custom CSS and JavaScript to headers and footers on your site with the header and footer plugin for enhanced control and design.

1K 1 CVE

WP Minify Fix

wp-minify-fix

[Fixed] This plugin uses the Minify engine to combine and compress JS and CSS files to improve page load time.

900 No CVEs

Developer Profile

Raw HTML Developer Profile

Janis Elsts

8 plugins · 431K total installs

trust score

Avg Security Score

90/100

Avg Patch Time

469 days

View full developer profile

Detection Fingerprints

How We Detect Raw HTML

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/raw-html/include/editor-plugin/css/editor.css/wp-content/plugins/raw-html/include/editor-plugin/js/editor.js

Script Paths

/wp-content/plugins/raw-html/include/editor-plugin/js/editor.js

Version Parameters

raw-html/include/editor-plugin/css/editor.css?ver=raw-html/include/editor-plugin/js/editor.js?ver=

HTML / DOM Fingerprints

CSS Classes

raw-html

JS Globals

rawHtmlEditorConfig

Shortcode Output

[raw][/raw]

FAQ