real.PostImages Security & Risk Analysis

wordpress.org/plugins/real-postimages

Дополнительное поле записей (постов) для изображений. | English read below

20 active installs v1.3 PHP + WP 4.1.1+ Updated May 15, 2016
admin%d0%b0%d0%b4%d0%bc%d0%b8%d0%bd%d0%b3%d0%b0%d0%bb%d0%b5%d1%80%d0%b5%d1%8f%d0%b7%d0%b0%d0%bf%d0%b8%d1%81%d1%8c%d0%b8%d0%b7%d0%be%d0%b1%d1%80%d0%b0%d0%b6%d0%b5%d0%bd%d0%b8%d1%8f%d0%ba%d0%b0%d1%80%d1%82%d0%b8%d0%bd%d0%ba%d0%b0
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is real.PostImages Safe to Use in 2026?

Generally Safe

Score 85/100

real.PostImages has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10yr ago
Risk Assessment

The 'real-postimages' plugin v1.3 exhibits a generally positive security posture based on the static analysis provided. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events with unprotected entry points indicates a limited attack surface. Furthermore, the code's adherence to using prepared statements for all SQL queries is a significant strength, mitigating the risk of SQL injection vulnerabilities. The plugin also appears to have no file operations or external HTTP requests, further reducing potential attack vectors.

Key Concerns

  • Unescaped output detected
  • No capability checks found
  • No nonce checks found
Vulnerabilities
None known

real.PostImages Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

real.PostImages Release Timeline

No version history available.
Code Analysis
Analyzed Mar 16, 2026

real.PostImages Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
8
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped8 total outputs
Attack Surface

real.PostImages Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 3
actionplugins_loadedreal-postImages.php:20
actionadmin_initreal-postImages.php:28
actionsave_postreal-postImages.php:56
Maintenance & Trust

real.PostImages Maintenance & Trust

Maintenance Signals

WordPress version tested4.5.33
Last updatedMay 15, 2016
PHP min version
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs20
Developer Profile

real.PostImages Developer Profile

real.master

1 plugin · 20 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect real.PostImages

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/real-postimages/css/images.css/wp-content/plugins/real-postimages/js/images.js
Script Paths
/wp-content/plugins/real-postimages/js/images.js
Version Parameters
realpostimages/css/images.css?ver=realpostimages/js/images.js?ver=

HTML / DOM Fingerprints

CSS Classes
images
Data Attributes
data-id
Shortcode Output
<div class="images"><label><input type="checkbox" name="realpostimages_images[" value="
FAQ

Frequently Asked Questions about real.PostImages