Remove CPT base Security & Risk Analysis

wordpress.org/plugins/remove-cpt-base

Remove custom post type base slug from url

10K active installs v6.7 PHP 5.6+ WP 3.0+ Updated Dec 1, 2025
basecustom-post-typepermalinkremoveslug
99
A · Safe
CVEs total1
Unpatched0
Last CVEMay 6, 2022
Safety Verdict

Is Remove CPT base Safe to Use in 2026?

Generally Safe

Score 99/100

Remove CPT base has a strong security track record. Known vulnerabilities have been patched promptly.

1 known CVELast CVE: May 6, 2022Updated 4mo ago
Risk Assessment

The "remove-cpt-base" v6.7 plugin exhibits a generally strong security posture based on the static analysis. The absence of a significant attack surface, dangerous functions, raw SQL queries, file operations, and external HTTP requests is highly commendable. The presence of a nonce check further indicates an awareness of basic security principles. However, the vulnerability history reveals a past high-severity Cross-Site Request Forgery (CSRF) vulnerability, which is a significant concern. While this specific vulnerability is noted as currently unpatched, the fact that it's a historical issue and not currently present in the code suggests that subsequent versions may have addressed it. The low percentage of improperly escaped outputs is a minor concern that could be improved, but does not appear to be a critical risk based on the provided data.

Key Concerns

  • High severity CSRF vulnerability in history
  • 11% of outputs not properly escaped
Vulnerabilities
1

Remove CPT base Security Vulnerabilities

CVEs by Year

1 CVE in 2022
2022
Patched Has unpatched

Severity Breakdown

High
1

1 total CVE

CVE-2022-29431high · 8.8Cross-Site Request Forgery (CSRF)

Remove CPT base <= 5.8 - Cross-Site Request Forgery to CPT base deletion

May 6, 2022 Patched in 5.9 (626d)
Code Analysis
Analyzed Mar 16, 2026

Remove CPT base Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
8 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

89% escaped9 total outputs
Attack Surface

Remove CPT base Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 7
actionplugins_loadedremove-cpt-base.php:28
actionadmin_menuremove-cpt-base.php:37
filterpost_type_linkremove-cpt-base.php:55
actiontemplate_redirectremove-cpt-base.php:58
filterpost_type_linkremove-cpt-base.php:66
filterrequestremove-cpt-base.php:74
actioninitremove-cpt-base.php:303
Maintenance & Trust

Remove CPT base Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 1, 2025
PHP min version5.6
Downloads96K

Community Trust

Rating100/100
Number of ratings33
Active installs10K
Developer Profile

Remove CPT base Developer Profile

kubiq

13 plugins · 136K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
468 days
View full developer profile
Detection Fingerprints

How We Detect Remove CPT base

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/remove-cpt-base/assets/css/styles.css/wp-content/plugins/remove-cpt-base/assets/js/script.js
Script Paths
/wp-content/plugins/remove-cpt-base/assets/js/script.js
Version Parameters
remove-cpt-base/assets/css/styles.css?ver=remove-cpt-base/assets/js/script.js?ver=

HTML / DOM Fingerprints

HTML Comments
<!-- here the magic was born -->
FAQ

Frequently Asked Questions about Remove CPT base