Remove Featured Image Security & Risk Analysis

wordpress.org/plugins/remove-featured-image

To show/hide/remove featured images on individual posts or from all posts.

1K active installs v1.1 PHP + WP 3.0.1+ Updated Jan 12, 2018
hide-featured-imagepost-thumbnailremove-featured-imageshow-featured-imagethumbnail
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Remove Featured Image Safe to Use in 2026?

Generally Safe

Score 85/100

Remove Featured Image has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago
Risk Assessment

The 'remove-featured-image' plugin v1.1 exhibits a strong security posture based on the provided static analysis. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events indicates a minimal attack surface, which is further bolstered by the fact that none of these potential entry points are unprotected. The code analysis reveals excellent security practices, with no dangerous functions used, all SQL queries employing prepared statements, and all output being properly escaped. The presence of nonce and capability checks on the identified code paths demonstrates a commitment to authorization and integrity. Furthermore, the taint analysis found no flows with unsanitized paths, and the vulnerability history is entirely clean, with no recorded CVEs. This plugin appears to be well-developed from a security perspective, with no immediate vulnerabilities apparent in the analyzed code.

Vulnerabilities
None known

Remove Featured Image Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Remove Featured Image Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
2 escaped
Nonce Checks
2
Capability Checks
5
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped2 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
wp_rfi_settings (inc\functions.php:4)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Remove Featured Image Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 5
actionadd_meta_boxesinc\hooks.php:4
actionadmin_initinc\hooks.php:5
actionsave_postinc\hooks.php:6
actionwp_headinc\hooks.php:7
actionadmin_menuinc\hooks.php:8
Maintenance & Trust

Remove Featured Image Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29
Last updatedJan 12, 2018
PHP min version
Downloads28K

Community Trust

Rating68/100
Number of ratings7
Active installs1K
Developer Profile

Remove Featured Image Developer Profile

chatthasumit

2 plugins · 1K total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Remove Featured Image

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/remove-featured-image/css/style.css/wp-content/plugins/remove-featured-image/js/script.js
Script Paths
/wp-content/plugins/remove-featured-image/js/script.js
Version Parameters
remove-featured-image/css/style.css?ver=remove-featured-image/js/script.js?ver=

HTML / DOM Fingerprints

Data Attributes
name="_remove_featured_image"name="rfi_pa_image"name="rfi_po_image"
FAQ

Frequently Asked Questions about Remove Featured Image