@ Reply Security & Risk Analysis

wordpress.org/plugins/reply-to

This plugin allows you to add Twitter-like @reply links to comments.

100 active installs v3.1.3 PHP + WP 2.8+ Updated Jun 16, 2011
at-replycommentsreplytwitter
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is @ Reply Safe to Use in 2026?

Generally Safe

Score 85/100

@ Reply has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 14yr ago
Risk Assessment

The "reply-to" plugin version 3.1.3 demonstrates a strong security posture based on the provided static analysis. The absence of any identified attack surface points, dangerous functions, unsanitized taint flows, raw SQL queries, or unescaped output signals diligent development practices. Furthermore, the plugin's vulnerability history is clean, with no recorded CVEs, suggesting a consistent track record of secure coding. This plugin appears to be well-maintained and built with security in mind, minimizing common web application vulnerabilities.

Vulnerabilities
None known

@ Reply Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

@ Reply Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
3 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped3 total outputs
Attack Surface

@ Reply Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 3
actioncomment_format-reply.php:18
filtercomment_reply_linkat-reply.php:20
filtercomment_textat-reply.php:22
Maintenance & Trust

@ Reply Maintenance & Trust

Maintenance Signals

WordPress version tested3.1.4
Last updatedJun 16, 2011
PHP min version
Downloads35K

Community Trust

Rating100/100
Number of ratings2
Active installs100
Developer Profile

@ Reply Developer Profile

Yus

11 plugins · 340 total installs

87
trust score
Avg Security Score
90/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect @ Reply

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/reply-to/reply.png

HTML / DOM Fingerprints

CSS Classes
yarrcomment
Data Attributes
onclick
JS Globals
yus_replyTo
FAQ

Frequently Asked Questions about @ Reply