Does Replytocom Controller have any unpatched vulnerabilities?

No. All known vulnerabilities in Replytocom Controller have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Replytocom Controller compatible with WordPress 3.5.2?

According to WordPress.org data, Replytocom Controller 1.2 has been tested up to WordPress 3.5.2. Check the plugin's changelog for the latest compatibility information.

How often is Replytocom Controller updated?

Replytocom Controller was last updated on Dec 11, 2016. Frequent updates are generally a positive security signal.

What is Replytocom Controller's security score?

Replytocom Controller has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Replytocom Controller Security & Risk Analysis

wordpress.org/plugins/replytocom-controller

Replytocom Controller lets remove "?replytocom" from comment reply urls and redirect bots who try to use it anyway.

80 active installs v1.2 PHP + WP 2.7+ Updated Dec 11, 2016

bandwidth-savingbotsduplicate-contentreplytocomseo

A · Safe

CVEs total0

Unpatched0

Last CVENever

Download

Safety Verdict

Is Replytocom Controller Safe to Use in 2026?

Generally Safe

Score 85/100

Replytocom Controller has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9yr ago

Risk Assessment

The 'replytocom-controller' v1.2 plugin presents a mixed security profile. On the positive side, there are no known CVEs, no dangerous functions used, and all SQL queries utilize prepared statements, indicating good data handling practices in that regard. The absence of external HTTP requests and file operations also reduces the potential attack vectors.

Key Concerns

Unescaped output detected
Taint flows with unsanitized paths
No nonce checks implemented
No capability checks implemented

Vulnerabilities

None known

Replytocom Controller Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

Replytocom Controller Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

0 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

0% escaped1 total outputs

Data Flows

2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths

on_init (replytocom-controller.php:53)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

Replytocom Controller Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 4

actioninitreplytocom-controller.php:43

actionadmin_menureplytocom-controller.php:45

actionadmin_initreplytocom-controller.php:46

filtercomment_reply_linkreplytocom-controller.php:55

Maintenance & Trust

Replytocom Controller Maintenance & Trust

Maintenance Signals

WordPress version tested3.5.2

Last updatedDec 11, 2016

PHP min version

Downloads6K

Community Trust

Rating100/100

Number of ratings2

Active installs80

Alternatives

Replytocom Controller Alternatives

WP Robots Txt

wp-robots-txt

100

WP Robots Txt Allows you to edit the content of your robots.txt file.

50K No CVEs

Spider Blocker

spiderblocker

SpiderBlocker will block most common bots that consume bandwidth and slow down your blog.

20K No CVEs

Head Meta Data

head-meta-data

Adds a custom set of <meta> tags to the <head> section of all posts & pages.

10K 2 CVEs

Robots.txt Editor

robots-txt-editor

Robots.txt for WordPress

10K No CVEs

Companion Sitemap Generator – HTML & XML

companion-sitemap-generator

Easy to use XML and HTML sitemap generator + Robots editor

7K 3 CVEs

Developer Profile

Replytocom Controller Developer Profile

ClaytonL

2 plugins · 80 total installs

trust score

Avg Security Score

93/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Replytocom Controller

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

Shortcode Output

replytocom-controller-admin

FAQ