Restore Link Title Field Security & Risk Analysis

wordpress.org/plugins/restore-link-title-field

Adds back the missing "title" field in the Insert/Edit URL box in WordPress 4.2

3K active installs v1.3 PHP + WP 4.2+ Updated Nov 28, 2017
editorlinktinymcetitle
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Restore Link Title Field Safe to Use in 2026?

Generally Safe

Score 85/100

Restore Link Title Field has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago
Risk Assessment

Based on the provided static analysis and vulnerability history, the 'restore-link-title-field' plugin v1.3 demonstrates a strong security posture. The absence of identified dangerous functions, SQL queries executed with prepared statements, and properly escaped output are excellent indicators of secure coding practices. Furthermore, the plugin exhibits no external HTTP requests, file operations, or the presence of bundled libraries, minimizing potential attack vectors. The vulnerability history is also clean, with no recorded CVEs, suggesting a history of secure development and maintenance.

However, the analysis does reveal a complete absence of nonces and capability checks across all identified entry points. While the current attack surface is zero and there are no unprotected entry points, this lack of explicit authorization mechanisms could become a significant concern if the plugin were to be extended or if new entry points were inadvertently introduced in future updates. This represents a potential weakness that, while not immediately exploitable with the current data, warrants attention for future development to ensure robust access control.

Key Concerns

  • No nonce checks implemented
  • No capability checks implemented
Vulnerabilities
None known

Restore Link Title Field Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Restore Link Title Field Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Restore Link Title Field Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
actionwp_enqueue_editorrestore-link-title-field.php:13
Maintenance & Trust

Restore Link Title Field Maintenance & Trust

Maintenance Signals

WordPress version tested4.4.34
Last updatedNov 28, 2017
PHP min version
Downloads22K

Community Trust

Rating100/100
Number of ratings21
Active installs3K
Developer Profile

Restore Link Title Field Developer Profile

Samuel Wood (Otto)

9 plugins · 167K total installs

70
trust score
Avg Security Score
87/100
Avg Patch Time
3759 days
View full developer profile
Detection Fingerprints

How We Detect Restore Link Title Field

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/restore-link-title-field/restore-link-title-field.js
Script Paths
/wp-content/plugins/restore-link-title-field/restore-link-title-field.js
Version Parameters
restore-link-title-field.js?ver=1.3

HTML / DOM Fingerprints

JS Globals
wpLinkTitleL10n
FAQ

Frequently Asked Questions about Restore Link Title Field