Current Year Shortcode Security & Risk Analysis

wordpress.org/plugins/runthings-current-year-shortcode

Adds a shortcode to display the current year or a year range, perfect for copyright statements.

50 active installs v2.1.1 PHP 7.4+ WP 6.0+ Updated Dec 17, 2025
copyrightdatedynamic-contentshortcodeyear
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Current Year Shortcode Safe to Use in 2026?

Generally Safe

Score 100/100

Current Year Shortcode has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The 'runthings-current-year-shortcode' plugin v2.1.1 exhibits an excellent security posture based on the provided static analysis. The absence of any detected dangerous functions, raw SQL queries, or file operations, coupled with 100% proper output escaping and no external HTTP requests, indicates a strong adherence to secure coding practices. Furthermore, the lack of any reported CVEs in its vulnerability history suggests a consistent track record of security. The plugin's attack surface is minimal, with zero entry points identified, and importantly, zero unprotected entry points. The taint analysis also returned no findings, reinforcing the perception of robust security. While the plugin appears secure, the complete absence of nonce and capability checks across its non-existent entry points, though not a direct vulnerability in this case, represents a potential gap if future functionality were to be introduced without these security mechanisms. However, based solely on the current version's analysis, the plugin is highly secure.

Vulnerabilities
None known

Current Year Shortcode Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Current Year Shortcode Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
6 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped6 total outputs
Attack Surface

Current Year Shortcode Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
actioninitrunthings-current-year-shortcode.php:71
filterplugin_row_metarunthings-current-year-shortcode.php:73
Maintenance & Trust

Current Year Shortcode Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 17, 2025
PHP min version7.4
Downloads534

Community Trust

Rating0/100
Number of ratings0
Active installs50
Developer Profile

Current Year Shortcode Developer Profile

runthings.dev

11 plugins · 2K total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
14 days
View full developer profile
Detection Fingerprints

How We Detect Current Year Shortcode

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

Shortcode Output
[year][runthings_year][year from=""][year from="" mode=""]
FAQ

Frequently Asked Questions about Current Year Shortcode