WP-Safety

Security Safe Security & Risk Analysis

wordpress.org/plugins/security-safe

This security plugin helps you quickly audit, harden, and secure your WordPress website.

700 active installs v3.0.1 PHP 8.1+ WP 6.1+ Updated Mar 9, 2026
404-errorsdisable-xmlrpcfirewalllimit-loginwp-security
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Security Safe Safe to Use in 2026?

Generally Safe

Score 100/100

Security Safe has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 25d ago
Risk Assessment

The 'security-safe' plugin v3.0.1 demonstrates a generally strong security posture based on the static analysis results. The absence of direct attack surface through AJAX handlers, REST API routes, and shortcodes is commendable. Furthermore, the high percentage of SQL queries using prepared statements and properly escaped output significantly mitigates common web application vulnerabilities. The plugin also appears to implement some security checks, as indicated by the presence of nonce and capability checks.

Key Concerns

  • Flow with unsanitized paths detected
  • One file operation detected
  • Bundled outdated Freemius library
Vulnerabilities
None known

Security Safe Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Security Safe Code Analysis

Dangerous Functions
0
Raw SQL Queries
1
38 prepared
Unescaped Output
12
175 escaped
Nonce Checks
4
Capability Checks
1
File Operations
2
External Requests
0
Bundled Libraries
1

Bundled Libraries

Freemius1.0

SQL Query Safety

97% prepared39 total queries

Output Escaping

94% escaped187 total outputs
Data Flows
1 unsanitized

Data Flow Analysis

2 flows1 with unsanitized paths
import_settings (core\admin\Admin.php:178)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Security Safe Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 42
actionadmin_noticescore\admin\Admin.php:46
actionadmin_initcore\admin\Admin.php:50
filteradmin_body_classcore\admin\Admin.php:52
actionadmin_menucore\admin\Admin.php:55
filterplugin_action_linkscore\admin\Admin.php:57
filternetwork_admin_plugin_action_linkscore\admin\Admin.php:63
actionactivated_plugincore\includes\Janitor.php:23
actionupgrader_process_completecore\includes\Janitor.php:28
actionsecsafe_cleanup_tables_dailycore\includes\Janitor.php:40
actionwp_insert_sitecore\includes\Janitor.php:52
actionlogin_enqueue_scriptscore\Plugin.php:59
filterlogin_body_classcore\Plugin.php:63
actionlogin_footercore\Plugin.php:67
filterauthenticatecore\security\firewall\PolicyBlockUsernames.php:26
filterillegal_user_loginscore\security\firewall\PolicyBlockUsernames.php:30
actionget_headercore\security\firewall\PolicyLog404s.php:25
filterauthenticatecore\security\firewall\PolicyLogLogins.php:27
actionwp_login_failedcore\security\firewall\PolicyLogLogins.php:31
actionwp_logincore\security\firewall\PolicyLogLogins.php:35
filterxmlrpc_enabledcore\security\firewall\PolicyXMLRPC.php:24
filterhttp_headers_useragentcore\security\privacy\PolicyAnonymousWebsite.php:25
actionwp_enqueue_scriptscore\security\privacy\PolicyDisableRightClick.php:27
actionwp_enqueue_scriptscore\security\privacy\PolicyDisableTextHighlight.php:25
actionpre_get_postscore\security\privacy\PolicyHidePasswordProtectedPosts.php:27
filterposts_wherecore\security\privacy\PolicyHidePasswordProtectedPosts.php:62
actionupgrader_process_completecore\security\privacy\PolicyHideScriptVersions.php:28
filterstyle_loader_srccore\security\privacy\PolicyHideScriptVersions.php:34
filterscript_loader_srccore\security\privacy\PolicyHideScriptVersions.php:38
filterthe_generatorcore\security\privacy\PolicyHideWPVersion.php:26
actionadmin_initcore\security\privacy\PolicyHideWPVersionAdmin.php:26
filteradmin_footer_textcore\security\privacy\PolicyHideWPVersionAdmin.php:39
filterupdate_footercore\security\privacy\PolicyHideWPVersionAdmin.php:43
filterauthenticatecore\security\privacy\PolicyLoginErrors.php:24
filterallow_password_resetcore\security\privacy\PolicyLoginPasswordReset.php:25
filtergettextcore\security\privacy\PolicyLoginPasswordReset.php:28
actionlogin_formcore\security\privacy\PolicyLoginRememberMe.php:25
actionlogin_headcore\security\privacy\PolicyLoginRememberMe.php:31
actionupgrader_process_completecore\security\privacy\PolicyWordPressVersionFiles.php:27
actioninitsecurity-safe.php:102
filterupgrader_pre_installsecurity-safe.php:104
actionadmin_noticessecurity-safe.php:114
actionnetwork_admin_noticessecurity-safe.php:115

Scheduled Events 1

secsafe_cleanup_tables_daily
Maintenance & Trust

Security Safe Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 9, 2026
PHP min version8.1
Downloads21K

Community Trust

Rating100/100
Number of ratings13
Active installs700
Alternatives

Security Safe Alternatives

QS Core Modules

QS Core Modules

qs-core-modules

A
100

A very lightweight plugin to add core functionality that every WordPress install needs.

0 No CVEs
Wordfence Security – Firewall, Malware Scan, and Login Security

Wordfence Security – Firewall, Malware Scan, and Login Security

wordfence

A
96

Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.

5.0M 12 CVEs
Limit Login Attempts Reloaded – Login Security, Brute Force Protection, Firewall

Limit Login Attempts Reloaded – Login Security, Brute Force Protection, Firewall

limit-login-attempts-reloaded

A
98

Block excessive login attempts and protect your site against brute force attacks. Simple, yet powerful tools to improve site performance.

2.0M 4 CVEs
All-In-One Security (AIOS) – Security and Firewall

All-In-One Security (AIOS) – Security and Firewall

all-in-one-wp-security-and-firewall

A
93

Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plugin designed especially for WordPress.

1.0M 26 CVEs
Security Optimizer – The All-In-One Protection Plugin

Security Optimizer – The All-In-One Protection Plugin

sg-security

A
86

Secure your WordPress site from brute-force attacks, threats, malware, and bots. Free to use and easy to set up.

1.0M 5 CVEs
Developer Profile

Security Safe Developer Profile

Sovereign Stack, LLC

1 plugin · 700 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Security Safe

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Security Safe