Semrush Content Toolkit Security & Risk Analysis

The semrush-contentshake plugin version 1.1.33 exhibits a strong security posture based on the static analysis. The absence of dangerous functions, raw SQL queries, improper output escaping, file operations, and external HTTP requests indicates diligent development practices. The presence of a nonce check and the lack of critical or high severity taint flows are positive indicators. However, the static analysis reveals no explicit capability checks, and the total entry points are reported as zero, which might suggest a limited functionality or reliance on other plugin mechanisms for interaction. The vulnerability history notes one past medium-severity CVE, specifically Cross-Site Request Forgery, which was last seen in 2025. While this vulnerability is not currently unpatched and the number of past vulnerabilities is low, it highlights a potential area of past weakness that warrants continued vigilance.