Simple Notices Security & Risk Analysis

wordpress.org/plugins/simple-notices

A simple plugin that adds a notification system to your WordPress. Via custom post types, Simple Notices gives you a way to make announcements that ar …

100 active installs v1.0.7 PHP + WP 3.0+ Updated Oct 12, 2015
announcenoticenoticesnotificationsimple
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Simple Notices Safe to Use in 2026?

Generally Safe

Score 85/100

Simple Notices has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10yr ago
Risk Assessment

The "simple-notices" v1.0.7 plugin exhibits a mixed security posture. On the positive side, it demonstrates good practices by avoiding dangerous functions, performing all SQL queries with prepared statements, and not making external HTTP requests. The presence of nonce and capability checks in its code also suggests an awareness of security principles. However, a significant concern arises from its attack surface, which is composed of a single AJAX handler that lacks authentication checks. This directly exposes a potential entry point to attackers.

Key Concerns

  • AJAX handler without authentication
  • Low percentage of properly escaped output
Vulnerabilities
None known

Simple Notices Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Simple Notices Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
11
1 escaped
Nonce Checks
1
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

8% escaped12 total outputs
Attack Surface
1 unprotected

Simple Notices Attack Surface

Entry Points1
Unprotected1

AJAX Handlers 1

authwp_ajax_mark_notice_as_readincludes\read-functions.php:32
WordPress Hooks 5
actionwp_footerincludes\display-functions.php:24
actionadmin_menuincludes\metabox.php:35
actionsave_postincludes\metabox.php:112
actioninitincludes\post-types.php:35
actionwp_enqueue_scriptsincludes\scripts.php:18
Maintenance & Trust

Simple Notices Maintenance & Trust

Maintenance Signals

WordPress version tested4.4.34
Last updatedOct 12, 2015
PHP min version
Downloads15K

Community Trust

Rating70/100
Number of ratings4
Active installs100
Developer Profile

Simple Notices Developer Profile

Syed Balkhi

94 plugins · 23.5M total installs

73
trust score
Avg Security Score
91/100
Avg Patch Time
795 days
View full developer profile
Detection Fingerprints

How We Detect Simple Notices

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/simple-notices/css/notifications.css/wp-content/plugins/simple-notices/js/jquery.cookie.js/wp-content/plugins/simple-notices/js/notifications.js
Script Paths
js/jquery.cookie.jsjs/notifications.js
Version Parameters
simple-notices/css/notifications.css?ver=simple-notices/js/jquery.cookie.js?ver=simple-notices/js/notifications.js?ver=

HTML / DOM Fingerprints

CSS Classes
notification-arearemove-notice
Data Attributes
id="notification-area"id="remove-notice"rel="remove-notice"id="sn_meta_box"name="_notice_color"id="_notice_color"+2 more
JS Globals
notices_ajax_script
REST Endpoints
/wp-json/simple-notices
Shortcode Output
<div id="notification-area"<a class="remove-notice"<h3><?php echo do_shortcode(wpautop(__($notice->post_content))); ?>
FAQ

Frequently Asked Questions about Simple Notices