Simple Password Policy Security & Risk Analysis

wordpress.org/plugins/simple-password-policy

Secure Your Site with Strong Passwords

0 active installs v1.0.2 PHP 8.1+ WP 6.0+ Updated Sep 25, 2025
passwordpassword-policypolicysecurity
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Simple Password Policy Safe to Use in 2026?

Generally Safe

Score 100/100

Simple Password Policy has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7mo ago
Risk Assessment

The "simple-password-policy" plugin v1.0.2 demonstrates a generally strong security posture based on the provided static analysis. The absence of dangerous functions, file operations, and external HTTP requests is a positive indicator. Furthermore, the plugin exclusively uses prepared statements for its SQL queries and has a very high percentage of properly escaped output, minimizing risks related to SQL injection and cross-site scripting. The presence of nonce and capability checks on its single AJAX handler is also a good practice, indicating an effort to protect entry points.

Key Concerns

  • Bundled Select2 library may be outdated
Vulnerabilities
None known

Simple Password Policy Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Simple Password Policy Release Timeline

v1.0.2Current
v1.0.1
v1.0.0
Code Analysis
Analyzed Apr 16, 2026

Simple Password Policy Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
11
322 escaped
Nonce Checks
3
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
1

Bundled Libraries

Select2

Output Escaping

97% escaped333 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

2 flows
update_taxonomy_options (includes/iworks/options/options.php:1484)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Simple Password Policy Attack Surface

Entry Points1
Unprotected0

AJAX Handlers 1

authwp_ajax_iworks_rate_buttonincludes/iworks/rate/rate.php:113
WordPress Hooks 29
actioninitincludes/iworks/class-simple-password-policy.php:46
actionadmin_initincludes/iworks/class-simple-password-policy.php:47
actionlogin_enqueue_scriptsincludes/iworks/class-simple-password-policy.php:48
actionlogin_enqueue_scriptsincludes/iworks/class-simple-password-policy.php:49
filteriworks_simple_password_policy_optionsincludes/iworks/class-simple-password-policy.php:69
filtersimple-password-policy/is_activeincludes/iworks/class-simple-password-policy.php:73
filterplugin_row_metaincludes/iworks/class-simple-password-policy.php:144
actionadmin_enqueue_scriptsincludes/iworks/options/options.php:87
actionadmin_headincludes/iworks/options/options.php:88
actionadmin_menuincludes/iworks/options/options.php:89
actionadmin_noticesincludes/iworks/options/options.php:90
filterscreen_layout_columnsincludes/iworks/options/options.php:91
actionload-index.phpincludes/iworks/rate/rate.php:111
actioniworks-register-pluginincludes/iworks/rate/rate.php:112
actionadmin_initincludes/iworks/rate/rate.php:114
filteriworks_rate_assistanceincludes/iworks/rate/rate.php:118
filteriworks_rate_loveincludes/iworks/rate/rate.php:119
filteriworks_rate_advertising_ogincludes/iworks/rate/rate.php:125
actionadmin_enqueue_scriptsincludes/iworks/rate/rate.php:190
actionadmin_noticesincludes/iworks/rate/rate.php:191
actionadmin_enqueue_scriptsincludes/iworks/rate/rate.php:200
actionadmin_noticesincludes/iworks/rate/rate.php:201
actionafter_password_resetincludes/iworks/simple-password-policy/class-iworks-simple-password-policy-password.php:35
actionresetpass_formincludes/iworks/simple-password-policy/class-iworks-simple-password-policy-password.php:36
filterwp_authenticate_userincludes/iworks/simple-password-policy/class-iworks-simple-password-policy-password.php:37
filterwp_authenticate_userincludes/iworks/simple-password-policy/class-iworks-simple-password-policy-password.php:38
filteriworks/simple-password-policy/login/scriptincludes/iworks/simple-password-policy/class-iworks-simple-password-policy-password.php:42
filtermanage_users_custom_columnincludes/iworks/simple-password-policy/class-iworks-simple-password-policy-user.php:40
filtermanage_users_columnsincludes/iworks/simple-password-policy/class-iworks-simple-password-policy-user.php:41
Maintenance & Trust

Simple Password Policy Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedSep 25, 2025
PHP min version8.1
Downloads426

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Simple Password Policy Developer Profile

Marcin Pietrzak

23 plugins · 89K total installs

77
trust score
Avg Security Score
97/100
Avg Patch Time
274 days
View full developer profile
Detection Fingerprints

How We Detect Simple Password Policy

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/simple-password-policy/assets/styles/simple-password-policy-login.css/wp-content/plugins/simple-password-policy/assets/scripts/simple-password-policy-login.js
Version Parameters
simple-password-policy/assets/styles/simple-password-policy-login%s.css?ver=simple-password-policy/assets/scripts/simple-password-policy-login%s.js?ver=

HTML / DOM Fingerprints

Data Attributes
data-iworks-simple-password-policy
JS Globals
iworks_simple_password_policy_optionsiworks_simple_password_policy_conditions
FAQ

Frequently Asked Questions about Simple Password Policy