Simple URLs Legacy Security & Risk Analysis

wordpress.org/plugins/simple-urls-legacy

Simple URLs Legacy is a fork of the plugin by Nathan Rice. A URL management system to create, manage, and track outbound links from your site.

100 active installs v1.0.4 PHP 7.4+ WP 5.9+ Updated May 27, 2025
click-trackingcustom-post-typesredirect
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Simple URLs Legacy Safe to Use in 2026?

Generally Safe

Score 100/100

Simple URLs Legacy has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10mo ago
Risk Assessment

The "simple-urls-legacy" v1.0.4 plugin exhibits a generally strong security posture based on the provided static analysis. The absence of identified AJAX handlers, REST API routes, shortcodes, and cron events significantly limits its attack surface. The code also demonstrates good security practices with 100% of SQL queries utilizing prepared statements, the presence of nonce checks, and capability checks. Furthermore, the lack of dangerous functions, file operations, and external HTTP requests are positive indicators. The taint analysis revealing no unsanitized paths or critical/high severity flows further reinforces this positive assessment.

Key Concerns

  • Output escaping is not fully implemented
Vulnerabilities
None known

Simple URLs Legacy Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Simple URLs Legacy Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
3
14 escaped
Nonce Checks
2
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

82% escaped17 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
handle_reset_clicks (includes\class-simple-urls-legacy-admin.php:225)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Simple URLs Legacy Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 15
filterpost_updated_messagesincludes\class-simple-urls-legacy-admin.php:18
actionadmin_menuincludes\class-simple-urls-legacy-admin.php:19
actionsave_postincludes\class-simple-urls-legacy-admin.php:20
actionmanage_surl_posts_custom_columnincludes\class-simple-urls-legacy-admin.php:21
filtermanage_edit-surl_columnsincludes\class-simple-urls-legacy-admin.php:22
filtermanage_edit-surl_sortable_columnsincludes\class-simple-urls-legacy-admin.php:23
actionadmin_initincludes\class-simple-urls-legacy-admin.php:24
filterpost_row_actionsincludes\class-simple-urls-legacy-admin.php:25
filtermanage_edit-surl_sortable_columnsincludes\class-simple-urls-legacy-admin.php:95
actionplugins_loadedincludes\class-simple-urls-legacy.php:18
actioninitincludes\class-simple-urls-legacy.php:19
actioninitincludes\class-simple-urls-legacy.php:20
actiontemplate_redirectincludes\class-simple-urls-legacy.php:21
actionafter_setup_themeplugin.php:38
actionadmin_noticesplugin.php:61
Maintenance & Trust

Simple URLs Legacy Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedMay 27, 2025
PHP min version7.4
Downloads3K

Community Trust

Rating100/100
Number of ratings2
Active installs100
Developer Profile

Simple URLs Legacy Developer Profile

Matt Ryan

1 plugin · 100 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Simple URLs Legacy

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/simple-urls-legacy/css/simple-urls-legacy-admin.css/wp-content/plugins/simple-urls-legacy/js/simple-urls-legacy-admin.js
Script Paths
/wp-content/plugins/simple-urls-legacy/js/simple-urls-legacy-admin.js

HTML / DOM Fingerprints

CSS Classes
surlsurleg
HTML Comments
Simple URLs Legacy is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 2 of the License, or any later version.Simple URLs Legacy is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.You should have received a copy of the GNU General Public License along with Simple URLs Legacy. If not, see https://www.gnu.org/licenses/gpl-2.0.html.
Data Attributes
name="_surl_redirect"id="_surl_redirect"
FAQ

Frequently Asked Questions about Simple URLs Legacy