Does SpamPatrol have any unpatched vulnerabilities?

No published vulnerabilities and no findings under coordinated disclosure as of the latest data update. Always keep the plugin updated to the latest version.

Is SpamPatrol compatible with WordPress 6.2.9?

According to WordPress.org data, SpamPatrol 1.35.16 has been tested up to WordPress 6.2.9. Check the plugin's changelog for the latest compatibility information.

How often is SpamPatrol updated?

SpamPatrol was last updated on Jun 9, 2023. Frequent updates are generally a positive security signal.

What is SpamPatrol's security score?

SpamPatrol has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

SpamPatrol Security & Risk Analysis

wordpress.org/plugins/spampatrol

SpamPatrol provides intent-based spam detection for form submissions and other message based environments that need text analysis.

0 active installs v1.35.16 PHP + WP 5.0+ Updated Jun 9, 2023

analysisdetectionfilteringformsspam

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is SpamPatrol Safe to Use in 2026?

Generally Safe

Score 85/100

SpamPatrol has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2yr ago

Risk Assessment

The spampatrol plugin version 1.35.16 exhibits a strong security posture based on the provided static analysis. The absence of any identified dangerous functions, raw SQL queries, or unescaped output suggests a good understanding of secure coding practices within the plugin. Furthermore, the lack of any recorded historical vulnerabilities, including critical or high severity ones, further reinforces its apparent stability and security. The plugin also demonstrates a minimal attack surface with no exposed AJAX handlers, REST API routes, or shortcodes that lack authentication or permission checks.

Vulnerabilities

None known

SpamPatrol Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Version History

SpamPatrol Release Timeline

v1.35.16Current

Code Analysis

Analyzed Apr 16, 2026

SpamPatrol Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

8 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

100% escaped8 total outputs

Data Flows · Security

All sanitized

Data Flow Analysis

2 flows

spampatrol_handle_settings (admin.php:104)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

SpamPatrol Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 9

actionadmin_menuadmin.php:12

actionwpcf7_before_send_mailcontact-forms-7.php:12

filterfrm_to_emailformidable-forms.php:11

filterfrm_email_subjectformidable-forms.php:12

filterfrm_email_headerformidable-forms.php:13

filterplugin_action_links_spampatrol/index.phplinks.php:12

filterninja_forms_submit_dataninja-forms.php:16

filterninja_forms_run_action_settingsninja-forms.php:17

filterninja_forms_action_email_sendninja-forms.php:18

Maintenance & Trust

SpamPatrol Maintenance & Trust

Maintenance Signals

WordPress version tested6.2.9

Last updatedJun 9, 2023

PHP min version

Downloads709

Community Trust

Rating0/100

Number of ratings0

Active installs0

Alternatives

SpamPatrol Alternatives

Anti-Spam Filter for Gravity Forms

anti-spam-filter-gravity-forms

A lightweight anti-spam solution for Gravity Forms that blocks unwanted submissions using keyword filtering and Cyrillic text detection.

30 No CVEs

Gravity Forms Zero Spam

gravity-forms-zero-spam

100

Enhance your Gravity Forms to include anti-spam measures originally based on the work of David Walsh's "Zero Spam" technique.

100K No CVEs

Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR)

contact-form-7-image-captcha

100

Adds an Image CAPTCHA to Contact Form 7 and WPForms, GDPR ready, perfect WPForms or Contact Form 7 Spam Protection Image CAPTCHA, adds a honeypot

80K No CVEs

OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA)

oopspam-anti-spam

Protect your forms from spam with 99.9% accuracy - no CAPTCHA, no JavaScript, no tracking. Trusted by 3.5M+ websites.

6K 4 CVEs

Message Filter for Contact Form 7

cf7-message-filter

Filter messages submitted through contact form 7 based on words and/or emails listed as restricted.

1K 5 CVEs

Developer Profile

SpamPatrol Developer Profile

SpamPatrol.io

1 plugin · 0 total installs

trust score

Avg Security Score

85/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect SpamPatrol

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/spampatrol/dist/styles/spampatrol-admin.css/wp-content/plugins/spampatrol/dist/scripts/spampatrol-admin.js

Script Paths

/wp-content/plugins/spampatrol/dist/scripts/spampatrol-admin.js

Version Parameters

spampatrol/dist/styles/spampatrol-admin.css?ver=spampatrol/dist/scripts/spampatrol-admin.js?ver=

HTML / DOM Fingerprints

Data Attributes

spampatrol:content

FAQ