StellarPress Federation Security & Risk Analysis

wordpress.org/plugins/stellarpress-federation

Create your own readable address on the Stellar network by hosting your own Federation Server within WordPress. Attention: this requires a blog hosted …

10 active installs v1.1 PHP 5.2.4+ WP 4.0+ Updated Jul 13, 2021
cryptocurrencylumensstellar-federation-server
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is StellarPress Federation Safe to Use in 2026?

Generally Safe

Score 85/100

StellarPress Federation has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4yr ago
Risk Assessment

The 'stellarpress-federation' v1.1 plugin exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The absence of any identified CVEs, coupled with the fact that all SQL queries utilize prepared statements, is a significant positive. Furthermore, the lack of file operations, external HTTP requests, and the limited number of output points (with a majority being properly escaped) suggest careful development practices. The presence of a capability check, even if only one is found, is also a good sign of implemented access controls.

Key Concerns

  • Only one capability check found
  • Output escaping not fully implemented
  • No nonce checks found
Vulnerabilities
None known

StellarPress Federation Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

StellarPress Federation Release Timeline

v1.1Current
v1.0
Code Analysis
Analyzed Mar 17, 2026

StellarPress Federation Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
1 prepared
Unescaped Output
2
6 escaped
Nonce Checks
0
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared1 total queries

Output Escaping

75% escaped8 total outputs
Attack Surface

StellarPress Federation Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 6
actionplugins_loadedstellarpress-federation.php:82
actionshow_user_profilestellarpress-federation.php:84
actionedit_user_profilestellarpress-federation.php:85
actionpersonal_options_updatestellarpress-federation.php:86
actionedit_user_profile_updatestellarpress-federation.php:87
actionadmin_enqueue_scriptsstellarpress-federation.php:89
Maintenance & Trust

StellarPress Federation Maintenance & Trust

Maintenance Signals

WordPress version tested5.8.13
Last updatedJul 13, 2021
PHP min version5.2.4
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

StellarPress Federation Developer Profile

helmuthb

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect StellarPress Federation

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/stellarpress-federation/stellarpress-federation.php
Version Parameters
stellarpress-federation/stellarpress-federation.php?ver=

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about StellarPress Federation