Subtitles Security & Risk Analysis

wordpress.org/plugins/subtitles

Add subtitles into your WordPress posts, pages, custom post types, and themes. No coding required. Simply activate Subtitles and you're ready.

3K active installs v3.0.0 PHP 5.6+ WP 3.9+ Updated Aug 29, 2017
subtitlesubtitlestitletitles
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Subtitles Safe to Use in 2026?

Generally Safe

Score 85/100

Subtitles has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago
Risk Assessment

The 'subtitles' plugin v3.0.0 exhibits a strong security posture based on the provided static analysis. There are no identified entry points with unprotected access, no dangerous functions used, and all SQL queries utilize prepared statements. The plugin demonstrates good practices regarding output escaping, with a very high percentage (88%) of outputs properly escaped. The presence of nonce and capability checks further strengthens its defense against common web vulnerabilities. Taint analysis shows zero flows with unsanitized paths, indicating no clear vulnerabilities in data handling that could lead to code execution or sensitive data leakage.

Key Concerns

  • Output escaping is not 100%
Vulnerabilities
None known

Subtitles Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Subtitles Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
2
15 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

88% escaped17 total outputs
Attack Surface

Subtitles Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 16
actionedit_form_after_titleadmin\class-subtitles-admin.php:93
actionedit_form_before_permalinkadmin\class-subtitles-admin.php:95
actionsave_postadmin\class-subtitles-admin.php:107
actionadmin_enqueue_scriptsadmin\class-subtitles-admin.php:117
actionmanage_posts_columnsadmin\class-subtitles-admin.php:124
actionmanage_posts_custom_columnadmin\class-subtitles-admin.php:125
actionmanage_pages_columnsadmin\class-subtitles-admin.php:126
actionmanage_pages_custom_columnadmin\class-subtitles-admin.php:127
actioninitpublic\class-subtitles.php:185
actioninitpublic\class-subtitles.php:195
actionwp_headpublic\class-subtitles.php:203
filterthe_titlepublic\class-subtitles.php:226
filtersingle_post_titlepublic\class-subtitles.php:235
filterwp_seo_get_bc_titlepublic\class-subtitles.php:245
actionplugins_loadedsubtitles.php:134
actionplugins_loadedsubtitles.php:183
Maintenance & Trust

Subtitles Maintenance & Trust

Maintenance Signals

WordPress version tested4.8.28
Last updatedAug 29, 2017
PHP min version5.6
Downloads125K

Community Trust

Rating96/100
Number of ratings53
Active installs3K
Developer Profile

Subtitles Developer Profile

Philip Arthur Moore

6 plugins · 6K total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Subtitles

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/subtitles/public/css/subtitles.css/wp-content/plugins/subtitles/public/js/subtitles.js
Script Paths
/wp-content/plugins/subtitles/public/js/subtitles.js
Version Parameters
subtitles/public/css/subtitles.css?ver=subtitles/public/js/subtitles.js?ver=

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Subtitles