SuperSearch Security & Risk Analysis

wordpress.org/plugins/supersearch

Improved WordPress and WooCommerce search with lightning-fast results. Search products, pages and posts. No site slowdown!

10 active installs v1.0.12 PHP 7.4+ WP 6.0+ Updated Mar 5, 2024
product-searchsuper-searchsupersearchwoocommerce-searchwordpress-search
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is SuperSearch Safe to Use in 2026?

Generally Safe

Score 85/100

SuperSearch has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2yr ago
Risk Assessment

The SuperSearch plugin v1.0.12 exhibits a generally strong security posture based on the static analysis. All identified entry points, including AJAX handlers, shortcodes, and cron events, appear to have appropriate authentication and capability checks. The plugin also demonstrates good coding practices by utilizing prepared statements for all SQL queries and properly escaping all output, which are critical for preventing common web vulnerabilities like SQL injection and Cross-Site Scripting. Furthermore, the absence of any recorded vulnerabilities, including CVEs, suggests a history of secure development or a lack of discovery of any weaknesses.

Key Concerns

  • Flows with unsanitized paths
  • External HTTP requests
Vulnerabilities
None known

SuperSearch Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

SuperSearch Release Timeline

v1.0.12Current
Code Analysis
Analyzed Mar 16, 2026

SuperSearch Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
36 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
1
Bundled Libraries
0

Output Escaping

100% escaped36 total outputs
Data Flows · Security
2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths
supersearch_process_posts_handler (supersearch.php:168)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

SuperSearch Attack Surface

Entry Points2
Unprotected0

AJAX Handlers 1

authwp_ajax_process_postssupersearch.php:210

Shortcodes 1

[supersearch] supersearch-frontend.php:49
WordPress Hooks 13
actionwp_enqueue_scriptssupersearch-frontend.php:15
actionwp_enqueue_scriptssupersearch-frontend.php:21
actionsend_headerssupersearch-frontend.php:30
actionadmin_menusupersearch.php:34
actionadmin_enqueue_scriptssupersearch.php:157
actionadmin_enqueue_scriptssupersearch.php:166
filterrest_prepare_postsupersearch.php:250
filterrest_prepare_postsupersearch.php:259
filterrest_prepare_postsupersearch.php:273
filterrest_prepare_pagesupersearch.php:274
actionadmin_initsupersearch.php:278
actionsave_postsupersearch.php:385
actionsupersearch_daily_index_updatesupersearch.php:411

Scheduled Events 1

supersearch_daily_index_update
Maintenance & Trust

SuperSearch Maintenance & Trust

Maintenance Signals

WordPress version tested6.4.8
Last updatedMar 5, 2024
PHP min version7.4
Downloads1K

Community Trust

Rating100/100
Number of ratings2
Active installs10
Developer Profile

SuperSearch Developer Profile

hiorbit

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect SuperSearch

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/supersearch/supersearch-admin.js/wp-content/plugins/supersearch/supersearch-admin.css
Script Paths
/wp-content/plugins/supersearch/supersearch-admin.js
Version Parameters
supersearch-admin.js?ver=supersearch-admin.css?ver=

HTML / DOM Fingerprints

CSS Classes
nav-tabnav-tab-active
Data Attributes
data-tab
JS Globals
searchitem_progresssearchlimit_progresssupersearch
Shortcode Output
<img src="style="float:right;margin-left:20px;"><div id="searchlimit-progress-bar"<div id="searchitem-progress-bar"
FAQ

Frequently Asked Questions about SuperSearch