SyntaxHighlighter Evolved PHP5 Security & Risk Analysis

wordpress.org/plugins/syntaxhighlighter-evolved-php5

Adds support for the PHP5 language to the SyntaxHighlighter Evolved plugin using the [sourcecode language="php5"] tag and [php5] shortcode.

10 active installs v1.4.3 PHP + WP 2.7+ Updated Nov 17, 2011
codecsshighlighterphp5syntax
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is SyntaxHighlighter Evolved PHP5 Safe to Use in 2026?

Generally Safe

Score 85/100

SyntaxHighlighter Evolved PHP5 has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 14yr ago
Risk Assessment

The static analysis of syntaxhighlighter-evolved-php5 v1.4.3 indicates a strong security posture with no identified attack vectors, dangerous functions, or unsanitized taint flows. The plugin demonstrates excellent coding practices, with 100% of SQL queries utilizing prepared statements and all output properly escaped. The absence of file operations, external HTTP requests, and bundled libraries further contributes to its robustness. Additionally, the plugin's history shows zero known CVEs, suggesting a stable and well-maintained codebase that has not historically presented significant security risks. While the lack of nonces and capability checks on entry points might seem like a concern, it's mitigated by the complete absence of those entry points in the first place. Therefore, the plugin appears to be exceptionally secure based on the provided data.

Vulnerabilities
None known

SyntaxHighlighter Evolved PHP5 Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

SyntaxHighlighter Evolved PHP5 Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

SyntaxHighlighter Evolved PHP5 Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
actioninitsyntaxhighlighter-php5.php:14
filtersyntaxhighlighter_brushessyntaxhighlighter-php5.php:17
Maintenance & Trust

SyntaxHighlighter Evolved PHP5 Maintenance & Trust

Maintenance Signals

WordPress version tested3.2.1
Last updatedNov 17, 2011
PHP min version
Downloads3K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

SyntaxHighlighter Evolved PHP5 Developer Profile

Sandro Bilbeisi

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect SyntaxHighlighter Evolved PHP5

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/syntaxhighlighter-evolved-php5/scripts/shBrushPhp5.js
Script Paths
/wp-content/plugins/syntaxhighlighter-evolved-php5/scripts/shBrushPhp5.js
Version Parameters
syntaxhighlighter-evolved-php5/scripts/shBrushPhp5.js?ver=1.4.3

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about SyntaxHighlighter Evolved PHP5