Time-based Revision Cleanup Security & Risk Analysis

wordpress.org/plugins/time-based-revisions

Maximize WordPress efficiency with Time-based Revision Cleanup: manage post histories by age, not count, with optional auto-cleanups.

100 active installs v1.1.4 PHP 7.4+ WP 4.9+ Updated Feb 15, 2026
cleanuphistoryoptimizeperformancerevisions
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Time-based Revision Cleanup Safe to Use in 2026?

Generally Safe

Score 100/100

Time-based Revision Cleanup has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The "time-based-revisions" plugin exhibits a mixed security posture. On the positive side, it demonstrates excellent practices regarding SQL queries and output escaping, with 100% of both utilizing secure methods. It also has no known historical vulnerabilities, suggesting a generally stable codebase. However, a significant concern arises from its "attack surface." The plugin has four AJAX handlers, all of which lack authentication checks. This presents a substantial risk as any unauthenticated user could potentially trigger these handlers, leading to unintended actions or information disclosure. The absence of nonce checks and capability checks on these AJAX endpoints further exacerbates this risk. While taint analysis and vulnerability history are clean, the unprotected AJAX endpoints are a critical weakness that needs immediate attention.

Key Concerns

  • AJAX handlers without auth checks
  • AJAX handlers without nonce checks
  • AJAX handlers without capability checks
Vulnerabilities
None known

Time-based Revision Cleanup Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Time-based Revision Cleanup Release Timeline

v1.1.4Current
v1.1.3
v1.1.1
v1.1.0
v1.0.11
Code Analysis
Analyzed Mar 16, 2026

Time-based Revision Cleanup Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
28 escaped
Nonce Checks
0
Capability Checks
0
File Operations
1
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped28 total outputs
Attack Surface
4 unprotected

Time-based Revision Cleanup Attack Surface

Entry Points4
Unprotected4

AJAX Handlers 4

authwp_ajax_crtbr_save_admin_pageclasses\crtbr-admin-panel.php:17
authwp_ajax_crtbr_logs_get_pageclasses\crtbr-admin-panel.php:18
authwp_ajax_crtbr_logs_clearclasses\crtbr-admin-panel.php:19
authwp_ajax_crtbr_get_stats_dataclasses\crtbr-admin-panel.php:20
WordPress Hooks 5
filterwp_revisions_to_keepclasses\crtbr-cleaner.php:18
filterwp_save_post_revision_revisions_before_deletionclasses\crtbr-cleaner.php:19
actioncrtbr_cron_cleanupclasses\crtbr-cleaner.php:25
actionadmin_initclasses\crtbr-plugin.php:53
actionadmin_menuclasses\crtbr-plugin.php:54

Scheduled Events 1

crtbr_cron_cleanup
Maintenance & Trust

Time-based Revision Cleanup Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 15, 2026
PHP min version7.4
Downloads2K

Community Trust

Rating100/100
Number of ratings3
Active installs100
Developer Profile

Time-based Revision Cleanup Developer Profile

Michael Sablone

2 plugins · 120 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Time-based Revision Cleanup

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/time-based-revisions/admin/css/admin.css/wp-content/plugins/time-based-revisions/admin/js/admin.js/wp-content/plugins/time-based-revisions/admin/js/apexcharts.3.53.0.js
Script Paths
/wp-content/plugins/time-based-revisions/admin/js/admin.js/wp-content/plugins/time-based-revisions/admin/js/apexcharts.3.53.0.js
Version Parameters
ver=1.1.4

HTML / DOM Fingerprints

JS Globals
crtbr_obj
FAQ

Frequently Asked Questions about Time-based Revision Cleanup