URL Content Mapper Security & Risk Analysis

wordpress.org/plugins/url-content-mapper

A simple plugin to dynamically add content groups in GA4 and inject code before GA4/GTM scripts.

0 active installs v1.4 PHP 7.2+ WP 5.0+ Updated Dec 17, 2025
analyticscontent-groupsga4google-tag-manager
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is URL Content Mapper Safe to Use in 2026?

Generally Safe

Score 100/100

URL Content Mapper has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The URL Content Mapper plugin v1.4 exhibits a very strong security posture based on the provided static analysis. The plugin has an exceptionally small attack surface, with zero identified entry points such as AJAX handlers, REST API routes, shortcodes, or cron events. Furthermore, the code signals indicate robust security practices. There are no dangerous functions used, all SQL queries are properly prepared, and output escaping is nearly perfect. Nonce and capability checks are implemented on the limited identified interaction points. The absence of critical or high-severity taint flows further reinforces this positive assessment. The vulnerability history is also clean, with no recorded CVEs, suggesting a well-maintained and secure plugin over time. The plugin's strengths lie in its minimal exposure and diligent application of security best practices within its codebase. The only potential area of minor concern, though not flagged as a vulnerability here, is the single file operation, which would warrant deeper inspection in a more comprehensive audit to ensure it's handled securely. However, based on the provided data, this plugin appears to be very secure.

Vulnerabilities
None known

URL Content Mapper Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

URL Content Mapper Release Timeline

v1.4Current
v1.3
v1.2
v1.1
v1.0
Code Analysis
Analyzed Apr 16, 2026

URL Content Mapper Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
2
70 escaped
Nonce Checks
3
Capability Checks
3
File Operations
1
External Requests
0
Bundled Libraries
0

Output Escaping

97% escaped72 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

2 flows
urlcoma_handle_import (functions.php:659)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

URL Content Mapper Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 17
actionadmin_menuadmin-settings.php:20
actionadmin_initadmin-settings.php:244
actionwp_enqueue_scriptsfunctions.php:439
actionwp_headfunctions.php:462
filterrocket_delay_js_exclusionsfunctions.php:493
filterrocket_excluded_inline_js_contentfunctions.php:522
actionadmin_initfunctions.php:568
actionadmin_noticesfunctions.php:666
actionadmin_noticesfunctions.php:674
actionadmin_noticesfunctions.php:682
actionadmin_noticesfunctions.php:698
actionadmin_noticesfunctions.php:706
actionadmin_noticesfunctions.php:717
actionadmin_noticesfunctions.php:730
actionadmin_noticesfunctions.php:734
actionadmin_initfunctions.php:740
actionadmin_enqueue_scriptswp-url-content-mapper.php:56
Maintenance & Trust

URL Content Mapper Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedDec 17, 2025
PHP min version7.2
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

URL Content Mapper Developer Profile

Wajahat Mubashir

4 plugins · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect URL Content Mapper

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/url-content-mapper/assets/admin-script.js/wp-content/plugins/url-content-mapper/assets/admin-style.css/wp-content/plugins/url-content-mapper/assets/frontend-script.js
Script Paths
/wp-content/plugins/url-content-mapper/assets/admin-script.js/wp-content/plugins/url-content-mapper/assets/frontend-script.js
Version Parameters
url-content-mapper/assets/admin-script.js?ver=1.4url-content-mapper/assets/admin-style.css?ver=1.4url-content-mapper/assets/frontend-script.js?ver=1.4

HTML / DOM Fingerprints

HTML Comments
<!-- URL Content Mapper inline script - do not delay -->
Data Attributes
data-urlcoma-debug
JS Globals
window.dataLayervar matchedCategoryvar matchedPriorityfunction normalizePathfunction pathContainsfunction hostsMatch+2 more
FAQ

Frequently Asked Questions about URL Content Mapper