VA Simple Expires Security & Risk Analysis

wordpress.org/plugins/va-simple-expires

This is the fork of Simple Expires created by Mr. abmcr. Simple plugin which can set up the term of validity.

900 active installs v1.0.6 PHP + WP 3.8.2+ Updated Dec 18, 2016
automationexpireexpiresexpiringschedule
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is VA Simple Expires Safe to Use in 2026?

Generally Safe

Score 85/100

VA Simple Expires has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9yr ago
Risk Assessment

The "va-simple-expires" v1.0.6 plugin exhibits a generally strong security posture based on the provided static analysis. The absence of AJAX handlers, REST API routes, shortcodes, and cron events significantly limits the attack surface. Furthermore, the code demonstrates good development practices by exclusively using prepared statements for all SQL queries and implementing nonce and capability checks. The lack of file operations and external HTTP requests also reduces potential vulnerabilities. The taint analysis reporting no flows with unsanitized paths or critical/high severity issues is a very positive sign.

Key Concerns

  • Output escaping is not universally applied
Vulnerabilities
None known

VA Simple Expires Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

VA Simple Expires Release Timeline

v1.0.6Current
v1.0.5
v1.0.4
v1.0.3
v1.0.2
v1.0.1
v1.0.0
Code Analysis
Analyzed Mar 16, 2026

VA Simple Expires Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
4 prepared
Unescaped Output
5
17 escaped
Nonce Checks
1
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared4 total queries

Output Escaping

77% escaped22 total outputs
Attack Surface

VA Simple Expires Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 8
actionplugins_loadedva-simple-expires.php:52
actionplugins_loadedva-simple-expires.php:84
actionadmin_menuva-simple-expires.php:85
actionadmin_headva-simple-expires.php:86
actioninitva-simple-expires.php:87
actionadd_meta_boxesva-simple-expires.php:88
actionsave_postva-simple-expires.php:89
actionsimple_expiresva-simple-expires.php:171
Maintenance & Trust

VA Simple Expires Maintenance & Trust

Maintenance Signals

WordPress version tested4.5.33
Last updatedDec 18, 2016
PHP min version
Downloads9K

Community Trust

Rating88/100
Number of ratings7
Active installs900
Developer Profile

VA Simple Expires Developer Profile

kuck1u

7 plugins · 2K total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect VA Simple Expires

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/va-simple-expires/css/vase-style.css
Version Parameters
va-simple-expires/css/vase-style.css?ver=

HTML / DOM Fingerprints

Data Attributes
name="scadenza-enable"name="scadenza-date"
JS Globals
jQuery(document).ready(function($){$("select#post_status").append(
FAQ

Frequently Asked Questions about VA Simple Expires