WP-DenyHost Security & Risk Analysis

wordpress.org/plugins/wp-denyhost

WP-DenyHost denies a spammer from accessing your WordPress site. WP-DenyHost can add spammers to the CloudFlare Block list

10 active installs v1.3.1 PHP + WP 4.4+ Updated Jul 28, 2016
akismetcloudflaredeny-hostspam
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WP-DenyHost Safe to Use in 2026?

Generally Safe

Score 85/100

WP-DenyHost has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9yr ago
Risk Assessment

The "wp-denyhost" v1.3.1 plugin exhibits a generally positive security posture based on the provided static analysis. The absence of any recorded CVEs and the plugin's reliance on prepared statements for its SQL queries are strong indicators of good security practices. Furthermore, the limited attack surface with no unprotected entry points and the presence of a nonce check are reassuring. The plugin also appears to be free of dangerous functions and file operations, further contributing to its secure design.

Key Concerns

  • Outputs are not properly escaped
  • External HTTP requests without clear purpose
Vulnerabilities
None known

WP-DenyHost Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

WP-DenyHost Release Timeline

v1.3.1Current
v1.3.0
v1.2.6
Code Analysis
Analyzed Apr 16, 2026

WP-DenyHost Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
4
0 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
2
Bundled Libraries
0

SQL Query Safety

100% prepared2 total queries

Output Escaping

0% escaped4 total outputs
Attack Surface

WP-DenyHost Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 3
actionadmin_initwp-denyhost.php:64
actionadmin_menuwp-denyhost.php:65
actioninitwp-denyhost.php:66
Maintenance & Trust

WP-DenyHost Maintenance & Trust

Maintenance Signals

WordPress version tested4.6.30
Last updatedJul 28, 2016
PHP min version
Downloads4K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

WP-DenyHost Developer Profile

PersianScript

102 plugins · 177K total installs

72
trust score
Avg Security Score
90/100
Avg Patch Time
304 days
View full developer profile
Detection Fingerprints

How We Detect WP-DenyHost

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-denyhost/js/script.js
Script Paths
/wp-content/plugins/wp-denyhost/js/script.js
Version Parameters
wp-denyhost/js/script.js?ver=

HTML / DOM Fingerprints

HTML Comments
<!-- Settings links --><!-- If you want to support localisation, use a plugin like LocoTranslate--><!-- Settings/options page -->
FAQ

Frequently Asked Questions about WP-DenyHost