WP Gist Embed Security & Risk Analysis

wordpress.org/plugins/wp-gist-embed

This plugin provides Gist embedding via shortcode as well as adding Gist embed buttons to the visual and text editors.

10 active installs v0.2 PHP + WP 3.0.1+ Updated Jun 19, 2017
gistgithubshortcode
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WP Gist Embed Safe to Use in 2026?

Generally Safe

Score 85/100

WP Gist Embed has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago
Risk Assessment

The wp-gist-embed plugin version 0.2 exhibits a strong security posture based on the provided static analysis and vulnerability history. The code demonstrates good practices with all identified SQL queries utilizing prepared statements and all outputs being properly escaped. Furthermore, there are no recorded vulnerabilities (CVEs) for this plugin, indicating a history of stability and diligent security maintenance by the developers. The plugin's attack surface is minimal, consisting solely of a single shortcode, and importantly, it lacks any unprotected entry points. The analysis also shows a complete absence of critical or high severity taint flows, dangerous functions, file operations, and external HTTP requests, which further reinforces its secure design.

Vulnerabilities
None known

WP Gist Embed Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

WP Gist Embed Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

WP Gist Embed Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[gist] embed-gist.php:74
WordPress Hooks 5
actionadmin_initembed-gist.php:30
filtermce_buttonsembed-gist.php:34
filtermce_external_pluginsembed-gist.php:35
actionadmin_print_scriptsembed-gist.php:55
filterplugin_row_metaembed-gist.php:87
Maintenance & Trust

WP Gist Embed Maintenance & Trust

Maintenance Signals

WordPress version tested4.8.28
Last updatedJun 19, 2017
PHP min version
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

WP Gist Embed Developer Profile

James Robinson

2 plugins · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect WP Gist Embed

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-gist-embed/mce-gist.js/wp-content/plugins/wp-gist-embed/quicktags-gist.js
Script Paths
mce-gist.jsquicktags-gist.js

HTML / DOM Fingerprints

CSS Classes
gist
Shortcode Output
<script src="
FAQ

Frequently Asked Questions about WP Gist Embed