wp_head() cleaner Security & Risk Analysis

wordpress.org/plugins/wp-head-cleaner

Remove unused tags from wp_head() output.

2K active installs v2.0.9 PHP 7.3+ WP 5.0+ Updated Nov 15, 2025
cleanheadmetaremovewp_head
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is wp_head() cleaner Safe to Use in 2026?

Generally Safe

Score 100/100

wp_head() cleaner has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The "wp-head-cleaner" plugin version 2.0.9 exhibits a strong security posture based on the provided static analysis. The absence of any AJAX handlers, REST API routes, shortcodes, or cron events means the plugin has a virtually non-existent attack surface, which is a significant strength. Furthermore, the code signals indicate a robust approach to secure coding practices. All SQL queries are prepared, there are no file operations or external HTTP requests, and a high percentage of output is properly escaped. The presence of a capability check also suggests an awareness of authorization principles, although the specific implementation is not detailed.

Key Concerns

  • No nonce checks implemented
  • Low percentage of output escaped (11% unsanitized)
Vulnerabilities
None known

wp_head() cleaner Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

wp_head() cleaner Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
8 escaped
Nonce Checks
0
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

89% escaped9 total outputs
Attack Surface

wp_head() cleaner Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 3
actionadmin_initwp-head-cleaner.php:26
actionadmin_menuwp-head-cleaner.php:27
actioninitwp-head-cleaner.php:28
Maintenance & Trust

wp_head() cleaner Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedNov 15, 2025
PHP min version7.3
Downloads68K

Community Trust

Rating100/100
Number of ratings6
Active installs2K
Developer Profile

wp_head() cleaner Developer Profile

jwilsson

1 plugin · 2K total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect wp_head() cleaner

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about wp_head() cleaner