WP Post Front Security & Risk Analysis

wordpress.org/plugins/wp-post-front

The plugin to help you create or edit post of any post type from any frontend single post page

10 active installs v1.1 PHP + WP 3.0.1+ Updated Oct 12, 2016
frontend-postpost-frontpost-frontendwp-postwp-post-front
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is WP Post Front Safe to Use in 2026?

Generally Safe

Score 85/100

WP Post Front has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9yr ago
Risk Assessment

The "wp-post-front" v1.1 plugin exhibits a generally good security posture, with a significant number of positive indicators. Notably, all AJAX handlers, which represent the entire attack surface of 6 entry points, appear to have capability checks. Furthermore, all SQL queries utilize prepared statements, and there are no file operations or external HTTP requests, reducing common attack vectors. The plugin also demonstrates awareness of security best practices by including nonce checks, albeit only one is present across the code.

Key Concerns

  • Low percentage of properly escaped output
  • Only one nonce check present
  • One unsanitized path in taint analysis
Vulnerabilities
None known

WP Post Front Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

WP Post Front Release Timeline

No version history available.
Code Analysis
Analyzed Mar 17, 2026

WP Post Front Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
45
18 escaped
Nonce Checks
1
Capability Checks
6
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

29% escaped63 total outputs
Data Flows · Security
1 unsanitized

Data Flow Analysis

4 flows1 with unsanitized paths
<post-new-template> (includes\post-new-template.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

WP Post Front Attack Surface

Entry Points6
Unprotected0

AJAX Handlers 6

authwp_ajax_front-post-actionwp-post-front.php:67
noprivwp_ajax_front-post-actionwp-post-front.php:68
authwp_ajax_front-post-add-termwp-post-front.php:70
noprivwp_ajax_front-post-add-termwp-post-front.php:71
authwp_ajax_wpf_save_postwp-post-front.php:73
noprivwp_ajax_wpf_save_postwp-post-front.php:74
WordPress Hooks 3
filterthe_contentwp-post-front.php:64
actionwp_enqueue_scriptswp-post-front.php:65
actionin_plugin_update_message-wp-post-front/wp-post-front.phpwp-post-front.php:224
Maintenance & Trust

WP Post Front Maintenance & Trust

Maintenance Signals

WordPress version tested4.6.30
Last updatedOct 12, 2016
PHP min version
Downloads2K

Community Trust

Rating100/100
Number of ratings1
Active installs10
Developer Profile

WP Post Front Developer Profile

Mithu A Quayium

17 plugins · 490 total installs

84
trust score
Avg Security Score
86/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect WP Post Front

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-post-front/assets/style.css/wp-content/plugins/wp-post-front/assets/scripts.js
Script Paths
/wp-content/plugins/wp-post-front/assets/scripts.js
Version Parameters
wp-post-front/assets/style.css?ver=wp-post-front/assets/scripts.js?ver=

HTML / DOM Fingerprints

CSS Classes
wpf-add-postwpf-add-post-containerwpf-add-post-formwpf-form-fieldfront-post-modal
Data Attributes
data-post_typedata-actiondata-id
JS Globals
wpf_data
FAQ

Frequently Asked Questions about WP Post Front