Does Quicktags for WP have any unpatched vulnerabilities?

No. All known vulnerabilities in Quicktags for WP have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Quicktags for WP compatible with WordPress 6.9.4?

According to WordPress.org data, Quicktags for WP 1.4.5 has been tested up to WordPress 6.9.4. Check the plugin's changelog for the latest compatibility information.

How often is Quicktags for WP updated?

Quicktags for WP was last updated on Dec 8, 2025. Frequent updates are generally a positive security signal.

What is Quicktags for WP's security score?

Quicktags for WP has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Quicktags for WP Security & Risk Analysis

wordpress.org/plugins/wp-quicktags

This simple plugin adds useful buttons to the native WordPress HTML editor.

200 active installs v1.4.5 PHP + WP + Updated Dec 8, 2025

classic-editoredithtml-editorquicktags

A · Safe

CVEs total0

Unpatched0

Last CVENever

Download

Safety Verdict

Is Quicktags for WP Safe to Use in 2026?

Generally Safe

Score 100/100

Quicktags for WP has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago

Risk Assessment

The static analysis of wp-quicktags v1.4.5 indicates a strong security posture with no identified attack vectors such as AJAX handlers, REST API routes, shortcodes, or cron events. The plugin demonstrates excellent coding practices by utilizing prepared statements for all SQL queries and properly escaping nearly all output. The absence of file operations, external HTTP requests, and dangerous functions further contributes to a secure foundation. The taint analysis revealing no unsanitized paths or critical/high severity flows is also a very positive sign.

Key Concerns

No nonce checks found
No capability checks found

Vulnerabilities

None known

Quicktags for WP Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

Quicktags for WP Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

36 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

97% escaped37 total outputs

Attack Surface

Quicktags for WP Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 6

actionplugins_loadedquicktags-for-wp.php:26

actionadmin_initquicktags-for-wp.php:31

actionadmin_noticesquicktags-for-wp.php:36

actionadmin_enqueue_scriptsquicktags-for-wp.php:64

actionwp_enqueue_scriptsquicktags-for-wp.php:72

actionadmin_print_footer_scriptsquicktags-for-wp.php:99

Maintenance & Trust

Quicktags for WP Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4

Last updatedDec 8, 2025

PHP min version

Downloads8K

Community Trust

Rating80/100

Number of ratings4

Active installs200

Alternatives

Quicktags for WP Alternatives

Classic Editor

classic-editor

100

Enables the previous "classic" editor and the old-style Edit Post screen with TinyMCE, Meta Boxes, etc. Supports all plugins that extend this screen.

9.0M No CVEs

Advanced Editor Tools

tinymce-advanced

100

Extends and enhances the block editor (Gutenberg) and the classic editor (TinyMCE).

2.0M 1 CVE

Disable Gutenberg

disable-gutenberg

100

Disable Gutenberg Block Editor and restore the Classic Editor and original Edit Post screen (TinyMCE, meta boxes, etc.).

600K No CVEs

Classic Editor +

classic-editor-addon

The "Classic Editor +" plugin disables the block editor, removes enqueued scripts/styles and brings back classic Widgets.

50K 1 CVE

Classic Editor and Classic Widgets

classic-editor-and-classic-widgets

Disables Gutenberg editor totally everywhere and enables Classic Editor and Classic Widgets.

20K 2 CVEs

Developer Profile

Quicktags for WP Developer Profile

David Klhufek

3 plugins · 220 total installs

trust score

Avg Security Score

100/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Quicktags for WP

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/wp-quicktags/style.css

Version Parameters

wp-quicktags/style.css?ver=

HTML / DOM Fingerprints

JS Globals

QTags

FAQ