WP Speed 404 Security & Risk Analysis

wordpress.org/plugins/wp-speed-404

WP Speed 404 can either suppress or log any 404 errors affecting your site under wp-content, wp-admin and wp-includes (configurable).

200 active installs v1.0 PHP + WP 4.2+ Updated Sep 18, 2017
404performancespeed
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is WP Speed 404 Safe to Use in 2026?

Generally Safe

Score 85/100

WP Speed 404 has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago
Risk Assessment

The wp-speed-404 plugin v1.0 exhibits a generally strong security posture based on the provided static analysis. The plugin demonstrates good practices by having no AJAX handlers, REST API routes, shortcodes, or cron events, which significantly limits its attack surface. Furthermore, the absence of dangerous functions, file operations, and external HTTP requests are positive indicators. The use of prepared statements for all SQL queries and the presence of nonce and capability checks are also commendable security measures.

Key Concerns

  • Flows with unsanitized paths
  • Output escaping not fully implemented
Vulnerabilities
None known

WP Speed 404 Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

WP Speed 404 Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
2
7 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

78% escaped9 total outputs
Data Flows
1 unsanitized

Data Flow Analysis

2 flows1 with unsanitized paths
redirect (controllers\WPSpeed404_SettingsController.php:66)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

WP Speed 404 Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 6
actionadmin_initcontrollers\WPSpeed404_SettingsController.php:15
actionadmin_menucontrollers\WPSpeed404_SettingsController.php:16
actionadmin_headcontrollers\WPSpeed404_SettingsController.php:17
actionadmin_noticescontrollers\WPSpeed404_SettingsController.php:18
filtermod_rewrite_rulesinclude\WPSpeed404_Engine.php:21
actiontemplate_redirectinclude\WPSpeed404_Engine.php:25
Maintenance & Trust

WP Speed 404 Maintenance & Trust

Maintenance Signals

WordPress version tested4.8.28
Last updatedSep 18, 2017
PHP min version
Downloads7K

Community Trust

Rating100/100
Number of ratings3
Active installs200
Developer Profile

WP Speed 404 Developer Profile

Michael Thomas

1 plugin · 200 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect WP Speed 404

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-speed-404/assets/

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about WP Speed 404