WPArtisan Multisite Crossposter Security & Risk Analysis

wordpress.org/plugins/wpartisan-multisite-crossposter

Sync or crosspost posts, pages or custom post types between blogs or sites in a WordPress Multisite environment

20 active installs v0.1.0 PHP + WP 4.4+ Updated Nov 7, 2017
crosspostingmultisitepostswpmu
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WPArtisan Multisite Crossposter Safe to Use in 2026?

Generally Safe

Score 85/100

WPArtisan Multisite Crossposter has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago
Risk Assessment

The "wpartisan-multisite-crossposter" plugin v0.1.0 exhibits a strong initial security posture based on the static analysis. The absence of direct attack surface points like AJAX handlers, REST API routes, and shortcodes is a significant positive. Furthermore, the code demonstrates good practices by utilizing prepared statements for all SQL queries, ensuring output is properly escaped, and implementing at least one nonce and capability check. The lack of any recorded vulnerabilities in its history also suggests a mature development process or a lack of prior discovery, which is reassuring.

Key Concerns

  • No direct attack vectors (AJAX, REST, shortcodes)
  • 100% prepared SQL statements
  • 100% properly escaped output
  • No file operations
  • Nonce check present
  • Capability check present
  • No recorded CVEs
  • Bundled Select2 library
  • 4 external HTTP requests
  • 3 cron events (potential for unattended execution)
Vulnerabilities
None known

WPArtisan Multisite Crossposter Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

WPArtisan Multisite Crossposter Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
9 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
4
Bundled Libraries
1

Bundled Libraries

Select2

Output Escaping

100% escaped9 total outputs
Attack Surface

WPArtisan Multisite Crossposter Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 21
actionadmin_enqueue_scriptsincludes\class-mscp-admin.php:35
actionadmin_enqueue_scriptsincludes\class-mscp-admin.php:36
actionadd_meta_boxesincludes\class-mscp-admin.php:37
actionsave_postincludes\class-mscp-admin.php:38
actionload-post.phpincludes\class-mscp-admin.php:39
actionload-post-new.phpincludes\class-mscp-admin.php:40
actionprofile_updateincludes\class-mscp-admin.php:42
actionset_user_roleincludes\class-mscp-admin.php:43
filterpost_row_actionsincludes\class-mscp-admin.php:45
filterpage_row_actionsincludes\class-mscp-admin.php:46
actiontemplate_redirectincludes\class-mscp-aggregator.php:35
actionsave_postincludes\class-mscp-aggregator.php:36
actionmscp_aggregate_postincludes\class-mscp-aggregator.php:37
actionmscp_aggregate_post_taxonomyincludes\class-mscp-aggregator.php:38
actiontrash_postincludes\class-mscp-aggregator.php:39
actionbefore_delete_postincludes\class-mscp-aggregator.php:40
actionmscp_post_blogs_savedincludes\class-mscp-aggregator.php:41
actionmscp_aggregate_post_deletionincludes\class-mscp-aggregator.php:42
filterpost_linkincludes\class-mscp-aggregator.php:44
filtermscp_schedule_post_aggregation_blogsincludes\class-mscp-aggregator.php:45
actionsave_postincludes\class-mscp-aggregator.php:155

Scheduled Events 3

mscp_aggregate_post
mscp_aggregate_post_taxonomy
mscp_aggregate_post_deletion
Maintenance & Trust

WPArtisan Multisite Crossposter Maintenance & Trust

Maintenance Signals

WordPress version tested4.8.28
Last updatedNov 7, 2017
PHP min version
Downloads3K

Community Trust

Rating100/100
Number of ratings3
Active installs20
Developer Profile

WPArtisan Multisite Crossposter Developer Profile

OzTheGreat

3 plugins · 520 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect WPArtisan Multisite Crossposter

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wpartisan-multisite-crossposter/assets/select2/css/select2.min.css/wp-content/plugins/wpartisan-multisite-crossposter/assets/select2/js/select2.min.js/wp-content/plugins/wpartisan-multisite-crossposter/assets/mscp-admin.js
Script Paths
/wp-content/plugins/wpartisan-multisite-crossposter/assets/mscp-admin.js
Version Parameters
wpartisan-multisite-crossposter/assets/select2/js/select2.min.js?ver=4.0.1wpartisan-multisite-crossposter/assets/mscp-admin.js?ver=4.0.1wpartisan-multisite-crossposter/assets/select2/css/select2.min.css?ver=4.0.1

HTML / DOM Fingerprints

CSS Classes
full-width
HTML Comments
<!-- Use this filter to change what post types to show the crossposter on. --><!-- Defaults to `null` which is everywhere, posts, pages & custom post types. --><!-- Use this fitler to adjust the blogs displayed --><!-- in the metabox select field. -->+8 more
Data Attributes
name="mscp_blogs[]"id="mscp"class="full-width"
FAQ

Frequently Asked Questions about WPArtisan Multisite Crossposter