WPS Post Type Search Security & Risk Analysis

wordpress.org/plugins/wps-post-type-search

Creates a search widget to allow you to search single/multiple post types

10 active installs v0.2 PHP + WP 3.0+ Updated Unknown
custom-post-typespost-typessearchwidget
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WPS Post Type Search Safe to Use in 2026?

Generally Safe

Score 100/100

WPS Post Type Search has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

The "wps-post-type-search" v0.2 plugin exhibits a generally good security posture based on the static analysis provided. There are no identified entry points like AJAX handlers, REST API routes, or shortcodes that are exposed without proper authorization checks, which significantly reduces the attack surface. The code also demonstrates good practices by not using dangerous functions, avoiding file operations, and not making external HTTP requests. Furthermore, all SQL queries are confirmed to use prepared statements, mitigating SQL injection risks. The absence of any recorded vulnerabilities in its history is a positive indicator of its development and maintenance.

Key Concerns

  • Low output escaping
  • No nonce checks
  • No capability checks
Vulnerabilities
None known

WPS Post Type Search Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

WPS Post Type Search Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
12
2 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

14% escaped14 total outputs
Attack Surface

WPS Post Type Search Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
actionwidgets_initwps-post-type-search.php:42
filterpre_get_postswps-post-type-search.php:122
Maintenance & Trust

WPS Post Type Search Maintenance & Trust

Maintenance Signals

WordPress version tested3.2.1
Last updatedUnknown
PHP min version
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

WPS Post Type Search Developer Profile

Travis Smith

11 plugins · 2K total installs

86
trust score
Avg Security Score
89/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect WPS Post Type Search

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wps-post-type-search/wps-post-type-search.php

HTML / DOM Fingerprints

CSS Classes
widget_search_pt
Data Attributes
id="searchform"class="searchform"action="<?php echo home_url( '/' ); ?>"
FAQ

Frequently Asked Questions about WPS Post Type Search