Zenpost Security & Risk Analysis

wordpress.org/plugins/zenpost

Delivering and managing your Zenpost content from your Zenpost account to your Wordpress site.

10 active installs v1.1.3 PHP + WP 4.7.1+ Updated Oct 14, 2019
bloggingcontent-deliverypublishingsocial-mediazenpost
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Zenpost Safe to Use in 2026?

Generally Safe

Score 85/100

Zenpost has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 6yr ago
Risk Assessment

The "zenpost" v1.1.3 plugin exhibits a strong security posture based on the provided static analysis. There are no identified AJAX handlers, REST API routes, shortcodes, or cron events, resulting in a zero total attack surface. Furthermore, the absence of known CVEs and a clean vulnerability history suggest a well-maintained and secure plugin. The code analysis also reveals a positive trend with 100% of SQL queries using prepared statements, indicating good practice against SQL injection vulnerabilities.

Key Concerns

  • Lack of nonces on entry points
  • Lack of capability checks on entry points
  • Incomplete output escaping
  • File operations without clear context
  • External HTTP requests without clear context
Vulnerabilities
None known

Zenpost Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Zenpost Release Timeline

v1.0
Code Analysis
Analyzed Apr 16, 2026

Zenpost Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
3
1 escaped
Nonce Checks
0
Capability Checks
0
File Operations
1
External Requests
1
Bundled Libraries
0

Output Escaping

25% escaped4 total outputs
Attack Surface

Zenpost Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 6
actionadmin_menuOptions.class.php:58
actionadmin_initOptions.class.php:59
actionadmin_enqueue_scriptsOptions.class.php:60
actionpublish_postclass-zenpost-post-publish.php:25
actionplugins_loadedclass-zenpost-post-publish.php:127
actionrest_api_initzenpost-post-api.php:18
Maintenance & Trust

Zenpost Maintenance & Trust

Maintenance Signals

WordPress version tested5.0.25
Last updatedOct 14, 2019
PHP min version
Downloads1K

Community Trust

Rating100/100
Number of ratings1
Active installs10
Developer Profile

Zenpost Developer Profile

Zenpost

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Zenpost

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/zenpost/admin-page.js/wp-content/plugins/zenpost/assets/clipboard.min.js
Script Paths
/wp-content/plugins/zenpost/admin-page.js/wp-content/plugins/zenpost/assets/clipboard.min.js

HTML / DOM Fingerprints

HTML Comments
<!--admin!@#$%%$#@!-->
REST Endpoints
/wp-json/zenpost/post/wp-json/zenpost/verify/wp-json/zenpost/authors/wp-json/zenpost/new-secret
Shortcode Output
<pre><code>
FAQ

Frequently Asked Questions about Zenpost