JSM file_get_contents() Shortcode
Limited data: JSM file_get_contents() Shortcode has under 1,000 active installs and less than 12 weeks of history, so we do not rate it yet.
Capped at 39 while a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 25 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 22 Sep 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.6 Oct 2025Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 6 days ago
- Releases, 24 months
- 1
- Tested up to
- 7.1 current
- Requires PHP
- 7.4.33 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 1 |
Last release 29 Oct 2026. Tested with WordPress 7.1 (current).
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 22 Sep 2025 | JSM file_get_contents() Shortcode <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 2.7.1 | No fix | n/a |
| 21 Dec 2023 | JSM file_get_contents() Shortcode <= 2.7.0 - Authenticated (Contributor+) Server-Side Request Forgery via Shortcode | 5.4 | <= 2.7.0 | 2.7.1 | 1044 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 5.0 from 1 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 1 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Momentum
300+ active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 2.7.1 |
|---|---|
| Author | JS Morisset |
| Added | 22 Jun 2014 |
| Last updated | 29 Oct 2026 |
| Active installs | 300+ |
| Requires WordPress | 6.0 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4.33 |
| Category | not stated |
| Tags | url, file, include, shortcode, file_get_contents |
Other plugins by this author: JSM Show Post Metadata, JSM Force HTTP to HTTPS / SSL - No Setup, Fast and Reliable, WPSSO Core - Complete Schema Markup and Meta Tags, JSM Show User Metadata, JSM Non-Breaking Space (nbsp) for French Content, WPSSO Tune WP Image Editors, JSM Show Term Metadata, JSM Show Order Metadata for WooCommerce HPOS, WPSSO Schema Product Metadata for WooCommerce, WPSSO WP Sitemaps XML with News, Image, and Video Sitemap, WPSSO Schema Organization and Place Manager, WPSSO Schema Breadcrumbs Markup
Questions
Is JSM file_get_contents() Shortcode still maintained?
JSM file_get_contents() Shortcode was last updated on 29 Oct 2026. Its Canary status is Limited data.
Is JSM file_get_contents() Shortcode safe?
JSM file_get_contents() Shortcode has 1 published vulnerability with no patched version. Its Canary status is Limited data.
Who owns JSM file_get_contents() Shortcode?
The wordpress.org author is JS Morisset. We have recorded no ownership change.
What can I use instead of JSM file_get_contents() Shortcode?
We have no healthier plugin in the same category on record yet.