PLUGIN SECURITY
Is Thesis Openhook safe?
Add customizations to any hook in WordPress and any hook-enabled theme or plugin from within your admin panel! Wanna play hooky?
What this plugin does
- Slug:
thesis-openhook - Author: Rick Beckman
- 1000+ active installs
- 74/100 rating (6 reviews on wordpress.org)
- 282253 all-time downloads
- On WordPress.org since 2008-12-08
astracustom codeflatheadwayk2
Maintenance status
- Latest known version: 4.3.1
- Last updated: 2023-09-29 3:04am GMT
- Tested up to WordPress: 6.3.10
- Max supported PHP (analyzed): 8.4
⚠ Thesis Openhook hasn't been updated in over 1067 days. An unmaintained plugin doesn't receive new security fixes, which is itself a security risk even without a known CVE.
Known vulnerabilities
2 known CVEs on file for Thesis Openhook. Reported between 2023 and 2025.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| — | OpenHook [thesis-openhook] <= 4.3.1 (unfixed + closed) | Cross-Site Request Forgery (CSRF) | Unknown | < 4.3.1 | 4.3.1 | 2025-12-31 | ✓ fixed in latest |
| CVE-2023-5201 | OpenHook [thesis-openhook] < 4.3.1 (closed) | Improper Control of Generation of Code ('Code Injection') | High 8.8 | < 4.3.1 | 4.3.1 | 2023-09-29 | ✓ fixed in latest |
| CVE-2025-62120 | OpenHook <= 4.3.1 - Cross-Site Request Forgery | — | Unknown | not specified | no fix on file | — | — |
How to fix it
Keep Thesis Openhook updated — 4.3.1 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
1 of the vulnerabilities above has no fixed version on file — there's no update that resolves it. Consider deactivating this plugin or switching to one of the alternatives below.
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- FlatPM – Ad Manager, AdSense and Custom Code — 10000+ active installs — 92/100 (9) — max PHP 8.4
- LuckyWP Scripts Control — 3000+ active installs — 96/100 (39) — max PHP 8.4
- Home Page Banner for Astra Theme — 2000+ active installs — 100/100 (3) — max PHP 8.4
- Custom CSS — 1000+ active installs — 50/100 (17)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.