Plugin inspection:

TinyMCE Advanced

No issues found

Last revised:

Confidence: Medium
This plugin has been given a short, targeted code review.

We didn't find anything worrying in this plugin. It's probably safe. Read more about this recommendation.


This recommendation applies to version of this plugin, but the most recent version is 5.9.2. These findings may no longer be correct.


This plugin contains no major issues of concern.

It does call a function, tdav_get_file, which can be invoked dangerously. However, it does not appear that this plugin calls it in an unsafe way.

Failure criteria

  • Unsafe file or network IO

Read more about our failure criteria.