Ads.txt & App-ads.txt Manager for WordPress Security & Risk Analysis

wordpress.org/plugins/app-ads-txt

App-ads.txt & Ads.txt manager allows you to create, manage & publish your app-ads.txt & ads.txt file from your WordPress dashboard.

2K active installs v1.1.9 PHP 5.6+ WP 4.1+ Updated Jan 16, 2026
adsads-txtadstxtadvertisingapp-adstxt
99
A · Safe
CVEs total1
Unpatched0
Last CVEOct 24, 2024
Download
Safety Verdict

Is Ads.txt & App-ads.txt Manager for WordPress Safe to Use in 2026?

Generally Safe

Score 99/100

Ads.txt & App-ads.txt Manager for WordPress has a strong security track record. Known vulnerabilities have been patched promptly.

1 known CVELast CVE: Oct 24, 2024Updated 2mo ago
Risk Assessment

The 'app-ads-txt' plugin version 1.1.9 exhibits a generally good security posture based on the provided static analysis. The absence of any identified attack surface (AJAX, REST API, shortcodes, cron events) is a significant strength, indicating that the plugin does not expose easily exploitable entry points. Furthermore, the complete absence of dangerous functions and raw SQL queries, with all SQL operations utilizing prepared statements, suggests robust data handling and protection against common database injection vulnerabilities. The presence of nonce and capability checks, while only one of each, demonstrates an awareness of WordPress security best practices for critical operations.

Key Concerns

  • Low percentage of properly escaped output
  • Bundled library is outdated (Freemius v1.0)
  • Past medium severity vulnerability
Vulnerabilities
1

Ads.txt & App-ads.txt Manager for WordPress Security Vulnerabilities

CVEs by Year

1 CVE in 2024
2024
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2024-50415medium · 5.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Ads.txt & App-ads.txt Manager for WordPress <= 1.1.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

Oct 24, 2024 Patched in 1.1.8 (8d)
Code Analysis
Analyzed Mar 16, 2026

Ads.txt & App-ads.txt Manager for WordPress Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
114
58 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
1

Bundled Libraries

Freemius1.0

Output Escaping

34% escaped172 total outputs
Attack Surface

Ads.txt & App-ads.txt Manager for WordPress Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 15
actionadmin_initapp-ads-txt-admin.php:4
actionadmin_enqueue_scriptsapp-ads-txt-admin.php:32
actionadmin_menuapp-ads-txt-admin.php:33
filterconnect_urlapp-ads-txt.php:69
filterafter_skip_urlapp-ads-txt.php:70
filterafter_connect_urlapp-ads-txt.php:71
filterafter_pending_connect_urlapp-ads-txt.php:72
filterconnect_messageapp-ads-txt.php:88
actioninitapp-ads-txt.php:138
filterquery_varsapp-ads-txt.php:146
actionparse_requestapp-ads-txt.php:156
actionparse_requestapp-ads-txt.php:187
actioninitapp-ads-txt.php:219
actionadmin_initinc\notices.php:25
actionadmin_noticesinc\notices.php:27
Maintenance & Trust

Ads.txt & App-ads.txt Manager for WordPress Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 16, 2026
PHP min version5.6
Downloads70K

Community Trust

Rating98/100
Number of ratings46
Active installs2K
Developer Profile

Ads.txt & App-ads.txt Manager for WordPress Developer Profile

Pagup

17 plugins · 33K total installs

78
trust score
Avg Security Score
98/100
Avg Patch Time
439 days
View full developer profile
Detection Fingerprints

How We Detect Ads.txt & App-ads.txt Manager for WordPress

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Ads.txt & App-ads.txt Manager for WordPress