Complete Image Sitemap Security & Risk Analysis

wordpress.org/plugins/complete-image-sitemap

The Complete Image Sitemap plugin will generate an XML Sitemap for all images, including Woocommerce products.

1K active installs v1.1.1 PHP + WP 3.0.1+ Updated Jun 9, 2022
google-image-sitemapswoocommerce-image-sitemaps
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Complete Image Sitemap Safe to Use in 2026?

Generally Safe

Score 85/100

Complete Image Sitemap has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3yr ago
Risk Assessment

The "complete-image-sitemap" plugin version 1.1.1 exhibits a generally positive security posture based on the provided static analysis. The absence of any AJAX handlers, REST API routes, shortcodes, or cron events significantly limits the plugin's attack surface, and critically, all identified entry points are reported as protected. Furthermore, the plugin demonstrates good practices by including a nonce check and avoiding external HTTP requests. The vulnerability history being entirely clear is also a strong positive indicator.

Key Concerns

  • SQL queries without prepared statements
  • Low percentage of properly escaped output
  • Unsanitized path in taint flow
  • No capability checks on entry points
Vulnerabilities
None known

Complete Image Sitemap Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Complete Image Sitemap Code Analysis

Dangerous Functions
0
Raw SQL Queries
2
0 prepared
Unescaped Output
19
2 escaped
Nonce Checks
1
Capability Checks
0
File Operations
1
External Requests
0
Bundled Libraries
0

SQL Query Safety

0% prepared2 total queries

Output Escaping

10% escaped21 total outputs
Data Flows
1 unsanitized

Data Flow Analysis

3 flows1 with unsanitized paths
remark_image_sitemap_create (complete-image-sitemap.php:122)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Complete Image Sitemap Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
actionadmin_menucomplete-image-sitemap.php:12
Maintenance & Trust

Complete Image Sitemap Maintenance & Trust

Maintenance Signals

WordPress version tested6.0.11
Last updatedJun 9, 2022
PHP min version
Downloads11K

Community Trust

Rating100/100
Number of ratings3
Active installs1K
Developer Profile

Complete Image Sitemap Developer Profile

Herbert van-Vliet

1 plugin · 1K total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Complete Image Sitemap

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

CSS Classes
wrap
HTML Comments
Created by (http://remark.no/complete-image-sitemap/) on
FAQ

Frequently Asked Questions about Complete Image Sitemap