Keyword Statistics Security & Risk Analysis

wordpress.org/plugins/keyword-statistics

This SEO plugin checks the content of posts/pages for the keyword density (single/phrases) while writing and is automatically setting the META-tags.

200 active installs v1.7.8 PHP + WP 1.5+ Updated Mar 20, 2012
admingooglepostposts
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Keyword Statistics Safe to Use in 2026?

Generally Safe

Score 85/100

Keyword Statistics has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 14yr ago
Risk Assessment

The "keyword-statistics" v1.7.8 plugin exhibits a generally good security posture based on the provided static analysis. The absence of dangerous functions, SQL queries (all prepared), file operations, and external HTTP requests is commendable. The presence of nonce checks, even with a zero-day history, suggests a proactive approach to preventing common attacks. However, a significant concern arises from the extremely low percentage of properly escaped output (16%). This indicates a high risk of Cross-Site Scripting (XSS) vulnerabilities, where user-supplied data could be injected into the output and executed by the browser.

The plugin's vulnerability history shows no recorded CVEs, which is a positive indicator. The lack of reported vulnerabilities over time suggests either a history of secure coding practices or a lack of active exploitation attempts against it. Nevertheless, the low output escaping percentage overshadows this positive history. While the attack surface appears minimal with no apparent unprotected entry points, the unescaped output presents a substantial and likely exploitable risk that needs immediate attention. The plugin's strengths lie in its lack of external dependencies and raw SQL, but its weakness in output sanitization is a critical flaw.

Key Concerns

  • Low output escaping percentage
Vulnerabilities
None known

Keyword Statistics Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Keyword Statistics Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
139
26 escaped
Nonce Checks
8
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

16% escaped165 total outputs
Attack Surface

Keyword Statistics Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 15
actionwp_headkeyword-statistics.php:474
actionsave_postkeyword-statistics.php:513
actionadmin_initkeyword-statistics.php:822
actiondbx_post_advancedkeyword-statistics.php:1034
actiondbx_page_advancedkeyword-statistics.php:1035
actionadmin_menukeyword-statistics.php:1038
actionadmin_menukeyword-statistics.php:1060
actionrss_headkeyword-statistics.php:1955
actionrss2_headkeyword-statistics.php:1956
actionatom_headkeyword-statistics.php:1957
actioncomments_atom_headkeyword-statistics.php:1958
actioncommentsrss2_headkeyword-statistics.php:1959
actionrdf_headerkeyword-statistics.php:1960
actionadmin_headkeyword-statistics.php:1979
actionadmin_footerkeyword-statistics.php:2138
Maintenance & Trust

Keyword Statistics Maintenance & Trust

Maintenance Signals

WordPress version tested3.3.2
Last updatedMar 20, 2012
PHP min version
Downloads211K

Community Trust

Rating80/100
Number of ratings2
Active installs200
Developer Profile

Keyword Statistics Developer Profile

DigitalME

116 plugins · 375K total installs

72
trust score
Avg Security Score
90/100
Avg Patch Time
361 days
View full developer profile
Detection Fingerprints

How We Detect Keyword Statistics

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/keyword-statistics/css/ks-admin.css/wp-content/plugins/keyword-statistics/css/ks-frontend.css/wp-content/plugins/keyword-statistics/css/ks-metabox.css/wp-content/plugins/keyword-statistics/css/ks-tabs.css/wp-content/plugins/keyword-statistics/js/ks-admin.js/wp-content/plugins/keyword-statistics/js/ks-frontend.js/wp-content/plugins/keyword-statistics/js/ks-metabox.js/wp-content/plugins/keyword-statistics/js/ks-tabs.js+2 more
Script Paths
/wp-content/plugins/keyword-statistics/js/ks-admin.js/wp-content/plugins/keyword-statistics/js/ks-frontend.js/wp-content/plugins/keyword-statistics/js/ks-metabox.js/wp-content/plugins/keyword-statistics/js/ks-tabs.js/wp-content/plugins/keyword-statistics/js/ks-tabs-resize.js/wp-content/plugins/keyword-statistics/js/ks-jquery-tools.min.js
Version Parameters
keyword-statistics/css/ks-admin.css?ver=keyword-statistics/css/ks-frontend.css?ver=keyword-statistics/css/ks-metabox.css?ver=keyword-statistics/css/ks-tabs.css?ver=keyword-statistics/js/ks-admin.js?ver=keyword-statistics/js/ks-frontend.js?ver=keyword-statistics/js/ks-metabox.js?ver=keyword-statistics/js/ks-tabs.js?ver=keyword-statistics/js/ks-tabs-resize.js?ver=keyword-statistics/js/ks-jquery-tools.min.js?ver=

HTML / DOM Fingerprints

CSS Classes
ks_metabox
Data Attributes
data-ks-post-id
JS Globals
ks_admin_options
FAQ

Frequently Asked Questions about Keyword Statistics