WP-Safety

Mescio for Agents Security & Risk Analysis

wordpress.org/plugins/mescio-for-agents

Mescio for Agents serves your WordPress content as clean Markdown to AI agents and GPT crawlers. Human visitors never notice a thing.

20 active installs v1.6.5 PHP 8.0+ WP 6.0+ Updated Mar 16, 2026
agentsaillmmarkdownrest-api
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Mescio for Agents Safe to Use in 2026?

Generally Safe

Score 100/100

Mescio for Agents has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The mescio-for-agents plugin v1.6.5 exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The absence of known CVEs and a clean vulnerability history are highly positive indicators. Furthermore, the plugin demonstrates good development practices with 100% of SQL queries using prepared statements and a high percentage of output being properly escaped. The presence of nonce and capability checks, though limited in number, is also a positive sign.

Key Concerns

  • Dangerous function preg_replace(/e) usage
  • Flows with unsanitized paths found
  • Limited number of capability checks
  • Limited number of nonce checks
Vulnerabilities
None known

Mescio for Agents Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Mescio for Agents Release Timeline

v1.6.5Current
v1.6.4
v1.6.3
v1.6.2
v1.6.1
v1.6.0
v1.5.0
v1.4.0
v1.3.0
v1.2.3
Code Analysis
Analyzed Apr 16, 2026

Mescio for Agents Code Analysis

Dangerous Functions
3
Raw SQL Queries
0
0 prepared
Unescaped Output
10
207 escaped
Nonce Checks
1
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0

Dangerous Functions Found

preg_replace(/e)preg_replace( '/\[et_pb_[^\]]*\].*?\[\/eincludes/class-markdown-generator.php:144
preg_replace(/e)preg_replace( '/\[\/eincludes/class-markdown-generator.php:146
preg_replace(/e)preg_replace( '/<em[^>]*>(.*?)<\/eincludes/class-markdown-generator.php:241

Output Escaping

95% escaped217 total outputs
Data Flows · Security
4 unsanitized

Data Flow Analysis

4 flows4 with unsanitized paths
serve (includes/class-llms-endpoints.php:98)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Mescio for Agents Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 15
filterrest_pre_serve_requestincludes/class-rest-api.php:101
actioninitmescio-for-agents.php:43
actiontemplate_redirectmescio-for-agents.php:70
actionrest_api_initmescio-for-agents.php:73
filterrest_pre_dispatchmescio-for-agents.php:74
filterrest_post_dispatchmescio-for-agents.php:76
filterquery_varsmescio-for-agents.php:80
actiontemplate_redirectmescio-for-agents.php:81
actionparse_requestmescio-for-agents.php:83
filterquery_varsmescio-for-agents.php:87
actiontemplate_redirectmescio-for-agents.php:88
actionadmin_menumescio-for-agents.php:91
actionadmin_initmescio-for-agents.php:92
actionadd_meta_boxesmescio-for-agents.php:93
actionsave_postmescio-for-agents.php:94
Maintenance & Trust

Mescio for Agents Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 16, 2026
PHP min version8.0
Downloads516

Community Trust

Rating0/100
Number of ratings0
Active installs20
Alternatives

Mescio for Agents Alternatives

Lunatec Article to Markdown

Lunatec Article to Markdown

lunatec-article-to-markdown

A
100

Exposes a clean Markdown version of WordPress posts for AI agents, LLMs, and crawlers.

0 No CVEs
JumpsuitAI – llms.txt + Markdown Endpoints

JumpsuitAI – llms.txt + Markdown Endpoints

jumpsuitai-llms-txt

A
100

Generate /llms.txt, /llms-full.txt & .md endpoints for AI/LLMs in WordPress. Works with Yoast SEO, Rank Math, SEOPress & All in One SEO.

100 No CVEs
Markdown for AI Agents

Markdown for AI Agents

markdown-for-ai-agents

A
100

Serve clean Markdown versions of WordPress content to AI agents using HTTP content negotiation.

40 No CVEs
LLM Markdown – Expose Content as .md

LLM Markdown – Expose Content as .md

llm-markdown

A
100

Expose WordPress posts and pages as real .md URLs with YAML front matter for LLMs, AI ingestion, and headless workflows.

20 No CVEs
AI-Ready WP

AI-Ready WP

ai-ready-wp

A
100

Make your WordPress site discoverable by AI agents. Generates agents.json, agent-card.json, llms.txt, JSON-LD schemas, SEO meta tags, and more.

10 No CVEs
Developer Profile

Mescio for Agents Developer Profile

Mescio

2 plugins · 30 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Mescio for Agents

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/mescio-for-agents/includes/admin.css/wp-content/plugins/mescio-for-agents/includes/admin.js
Script Paths
/wp-content/plugins/mescio-for-agents/includes/admin.js
Version Parameters
mescio-for-agents/includes/admin.css?ver=mescio-for-agents/includes/admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
mescio-metabox
Data Attributes
data-mescio-enabled
JS Globals
MescioAdmin
REST Endpoints
/mescio-for-agents/v1/settings/mescio-for-agents/v1/post-type-options
FAQ

Frequently Asked Questions about Mescio for Agents