WP-Safety

Mescio for Agents Security & Risk Analysis

wordpress.org/plugins/mescio-for-agents

Mescio for Agents serves your WordPress content as clean Markdown to AI agents and GPT crawlers. Human visitors never notice a thing.

200 active installs v1.7.0 PHP 8.0+ WP 6.0+ Updated May 23, 2026
agentsaillmmarkdownrest-api
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Mescio for Agents Safe to Use in 2026?

Generally Safe

Score 100/100

Mescio for Agents has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The mescio-for-agents plugin v1.6.5 exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The absence of known CVEs and a clean vulnerability history are highly positive indicators. Furthermore, the plugin demonstrates good development practices with 100% of SQL queries using prepared statements and a high percentage of output being properly escaped. The presence of nonce and capability checks, though limited in number, is also a positive sign.

Key Concerns

  • Dangerous function preg_replace(/e) usage
  • Flows with unsanitized paths found
  • Limited number of capability checks
  • Limited number of nonce checks
Vulnerabilities
None known

Mescio for Agents Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Mescio for Agents Release Timeline

v1.7.0Current
v1.6.9
v1.6.8
v1.6.7
v1.6.6
v1.6.5
v1.6.4
v1.6.3
v1.6.2
v1.6.1
v1.6.0
v1.5.0
v1.4.0
v1.3.0
v1.2.3
Code Analysis
Analyzed Apr 16, 2026

Mescio for Agents Code Analysis

Dangerous Functions
3
Raw SQL Queries
0
0 prepared
Unescaped Output
10
207 escaped
Nonce Checks
1
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0

Dangerous Functions Found

preg_replace(/e)preg_replace( '/\[et_pb_[^\]]*\].*?\[\/eincludes/class-markdown-generator.php:144
preg_replace(/e)preg_replace( '/\[\/eincludes/class-markdown-generator.php:146
preg_replace(/e)preg_replace( '/<em[^>]*>(.*?)<\/eincludes/class-markdown-generator.php:241

Output Escaping

95% escaped217 total outputs
Data Flows · Security
4 unsanitized

Data Flow Analysis

4 flows4 with unsanitized paths
serve (includes/class-llms-endpoints.php:98)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Mescio for Agents Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 15
filterrest_pre_serve_requestincludes/class-rest-api.php:101
actioninitmescio-for-agents.php:43
actiontemplate_redirectmescio-for-agents.php:70
actionrest_api_initmescio-for-agents.php:73
filterrest_pre_dispatchmescio-for-agents.php:74
filterrest_post_dispatchmescio-for-agents.php:76
filterquery_varsmescio-for-agents.php:80
actiontemplate_redirectmescio-for-agents.php:81
actionparse_requestmescio-for-agents.php:83
filterquery_varsmescio-for-agents.php:87
actiontemplate_redirectmescio-for-agents.php:88
actionadmin_menumescio-for-agents.php:91
actionadmin_initmescio-for-agents.php:92
actionadd_meta_boxesmescio-for-agents.php:93
actionsave_postmescio-for-agents.php:94
Maintenance & Trust

Mescio for Agents Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.5
Last updatedMay 23, 2026
PHP min version8.0
Downloads1K

Community Trust

Rating100/100
Number of ratings1
Active installs200
Alternatives

Mescio for Agents Alternatives

Conversion Agent Discovery

Conversion Agent Discovery

conversion-agent-discovery

A
100

Read-only agent discovery for WordPress: llms.txt, Markdown, API Catalog, Agent Skills, WebMCP, and content signals.

100 No CVEs
Lunatec Article to Markdown

Lunatec Article to Markdown

lunatec-article-to-markdown

A
100

Exposes a clean Markdown version of WordPress posts for AI agents, LLMs, and crawlers.

0 No CVEs
Umay AI Markdown

Umay AI Markdown

markdown-negotiator

A
100

Serves clean Markdown to AI agents (ChatGPT, Claude, Perplexity) on Accept: text/markdown. HTML stays default for browsers. Zero-config.

0 No CVEs
Markdown for AI Agents

Markdown for AI Agents

markdown-for-ai-agents

A
100

Serve clean Markdown versions of WordPress content to AI agents using HTTP content negotiation.

500 No CVEs
LLM Markdown – Expose Content as .md

LLM Markdown – Expose Content as .md

llm-markdown

A
100

Expose WordPress posts and pages as real .md URLs with YAML front matter for LLMs, AI ingestion, and headless workflows.

400 No CVEs
Developer Profile

Mescio for Agents Developer Profile

Mescio

2 plugins · 600 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Mescio for Agents

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/mescio-for-agents/includes/admin.css/wp-content/plugins/mescio-for-agents/includes/admin.js
Script Paths
/wp-content/plugins/mescio-for-agents/includes/admin.js
Version Parameters
mescio-for-agents/includes/admin.css?ver=mescio-for-agents/includes/admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
mescio-metabox
Data Attributes
data-mescio-enabled
JS Globals
MescioAdmin
REST Endpoints
/mescio-for-agents/v1/settings/mescio-for-agents/v1/post-type-options
FAQ

Frequently Asked Questions about Mescio for Agents