Virtual Robots.txt Security & Risk Analysis

wordpress.org/plugins/pc-robotstxt

Virtual Robots.txt automatically creates a robots.txt file for your site. Your robots.txt file can be easily edited from the plugin settings page.

50K active installs v1.10 PHP + WP 5.0+ Updated Dec 29, 2025
robotsrobots-txt
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Virtual Robots.txt Safe to Use in 2026?

Generally Safe

Score 100/100

Virtual Robots.txt has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The 'pc-robotstxt' plugin v1.10 exhibits a generally positive security posture with no known historical vulnerabilities. The static analysis reveals a remarkably small attack surface with zero identified entry points that are unprotected. Furthermore, the absence of dangerous functions, file operations, and external HTTP requests is a strong indicator of safe coding practices. The plugin also correctly implements prepared statements for all SQL queries and includes nonce and capability checks.

Key Concerns

  • Unsanitized output detected
Vulnerabilities
None known

Virtual Robots.txt Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Virtual Robots.txt Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
2
0 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped2 total outputs
Data Flows
2 unsanitized

Data Flow Analysis

4 flows2 with unsanitized paths
do_robots (pc-robotstxt.php:87)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Virtual Robots.txt Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
actionadmin_menuadmin.php:6
actiondo_robotspc-robotstxt.php:59
Maintenance & Trust

Virtual Robots.txt Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 29, 2025
PHP min version
Downloads441K

Community Trust

Rating86/100
Number of ratings10
Active installs50K
Developer Profile

Virtual Robots.txt Developer Profile

Marios Alexandrou

7 plugins · 195K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
1456 days
View full developer profile
Detection Fingerprints

How We Detect Virtual Robots.txt

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

JS Globals
pc_robotstxt
FAQ

Frequently Asked Questions about Virtual Robots.txt