RSS to Post Generator Security & Risk Analysis

wordpress.org/plugins/rss-to-post-generator

Automatically generate WordPress posts from RSS feeds with AI-powered content generation, automated posting, and advanced image handling.

0 active installs v1.1.5 PHP + WP 5.6+ Updated Mar 4, 2026
automationcontentfeedpost-generatorrss
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is RSS to Post Generator Safe to Use in 2026?

Generally Safe

Score 100/100

RSS to Post Generator has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The rss-to-post-generator plugin v1.1.5 exhibits a generally strong security posture, with excellent adherence to WordPress security best practices. The plugin demonstrates a comprehensive implementation of nonce checks and capability checks across all its AJAX handlers and cron events, effectively limiting its attack surface. Furthermore, its handling of SQL queries is commendable, with 100% utilization of prepared statements, eliminating the risk of SQL injection through database interactions. The plugin also shows a high level of diligence in output escaping, with 97% of outputs properly escaped, minimizing the risk of XSS vulnerabilities. The absence of known vulnerabilities in its history further reinforces this positive assessment.

Key Concerns

  • Flows with unsanitized paths detected
  • External HTTP requests made
Vulnerabilities
None known

RSS to Post Generator Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

RSS to Post Generator Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
2
73 escaped
Nonce Checks
22
Capability Checks
21
File Operations
0
External Requests
14
Bundled Libraries
0

Output Escaping

97% escaped75 total outputs
Data Flows
2 unsanitized

Data Flow Analysis

5 flows2 with unsanitized paths
ajax_poll_job_status (includes\class-admin.php:2090)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

RSS to Post Generator Attack Surface

Entry Points22
Unprotected0

AJAX Handlers 21

authwp_ajax_rss2post_parse_feedsincludes\class-admin.php:11
authwp_ajax_rss2post_generate_postsincludes\class-admin.php:12
authwp_ajax_rss2post_check_duplicatesincludes\class-admin.php:13
authwp_ajax_rss2post_clear_historyincludes\class-admin.php:14
authwp_ajax_rss2post_toggle_automated_postingincludes\class-admin.php:15
authwp_ajax_rss2post_save_credentialsincludes\class-admin.php:19
authwp_ajax_rss2post_save_languageincludes\class-admin.php:20
authwp_ajax_rss2post_save_article_sizeincludes\class-admin.php:21
authwp_ajax_rss2post_update_automated_feedsincludes\class-admin.php:22
authwp_ajax_rss2post_update_automated_settingsincludes\class-admin.php:23
authwp_ajax_rss2post_create_stripe_checkoutincludes\class-admin.php:24
authwp_ajax_rss2post_verify_paymentincludes\class-admin.php:25
authwp_ajax_rss2post_reset_processed_guidsincludes\class-admin.php:26
authwp_ajax_rss2post_refresh_historyincludes\class-admin.php:27
authwp_ajax_rss2post_search_pexelsincludes\class-admin.php:28
authwp_ajax_rss2post_save_pexels_api_keyincludes\class-admin.php:29
authwp_ajax_rss2post_save_categoriesincludes\class-admin.php:30
authwp_ajax_rss2post_save_webp_settingincludes\class-admin.php:31
authwp_ajax_rss2post_save_image_sourceincludes\class-admin.php:32
authwp_ajax_rss2post_save_api_keysincludes\class-admin.php:33
authwp_ajax_rss2post_poll_job_statusincludes\class-admin.php:34

REST API Routes 1

POST/wp-json/rss2post/v1/update-tierincludes\class-api.php:13
WordPress Hooks 9
actionadmin_menuincludes\class-admin.php:9
actionadmin_enqueue_scriptsincludes\class-admin.php:10
actionrss2post_automated_hourly_jobincludes\class-admin.php:16
actionrss2post_automated_12h_jobincludes\class-admin.php:17
actionrss2post_automated_jobincludes\class-admin.php:18
actionrss2post_daily_subscription_checkincludes\class-admin.php:35
filtercron_schedulesincludes\class-admin.php:36
actionrest_api_initincludes\class-api.php:9
actionplugins_loadedrss2post.php:34

Scheduled Events 3

rss2post_daily_subscription_check
rss2post_automated_job
rss2post_automated_job
Maintenance & Trust

RSS to Post Generator Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedMar 4, 2026
PHP min version
Downloads549

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

RSS to Post Generator Developer Profile

Samuel Bezerra

1 plugin · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect RSS to Post Generator

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/rss-to-post-generator/admin/css/settings-page.css/wp-content/plugins/rss-to-post-generator/admin/css/style.css/wp-content/plugins/rss-to-post-generator/admin/js/settings-page.js/wp-content/plugins/rss-to-post-generator/admin/js/script.js/wp-content/plugins/rss-to-post-generator/public/css/public.css/wp-content/plugins/rss-to-post-generator/public/js/public.js
Script Paths
/wp-content/plugins/rss-to-post-generator/admin/js/settings-page.js/wp-content/plugins/rss-to-post-generator/admin/js/script.js/wp-content/plugins/rss-to-post-generator/public/js/public.js
Version Parameters
rss-to-post-generator/admin/css/settings-page.css?ver=rss-to-post-generator/admin/css/style.css?ver=rss-to-post-generator/admin/js/settings-page.js?ver=rss-to-post-generator/admin/js/script.js?ver=rss-to-post-generator/public/css/public.css?ver=rss-to-post-generator/public/js/public.js?ver=

HTML / DOM Fingerprints

CSS Classes
rss2post-admin-pagerss2post-settings-wraprss2post-feed-listrss2post-feed-itemrss2post-feed-settingsrss2post-history-wraprss2post-history-itemrss2post-api-key-section+8 more
HTML Comments
<!-- RSS to Post Generator Admin Menu --><!-- RSS to Post Generator Settings Page --><!-- RSS to Post Generator Feed Item --><!-- RSS to Post Generator History Item -->+10 more
Data Attributes
data-feed-iddata-actiondata-noncedata-post-iddata-loading-textdata-success-text+3 more
JS Globals
rss2post_ajax_objectrss2post_settings_vars
REST Endpoints
/wp-json/rss2post/v1/parse_feeds/wp-json/rss2post/v1/generate_posts/wp-json/rss2post/v1/check_duplicates/wp-json/rss2post/v1/clear_history/wp-json/rss2post/v1/toggle_automated_posting/wp-json/rss2post/v1/save_credentials/wp-json/rss2post/v1/save_language/wp-json/rss2post/v1/save_article_size/wp-json/rss2post/v1/update_automated_feeds/wp-json/rss2post/v1/update_automated_settings/wp-json/rss2post/v1/create_stripe_checkout/wp-json/rss2post/v1/verify_payment/wp-json/rss2post/v1/reset_processed_guids/wp-json/rss2post/v1/refresh_history/wp-json/rss2post/v1/search_pexels/wp-json/rss2post/v1/save_pexels_api_key/wp-json/rss2post/v1/save_categories/wp-json/rss2post/v1/save_webp_setting/wp-json/rss2post/v1/save_image_source/wp-json/rss2post/v1/save_api_keys/wp-json/rss2post/v1/poll_job_status
FAQ

Frequently Asked Questions about RSS to Post Generator