SW Video SiteMap Security & Risk Analysis

wordpress.org/plugins/salesworks-media-sitemap

This plugin generates a video sitemap of posts in a given category. Use the settings to identify which categories, what custom fields contain your vi …

10 active installs v1.0.1 PHP + WP 2.8+ Updated Aug 27, 2010
binggooglesite-mapsitemapyahoo
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is SW Video SiteMap Safe to Use in 2026?

Generally Safe

Score 85/100

SW Video SiteMap has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 15yr ago
Risk Assessment

The "salesworks-media-sitemap" plugin v1.0.1 exhibits a mixed security posture. On the positive side, the static analysis indicates no direct attack surface through AJAX, REST API, shortcodes, or cron events. Furthermore, the plugin avoids dangerous functions and makes no external HTTP requests. The single SQL query is properly prepared, which is a strong security practice. However, there are significant concerns regarding output escaping. With 100% of outputs not being properly escaped, this presents a high risk of Cross-Site Scripting (XSS) vulnerabilities. The taint analysis also reveals two flows with unsanitized paths, although these are not categorized as critical or high severity, they still warrant attention. The lack of any recorded vulnerability history might suggest a stable codebase or limited exposure, but it does not mitigate the identified risks from the code analysis.

Key Concerns

  • All outputs unescaped
  • Unsanitized paths in taint flows
  • No nonce checks
  • No capability checks
Vulnerabilities
None known

SW Video SiteMap Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

SW Video SiteMap Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
1 prepared
Unescaped Output
10
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
3
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared1 total queries

Output Escaping

0% escaped10 total outputs
Data Flows
2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths
sw_media_sitemap_option_page (sw-media-sitemap.php:287)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

SW Video SiteMap Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 5
actionsave_post sw-media-sitemap.php:21
actiondelete_postsw-media-sitemap.php:26
actionpublish_postsw-media-sitemap.php:29
actionpublish_pagesw-media-sitemap.php:32
actionadmin_menusw-media-sitemap.php:36
Maintenance & Trust

SW Video SiteMap Maintenance & Trust

Maintenance Signals

WordPress version tested3.0.5
Last updatedAug 27, 2010
PHP min version
Downloads4K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

SW Video SiteMap Developer Profile

radiofrequency

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect SW Video SiteMap

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/salesworks-media-sitemap/sw-media-sitemap.php

HTML / DOM Fingerprints

HTML Comments
<!-- Generated by SW Video Sitemap -->
FAQ

Frequently Asked Questions about SW Video SiteMap