Security.txt Manager Security & Risk Analysis

wordpress.org/plugins/security-txt-manager

Create and manage your security.txt from within WordPress. The easiest way to manage security policy.

500 active installs v1.1 PHP 7.2+ WP 5.7+ Updated Nov 22, 2025
bug-bountyresponsible-disclosuresecuritysecurity-txt
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Security.txt Manager Safe to Use in 2026?

Generally Safe

Score 100/100

Security.txt Manager has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The security-txt-manager plugin v1.1 demonstrates a strong security posture based on the provided static analysis. The absence of any identified dangerous functions, raw SQL queries, unescaped output, file operations, or external HTTP requests is commendable. The presence of a nonce check, even with a lack of capability checks in some areas, indicates an awareness of common WordPress security practices. The zero-count for known CVEs and the absence of any recorded vulnerabilities in its history are positive indicators of its stability and the developers' diligence in addressing security issues. The lack of identified taint flows further reinforces the impression that the code is not exposed to common injection vulnerabilities.

Vulnerabilities
None known

Security.txt Manager Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Security.txt Manager Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
4 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped4 total outputs
Attack Surface

Security.txt Manager Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 7
actionnetwork_admin_menuincludes\admin.php:24
actionadmin_menuincludes\admin.php:26
actionadmin_initincludes\admin.php:28
actioninitincludes\core.php:22
actionadmin_initincludes\core.php:23
filtersecurity_txt_contentincludes\core.php:24
actionplugins_loadedplugin.php:59
Maintenance & Trust

Security.txt Manager Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedNov 22, 2025
PHP min version7.2
Downloads6K

Community Trust

Rating100/100
Number of ratings2
Active installs500
Developer Profile

Security.txt Manager Developer Profile

handyplugins

10 plugins · 8K total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Security.txt Manager

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/security-txt-manager/assets/css/admin.css/wp-content/plugins/security-txt-manager/assets/js/admin.js
Script Paths
/wp-content/plugins/security-txt-manager/assets/js/admin.js
Version Parameters
security-txt-manager/assets/css/admin.css?ver=security-txt-manager/assets/js/admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
security-txt-manager-page-wrappersecurity-txt-manager-form-sectionsecurity-txt-manager-button
Data Attributes
data-security-txt-manager-setting
FAQ

Frequently Asked Questions about Security.txt Manager