Simple XML Sitemap Generator Security & Risk Analysis

wordpress.org/plugins/simple-xml-sitemap-generator

add a sitemap to your wordpress website.

3K active installs v2.5 PHP + WP 4.0+ Updated Jan 15, 2026
generatorsimple-sitemapsitemapsitemap-generatorxml
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Simple XML Sitemap Generator Safe to Use in 2026?

Generally Safe

Score 100/100

Simple XML Sitemap Generator has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The simple-xml-sitemap-generator plugin v2.5 exhibits a generally strong security posture based on the provided static analysis. The absence of entry points like AJAX handlers, REST API routes, and shortcodes significantly limits the potential attack surface. Furthermore, the code demonstrates good practices by exclusively using prepared statements for its SQL queries and properly escaping almost all output. The presence of nonce checks, even if only on a limited number of operations, is also a positive indicator.

Key Concerns

  • Flows with unsanitized paths found
  • Missing capability checks in code
Vulnerabilities
None known

Simple XML Sitemap Generator Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Simple XML Sitemap Generator Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
32 escaped
Nonce Checks
3
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

97% escaped33 total outputs
Data Flows
2 unsanitized

Data Flow Analysis

3 flows2 with unsanitized paths
saveForm_kat_sxmlsg (form.php:96)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Simple XML Sitemap Generator Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 6
actionadmin_menuconf.php:17
actionadmin_enqueue_scriptsindex.php:27
actioninitindex.php:36
filterwp_sitemaps_enabledindex.php:39
actionpublish_postindex.php:124
actionpublish_pageindex.php:125
Maintenance & Trust

Simple XML Sitemap Generator Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 15, 2026
PHP min version
Downloads92K

Community Trust

Rating92/100
Number of ratings11
Active installs3K
Developer Profile

Simple XML Sitemap Generator Developer Profile

Eric-Oliver Mächler

11 plugins · 5K total installs

96
trust score
Avg Security Score
94/100
Avg Patch Time
7 days
View full developer profile
Detection Fingerprints

How We Detect Simple XML Sitemap Generator

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/simple-xml-sitemap-generator/css/style.php

HTML / DOM Fingerprints

CSS Classes
sxmlsg_box
HTML Comments
##error##ok#start##ende#
FAQ

Frequently Asked Questions about Simple XML Sitemap Generator