SW Site Doctor Security & Risk Analysis

wordpress.org/plugins/sw-site-doctor

Scan your WordPress site for security risks, speed issues, and migration problems. Free with PageSpeed integration.

0 active installs v1.0.5 PHP 7.4+ WP 5.8+ Updated Dec 21, 2025
optimizationpagespeedperformancesecuritysite-health
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is SW Site Doctor Safe to Use in 2026?

Generally Safe

Score 100/100

SW Site Doctor has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The "sw-site-doctor" plugin, version 1.0.5, exhibits a generally strong security posture based on the provided static analysis. A significant strength is the absence of any identified critical, high, or medium severity vulnerabilities in its history. The static analysis further supports this, showing a good implementation of security best practices. All identified AJAX handlers and other entry points have associated authorization checks, indicating a well-implemented defense against unauthorized access. The plugin also demonstrates a high rate of prepared SQL statements and properly escaped output, mitigating common SQL injection and cross-site scripting risks.

Key Concerns

  • No identified vulnerabilities in history
  • All AJAX handlers protected
  • High percentage of prepared SQL statements
  • High percentage of properly escaped output
  • No critical or high severity taint flows
  • No unsanitized paths found
  • No bundled libraries to check for outdated versions
  • No REST API routes found
  • No shortcodes found
Vulnerabilities
None known

SW Site Doctor Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

SW Site Doctor Release Timeline

v1.0.5Current
Code Analysis
Analyzed Mar 17, 2026

SW Site Doctor Code Analysis

Dangerous Functions
0
Raw SQL Queries
18
36 prepared
Unescaped Output
7
156 escaped
Nonce Checks
7
Capability Checks
7
File Operations
3
External Requests
9
Bundled Libraries
0

SQL Query Safety

67% prepared54 total queries

Output Escaping

96% escaped163 total outputs
Attack Surface

SW Site Doctor Attack Surface

Entry Points7
Unprotected0

AJAX Handlers 7

authwp_ajax_swsd_run_scanincludes\class-swsd-admin.php:53
authwp_ajax_swsd_get_historyincludes\class-swsd-admin.php:54
authwp_ajax_swsd_delete_scanincludes\class-swsd-admin.php:55
authwp_ajax_swsd_run_pagespeedincludes\class-swsd-admin.php:56
authwp_ajax_swsd_check_pagespeed_cacheincludes\class-swsd-admin.php:57
authwp_ajax_swsd_save_pagespeed_resultsincludes\class-swsd-admin.php:58
authwp_ajax_swsd_save_scheduleincludes\class-swsd-admin.php:59
WordPress Hooks 5
actionadmin_menuincludes\class-swsd-admin.php:51
actionadmin_enqueue_scriptsincludes\class-swsd-admin.php:52
actionswsd_scheduled_scanincludes\class-swsd-admin.php:62
filterhttp_request_argsincludes\class-swsd-pagespeed.php:286
actionplugins_loadedsw-site-doctor.php:44

Scheduled Events 2

swsd_daily_cleanup
swsd_scheduled_scan
Maintenance & Trust

SW Site Doctor Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 21, 2025
PHP min version7.4
Downloads157

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

SW Site Doctor Developer Profile

ScalingWeb Digital Services

1 plugin · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect SW Site Doctor

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/sw-site-doctor/assets/css/admin.css/wp-content/plugins/sw-site-doctor/assets/js/chart.min.js/wp-content/plugins/sw-site-doctor/assets/js/admin.js
Script Paths
/wp-content/plugins/sw-site-doctor/assets/js/admin.js/wp-content/plugins/sw-site-doctor/assets/js/chart.min.js
Version Parameters
sw-site-doctor/assets/css/admin.css?ver=sw-site-doctor/assets/js/admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
swsd-scanning-statusswsd-scan-history-chartswsd-dashboard-widget
HTML Comments
<!-- Admin class - handles all admin functionality. --><!-- Constructor. --><!-- All features are free. -->
Data Attributes
data-scan-iddata-check-id
JS Globals
swsdTrendDataswsdCountsswsdData
REST Endpoints
/wp-json/swsd/v1/scan/wp-json/swsd/v1/history/wp-json/swsd/v1/pagespeed
FAQ

Frequently Asked Questions about SW Site Doctor