The SEO Machine Security & Risk Analysis

wordpress.org/plugins/the-seo-machine

A SEO machine to study and improve your WordPress website.

0 active installs v0.5 PHP 7.4+ WP 5.0+ Updated Oct 29, 2022
seo
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is The SEO Machine Safe to Use in 2026?

Generally Safe

Score 85/100

The SEO Machine has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3yr ago
Risk Assessment

The-SEO-Machine v0.5 exhibits a generally strong security posture with several good practices in place. The absence of recorded CVEs and a clean vulnerability history are positive indicators. Furthermore, the plugin has a limited attack surface, with all identified entry points (AJAX handlers) appearing to have authentication checks. The presence of capability checks and a nonce check also contribute to a more secure design.

Key Concerns

  • A notable concern is the moderate percentage of SQL queries not using prepared s
  • The plugin's output escaping is also an area for improvement. Over half of the o
  • The presence of a single flow with unsanitized paths, even without critical or h
  • The plugin bundles the DataTables library. While not explicitly stated as outdat
Vulnerabilities
None known

The SEO Machine Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

The SEO Machine Release Timeline

v0.5Current
v0.4
v0.3
v0.2
Code Analysis
Analyzed Mar 17, 2026

The SEO Machine Code Analysis

Dangerous Functions
0
Raw SQL Queries
21
18 prepared
Unescaped Output
19
21 escaped
Nonce Checks
1
Capability Checks
4
File Operations
0
External Requests
2
Bundled Libraries
1

Bundled Libraries

DataTables

SQL Query Safety

46% prepared39 total queries

Output Escaping

53% escaped40 total outputs
Data Flows
1 unsanitized

Data Flow Analysis

5 flows1 with unsanitized paths
tsm_urls (the-seo-machine-ajax-controller.php:25)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

The SEO Machine Attack Surface

Entry Points3
Unprotected0

AJAX Handlers 3

authwp_ajax_tsm_urlsthe-seo-machine-ajax-controller.php:20
authwp_ajax_tsm_get_statusthe-seo-machine-ajax-controller.php:21
authwp_ajax_tsm_do_batchthe-seo-machine-ajax-controller.php:22
WordPress Hooks 2
actionadmin_menuthe-seo-machine-backend-controller.php:20
actionadmin_enqueue_scriptsthe-seo-machine.php:38
Maintenance & Trust

The SEO Machine Maintenance & Trust

Maintenance Signals

WordPress version tested6.0.11
Last updatedOct 29, 2022
PHP min version7.4
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

The SEO Machine Developer Profile

jaimenj

2 plugins · 0 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect The SEO Machine

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/the-seo-machine/lib/tsm.min.css/wp-content/plugins/the-seo-machine/lib/datatables.min.css/wp-content/plugins/the-seo-machine/lib/pdfmake.min.js/wp-content/plugins/the-seo-machine/lib/vfs_fonts.js/wp-content/plugins/the-seo-machine/lib/datatables.min.js/wp-content/plugins/the-seo-machine/lib/Chart.min.js/wp-content/plugins/the-seo-machine/lib/tsm.min.js
Script Paths
/wp-content/plugins/the-seo-machine/lib/tsm.min.js
Version Parameters
tsm_style_datatablestsm_custom_styletsm_script_pdfmaketsm_script_vfs_fontstsm_script_datatablestsm_script_charttsm_custom_script

HTML / DOM Fingerprints

HTML Comments
It adds assets only for the backend..
FAQ

Frequently Asked Questions about The SEO Machine