WPSSO REST API Security & Risk Analysis

wordpress.org/plugins/wpsso-rest-api

Extends the WordPress REST API post, term, and user query results with an array of meta tags and Schema JSON-LD markup.

100 active installs v3.3.0 PHP 7.4.33+ WP 6.0+ Updated Mar 11, 2026
apimeta-tagsrestrest-apischema
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WPSSO REST API Safe to Use in 2026?

Generally Safe

Score 100/100

WPSSO REST API has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 23d ago
Risk Assessment

The "wpsso-rest-api" v3.3.0 plugin demonstrates a strong security posture based on the provided static analysis. The absence of any detected dangerous functions, SQL queries executed without prepared statements, and all output being properly escaped indicates diligent coding practices. Furthermore, the lack of file operations, external HTTP requests, and the absence of taint flows with unsanitized paths are all positive indicators of a secure codebase. The plugin also appears to have a minimal attack surface, with no identified AJAX handlers, REST API routes, shortcodes, or cron events that lack proper authentication or permission checks.

Vulnerabilities
None known

WPSSO REST API Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

WPSSO REST API Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

WPSSO REST API Attack Surface

Entry Points0
Unprotected0
Maintenance & Trust

WPSSO REST API Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 11, 2026
PHP min version7.4.33
Downloads19K

Community Trust

Rating100/100
Number of ratings6
Active installs100
Developer Profile

WPSSO REST API Developer Profile

JS Morisset

31 plugins · 33K total installs

93
trust score
Avg Security Score
99/100
Avg Patch Time
12 days
View full developer profile
Detection Fingerprints

How We Detect WPSSO REST API

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wpsso-rest-api/lib/abstract/add-on.php/wp-content/plugins/wpsso-rest-api/lib/wpsso-rest-filters.php/wp-content/plugins/wpsso-rest-api/wpsso-rest-api.php

HTML / DOM Fingerprints

REST Endpoints
/wp-json/wpsso/v1/post/wp-json/wpsso/v1/term/wp-json/wpsso/v1/user
FAQ

Frequently Asked Questions about WPSSO REST API