XML Cache Security & Risk Analysis

wordpress.org/plugins/xml-cache

Generates an XML sitemap for cache plugins.

10 active installs v2.0.0 PHP 8.2+ WP 6.0+ Updated Aug 28, 2025
cachelitespeed-cachepagespeedsitemapxml
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is XML Cache Safe to Use in 2026?

Generally Safe

Score 100/100

XML Cache has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7mo ago
Risk Assessment

The "xml-cache" plugin v2.0.0 exhibits a strong security posture based on the provided static analysis. The plugin has a minimal attack surface with no registered AJAX handlers, REST API routes, shortcodes, or cron events, and importantly, none of these entry points appear to be unprotected. The code signals also indicate good security practices, with no dangerous functions identified, all SQL queries utilizing prepared statements, and a high percentage of output properly escaped. The presence of nonce and capability checks further reinforces this positive assessment.

Taint analysis shows zero flows, indicating no identified vulnerabilities related to unsanitized data processing. The vulnerability history is also remarkably clean, with zero recorded CVEs across all severities and no common vulnerability types. This lack of historical issues suggests a history of responsible development and patching.

Overall, "xml-cache" v2.0.0 appears to be a secure plugin. Its strengths lie in its small attack surface, robust use of security features like prepared statements and output escaping, and a clear history of no known vulnerabilities. There are no immediate risks identified in the provided data. The plugin seems to be developed with security in mind.

Vulnerabilities
None known

XML Cache Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

XML Cache Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
17 escaped
Nonce Checks
1
Capability Checks
3
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

94% escaped18 total outputs
Attack Surface

XML Cache Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 11
actionrest_api_initsrc\Controller\API_Controller.php:27
actionadmin_menusrc\Controller\Menu_Controller.php:30
actioninitsrc\Controller\Meta_Box_Controller.php:26
actionadd_meta_boxessrc\Controller\Meta_Box_Controller.php:31
actionsave_postsrc\Controller\Meta_Box_Controller.php:36
actioninitsrc\Controller\Rewrite_Rules_Controller.php:28
filterquery_varssrc\Controller\Rewrite_Rules_Controller.php:33
filtertemplate_includesrc\Controller\Rewrite_Rules_Controller.php:38
filterredirect_canonicalsrc\Controller\Rewrite_Rules_Controller.php:43
actionadmin_enqueue_scriptssrc\Controller\Script_Controller.php:27
actionenqueue_block_editor_assetssrc\Controller\Script_Controller.php:32
Maintenance & Trust

XML Cache Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedAug 28, 2025
PHP min version8.2
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

XML Cache Developer Profile

GoSuccess

2 plugins · 10 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect XML Cache

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/xml-cache/assets/admin/index.asset.php/wp-content/plugins/xml-cache/assets/settings-panel/index.asset.php
Script Paths
/wp-content/plugins/xml-cache/assets/admin/index.js/wp-content/plugins/xml-cache/assets/settings-panel/index.js
Version Parameters
xml-cache

HTML / DOM Fingerprints

JS Globals
xmlCache
REST Endpoints
/wp-json/xml-cache/v1/settings/wp-json/xml-cache/v1/sitemap-url
FAQ

Frequently Asked Questions about XML Cache