Findings
- There are cases where data is put into SQL without escaping it (but in these cases the data is escaped in another location) – sitemap-builder.php lines 86 and 93 etc
- No issues found
Last revised:
Confidence: Medium
This plugin has been given a short, targeted code review.
We didn't find anything worrying in this plugin. It's probably safe. Read more about this recommendation.
This recommendation applies to version 4.0.7 of this plugin, but the most recent version is 4.0.8. These findings may no longer be correct.
Read more about our failure criteria.