Generate Security.txt
Generate Security.txt has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of August 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Generate Security.txt has a vendor fix available, so running the current release closes it.
All of these findings were reported by Benedictus Jovan (aillesiM). Generate Security.txt is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2026-9616Generate Security.txt <= 1.0.13 - Missing Authorization to Authenticated (Subscriber+) Security.txt Deletion via delete_securitytxt AJAX Action
Read the full analysisVulnerability Records
Generate Security.txt
Author
Vereniging van Registrars
Security.txt is an open standard (RFC 9116) that allows ethical hackers and security researchers to contact you when they have found a vulnerability on your website. The principle is simple and effective: contact information is put into a txt file and placed in a fixed location in your website’s directory structure (well-known folder). In this way, contact can easily be made. This plugin helps you to create and place the security.txt file without any knowledge of the open standard. This makes you easily accessible in case something is wrong with your website. This plugin is completely free to use and does not include any advertisements or paid version.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C