iRobots.txt SEO
iRobots.txt SEO has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for iRobots.txt SEO has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.
All of these findings were reported by Skalucy. iRobots.txt SEO is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 2.9.2.
CVE-2025-68840iRobots.txt SEO <= 1.1.2 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
iRobots.txt SEO
iRobots.txt SEO (IRSEO) is a fully customizable robots.txt virtual file generator. IRSEO creates a highly optimized and secure robots.txt file straight out of the box. Users may choose to enable or disable specific user agents, directories or files using intuitive options all of which include detailed instructions. The robots.txt file is a text file located in the root directory of a website. It’s purpose is to direct user-agents (AKA bots) away from or towards specific files or directories. Inhibiting a bot from indexing specific pages will ensure your website remains keyword optimized and all indexed pages are relevant to your potential customers. IRSEO also inhibits several WordPress system directories and files by default. Doing this ensures that the search bots do not include security sensitive pages within search results. For example, searching for “inurl:wp-content name size description” in Google will produce a list of sites with indexed and open content directories. Note that IRSEO creates a virtual robots.txt file. This robots.txt file is displayed whenever access to the robots.txt file is requested.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C