Website LLMs.txt

Website LLMs.txt has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 3 are fixed as of September 2026. Their average CVSS score is 5.5, and the most serious one scores 6.1 out of 10. 2026 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (100%).

Every one of the 3 issues recorded for Website LLMs.txt has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (2) reported by Kazuma Matsumoto. Website LLMs.txt is installed on roughly 40,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
5.5/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all Website LLMs.txt vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2026-6711

Website LLMs.txt <= 8.2.6 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records
Website LLMs.txt banner
Latestv8.6.1

Website LLMs.txt

Ryan Howard

Author

Ryan Howard

4.5(13)
90/100
Last Updated
2026-08-27 (17d ago)
Active Installs
40,000+
Downloads
643,107
Requires WP
5.8+
Requires PHP
7.2+
Tested up to
WP 6.9.7
Created
2025-01-04 (2y ago)

Website LLMs.txt generates and manages an llms.txt file, a structured, AI-ready index that helps large language models like ChatGPT, Claude, and Perplexity understand your site’s most important content. How llms.txt works Traditional sitemaps and robots files guide search engines. But as AI-driven systems such as ChatGPT, Claude, and Perplexity increasingly ingest web content, they benefit from a clear, structured list of a site’s most important URLs. llms.txt offers that: a plain-text or Markdown list of essential public URLs, optionally annotated with titles, descriptions, and grouping, designed for AI consumption rather than general web crawling. Key benefits ✅ AI discovery readiness: future-proof your site for AI indexing and content retrieval. ✅ Fully automatic: the plugin builds and updates your llms.txt file on its own schedule. ✅ SEO plugin integration: works seamlessly with Yoast SEO, Rank Math, SEOPress, and AIOSEO, automatically excluding content marked as noindex or nofollow. ✅ Advanced controls: choose post types, customize file titles or descriptions, attach optional Markdown files, and trigger manual regeneration. ✅ Developer-friendly: includes filters such as llms_generator_get_post_meta_description for description logic, performance tuning, and custom indexing behavior. ✅ WooCommerce & multisite ready: respects product visibility rules and scales easily across large or networked sites. Activation & setup Activate the plugin. Visit Settings → LLMs.txt to configure post types and update frequency (immediate, daily, or weekly). The plugin generates llms.txt and serves it from your site root. Content updates trigger automatic regeneration. All noindex/nofollow rules from your SEO plugin are respected. Use cases for llms.txt Publishers, SaaS companies, developers, and documentation sites that want to make their content easier for AI systems to interpret. SEO-driven websites testing AI engine optimization tactics. Agencies and site owners preparing for the next phase of AI search and retrieval. The llms.txt experiment & further reading Are AI bots actually reading llms.txt files? Everything we know about llms.txt

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C