[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffGnt48ZvpfkILsJg6Di52CSxRYAa57CQo2j2HQzoZ6w":3},{"slug":4,"display_name":4,"profile_url":5,"plugin_count":6,"total_installs":7,"avg_security_score":8,"avg_patch_time_days":9,"trust_score":10,"computed_at":11,"plugins":12},"vladanrs","https:\u002F\u002Fprofiles.wordpress.org\u002Fvladanrs\u002F",1,0,100,30,94,"2026-05-20T03:12:46.170Z",[13],{"slug":14,"name":15,"version":16,"author":4,"author_profile":5,"description":17,"short_description":18,"active_installs":7,"downloaded":19,"rating":8,"num_ratings":6,"last_updated":20,"tested_up_to":21,"requires_at_least":22,"requires_php":23,"tags":24,"homepage":30,"download_link":31,"security_score":8,"vuln_count":7,"unpatched_count":7,"last_vuln_date":32,"fetched_at":33},"balada-fix","Balada Fix","1.1.0","\u003Cp>Balada Fix protects your site from unauthenticated abuse of specific WordPress REST API endpoints. Such endpoints (for example the tagDiv theme’s \u003Ccode>wp-json\u002Ftdw\u002Fsave_css\u003C\u002Fcode>) are often targeted by the “Balada Injector” and similar campaigns to inject malicious scripts.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Add one or more REST path patterns in \u003Cstrong>Settings \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Balada Fix\u003C\u002Fstrong> (one per line).\u003C\u002Fli>\n\u003Cli>Only logged-in administrators with the \u003Ccode>edit_theme_options\u003C\u002Fcode> capability can access those paths.\u003C\u002Fli>\n\u003Cli>Unauthenticated or unauthorized requests receive a 403 Forbidden response.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Default protected path: \u003Ccode>tdw\u002Fsave_css\u003C\u002Fcode> (tagDiv \u002F Newspaper theme vulnerability).\u003C\u002Fp>\n","Blocks unauthenticated access to vulnerable REST paths. Add paths in Settings → Balada Fix. Only admins can use them.",86,"2026-03-26T11:00:00.000Z","6.9.4","5.0","7.2",[25,26,27,28,29],"balada","injector","rest-api","security","wp-json","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbalada-fix.1.1.0.zip",null,"2026-04-16T10:56:18.058Z"]