[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fD0ZaC8gcix-iOWEwQZHLV9AwNjON7Wdav_uvtQHFO4w":3},{"slug":4,"display_name":5,"profile_url":6,"plugin_count":7,"total_installs":8,"avg_security_score":8,"avg_patch_time_days":9,"trust_score":10,"computed_at":11,"plugins":12},"wpfastsec","WPFastSec","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpfastsec\u002F",1,100,30,94,"2026-08-29T06:24:17.600Z",[13],{"slug":14,"name":15,"version":16,"author":5,"author_profile":6,"description":17,"short_description":18,"active_installs":8,"downloaded":19,"rating":8,"num_ratings":7,"last_updated":20,"tested_up_to":21,"requires_at_least":22,"requires_php":23,"tags":24,"homepage":30,"download_link":31,"security_score":8,"vuln_count":32,"unpatched_count":32,"last_vuln_date":33,"fetched_at":34},"ht-security","HT Security","1.5.0","\u003Cp>HT Security is a complete security suite for WordPress, offering multiple layers of protection for your website.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Important – External Service:\u003C\u002Fstrong>\u003Cbr \u002F>\nThis plugin queries the National Vulnerability Database (NVD) API to check for known CVE vulnerabilities. Requests are made to:\u003Cbr \u002F>\n* API URL: https:\u002F\u002Fservices.nvd.nist.gov\u002Frest\u002Fjson\u002Fcves\u002F2.0\u003Cbr \u002F>\n* Terms of Use: https:\u002F\u002Fnvd.nist.gov\u002Fgeneral\u002Flegal-disclaimer\u003Cbr \u002F>\n* Privacy Policy: https:\u002F\u002Fwww.nist.gov\u002Fprivacy-policy\u003Cbr \u002F>\n* Frequency: Automatic check every 12 hours or manual on-demand\u003Cbr \u002F>\n* Data sent: Name and version of WordPress\u002Finstalled plugins (no personal data is sent)\u003C\u002Fp>\n\u003Cp>The NVD API query is essential for the plugin’s CVE vulnerability detection functionality.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Security Headers\u003C\u002Fstrong> – HSTS, X-Frame-Options, Content-Security-Policy, and more\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Login Alerts\u003C\u002Fstrong> – Email notifications for successful and failed login attempts with rate limiting\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Core Integrity Check\u003C\u002Fstrong> – Verify WordPress core files against official checksums with 24h cache\u003C\u002Fli>\n\u003Cli>\u003Cstrong>CVE Vulnerability Detection\u003C\u002Fstrong> – Check WordPress Core and active plugins against NVD database\u003C\u002Fli>\n\u003Cli>\u003Cstrong>User Enumeration Protection\u003C\u002Fstrong> – Block user enumeration via REST API and author parameters\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Maintenance Mode\u003C\u002Fstrong> – Maintenance mode with authorized IP whitelist (IPv4, IPv6, CIDR support)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>File Permissions Audit\u003C\u002Fstrong> – Audit and automatic correction of critical file permissions\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Plugin Security Indicators\u003C\u002Fstrong> – Visual badges on plugins page showing vulnerability status\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>CVE Detection Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Integration with NVD (National Vulnerability Database) API 2.0\u003C\u002Fli>\n\u003Cli>Check WordPress Core and active plugins for known vulnerabilities\u003C\u002Fli>\n\u003Cli>Intelligent batch processing with rate limiting\u003C\u002Fli>\n\u003Cli>\u003Cstrong>8 layers of anti-false-positive validation\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Vulnerability badges on plugins page (enable\u002Fdisable option)\u003C\u002Fli>\n\u003Cli>Dismissible alerts per user\u003C\u002Fli>\n\u003Cli>Email notification when vulnerabilities are detected\u003C\u002Fli>\n\u003Cli>Automatic check every 12 hours\u003C\u002Fli>\n\u003Cli>NVD API Key support (increased rate limit)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Security Improvements in v1.5.0\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>IP Spoofing Fix\u003C\u002Fstrong> – Properly detects real IP behind Cloudflare, proxies, and load balancers\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Capability Check Fix\u003C\u002Fstrong> – Authorization verified before processing\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Rate Limiting by IP\u003C\u002Fstrong> – More granular rate limiting for login alerts\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Input Validation\u003C\u002Fstrong> – Maximum length validation for feedback form\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Supported Languages\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>English (US) – 100%\u003C\u002Fli>\n\u003Cli>English (UK) – 100%\u003C\u002Fli>\n\u003Cli>Português do Brasil – 100%\u003C\u002Fli>\n\u003Cli>Português de Portugal – 100%\u003C\u002Fli>\n\u003Cli>Español – 100%\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GNU General Public License v2.0 or later. For more information, visit https:\u002F\u002Fwww.gnu.org\u002Flicenses\u002Fgpl-2.0.html.\u003C\u002Fp>\n","Complete Security Suite: Security Headers, CVE Detection, Core Integrity Check, Login Alerts, and Maintenance Mode.",1332,"2026-03-15T14:04:00.000Z","6.9.5","6.5","8.2",[25,26,27,28,29],"cve","headers","maintenance","security","vulnerabilities","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fht-security.1.5.0.zip",0,null,"2026-07-22T17:31:50.256Z"]