[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fsAzF9tirY69Pq61A9j-xEPfFIuhBjZtr5tY4F1amj-A":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":15,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":38,"analysis":146,"fingerprints":242},"17fav-bookmark-share","bShare 分享","4.2.0","denishua","https:\u002F\u002Fprofiles.wordpress.org\u002Fdenishua\u002F","\u003Cp>数以万计的分享，源自一个简单的按钮， \u003Ca href=\"http:\u002F\u002Fwww.bshare.cn\u002F\" rel=\"nofollow ugc\">bShare 分享\u003C\u002Fa> 是一个强大的网页分享插件工具，您的读者可以将您网站上精采的内容快速分享、转贴到社群网络上。\u003C\u002Fp>\n","数以万计的分享，源自一个简单的按钮， bShare 分享 是一个强大的网页分享插件工具，您的读者可以将您网站上精采的内容快速分享、转贴到社群网络上。",20,20976,80,1,"","3.1.0","2.5",[19,20,21,22,23],"bookmark","share","%e5%88%86%e4%ba%ab","%e6%94%b6%e8%97%8f","%e4%b9%a6%e7%ad%be","http:\u002F\u002Fwww.bshare.cn\u002FwordpressRegister","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002F17fav-bookmark-share.zip",100,0,null,"2026-03-15T10:48:56.248Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":34,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},8,4120,90,143,72,"2026-04-05T09:14:58.581Z",[39,55,80,102,126],{"slug":40,"name":41,"version":42,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":27,"num_ratings":27,"last_updated":15,"tested_up_to":49,"requires_at_least":17,"requires_php":15,"tags":50,"homepage":53,"download_link":54,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"addthischina","AddThisChina(分享家:收藏&分享按钮)","1.1","hfw828","https:\u002F\u002Fprofiles.wordpress.org\u002Fhfw828\u002F","\u003Cp>【如果之前手工安装1.0版本,请卸载后重新安装1.1版本,并重新保存配置】\u003Cbr \u002F>\n分享家:收藏&分享按钮(AddThisChina)，是一个主要针对中文WordPress用户而开发的收藏与分享按钮服务。\u003Cbr \u002F>\n特性：\u003Cbr \u002F>\n* 收录按钮更全面: 目前收录了国内常用分享按钮，精选国外常用若干个；\u003Cbr \u002F>\n* 可自由定制按钮: 超强自定义功能；\u003Cbr \u002F>\n* 支持标签(tag): 部分收藏网站直接支持url标签参数，你可在网页中直接指定标签；\u003Cbr \u002F>\n* 全面的浏览器兼容: 兼容IE 6.0、IE 7.0、IE 8.0、FF 2.0+、Chrome 1.0+、Opera 9+、Safari 3+；\u003Cbr \u002F>\n* 可设置绑定事件：可以设置click|mouseover作为触发事件，默认为mouseover；\u003Cbr \u002F>\n* 支持后期绑定: 当你在文档加载后插入html或者ajax内容后，可调用$$addthis.rebind();重新绑定。\u003C\u002Fp>\n","适合中文网站的AddThis按钮，含有主流中文收藏分享按钮。方便读者分享, 增加网站流量！[2009-09-25]新增颜色样式配置。【如果之前手工安装1.0版本,请卸载后重新安装1.1版本,并重新保存配置】",10,5038,"2.8",[51,21,52,22,23],"%e7%bd%91%e7%bb%9c%e6%94%b6%e8%97%8f%e5%a4%b9","%e5%88%86%e4%ba%ab%e6%8c%89%e9%92%ae","http:\u002F\u002Faddthis.org.cn","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faddthischina.1.1.zip",{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":63,"downloaded":64,"rating":26,"num_ratings":65,"last_updated":66,"tested_up_to":67,"requires_at_least":68,"requires_php":69,"tags":70,"homepage":76,"download_link":77,"security_score":78,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":79},"wp-weixin","WP Weixin","1.3.18","Alexandre Froger","https:\u002F\u002Fprofiles.wordpress.org\u002Ffrogerme\u002F","\u003Cp>WP Weixin provides integration between WordPress and WeChat. Register or authenticate users automatically in WeChat browser, use WeChat to create an account or authenticate on computers by scanning a QR code with WeChat, share posts in WeChat Moments and conversations or extend the plugin for more features!\u003C\u002Fp>\n\u003Ch3>Important notes\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Requires a \u003Ca href=\"https:\u002F\u002Fmp.weixin.qq.com\" rel=\"nofollow ugc\">China Mainland WeChat Official Account\u003C\u002Fa> (Subscription or Service – Service is required if used with companion plugins dealing with payments).\u003C\u002Fli>\n\u003Cli>A domain used by WordPress \u003Cstrong>must\u003C\u002Fstrong> be \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffroger-me\u002Fwp-weixin\u002Fblob\u002Fmaster\u002FREADME.md#user-content-registering-a-domain-in-the-official-accounts-backend\" rel=\"nofollow ugc\">registered in an Official Account’s backend\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>The plugin itself does not require programming knowledge, and provides really useful functionalities out of the box. Where it really shines though is when used by developers to extend its functionalities (mainly through the pre-initialised JS SDK, the WeChat Responder, and various provided \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffroger-me\u002Fwp-weixin\u002Fblob\u002Fmaster\u002FREADME.md#user-content-functions\" rel=\"nofollow ugc\">functions\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffroger-me\u002Fwp-weixin\u002Fblob\u002Fmaster\u002FREADME.md#user-content-actions\" rel=\"nofollow ugc\">actions\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffroger-me\u002Fwp-weixin\u002Fblob\u002Fmaster\u002FREADME.md#user-content-filters\" rel=\"nofollow ugc\">filters\u003C\u002Fa>).\u003C\u002Fli>\n\u003Cli>Make sure to read the “TROUBLESHOOT, FEATURE REQUESTS AND 3RD PARTY INTEGRATION” section below and \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffroger-me\u002Fwp-weixin\u002Fblob\u002Fmaster\u002FREADME.md\" rel=\"nofollow ugc\">the full documentation\u003C\u002Fa> before contacting the author.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Overview\u003C\u002Fh3>\n\u003Cp>This plugin adds the following major features to WordPress:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>WP Weixin settings page:\u003C\u002Fstrong> configure the plugin with an Official Account (or as many as you want in multisite) in English or Chinese out of the box, with instructions for each option.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WeChat Authentication:\u003C\u002Fstrong> automatically create and authenticate users in WordPress in the WeChat browser, or allow users to scan a QR code with WeChat when using classic browsers (social login).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WeChat Account Binding:\u003C\u002Fstrong> let users bind\u002Funbind their existing WordPress account with their WeChat account. Integrated with WooCommerce and Ultimate Member account pages, and may be integrated with any membership\u002Faccount\u002Fprofile plugin easily.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WeChat Share:\u003C\u002Fstrong> Share posts and pages on Moments or Send to chat, in a pretty way. Triggers JavaScript events for developers on success and failure.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Force WeChat mobile:\u003C\u002Fstrong> to prevent users from browsing the website outside of the WeChat browser. If accessed with a classic browser, the page displays a QR code.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Force following the Official Account:\u003C\u002Fstrong> to harvest WeChat followers, forcing users to follow the Official Account before accessing the content.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WordPress Users screen override:\u003C\u002Fstrong> to display WeChat names and WeChat avatars if they exist, instead of the default values in the user screen.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WP Weixin QR code generator:\u003C\u002Fstrong> to create custom codes.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Menu integration:\u003C\u002Fstrong> allows to set the Official Account menus in WordPress when the WeChat Responder is enabled.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Welcome message:\u003C\u002Fstrong> sends a welcome message in WeChat when a user follows the Official Account ; allows to do so with WordPress when the WeChat Responder is enabled.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Developers – WeChat Responder:\u003C\u002Fstrong> for developers to receive and respond to calls made by WeChat’s API.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Developers – WeChat JS_SDK:\u003C\u002Fstrong> the \u003Ccode>wx\u003C\u002Fcode> JavaScript global variable is pre-configured with a signed package to leverage the JavaScript SDK of WeChat in WordPress themes more easily.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Compatible with \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoocommerce\u002F\" rel=\"ugc\">WooCommerce\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoocommerce-multilingual\u002F\" rel=\"ugc\">WooCommerce Multilingual\u003C\u002Fa>, \u003Ca href=\"http:\u002F\u002Fwpml.org\u002F\" rel=\"nofollow ugc\">WPML\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fultimate-member\u002F\" rel=\"ugc\">Ultimate Member\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FCreate_A_Network\" rel=\"nofollow ugc\">WordPress Multisite\u003C\u002Fa>, and \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffroger-me\u002Fwp-weixin\u002Fblob\u002Fmaster\u002FREADME.md#user-content-object-cache-considerations\" rel=\"nofollow ugc\">many caching plugins\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Companion Plugins\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoo-wechatpay\" rel=\"ugc\">Woo WeChatPay\u003C\u002Fa>: a payment gateway for WooCommerce.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-weixin-pay\" rel=\"ugc\">WP Weixin Pay\u003C\u002Fa>: an extension to enable money transfers to an Official Account.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-weixin-broadcast\u002F\" rel=\"ugc\">WP Weixin Broadcast\u003C\u002Fa>: broadcast WordPress posts to WeChat followers, directly from WordPress\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Developers are encouraged to build plugins and themes integrated with WeChat with WP Weixin as a core, leveraging its publicly available \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffroger-me\u002Fwp-weixin\u002Fblob\u002Fmaster\u002FREADME.md#user-content-functions\" rel=\"nofollow ugc\">functions\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffroger-me\u002Fwp-weixin\u002Fblob\u002Fmaster\u002FREADME.md#user-content-actions\" rel=\"nofollow ugc\">actions\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffroger-me\u002Fwp-weixin\u002Fblob\u002Fmaster\u002FREADME.md#user-content-filters\" rel=\"nofollow ugc\">filters\u003C\u002Fa>, or directly \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffroger-me\u002Fwp-weixin\u002Fblob\u002Fmaster\u002FREADME.md#user-content-wechat-sdk\" rel=\"nofollow ugc\">make use of the provided SDK\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cem>If you wish to see your plugin added to this list, please \u003Ca href=\"https:\u002F\u002Ffroger.me\u002Fwp-content\u002Fuploads\u002F2018\u002F04\u002Fwechat-qr.png\" rel=\"nofollow ugc\">contact the author\u003C\u002Fa>.\u003C\u002Fem>\u003C\u002Fp>\n\u003Ch3>Advanced – Multisite\u003C\u002Fh3>\n\u003Cp>WP Weixin supports multisite installs of WordPress, wether using domain\u002Fsubdomains or subdirectories. It can even support multiple Official Accounts, provided the proper filters are implemented. For more information, see \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffroger-me\u002Fwp-weixin\u002Fblob\u002Fmaster\u002FREADME.md#user-content-multisite-settings\" rel=\"nofollow ugc\">a more extensive description of the multisite settings\u003C\u002Fa>, and the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffroger-me\u002Fwp-weixin\u002Fblob\u002Fmaster\u002FREADME.md#user-content-multisite\" rel=\"nofollow ugc\">Multisite section of the documentation\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Unlike some plugins (commercial, obfuscated, and with dubious security standards), WP Weixin does not and will not rely on a crossdomain script dumped at the root of WordPress, but prefers to leverage the standard WordPress functions, actions and filters.\u003C\u002Fp>\n\u003Ch3>Troubleshoot, feature requests and 3rd party integration\u003C\u002Fh3>\n\u003Cp>Unlike most WeChat integration plugins, WP Weixin and its companion plugins published by the same author are provided for free.\u003C\u002Fp>\n\u003Cp>WP Weixin is regularly updated, and bug reports are welcome, preferably on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffroger-me\u002Fwp-weixin\u002Fissues\" rel=\"nofollow ugc\">Github\u003C\u002Fa>. Each bug report will be addressed in a timely manner, but issues reported on WordPress may take significantly longer to receive a response.\u003C\u002Fp>\n\u003Cp>WP Weixin and all the companion plugins have been tested with the latest version of WordPress – in case of issue, please ensure you are able to reproduce it with a default installation of WordPress, Storefront theme if WooCommerce is active, and any of the aforementioned supported plugins if used before reporting a bug.\u003C\u002Fp>\n\u003Cp>Feature requests (such as “it would be nice to have XYZ”) or 3rd party integration requests (such as “it is not working with XYZ plugin” or “it is not working with my theme”) for WP Weixin and all its companion plugins will be considered only after receiving a red envelope (红包) of a minimum RMB 500 on WeChat (guarantee of best effort, no guarantee of result).\u003C\u002Fp>\n\u003Cp>To add the author on WeChat, click \u003Ca href=\"https:\u002F\u002Ffroger.me\u002Fwp-content\u002Fuploads\u002F2018\u002F04\u002Fwechat-qr.png\" rel=\"nofollow ugc\">here\u003C\u002Fa>, scan the WeChat QR code, and add “WP Weixin” as a comment in your contact request.\u003C\u002Fp>\n","WordPress WeChat integration",400,19189,6,"2025-03-10T11:40:00.000Z","6.7.5","4.9.5","7.0",[71,72,73,74,75],"wechat","wechat-share","%e5%be%ae%e4%bf%a1","%e5%be%ae%e4%bf%a1%e5%85%ac%e4%bc%97%e5%8f%b7","%e5%be%ae%e4%bf%a1%e5%88%86%e4%ba%ab","https:\u002F\u002Fgithub.com\u002Ffroger-me\u002Fwp-weixin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-weixin.1.3.18.zip",92,"2026-03-15T15:16:48.613Z",{"slug":81,"name":82,"version":83,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":88,"downloaded":89,"rating":13,"num_ratings":90,"last_updated":91,"tested_up_to":92,"requires_at_least":93,"requires_php":15,"tags":94,"homepage":99,"download_link":100,"security_score":101,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":79},"wp-ya-share","WP Ya Share","1.6.1","andreyk","https:\u002F\u002Fprofiles.wordpress.org\u002Fandreyk\u002F","\u003Cp>The WP Ya.Share plugin adds to your blog a set of buttons to save URLs of your pages\u002Fposts in popular social networks (twitter, facebook, livejournal, vkontakte etc.).\u003C\u002Fp>\n\u003Cp>Добавляет блок ‘Поделиться’ (Ya.Share, разработанный в yandex) для сохранения ссылки просматриваемой страницы вашего блога в популярных ‘социальных сервисах’ (вконтакте, жж, твиттер и т. д.).\u003C\u002Fp>\n\u003Cp>It uses the Yandex Ya.share API; I shaped it into wordpress plugin with some options only.\u003C\u002Fp>\n\u003Cp>The following options are available:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>locate “ya.share” block either in the content of a page\u002Fsingle post or in the sidebar (as a new widget);\u003C\u002Fli>\n\u003Cli>select a list of preferable social networks;\u003C\u002Fli>\n\u003Cli>button\u002Flink\u002Ficon for expanded social networks list, or nothing;\u003C\u002Fli>\n\u003Cli>left, right or centered location;\u003C\u002Fli>\n\u003Cli>above or under the content;\u003C\u002Fli>\n\u003Cli>inscription language.\u003Cbr \u002F>\nPlease feel free to contact me with your questions or suggestions.\u003C\u002Fli>\n\u003C\u002Ful>\n","Adds the Yandex 'Share in social networks' block into posts or widget to simplify saving URLs of your blog pages into social networks.",200,25272,4,"2014-12-14T14:52:00.000Z","4.0.38","2.8.6",[95,96,20,97,98],"bookmarks","facebook","social","twitter","http:\u002F\u002Fandrey.eto-ya.com\u002Fwordpress\u002Fmy-plugins\u002Fwp-ya-share","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-ya-share.zip",85,{"slug":103,"name":104,"version":105,"author":106,"author_profile":107,"description":108,"short_description":109,"active_installs":110,"downloaded":111,"rating":112,"num_ratings":113,"last_updated":114,"tested_up_to":115,"requires_at_least":116,"requires_php":15,"tags":117,"homepage":122,"download_link":123,"security_score":124,"vuln_count":14,"unpatched_count":14,"last_vuln_date":125,"fetched_at":79},"baidushare-wp","百度分享按钮","1.0.6","cuckoohello","https:\u002F\u002Fprofiles.wordpress.org\u002Fcuckoohello\u002F","\u003Ch4>百度分享\u003C\u002Fh4>\n\u003Cp>百度分享是一个提供网页地址收藏、分享及发送的WEB2.0按钮工具，借助百度分享按钮，网站的浏览者可以方便的分享内容到人人网、开心网、QQ空间、新浪微博等一系列SNS站点。 网站主可以在百度分享网站中获得分享按钮JS代码，嵌入到自己的网站，让网站链接分享到互联网各个角落！通过百度分享按钮，您的网站的浏览者可以便捷得分享您网站上的内容到人人网、开心网、qq>空间、新浪微博等SNS站点进行传播，为您的网站带回更多的流量。通过百度分享按钮，您网站上的网页将更容易被百度搜索引擎所发现，从而有机会从百度搜索带回更多的流量。通过百度分享按钮，后续您还可以免费获取详尽的分享统计分析，了解网民将您网站上哪些内容分享到哪些SNS网站，每日的分享次数是多少，帮您更好得的跟踪、分析、激励用户的分享行为，为网站带来更多的流量。\u003C\u002Fp>\n\u003Ch4>与百度官方插件关系\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fshare.baidu.com\u002Fhelp\u002Fsystem\u002Fwordpress\" rel=\"nofollow ugc\">百度分享Wordpress官方插件\u003C\u002Fa>最新更新时间2011.09.21，代码使用百度分享2.0版式时会出问题，不能使用从http:\u002F\u002Fshare.baidu.com\u002Fcode获取的代码，因此上传个人修改版本，支持最新的3.8.2系统。\u003C\u002Fp>\n\u003Cp>主要修改：\u003C\u002Fp>\n\u003Cul>\n\u003Cli>支持百度分享2.0\u003C\u002Fli>\n\u003Cli>去除分享时设置分享内容还是标题\u003C\u002Fli>\n\u003Cli>减少分享插件换行数，更美观\u003C\u002Fli>\n\u003C\u002Ful>\n","百度分享是一个提供网页地址收藏、分享及发送的WEB2.0按钮工具。",70,18988,86,3,"2014-03-27T03:20:00.000Z","3.7.41","2.8.0",[118,119,120,121,20],"baidu","baidushare","%e7%99%be%e5%ba%a6%e5%88%86%e4%ba%ab%ef%bc%8cfollow","passit","https:\u002F\u002Fgithub.com\u002Fcuckoohello\u002Fbaidushare_wp","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbaidushare-wp.1.0.6.zip",63,"2025-08-23 00:00:00",{"slug":127,"name":128,"version":129,"author":130,"author_profile":131,"description":132,"short_description":133,"active_installs":134,"downloaded":135,"rating":27,"num_ratings":27,"last_updated":136,"tested_up_to":137,"requires_at_least":138,"requires_php":15,"tags":139,"homepage":144,"download_link":145,"security_score":101,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":79},"sharekoube","Sharekoube","0.8","Keisuke Nemoto","https:\u002F\u002Fprofiles.wordpress.org\u002Fnemooon\u002F","\u003Cp>Add to Sharedaddy support service.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Fabout\u002Fresources\u002Ftweetbutton\" rel=\"nofollow ugc\">Twitter\u003C\u002Fa>（日本語化）\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.google.com\u002Fintl\u002Fja\u002Fwebmasters\u002F+1\u002Fbutton\u002F\" rel=\"nofollow ugc\">Google +1\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.google.com\u002Fbuzz\u002Fapi\u002Fadmin\u002FconfigPostWidget\" rel=\"nofollow ugc\">Google Buzz\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fb.hatena.ne.jp\u002Fguide\u002Fbbutton\" rel=\"nofollow ugc\">はてなブックマーク\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fdeveloper.mixi.co.jp\u002Fconnect\u002Fmixi_plugin\u002Fmixi_check\u002F\" rel=\"nofollow ugc\">mixiチェック\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.evernote.com\u002Fabout\u002Fintl\u002Fjp\u002Fdeveloper\u002Fsitememory\u002F\" rel=\"nofollow ugc\">Evernote\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>PHP5 REQUIRE\u003C\u002Fstrong>\u003C\u002Fp>\n","Add to Sharedaddy support service.",30,2462,"2011-07-07T06:30:00.000Z","3.2.1","3.0",[140,141,142,143,98],"google-1","hatena-bookmark","mixi-check","sharedaddy","http:\u002F\u002Fnemooon.jp\u002Fplugins\u002Fsharekoube\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsharekoube.zip",{"attackSurface":147,"codeSignals":168,"taintFlows":191,"riskAssessment":229,"analyzedAt":241},{"hooks":148,"ajaxHandlers":164,"restRoutes":165,"shortcodes":166,"cronEvents":167,"entryPointCount":27,"unprotectedCount":27},[149,155,160],{"type":150,"name":151,"callback":152,"file":153,"line":154},"filter","the_content","bshare","bookmark-share.php",19,{"type":156,"name":157,"callback":158,"file":153,"line":159},"action","plugins_loaded","widget_sidebar_bshare",35,{"type":156,"name":161,"callback":162,"file":153,"line":163},"admin_menu","bshare_menu",49,[],[],[],[],{"dangerousFunctions":169,"sqlUsage":170,"outputEscaping":172,"fileOperations":27,"externalRequests":27,"nonceChecks":27,"capabilityChecks":27,"bundledLibraries":190},[],{"prepared":27,"raw":27,"locations":171},[],{"escaped":27,"rawEcho":32,"locations":173},[174,177,179,181,183,185,187,188],{"file":153,"line":175,"context":176},40,"raw output",{"file":153,"line":178,"context":176},41,{"file":153,"line":180,"context":176},43,{"file":153,"line":182,"context":176},44,{"file":153,"line":184,"context":176},78,{"file":153,"line":186,"context":176},79,{"file":153,"line":13,"context":176},{"file":153,"line":189,"context":176},81,[],[192,218],{"entryPoint":193,"graph":194,"unsanitizedCount":216,"severity":217},"bshare_options (bookmark-share.php:53)",{"nodes":195,"edges":212},[196,201,207,210],{"id":197,"type":198,"label":199,"file":153,"line":200},"n0","source","$_POST",55,{"id":202,"type":203,"label":204,"file":153,"line":205,"wp_function":206},"n1","sink","update_option() [Settings Manipulation]",56,"update_option",{"id":208,"type":198,"label":209,"file":153,"line":36},"n2","$_POST['bshare_pos']",{"id":211,"type":203,"label":204,"file":153,"line":36,"wp_function":206},"n3",[213,215],{"from":197,"to":202,"sanitized":214},false,{"from":208,"to":211,"sanitized":214},2,"low",{"entryPoint":219,"graph":220,"unsanitizedCount":216,"severity":217},"\u003Cbookmark-share> (bookmark-share.php:0)",{"nodes":221,"edges":226},[222,223,224,225],{"id":197,"type":198,"label":199,"file":153,"line":200},{"id":202,"type":203,"label":204,"file":153,"line":205,"wp_function":206},{"id":208,"type":198,"label":209,"file":153,"line":36},{"id":211,"type":203,"label":204,"file":153,"line":36,"wp_function":206},[227,228],{"from":197,"to":202,"sanitized":214},{"from":208,"to":211,"sanitized":214},{"summary":230,"deductions":231},"The \"17fav-bookmark-share\" v4.2.0 plugin presents a mixed security posture. On the positive side, it has a zero attack surface from direct entry points like AJAX, REST API, shortcodes, and cron events, indicating a deliberate design to limit external interaction. Furthermore, all SQL queries are executed using prepared statements, and there are no known vulnerabilities (CVEs) or dangerous functions present, suggesting a generally careful development approach regarding common web vulnerabilities. \n\nHowever, significant concerns arise from the static analysis of the code. The complete lack of output escaping across all identified outputs is a major security flaw. This means that any data displayed to users, including potentially user-supplied data, is not properly sanitized, opening the door to cross-site scripting (XSS) vulnerabilities. Additionally, the taint analysis revealed two flows with unsanitized paths, even though they were not classified as critical or high severity. While no direct entry points were found to be unprotected, these unsanitized paths coupled with the lack of output escaping represent a real risk of data injection or manipulation if data from these paths is ever displayed. The absence of nonce and capability checks, while not directly exploitable given the zero attack surface, highlights a lack of robust security practices that could become a problem if the plugin's architecture were to change.\n\nIn conclusion, the plugin benefits from a minimal attack surface and good practices around SQL queries and vulnerability history. However, the critical deficiency in output escaping and the presence of unsanitized taint flows are substantial weaknesses that expose it to cross-site scripting attacks. The lack of fundamental security checks like nonces and capability checks further detracts from its overall security. While it currently has no known external vulnerabilities, the internal code issues present an immediate risk to any WordPress site using it.",[232,234,236,239],{"reason":233,"points":32},"Unescaped output across all outputs",{"reason":235,"points":65},"Taint flows with unsanitized paths",{"reason":237,"points":238},"No nonce checks",5,{"reason":240,"points":238},"No capability checks","2026-03-16T22:43:31.086Z",{"wat":243,"direct":250},{"assetPaths":244,"generatorPatterns":246,"scriptPaths":247,"versionParams":249},[245],"\u002Fwp-content\u002Fplugins\u002F17fav-bookmark-share\u002Fbookmark-share.php",[],[248],"http:\u002F\u002Fwww.bshare.cn\u002Fbutton.js",[],{"cssClasses":251,"htmlComments":253,"htmlAttributes":254,"restEndpoints":255,"jsGlobals":256,"shortcodeOutput":257},[252],"bshareDiv",[],[],[],[],[258,259,260,261],"\u003Ca class=\"bshareDiv\" target=\"_blank\" href=\"http:\u002F\u002Fwww.bshare.cn\u002Fshare\">分享&收藏\u003C\u002Fa>\u003Cscript language=\"javascript\" type=\"text\u002Fjavascript\" src=\"http:\u002F\u002Fwww.bshare.cn\u002Fbutton.js\">\u003C\u002Fscript>","\u003Cp>\u003Ca href=\"http:\u002F\u002Fwww.bshare.cn\u002Fshare?url=","&title=","\" title=\"用bShare分享或收藏本文\">\u003Cimg src=\"http:\u002F\u002Fstatic.bshare.cn\u002Fframe\u002Fimages\u002Fbutton_custom1-zh.gif\" alt=\"用bShare分享或收藏本文\" \u002F>\u003C\u002Fa>\u003C\u002Fp>"]