[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fK93QW_wSPioMqCH45P9oGbkJKDox3yZ5ymCimn3_udE":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":14,"tags":17,"homepage":22,"download_link":23,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":34,"analysis":144,"fingerprints":182},"ab-show-thumbs-on-post","AB Show Thumbs On Post","1.00","abjelosevic","https:\u002F\u002Fprofiles.wordpress.org\u002Fabjelosevic\u002F","\u003Cp>Just simple plugin show featured image on post list\u003C\u002Fp>\n","Plugin that show featured image on post list.",10,1667,0,"","4.95","3.8",[18,19,20,21],"counter","featured","post","view","http:\u002F\u002Faleksandar.bjelosevic.info\u002Fabstop","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fab-show-thumbs-on-post.zip",100,null,"2026-03-15T14:44:11.924Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":29,"total_installs":30,"avg_security_score":31,"avg_patch_time_days":30,"trust_score":32,"computed_at":33},4,30,96,91,"2026-04-04T18:42:56.123Z",[35,62,84,106,125],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":43,"downloaded":44,"rating":45,"num_ratings":46,"last_updated":47,"tested_up_to":48,"requires_at_least":49,"requires_php":50,"tags":51,"homepage":56,"download_link":57,"security_score":58,"vuln_count":59,"unpatched_count":13,"last_vuln_date":60,"fetched_at":61},"post-views-counter","Post Views Counter","1.7.8","dFactory","https:\u002F\u002Fprofiles.wordpress.org\u002Fdfactory\u002F","\u003Cp>Post Views Counter allows you to collect and display how many times a post, page, or other content has been viewed in a simple, fast and reliable way.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpostviewscounter.com\u002F\" rel=\"nofollow ugc\">Post Views Counter\u003C\u002Fa> gives you clear, accurate post view stats — right inside WordPress. No external tools. No bloat. Just the numbers you need to see what’s working.\u003C\u002Fp>\n\u003Ch4>Key Benefits\u003C\u002Fh4>\n\u003Cp>Clarity, speed, and control:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Clear, Focused Metrics\u003C\u002Fstrong> — You get a clear picture of how your posts are performing.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Made for WordPress\u003C\u002Fstrong> — Runs entirely in your site. No GA, no third-party pipes; accurate counts in your Dashboard.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy-first\u003C\u002Fstrong> — Data lives on your server, with controls that respect visitors’ rights and privacy regulations.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Works at scale\u003C\u002Fstrong> — Minimal overhead, no external scripts, Multisite-ready.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Display anywhere\u003C\u002Fstrong> — Automatically show counts, or place them exactly where you want via blocks or shortcode.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cp>Practical features that matter:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Count & display views for \u003Cstrong>any post type\u003C\u002Fstrong> you select.\u003C\u002Fli>\n\u003Cli>Three counting modes: \u003Cstrong>PHP, JavaScript, REST API\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Dashboard post views \u003Cstrong>stats widget\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Sortable Post Views \u003Cstrong>admin column\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Exclude bots, logged-in users, specific roles, or IPs\u003C\u002Fli>\n\u003Cli>Manually adjust a post’s views when needed.\u003C\u002Fli>\n\u003Cli>Query and \u003Cstrong>order content by views\u003C\u002Fstrong> (developer-friendly)\u003C\u002Fli>\n\u003Cli>Custom REST API endpoints\u003C\u002Fli>\n\u003Cli>Option to set count interval\u003C\u002Fli>\n\u003Cli>One-click data import from \u003Cstrong>WP-PostViews\u003C\u002Fstrong>, \u003Cstrong>Statify\u003C\u002Fstrong> and \u003Cstrong>Page Views Count\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Post views \u003Cstrong>display position\u003C\u002Fstrong>, automatic or manual via shortcode\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multisite\u003C\u002Fstrong> compatibile\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WPML\u002FPolylang\u003C\u002Fstrong> compatible; translation-ready (.pot)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Post Views Counter Pro\u003C\u002Fh4>\n\u003Cp>More capability without extra complexity:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Fast AJAX counting\u003C\u002Fstrong> for more accurate data.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Caching optimization\u003C\u002Fstrong> that guarantees performance even under heavy traffic.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Reports\u003C\u002Fstrong>: Views by Date, Post, Author to spot winners, trends, and top contributors.\u003C\u002Fli>\n\u003Cli>Customizable \u003Cstrong>Views Period\u003C\u002Fstrong> (e.g., last 7\u002F30 days) to control the views count timeframe.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Export to CSV\u002FXML\u003C\u002Fstrong> to download and share data.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Integrations\u003C\u002Fstrong> for ordering by views in popular builders (e.g., \u003Cstrong>Elementor Pro, Divi, GenerateBlocks\u003C\u002Fstrong>).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpostviewscounter.com\u002Fpricing\u002F\" rel=\"nofollow ugc\">Learn more about Pro \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan>\u003C\u002Fa>\u003C\u002Fp>\n","Post Views Counter allows you to collect and display how many times a post, page, or other content has been viewed in a simple, fast and reliable way.",200000,5127428,98,1194,"2026-03-10T10:56:00.000Z","6.9.4","6.3.0","7.0",[52,18,53,54,55],"analytics","pageviews","postviews","statistics","https:\u002F\u002Fpostviewscounter.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpost-views-counter.1.7.8.zip",99,2,"2024-04-05 00:00:00","2026-03-15T15:16:48.613Z",{"slug":63,"name":64,"version":65,"author":66,"author_profile":67,"description":68,"short_description":69,"active_installs":70,"downloaded":71,"rating":72,"num_ratings":73,"last_updated":74,"tested_up_to":75,"requires_at_least":76,"requires_php":14,"tags":77,"homepage":80,"download_link":81,"security_score":58,"vuln_count":82,"unpatched_count":13,"last_vuln_date":83,"fetched_at":61},"wp-postviews","WP-PostViews","1.78","Lester Chan","https:\u002F\u002Fprofiles.wordpress.org\u002Fgamerz\u002F","\u003Ch3>Usage\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Open \u003Ccode>wp-content\u002Fthemes\u002F\u003CYOUR THEME NAME>\u002Findex.php\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>You may place it in archive.php, single.php, post.php or page.php also.\u003C\u002Fli>\n\u003Cli>Find: \u003Ccode>\u003C?php while (have_posts()) : the_post(); ?>\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Add Anywhere Below It (The Place You Want The Views To Show): \u003Ccode>\u003C?php if(function_exists('the_views')) { the_views(); } ?>\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Or you can use the shortcode \u003Ccode>[views]\u003C\u002Fcode> or \u003Ccode>[views id=\"1\"]\u003C\u002Fcode> (where 1 is the post ID) in a post\u003C\u002Fli>\n\u003Cli>Go to \u003Ccode>WP-Admin -> Settings -> PostViews\u003C\u002Fcode> to configure the plugin.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Development\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Flesterchan\u002Fwp-postviews\u002F\" title=\"https:\u002F\u002Fgithub.com\u002Flesterchan\u002Fwp-postviews\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Flesterchan\u002Fwp-postviews\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fdev.wp-plugins.org\u002Fbrowser\u002Fwp-postviews\u002Fi18n\u002F\" title=\"http:\u002F\u002Fdev.wp-plugins.org\u002Fbrowser\u002Fwp-postviews\u002Fi18n\u002F\" rel=\"nofollow ugc\">http:\u002F\u002Fdev.wp-plugins.org\u002Fbrowser\u002Fwp-postviews\u002Fi18n\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Plugin icon by \u003Ca href=\"http:\u002F\u002Fwww.icomoon.io\" rel=\"nofollow ugc\">Iconmoon\u003C\u002Fa> from \u003Ca href=\"http:\u002F\u002Fwww.flaticon.com\" rel=\"nofollow ugc\">Flaticon\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Donations\u003C\u002Fh3>\n\u003Cp>I spent most of my free time creating, updating, maintaining and supporting these plugins, if you really love my plugins and could spare me a couple of bucks, I will really appreciate it. If not feel free to use it without any obligations.\u003C\u002Fp>\n\u003Ch3>Version 1.76.1\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>NEW: Add Post Author in views template\u003C\u002Fli>\n\u003Cli>NEW: Bump for WordPress 5.3\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.76\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>NEW: Added postviews_should_count filter\u003C\u002Fli>\n\u003Cli>FIXED: Change to (int) from intval() and use sanitize_key() with it.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.75\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>NEW: Use WP_Query() for most\u002Fleast viewed posts\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.74\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>NEW: Bump WordPress 4.7\u003C\u002Fli>\n\u003Cli>NEW: Template variable %POST_CATEGORY_ID%. It returns Post’s Category ID. If you are using Yoast SEO Plugin, it will return the priority Category ID. Props @FunFrog-BY\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.73\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>FIXED: In preview mode, don’t count views\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.72\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>NEW: Add %POST_THUMBNAIL% to template variables\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.71\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>FIXED: Notices in Widget Constructor for WordPress 4.3\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.70\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>FIXED: Integration with WP-Stats\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.69\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>NEW: Shortcode \u003Ccode>[views]\u003C\u002Fcode> or [views id=”POST_ID”]` to embed view count into post\u003C\u002Fli>\n\u003Cli>NEW: Added template variable \u003Ccode>%VIEW_COUNT_ROUNDED%\u003C\u002Fcode> to support rounded view count like 10.1k or 11.2M\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.68\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>NEW: Added action hook ‘postviews_increment_views’ and ‘postviews_increment_views_ajax’\u003C\u002Fli>\n\u003Cli>NEW: Allow custom post type to be chosen under the widget\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.67\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>NEW: Allow user to not use AJAX to update the views even though WP_CACHE is true\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.66\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>NEW: Supports MultiSite Network Activation\u003C\u002Fli>\n\u003Cli>NEW: Add %POST_DATE% and %POST_TIME% to template variables\u003C\u002Fli>\n\u003Cli>NEW: Add China isearch engines bots\u003C\u002Fli>\n\u003Cli>NEW: Ability to pass in an array of post types for get_most\u002Fleast_*() functions. Props Leo Plaw.\u003C\u002Fli>\n\u003Cli>FIXED: Moved uninstall to uninstall.php and hence fix missing nonce. Props Julio Potier.\u003C\u002Fli>\n\u003Cli>FIXED: Notices and better way to get views from meta. Props daankortenbach.\u003C\u002Fli>\n\u003Cli>FIXED: No longer needing add_post_meta() if update_post_meta() fails.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Version 1.65 (02-06-2013)\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>FIXED: Views not showing in WP-Admin if “Display Options” is not set to “Display to everyone”\u003C\u002Fli>\n\u003C\u002Ful>\n","Enables you to display how many times a post\u002Fpage had been viewed.",100000,3382051,88,65,"2025-08-31T05:28:00.000Z","6.8.5","4.0",[18,78,54,79],"hits","views","https:\u002F\u002Flesterchan.net\u002Fportfolio\u002Fprogramming\u002Fphp\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-postviews.1.78.zip",1,"2013-05-08 00:00:00",{"slug":85,"name":86,"version":87,"author":88,"author_profile":89,"description":90,"short_description":91,"active_installs":92,"downloaded":93,"rating":94,"num_ratings":95,"last_updated":96,"tested_up_to":48,"requires_at_least":97,"requires_php":98,"tags":99,"homepage":104,"download_link":105,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":61},"wp-post-views","Wp Post Views – WordPress Post views counter","1.22","Ronak J Vanpariya","https:\u002F\u002Fprofiles.wordpress.org\u002Fvanpariyar\u002F","\u003Cp>WordPress post views counter counts the view of your Built in post type and Custom post type.\u003C\u002Fp>\n\u003Ch3>Features And Options:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Simple, and easy to understand.\u003C\u002Fli>\n\u003Cli>Option to filter views on IP address to get accurate post count.\u003C\u002Fli>\n\u003Cli>Option to select the custom post type.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>How to Get Post Count in Frontend\u003C\u002Fh3>\n\u003Cp>Use this shortcode.\u003C\u002Fp>\n\u003Cp>[WPPV-TOTAL-VIEWS]\u003C\u002Fp>\n\u003Cp>TO get site wide count of your post type ( Refresh Hourly due to performance reason ).\u003Cbr \u002F>\n[WPPV-TOTAL-VIEWS-PER-POST-TYPE post_type=”post”]\u003Cbr \u002F>\nThe total view shortcode not working well with large sites.\u003C\u002Fp>\n\u003Ch3>Tutorial\u003C\u002Fh3>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F11NH5xOBs68?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch3>Development\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Development happening on GitHub :- \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fvanpariyar\u002Fwp-post-views\" rel=\"nofollow ugc\">WP Post Views Github\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Create issue on the GitHub OR Pull request for new feature when new tag added it will automatically deployed.\u003C\u002Fli>\n\u003C\u002Ful>\n","Wordpress Post views counter",4000,63934,86,6,"2025-12-15T11:59:00.000Z","5.4","7.4",[100,101,102,103,85],"count-wordpress-site-views","post-view-counter","post-views","show-post-views","https:\u002F\u002Fgithub.com\u002Fvanpariyar\u002Fwp-post-views","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-post-views.1.22.zip",{"slug":107,"name":108,"version":109,"author":110,"author_profile":111,"description":112,"short_description":113,"active_installs":92,"downloaded":114,"rating":115,"num_ratings":116,"last_updated":117,"tested_up_to":75,"requires_at_least":118,"requires_php":119,"tags":120,"homepage":122,"download_link":123,"security_score":24,"vuln_count":82,"unpatched_count":13,"last_vuln_date":124,"fetched_at":61},"wp-simple-post-view","Post View Count","3.1","Naresh Parmar","https:\u002F\u002Fprofiles.wordpress.org\u002Fnareshparmar827\u002F","\u003Cp>“Post View Count” is an easy-to-use and lightweight post views count plugin. It allows you to display how many times a post type has been viewed.\u003C\u002Fp>\n\u003Ch4>Main Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Lightweight plugin\u003C\u002Fli>\n\u003Cli>No third party dependency\u003C\u002Fli>\n\u003Cli>Post views display in backend post grid\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Need Help\u003C\u002Fh4>\n\u003Cp>If you’re stuck or have any questions regarding the use of this plugin, you can email us at: \u003Ca href=\"mailto:nareshparmar827@gmail.com\" rel=\"nofollow ugc\">nareshparmar827@gmail.com\u003C\u002Fa>\u003C\u002Fp>\n","Add a \"Post View Count\" plugin to get the count of views for your posts.",77188,92,18,"2025-09-01T16:43:00.000Z","6.8","7.1",[121,18,54,21],"count","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-simple-post-view\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-simple-post-view.3.1.zip","2023-10-03 00:00:00",{"slug":126,"name":127,"version":128,"author":129,"author_profile":130,"description":131,"short_description":132,"active_installs":133,"downloaded":134,"rating":24,"num_ratings":135,"last_updated":136,"tested_up_to":48,"requires_at_least":109,"requires_php":50,"tags":137,"homepage":141,"download_link":142,"security_score":45,"vuln_count":59,"unpatched_count":13,"last_vuln_date":143,"fetched_at":61},"wpecounter","WP Views Counter","2.1.3","etruel","https:\u002F\u002Fprofiles.wordpress.org\u002Fetruel\u002F","\u003Cp>\u003Cstrong>WP Views Counter\u003C\u002Fstrong> is a lightweight, high-performance plugin that accurately tracks and displays post, page, and custom post type views — directly in the WordPress admin, via shortcode, or with a Gutenberg block.\u003C\u002Fp>\n\u003Cp>Built for bloggers, marketers, store owners, and developers, it works seamlessly across all post types — including WooCommerce and Easy Digital Downloads — with minimal impact on your site’s speed. No external scripts. No unnecessary bloat.\u003C\u002Fp>\n\u003Cp>This plugin does one job and does it exceptionally well: it tells you which content is getting the most attention.\u003C\u002Fp>\n\u003Ch4>Key Benefits\u003C\u002Fh4>\n\u003Cp>✅ \u003Cstrong>Accurate view counts\u003C\u002Fstrong> in admin columns, shortcode, or block\u003Cbr \u002F>\n✅ \u003Cstrong>Metabox per post\u003C\u002Fstrong> with real-time views and reset button\u003Cbr \u002F>\n✅ \u003Cstrong>Exclude views from logged-in users or specific roles\u003C\u002Fstrong>\u003Cbr \u002F>\n✅ \u003Cstrong>Fully AJAX-powered\u003C\u002Fstrong> — no page reloads or slowdowns\u003Cbr \u002F>\n✅ \u003Cstrong>Works with all post types\u003C\u002Fstrong>, including EDD and WooCommerce\u003Cbr \u002F>\n✅ \u003Cstrong>Block to display popular posts\u003C\u002Fstrong> — no legacy widgets required\u003Cbr \u002F>\n✅ \u003Cstrong>Developer-friendly and fully translatable\u003C\u002Fstrong>\u003Cbr \u002F>\n✅ \u003Cstrong>Import views from other plugins\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Whether you’re optimizing your content strategy or simply want to know what’s working, \u003Cstrong>WP Views Counter\u003C\u002Fstrong> is the simple and effective alternative to bloated analytics plugins.\u003C\u002Fp>\n\u003Cp>📦 Start tracking your most popular content today — with clarity, speed and control.\u003C\u002Fp>\n\u003Cp>💡 Developer-friendly: \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FEtruel-Developments\u002Fwpecounter\u002Fissues\" rel=\"nofollow ugc\">Contribute on GitHub\u003C\u002Fa> — forks and pull requests welcome.\u003C\u002Fp>\n","Fast, lightweight post views counter. Display views in admin, blocks or shortcodes — no tracking scripts required.",2000,41916,5,"2025-12-19T18:09:00.000Z",[138,52,139,102,140],"ajax-counter","popular-posts","views-counter","https:\u002F\u002Fetruel.com\u002Fdownloads\u002Fwpecounter","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpecounter.2.1.3.zip","2025-12-14 00:00:00",{"attackSurface":145,"codeSignals":161,"taintFlows":171,"riskAssessment":172,"analyzedAt":181},{"hooks":146,"ajaxHandlers":157,"restRoutes":158,"shortcodes":159,"cronEvents":160,"entryPointCount":13,"unprotectedCount":13},[147,153],{"type":148,"name":149,"callback":150,"file":151,"line":152},"filter","manage_posts_columns","ab_show_thumb_add_pic_column","ab-show-thumbs-on-post-plugin.php",24,{"type":148,"name":154,"callback":155,"priority":11,"file":151,"line":156},"manage_posts_custom_column","ab_show_thumb_manage_pic_column",25,[],[],[],[],{"dangerousFunctions":162,"sqlUsage":163,"outputEscaping":165,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":170},[],{"prepared":13,"raw":13,"locations":164},[],{"escaped":13,"rawEcho":82,"locations":166},[167],{"file":151,"line":168,"context":169},19,"raw output",[],[],{"summary":173,"deductions":174},"The static analysis of the \"ab-show-thumbs-on-post\" plugin v1.00 reveals a plugin with a remarkably small attack surface, featuring no AJAX handlers, REST API routes, shortcodes, or cron events. Furthermore, the absence of dangerous functions, file operations, and external HTTP requests suggests a limited scope of potential malicious interaction. The fact that all identified SQL queries utilize prepared statements is a strong security positive.  However, a significant concern arises from the complete lack of output escaping for all identified output points. This means that any data displayed by the plugin, if not inherently sanitized, could be vulnerable to cross-site scripting (XSS) attacks. The plugin also lacks nonce and capability checks, which, while not directly exploitable due to the zero entry points, would be a critical deficiency if any entry points were to be introduced in future versions.  The vulnerability history is clean, with no recorded CVEs, which is a positive indicator of past security diligence or a lack of historical focus on this plugin by attackers.  Overall, the plugin exhibits good practices in avoiding common attack vectors but has a critical flaw in output handling that requires immediate attention. The lack of entry points shields it from exploitation of this flaw currently, but this is a latent risk.",[175,177,179],{"reason":176,"points":95},"Output not properly escaped",{"reason":178,"points":29},"No nonce checks on entry points",{"reason":180,"points":29},"No capability checks on entry points","2026-03-16T23:33:01.587Z",{"wat":183,"direct":188},{"assetPaths":184,"generatorPatterns":185,"scriptPaths":186,"versionParams":187},[],[],[],[],{"cssClasses":189,"htmlComments":190,"htmlAttributes":191,"restEndpoints":192,"jsGlobals":193,"shortcodeOutput":194},[],[],[],[],[],[]]