[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8Ty2kdDgrrt8IB6kGMyJDKRRdmGEbIJCkPvwl_kxPuU":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":38,"analysis":140,"fingerprints":196},"abbreviation-button-for-tinymce","Abbreviation button for TinyMCE","1.3.7","Jb Audras","https:\u002F\u002Fprofiles.wordpress.org\u002Faudrasjb\u002F","\u003Cp>This plugin should be used to supply abbreviation support in the TinyMCE visual editor. Once activated, it provides an “ABR” button which allows editor to indicate the meaning of each abbreviation used in Pages, Posts or any custom post types used in your WordPress installation. The markup is fully compatible with accessibility rules like Web Content Accessibility Guidelines (WCAG). It uses \u003Ccode>\u003Cabbr>…\u003C\u002Fabbr>\u003C\u002Fcode> HTML markup instead of the deprecated \u003Ccode>\u003Cacronym>…\u003C\u002Facronym>\u003C\u002Fcode> HTML markup.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Available languages\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>English\u003C\u002Fli>\n\u003Cli>French\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can add your own language pack: contribute \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>! Contributors will be linked back here.\u003Cbr \u002F>\nSearch Plugins > Abbreviation button for tinymce and add your translations. Many strings are commented to help you to understand context.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Credits\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fjeanbaptisteaudras.com\u002F\" title=\"Jean-Baptiste Audras\" rel=\"nofollow ugc\">Jean-Baptiste Audras\u003C\u002Fa>, WordPress projects manager at \u003Ca href=\"http:\u002F\u002Fwww.whodunit.fr\u002F\" title=\"Whodunit Web Agency\" rel=\"nofollow ugc\">Whodunit\u003C\u002Fa> and WordPress developer. @audrasjb on \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Faudrasjb\" title=\"@audrasjb on Twitter\" rel=\"nofollow ugc\">Twitter\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Faudrasjb\" title=\"@audrasjb on Github\" rel=\"nofollow ugc\">Github\u003C\u002Fa>.\u003C\u002Fp>\n","Provides abbreviation button for WordPress TinyMCE visual editor.",100,6494,0,"2020-08-12T22:42:00.000Z","5.5.18","4.6","5.6",[19,20,21,22,23],"abbr","abbreviation","abbreviations","abreviation","abreviations","https:\u002F\u002Fjeanbaptisteaudras.com\u002Ftinymce-abbr\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fabbreviation-button-for-tinymce.1.3.7.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":34,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},"audrasjb",24,63620,98,530,78,"2026-04-04T09:11:21.689Z",[39,64,85,104,120],{"slug":40,"name":41,"version":42,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":49,"num_ratings":50,"last_updated":51,"tested_up_to":52,"requires_at_least":53,"requires_php":54,"tags":55,"homepage":60,"download_link":61,"security_score":26,"vuln_count":62,"unpatched_count":13,"last_vuln_date":63,"fetched_at":28},"text-hover","Text Hover","4.2","Scott Reilly","https:\u002F\u002Fprofiles.wordpress.org\u002Fcoffee2code\u002F","\u003Cp>This plugin allows you to easily define help text that appears when a visitor hovers their mouse over a word or phrase in a post or page.\u003C\u002Fp>\n\u003Cp>Via the plugin’s settings, simply specify the words or phrases that you want to be associated with hover text, and of course, the desired hover texts themselves. The format is quite simple; an example of which is shown here:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>WP => WordPress\nMatt => Matt Mullenweg\nThe Scooby Shack => the bar where the gang hangs out\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Additional features of the plugin controlled both via settings and filters:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Hover text can be enabled for comments (it isn’t by default)\u003C\u002Fli>\n\u003Cli>Hover text can be made case insensitive (it is case sensitive by default)\u003C\u002Fli>\n\u003Cli>Hover text can be limited to doing only one replacement per term, per post (by default, all occurrences of a term are given hovertext)\u003C\u002Fli>\n\u003Cli>Hover text can be rendered using the default browser tooltip (by default, the better-looking \u003Ca href=\"http:\u002F\u002Fqtip2.com\u002F\" rel=\"nofollow ugc\">qTip2\u003C\u002Fa> library is used)\u003C\u002Fli>\n\u003Cli>Hover text can be expanded to affect other filters\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Note:\u003C\u002Fstrong> This is not the same as my \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftext-replace\" rel=\"ugc\">Text Replace\u003C\u002Fa> plugin, which defines terms or phrases that you want replaced by replacement text when displayed on your site. Text Hover instead adds the hover text as additional information for when visitors hover over the term, which is otherwise displayed in the post as you typed it.\u003C\u002Fp>\n\u003Cp>Links: \u003Ca href=\"https:\u002F\u002Fcoffee2code.com\u002Fwp-plugins\u002Ftext-hover\u002F\" rel=\"nofollow ugc\">Plugin Homepage\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftext-hover\u002F\" rel=\"ugc\">Plugin Directory Page\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcoffee2code\u002Ftext-hover\u002F\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fcoffee2code.com\" rel=\"nofollow ugc\">Author Homepage\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Developer Documentation\u003C\u002Fh3>\n\u003Cp>Developer documentation can be found in \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcoffee2code\u002Ftext-hover\u002Fblob\u002Fmaster\u002FDEVELOPER-DOCS.md\" rel=\"nofollow ugc\">DEVELOPER-DOCS.md\u003C\u002Fa>. That documentation covers the numerous hooks provided by the plugin. Those hooks are listed below to provide an overview of what’s available.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>c2c_text_hover_filters\u003C\u002Fcode> : Customize what hooks get text hover applied to them.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_text_hover_third_party_filters\u003C\u002Fcode> : Customize what third-party hooks get text hover applied to them.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_text_hover_filter_priority\u003C\u002Fcode> : Override the default priority for the \u003Ccode>c2c_text_hover\u003C\u002Fcode> filter.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_text_hover\u003C\u002Fcode> Customize or override the setting defining all of the text hover terms and their hover texts.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_text_hover_comments\u003C\u002Fcode> : Customize or override the setting indicating if text hover should be enabled in comments.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_text_hover_case_sensitive\u003C\u002Fcode> : Customize or override the setting indicating if text hover should be case sensitive.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_text_hover_once\u003C\u002Fcode> : Customize or override the setting indicating if text hovering should be limited to once per term per piece of text being processed regardless of how many times the term appears.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_text_hover_use_pretty_tooltips\u003C\u002Fcode> : Customize or override the setting indicating if prettier tooltips should be used.\u003C\u002Fli>\n\u003C\u002Ful>\n","Add hover text (aka tooltips) to content in posts. Handy for providing explanations of names, terms, phrases, abbreviations, and acronyms.",2000,62418,90,17,"2022-03-23T06:10:00.000Z","5.9.13","4.9","",[21,56,57,58,59],"acronyms","help","terms","tooltips","https:\u002F\u002Fcoffee2code.com\u002Fwp-plugins\u002Ftext-hover\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftext-hover.4.2.zip",1,"2022-04-09 00:00:00",{"slug":65,"name":66,"version":67,"author":7,"author_profile":8,"description":68,"short_description":69,"active_installs":70,"downloaded":71,"rating":72,"num_ratings":73,"last_updated":74,"tested_up_to":75,"requires_at_least":76,"requires_php":77,"tags":78,"homepage":83,"download_link":84,"security_score":11,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"abbreviation-button-for-the-block-editor","Abbreviation Button for the Block Editor","0.1","\u003Cp>The goal of this plugin is to provide expansions or definitions for abbreviations by using the \u003Ccode>abbr\u003C\u002Fcode> HTML element. It helps to make your website compliant to the \u003Ca href=\"https:\u002F\u002Fwww.w3.org\u002FWAI\u002FWCAG21\u002FUnderstanding\u002Fabbreviations.html\" rel=\"nofollow ugc\">success criterion 3.1.4 of Web Content Accessibility Guidelines (WCAG)\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>It is always appropriate to use the \u003Ccode>abbr\u003C\u002Fcode> element for any abbreviation, including acronyms and initialisms. This HTML element helps to make sure the abbreviation is understood by assistive technologies, by informing the user agent that the characters are an abbreviation, and by providing its meaning using the \u003Ccode>title\u003C\u002Fcode> attribute.\u003C\u002Fp>\n\u003Cp>This plugin adds a new \u003Ccode>abr\u003C\u002Fcode> format button in the formatting toolbar of the block editor.\u003C\u002Fp>\n","Add an abbreviation format button to the formatting toolbar in the block editor.",200,9784,94,3,"2025-11-27T08:46:00.000Z","6.9.4","5.9","7.0",[20,79,80,81,82],"accessibility","acronym","block-editor","lang","https:\u002F\u002Fwhodunit.fr\u002Fgestion-des-abreviations-pour-lediteur-de-blocs-gutenberg","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fabbreviation-button-for-the-block-editor.0.1.zip",{"slug":86,"name":87,"version":88,"author":89,"author_profile":90,"description":91,"short_description":92,"active_installs":11,"downloaded":93,"rating":94,"num_ratings":95,"last_updated":96,"tested_up_to":97,"requires_at_least":98,"requires_php":54,"tags":99,"homepage":54,"download_link":103,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"acronyms-2","Acronyms 2","2.0.10","Chris","https:\u002F\u002Fprofiles.wordpress.org\u002Frenaissancedesign\u002F","\u003Cp>This WordPress plugin will allow users to maintain a list of acronyms and abbreviations which can be managed in the WordPress Dashbard. These acronyms will be automatically wrapped in the appropriate HTML markup when found in posts, pages and comments.\u003C\u002Fp>\n\u003Cp>The plugin will auto-detect whether the currently active theme uses HTML5, and will output the appropriate HTML acronym or abbreviation element, e.g. \u003Ccode>\u003Cacronym title=\"Hypertext Markup Language\">HTML\u003C\u002Facronym>\u003C\u002Fcode> (or \u003Ccode>\u003Cabbr title=\"Hypertext Markup Language\">HTML\u003C\u002Fabbr>\u003C\u002Fcode> for HTML5).\u003C\u002Fp>\n\u003Cp>Based on Joel Pan’s excellent Acronyms, which is no longer being actively maintained. The onset of HTML5 and the deprecation of \u003Ccode>\u003Cacronym>\u003C\u002Fcode> in favour of \u003Ccode>\u003Cabbr>\u003C\u002Fcode> led me to fork Joel’s plugin and create Acronyms 2.\u003C\u002Fp>\n","A plugin to automatically mark up known acronyms and abbreviations in posts and comments. Allows users to manage lists of acronyms through the WordPre …",8271,96,8,"2024-03-11T18:52:00.000Z","6.4.8","2.7",[20,80,100,101,102],"formatting","html5","post","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Facronyms-2.zip",{"slug":105,"name":106,"version":107,"author":108,"author_profile":109,"description":110,"short_description":111,"active_installs":112,"downloaded":113,"rating":13,"num_ratings":13,"last_updated":114,"tested_up_to":115,"requires_at_least":116,"requires_php":54,"tags":117,"homepage":54,"download_link":119,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"accessibility-abbreviation","Accessibility Abbreviation","1.0.0","Hailstorm","https:\u002F\u002Fprofiles.wordpress.org\u002Fhailstorm\u002F","\u003Cp>WCAG 1.0 Guideline 4: Clarify natural language usage. Content developers should provide expansions of abbreviations and acronyms.\u003C\u002Fp>\n","Add abbreviation-tags via TinyMCE to comply with the Web Content Accessibility Guidelines.",10,1900,"2011-07-07T10:08:00.000Z","3.2.1","3.0",[19,20,79,118],"wcag","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faccessibility-abbreviation.zip",{"slug":121,"name":122,"version":123,"author":124,"author_profile":125,"description":126,"short_description":127,"active_installs":128,"downloaded":129,"rating":11,"num_ratings":130,"last_updated":131,"tested_up_to":75,"requires_at_least":116,"requires_php":54,"tags":132,"homepage":138,"download_link":139,"security_score":11,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"evermore","Evermore","2.5","bennettmcelwee","https:\u002F\u002Fprofiles.wordpress.org\u002Fbennettmcelwee\u002F","\u003Cp>Evermore automatically abbreviates all posts when they appear on a multiple-post page such as the main blog page. It has the same effect as putting \u003C!–more–> after the first paragraph of every post. All formatting and HTML tags are preserved in the abbreviated post.\u003C\u002Fp>\n\u003Cp>If the post already has a \u003C!–more–> in it, then this plugin does nothing to it and the existing \u003C!–more–> will behave as usual.\u003C\u002Fp>\n\u003Cp>If you want to disable the plugin for any specific post, then include the codeword \u003C!–nevermore–> in the post. This won’t show up in the post, but it will prevent the post from being abbreviated by Evermore.\u003C\u002Fp>\n\u003Cp>To change the length of the preview that Evermore creates, log in to your WordPress administration console and go to Settings, then click Evermore. You will see the Evermore configuration screen where you can set the following options.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>The number of paragraphs each preview should contain\u003C\u002Fli>\n\u003Cli>The minimum length of the preview. Sometimes, the first paragraph of a post can be very short (just a short sentence, or a picture). This option allows you to add extra paragraphs to make the preview a more reasonable length.\u003C\u002Fli>\n\u003Cli>Where to put the “read more” link: either at the end of the last paragraph, or on a new line by itself\u003C\u002Fli>\n\u003C\u002Ful>\n","Evermore automatically abbreviates all posts when they appear on a multiple-post page such as the main blog page.",1000,95722,5,"2026-01-26T09:56:00.000Z",[133,134,135,136,137],"abbreviate","extract","more","preview","short","http:\u002F\u002Fthunderguy.com\u002Fsemicolon\u002Fwordpress\u002Fevermore-wordpress-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fevermore.2.5.zip",{"attackSurface":141,"codeSignals":170,"taintFlows":185,"riskAssessment":186,"analyzedAt":195},{"hooks":142,"ajaxHandlers":166,"restRoutes":167,"shortcodes":168,"cronEvents":169,"entryPointCount":13,"unprotectedCount":13},[143,149,153,157,162],{"type":144,"name":145,"callback":146,"file":147,"line":148},"action","init","setup_tinymce_abbr","tinymce-abbr.php",32,{"type":144,"name":150,"callback":151,"file":147,"line":152},"plugins_loaded","load_languages_tinymce_abbr",52,{"type":144,"name":154,"callback":155,"file":147,"line":156},"before_wp_tiny_mce","translate_tinymce_abbr",53,{"type":158,"name":159,"callback":160,"file":147,"line":161},"filter","mce_external_plugins","add_tinymce_abbr",54,{"type":158,"name":163,"callback":164,"file":147,"line":165},"mce_buttons_2","add_tinymce_abbr_toolbar_button",55,[],[],[],[],{"dangerousFunctions":171,"sqlUsage":172,"outputEscaping":174,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":179,"bundledLibraries":180},[],{"prepared":13,"raw":13,"locations":173},[],{"escaped":13,"rawEcho":62,"locations":175},[176],{"file":147,"line":177,"context":178},91,"raw output",2,[181],{"name":182,"version":183,"knownCves":184},"TinyMCE","1.0",[],[],{"summary":187,"deductions":188},"The \"abbreviation-button-for-tinymce\" plugin version 1.3.7 exhibits a strong security posture based on the provided static analysis.  There are no identified AJAX handlers, REST API routes, shortcodes, or cron events, significantly limiting the plugin's attack surface. Furthermore, the analysis shows no dangerous functions, all SQL queries are prepared, and there are no file operations or external HTTP requests, which are all positive security indicators.  The absence of known CVEs in its history further reinforces this positive assessment, suggesting a well-maintained and secure codebase.\n\nHowever, a significant concern arises from the output escaping analysis, where 100% of the single output identified is not properly escaped. This presents a potential Cross-Site Scripting (XSS) vulnerability if any user-supplied data is reflected in the output without proper sanitization. While the plugin demonstrates good practices in other areas, this lack of output escaping is a critical oversight that could be exploited.  The presence of capability checks suggests some attempt at access control, but their effectiveness is not detailed. The bundled TinyMCE library is listed as v1.0, which could potentially be outdated and carry its own unpatched vulnerabilities, though no specific issues are detailed here.",[189,192],{"reason":190,"points":191},"100% of outputs are not properly escaped",7,{"reason":193,"points":194},"Bundled library (TinyMCE v1.0) may be outdated",4,"2026-03-16T20:35:28.380Z",{"wat":197,"direct":204},{"assetPaths":198,"generatorPatterns":200,"scriptPaths":201,"versionParams":203},[199],"\u002Fwp-content\u002Fplugins\u002Fabbreviation-button-for-tinymce\u002Fadmin\u002Fjs\u002Ftinymce-abbr-class.js",[],[202],"admin\u002Fjs\u002Ftinymce-abbr-class.js",[],{"cssClasses":205,"htmlComments":206,"htmlAttributes":207,"restEndpoints":208,"jsGlobals":209,"shortcodeOutput":211},[],[],[],[],[210],"abbrTranslations",[]]