[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnxpa5qi4zcNgIQ0Ln4CRIzNtFWnaWs4rEwK4V6FnFD0":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":34,"analysis":131,"fingerprints":186},"academic-publications-showcase","Academic Publications Showcase","1.0.0","havacekm","https:\u002F\u002Fprofiles.wordpress.org\u002Fhavacekm\u002F","\u003Cp>Academic Publications Showcase allows you to display content from \u003Ca href=\"https:\u002F\u002Fzenodo.org\u002F\" rel=\"nofollow ugc\">Zenodo\u003C\u002Fa> communities or author publications using ORCID identifiers on your WordPress site. Perfect for researchers, academic institutions, and research projects who want to integrate a dynamic bibliography of their work with their website.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Display publications from Zenodo communities or ORCID profiles\u003C\u002Fli>\n\u003Cli>Modern card-based layout with responsive design\u003C\u002Fli>\n\u003Cli>Customizable colors, fonts, and styling options\u003C\u002Fli>\n\u003Cli>Support for keywords\u002Ftags filtering\u003C\u002Fli>\n\u003Cli>Pagination for large publication lists\u003C\u002Fli>\n\u003Cli>Bilingual support (Czech and English)\u003C\u002Fli>\n\u003Cli>Caching for improved performance\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plugin requires access to the \u003Ca href=\"https:\u002F\u002Fdevelopers.zenodo.org\u002F\" rel=\"nofollow ugc\">Zenodo REST API\u003C\u002Fa>. When using this plugin, you must accept Zenodo’s \u003Ca href=\"https:\u002F\u002Fabout.zenodo.org\u002Fprivacy-policy\u002F\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fabout.zenodo.org\u002Fterms\u002F\" rel=\"nofollow ugc\">Terms of Use\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Based on Original Work:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This plugin is based on “Display Your Zenodo Community” originally developed by DARIAH-EU. It has been significantly enhanced with modern design, additional features, and improved functionality.\u003C\u002Fp>\n\u003Cp>Original plugin: https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdisplay-your-zenodo-community\u002F\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Project Funding:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Developed as part of the project “Research of Excellence on Digital Technologies and Wellbeing”\u003Cbr \u002F>\nProject Registration Number: CZ.02.01.01\u002F00\u002F22_008\u002F0004583\u003Cbr \u002F>\nOperational Program: The Johannes Amos Comenius\u003Cbr \u002F>\nCo-funded by the European Union\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Basic Shortcode:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[showcase-publications]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>This displays publications using the settings configured in the admin panel.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Shortcode with Attributes:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[showcase-publications keyword='WP3']\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Filter publications by a specific keyword or tag.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[showcase-publications type='publication' subtype='article']\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Filter by publication type (journal articles only).\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[showcase-publications type='dataset']\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Show only datasets.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[showcase-publications type='publication' subtype='conferencepaper' keyword='AI']\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Combine filters (AI-related conference papers only).\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[showcase-publications lang='en']\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Force display in English (default auto-detects from WordPress locale).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Available Type Values:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cem>General Types (use with \u003Ccode>type\u003C\u002Fcode> parameter):\u003C\u002Fem>\u003Cbr \u002F>\n– \u003Ccode>publication\u003C\u002Fcode> – Publications (use with subtype for specific type)\u003Cbr \u002F>\n– \u003Ccode>dataset\u003C\u002Fcode> – Datasets\u003Cbr \u002F>\n– \u003Ccode>software\u003C\u002Fcode> – Software\u003Cbr \u002F>\n– \u003Ccode>poster\u003C\u002Fcode> – Posters\u003Cbr \u002F>\n– \u003Ccode>presentation\u003C\u002Fcode> – Presentations\u003Cbr \u002F>\n– \u003Ccode>video\u003C\u002Fcode> – Video\u002FAudio\u003Cbr \u002F>\n– \u003Ccode>image\u003C\u002Fcode> – Images\u003Cbr \u002F>\n– \u003Ccode>lesson\u003C\u002Fcode> – Lessons\u003Cbr \u002F>\n– \u003Ccode>physicalobject\u003C\u002Fcode> – Physical objects\u003Cbr \u002F>\n– \u003Ccode>other\u003C\u002Fcode> – Other\u003C\u002Fp>\n\u003Cp>\u003Cem>Publication Subtypes (use with \u003Ccode>subtype\u003C\u002Fcode> when type=’publication’):\u003C\u002Fem>\u003Cbr \u002F>\n– \u003Ccode>article\u003C\u002Fcode> – Journal article\u003Cbr \u002F>\n– \u003Ccode>book\u003C\u002Fcode> – Book\u003Cbr \u002F>\n– \u003Ccode>section\u003C\u002Fcode> – Book section\u003Cbr \u002F>\n– \u003Ccode>conferencepaper\u003C\u002Fcode> – Conference paper\u003Cbr \u002F>\n– \u003Ccode>thesis\u003C\u002Fcode> – Thesis\u003Cbr \u002F>\n– \u003Ccode>report\u003C\u002Fcode> – Report\u003Cbr \u002F>\n– \u003Ccode>preprint\u003C\u002Fcode> – Preprint\u003Cbr \u002F>\n– \u003Ccode>datamanagementplan\u003C\u002Fcode> – Data management plan\u003Cbr \u002F>\n– \u003Ccode>proposal\u003C\u002Fcode> – Proposal\u003Cbr \u002F>\n– \u003Ccode>workingpaper\u003C\u002Fcode> – Working paper\u003Cbr \u002F>\n– \u003Ccode>technicalnote\u003C\u002Fcode> – Technical note\u003Cbr \u002F>\n– \u003Ccode>softwaredocumentation\u003C\u002Fcode> – Software documentation\u003Cbr \u002F>\n– \u003Ccode>patent\u003C\u002Fcode> – Patent\u003Cbr \u002F>\n– \u003Ccode>deliverable\u003C\u002Fcode> – Project deliverable\u003Cbr \u002F>\n– \u003Ccode>milestone\u003C\u002Fcode> – Project milestone\u003Cbr \u002F>\n– \u003Ccode>other\u003C\u002Fcode> – Other\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Multiple Shortcodes:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You can use multiple shortcodes on different pages with different filters:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[showcase-publications keyword='project-a']\n[showcase-publications type='publication' subtype='article']\u003Ch3>Privacy\u003C\u002Fh3>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>This plugin connects to external services:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Zenodo API\u003C\u002Fstrong> (zenodo.org) to retrieve publication data\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Google Fonts\u003C\u002Fstrong> (fonts.googleapis.com) if custom fonts are selected in settings\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>No user tracking or analytics are performed by this plugin. However, when accessing Zenodo, you are subject to Zenodo’s privacy policy.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>This plugin is based on “Display Your Zenodo Community” originally developed by DARIAH-EU.\u003C\u002Fp>\n\u003Cp>Original plugin: https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdisplay-your-zenodo-community\u002F\u003Cbr \u002F>\nOriginal author: Yoann Moranville (DARIAH-EU)\u003C\u002Fp>\n\u003Cp>Developed by Martin Haváček as part of the project “Research of Excellence on Digital Technologies and Wellbeing”\u003Cbr \u002F>\nProject Registration Number: CZ.02.01.01\u002F00\u002F22_008\u002F0004583\u003Cbr \u002F>\nOperational Program: The Johannes Amos Comenius\u003Cbr \u002F>\nCo-funded by the European Union\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Trademark Notices:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Zenodo is a service operated by CERN. This plugin is not affiliated with or endorsed by CERN.\u003Cbr \u002F>\nORCID is a registered trademark of ORCID, Inc.\u003C\u002Fp>\n","Display publications from Zenodo communities or ORCID author profiles with modern card layouts and customizable designs.",0,134,"2026-03-08T21:06:00.000Z","6.9.4","6.0","7.4",[18,19,20,21,22],"academic","orcid","publications","research","zenodo","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Facademic-publications-showcase.1.0.0.zip",100,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},1,30,94,"2026-04-04T08:14:03.692Z",[35,52,77,95,114],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":25,"downloaded":43,"rating":11,"num_ratings":11,"last_updated":44,"tested_up_to":14,"requires_at_least":45,"requires_php":46,"tags":47,"homepage":50,"download_link":51,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"scholar-publications-fetcher","Scholar Publications Fetcher","2.2.0","valsze","https:\u002F\u002Fprofiles.wordpress.org\u002Fvalsze\u002F","\u003Cp>Automatically showcase your academic work directly on your WordPress site. \u003Cstrong>Scholar Publications Fetcher\u003C\u002Fstrong> retrieves your publication list from Google Scholar and displays it in an elegant card layout that looks great on any device.\u003C\u002Fp>\n\u003Cp>With a strong focus on performance and customization, this plugin is the perfect solution for academics, researchers, and professionals who want to maintain an up-to-date publication list without manual effort.\u003C\u002Fp>\n\u003Cp>✨ \u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>No API Key Needed\u003C\u002Fstrong>: Fetches your public profile directly.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Performance Caching\u003C\u002Fstrong>: Caches results using the WordPress Transients API to ensure your site loads fast. Cache duration is fully customizable.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Flexible Shortcode\u003C\u002Fstrong>: Use powerful shortcode attributes to control the number of publications displayed (\u003Ccode>count\u003C\u002Fcode>), show\u002Fhide abstracts (\u003Ccode>show_abstract\u003C\u002Fcode>), and set cache duration (\u003Ccode>cache_hours\u003C\u002Fcode>).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Modern & Responsive Design\u003C\u002Fstrong>: A clean, card-based layout that adapts perfectly to desktop, tablet, and mobile screens.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Automatic Dark Mode\u003C\u002Fstrong>: Seamlessly adapts to the visitor’s system-level dark or light theme for a comfortable reading experience.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Easy to Customize\u003C\u002Fstrong>: Built with CSS variables, making it simple to change colors and styles to match your theme.\u003C\u002Fli>\n\u003C\u002Ful>\n","A lightweight and high-performance plugin to fetch, cache, and display your Google Scholar publications in a clean, modern, and responsive card layout …",1031,"2025-11-12T20:23:00.000Z","5.2","7.2",[18,20,21,48,49],"scholar","shortcode","https:\u002F\u002Fvalsze.de\u002F2025\u002F07\u002F07\u002Fgoogle-scholar-publications-fetcher-wordpress-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fscholar-publications-fetcher.zip",{"slug":53,"name":54,"version":55,"author":56,"author_profile":57,"description":58,"short_description":59,"active_installs":60,"downloaded":61,"rating":62,"num_ratings":63,"last_updated":64,"tested_up_to":65,"requires_at_least":66,"requires_php":23,"tags":67,"homepage":72,"download_link":73,"security_score":74,"vuln_count":75,"unpatched_count":11,"last_vuln_date":76,"fetched_at":27},"zotpress","Zotpress","7.4.2","Katie","https:\u002F\u002Fprofiles.wordpress.org\u002Fkseaborn\u002F","\u003Cp>\u003Ca href=\"http:\u002F\u002Fkatieseaborn.com\u002Fplugins\u002F\" title=\"Zotpress for WordPress\" rel=\"nofollow ugc\">Zotpress\u003C\u002Fa> brings publication broadcasting and scholarly blogging to WordPress through \u003Ca href=\"http:\u002F\u002Fzotero.org\u002F\" title=\"Zotero\" rel=\"nofollow ugc\">Zotero\u003C\u002Fa>, a free, cross-platform reference manager.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Displays your personal and group Zotero items through in-text citations, bibliographies, and searchable libraries\u003C\u002Fli>\n\u003Cli>Supports thumbnail images through WordPress’s Media Library and Open Library\u003C\u002Fli>\n\u003Cli>Supports selective CSS styling via IDs and classes\u003C\u002Fli>\n\u003Cli>Provides a range of additional features, such as allowing visitors to download citations\u003C\u002Fli>\n\u003Cli>And more!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Compatible with Firefox, Safari, Chrome, and IE9. Made with jQuery, jQuery UI, jQuery doTimeout, Live Query, OAuth, and \u003Ca href=\"https:\u002F\u002Fopenlibrary.org\u002F\" title=\"Open Library\" rel=\"nofollow ugc\">Open Library\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Special thanks to Joe Alberts for substantial contributions to the code, comprehensive testing, and design ideation. Thanks also to contributors Jeremy Varnham (@jvarn13), Christopher Cheung, Jason S., Chris Wentzloff, Karljürgen Feuerherm (@feuerherm), Mark Dingemanse (@codeispoetry), Jörg Mechnich (jmechnich@github), Tomas Risberg, @ericcorbett2, and @timtom for their code contributions, testing, and guidance. Finally, my sincere gratitude goes out to all who have donated in support of this plugin.\u003C\u002Fp>\n\u003Cp>Please note that this plugin is on semi-hiatus, with updates expected about 1-3 times a year.\u003C\u002Fp>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cp>jQuery included in your theme (Zotpress will do this for you if it isn’t already included), and an HTTP request method supported by WordPress enabled on your server: cURL, fopen with Streams (PHP 5), or fsockopen. In your server config file, X-Frame-Options should be set to SAMEORIGIN. Optional: OAuth enabled on your server.\u003C\u002Fp>\n","Zotpress displays your Zotero citations on WordPress.",2000,132376,98,66,"2025-10-19T08:19:00.000Z","6.8.5","3.5",[68,69,70,20,71],"academic-blogging","bibliography","citation-manager","zotero","http:\u002F\u002Fkatieseaborn.com\u002Fplugins","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fzotpress.7.4.2.zip",87,8,"2025-06-10 14:40:35",{"slug":78,"name":79,"version":80,"author":81,"author_profile":82,"description":83,"short_description":84,"active_installs":85,"downloaded":86,"rating":87,"num_ratings":88,"last_updated":89,"tested_up_to":90,"requires_at_least":66,"requires_php":23,"tags":91,"homepage":92,"download_link":93,"security_score":94,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"wp-academic-publications","WP Academic Publications","1.2","Brad","https:\u002F\u002Fprofiles.wordpress.org\u002Fbman12\u002F","\u003Cp>Let’s you add academic publications, such as those listed in journals or conferences, to your WordPress admin page. These can then be displayed on your site using a shortcode or php function call.\u003C\u002Fp>\n","Let's you add academic publications to your Wordpress admin page which can then be displayed on your site.",70,4031,60,2,"2014-03-21T16:28:00.000Z","3.7.41",[18,20],"https:\u002F\u002Fgithub.com\u002Fbradjc\u002Fwordpress-academic-pubs","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-academic-publications.1.2.zip",85,{"slug":96,"name":97,"version":98,"author":99,"author_profile":100,"description":101,"short_description":102,"active_installs":103,"downloaded":104,"rating":25,"num_ratings":30,"last_updated":105,"tested_up_to":106,"requires_at_least":107,"requires_php":23,"tags":108,"homepage":112,"download_link":113,"security_score":94,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"pubmed-posts","PubMed Posts","1.1.1","sydcode","https:\u002F\u002Fprofiles.wordpress.org\u002Fsydcode\u002F","\u003Cp>This plugin adds a dashboard widget that creates posts from \u003Ca href=\"http:\u002F\u002Fwww.ncbi.nlm.nih.gov\u002Fpubmed\u002F\" rel=\"nofollow ugc\">PubMed\u003C\u002Fa> articles, plus a search widget that finds posts with specific article data. A basic editor is also included that changes the layout of data in the post content.\u003C\u002Fp>\n\u003Cp>This is not an official \u003Ca href=\"http:\u002F\u002Fwww.ncbi.nlm.nih.gov\u002Fpubmed\u002F\" rel=\"nofollow ugc\">PubMed\u003C\u002Fa> plugin. All questions and suggestions should be posted in the plugin forum.\u003C\u002Fp>\n\u003Cp>Thanks to Chetan and Jamie for sponsoring this plugin.\u003C\u002Fp>\n","This plugin adds a dashboard widget that creates posts from PubMed articles, plus a search widget that finds posts with specific article data.",50,3244,"2014-01-08T23:58:00.000Z","3.8.0","3.3.0",[18,109,110,21,111],"posts","pubmed","science","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpubmed-posts\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpubmed-posts.1.1.1.zip",{"slug":115,"name":116,"version":6,"author":117,"author_profile":118,"description":119,"short_description":120,"active_installs":11,"downloaded":121,"rating":11,"num_ratings":11,"last_updated":122,"tested_up_to":123,"requires_at_least":124,"requires_php":46,"tags":125,"homepage":129,"download_link":130,"security_score":94,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"electrifying-engineering-portfolio","Electrifying Engineering Portfolio","hodayx","https:\u002F\u002Fprofiles.wordpress.org\u002Fhodayx\u002F","\u003Cp>This plugin creates a portfolio with sections for research projects, other portfolio items, and publications, and allows users to associate publications with projects. It also allows users to tag projects with different skills.\u003C\u002Fp>\n","Creates a portfolio for engineers",1073,"2018-06-07T07:16:00.000Z","4.9.29","4.9",[126,127,128,20,21],"engineering","engineers","portfolio","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Felectrifying-engineering-portfolio\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Felectrifying-engineering-portfolio.zip",{"attackSurface":132,"codeSignals":163,"taintFlows":175,"riskAssessment":176,"analyzedAt":185},{"hooks":133,"ajaxHandlers":156,"restRoutes":157,"shortcodes":158,"cronEvents":162,"entryPointCount":30,"unprotectedCount":11},[134,139,141,144,147,150,152],{"type":135,"name":136,"callback":137,"file":138,"line":25},"action","admin_enqueue_scripts","anonymous","includes\\class-aps.php",{"type":135,"name":136,"callback":137,"file":138,"line":140},101,{"type":135,"name":142,"callback":137,"file":138,"line":143},"admin_init",104,{"type":135,"name":145,"callback":137,"file":138,"line":146},"admin_menu",106,{"type":135,"name":148,"callback":137,"file":138,"line":149},"wp_enqueue_scripts",120,{"type":135,"name":148,"callback":137,"file":138,"line":151},121,{"type":153,"name":154,"callback":137,"file":138,"line":155},"filter","query_vars",123,[],[],[159],{"tag":160,"callback":137,"file":138,"line":161},"showcase-publications",126,[],{"dangerousFunctions":164,"sqlUsage":165,"outputEscaping":171,"fileOperations":11,"externalRequests":30,"nonceChecks":11,"capabilityChecks":11,"bundledLibraries":174},[],{"prepared":88,"raw":30,"locations":166},[167],{"file":168,"line":169,"context":170},"uninstall.php",33,"$wpdb->query() with variable interpolation",{"escaped":172,"rawEcho":11,"locations":173},188,[],[],[],{"summary":177,"deductions":178},"The academic-publications-showcase v1.0.0 plugin demonstrates a generally good security posture, with all identified entry points having 100% output escaping and no critical or high severity taint flows. The absence of dangerous functions and file operations further contributes to its positive security profile. The plugin also has no recorded vulnerability history, suggesting a stable and likely secure codebase. However, there are a few areas that warrant attention. The plugin lacks any nonce checks, which is a significant oversight for potential cross-site request forgery (CSRF) vulnerabilities, especially if any of the entry points are leveraged in a way that modifies data or performs sensitive actions. Furthermore, the presence of raw SQL queries, even if a majority use prepared statements, introduces a potential for SQL injection if not handled meticulously. The single external HTTP request should also be monitored for potential vulnerabilities in the external service.\n\nWhile the plugin's strengths lie in its robust output escaping and lack of critical code signals, the absence of nonce checks and the existence of non-prepared SQL queries are notable weaknesses. The vulnerability history being clean is a positive indicator but does not guarantee future security. The plugin's low attack surface is a mitigating factor, but the identified vulnerabilities, however minor they may appear in isolation, could be exploited in combination or if the plugin's functionality expands. A cautious approach is recommended, prioritizing the implementation of nonce checks and auditing the SQL queries.",[179,182],{"reason":180,"points":181},"Missing nonce checks on entry points",10,{"reason":183,"points":184},"Raw SQL queries present",5,"2026-03-17T06:44:54.112Z",{"wat":187,"direct":196},{"assetPaths":188,"generatorPatterns":191,"scriptPaths":192,"versionParams":193},[189,190],"\u002Fwp-content\u002Fplugins\u002Facademic-publications-showcase\u002Fadmin\u002Fcss\u002Faps-admin.css","\u002Fwp-content\u002Fplugins\u002Facademic-publications-showcase\u002Fadmin\u002Fjs\u002Faps-admin.js",[],[190],[194,195],"academic-publications-showcase\u002Fadmin\u002Fcss\u002Faps-admin.css?ver=","academic-publications-showcase\u002Fadmin\u002Fjs\u002Faps-admin.js?ver=",{"cssClasses":197,"htmlComments":206,"htmlAttributes":207,"restEndpoints":208,"jsGlobals":209,"shortcodeOutput":211},[198,199,200,201,202,203,204,205],"dyzc-admin-wrap","dyzc-tab-content","dyzc-section","dyzc-help-text","dyzc-recommended","dyzc-usage-card","dyzc-code-block","dyzc-example",[],[],[],[210],"window.jQuery",[]]