[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6jxNTcYw65AQ0yBNkhdd6kBtmMvNxf_Q4-bywtFAY3Y":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":46,"crawl_stats":37,"alternatives":53,"analysis":175,"fingerprints":230},"add-custom-css-and-js","Add Custom CSS and JS","1.2.0","mainsufian","https:\u002F\u002Fprofiles.wordpress.org\u002Fmainsufian\u002F","\u003Cp>‘Add Custom CSS and JS’ plugin is for provide Custom JS, jQuery and CSS code for your admin panel of wordpress or for your frontend website and also you can add different css and JS code for your frontend website only when user is login.\u003Cbr \u002F>\nIt is very useful plugin for adding custom CSS and JS code in your website so this plugin keep your custom css and JS code even when you change the theme or update your website.\u003C\u002Fp>\n","Now you can write different code of CSS and JS for admin panel and for front-end and you can also use different css and js if user is login.",10,2973,100,2,"2023-02-21T10:01:00.000Z","6.1.10","3.0.1","",[20,21,22,23,24],"addcss","addjs","css","css3","javascript","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fadd-custom-css-and-js\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadd-custom-css-and-js.zip",64,1,"2024-04-18 00:00:00","2026-03-15T15:16:48.613Z",[32],{"id":33,"url_slug":34,"title":35,"description":36,"plugin_slug":4,"theme_slug":37,"affected_versions":38,"patched_in_version":37,"severity":39,"cvss_score":40,"cvss_vector":41,"vuln_type":42,"published_date":29,"updated_date":43,"references":44,"days_to_patch":37},"CVE-2024-3903","add-custom-css-and-js-cross-site-request-forgery-to-stored-cross-site-scripting","Add Custom CSS and JS \u003C= 1.20 - Cross-Site Request Forgery to Stored Cross-Site Scripting","The Add Custom CSS and JS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.20. This is due to missing or incorrect nonce validation on the custom_js_css page. This makes it possible for unauthenticated attackers to modify plugin settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.",null,"\u003C=1.20","medium",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2024-05-16 12:35:15",[45],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F277d09b6-cc2a-41db-8b2d-1bad8e49c0db?source=api-prod",{"slug":7,"display_name":7,"profile_url":8,"plugin_count":47,"total_installs":48,"avg_security_score":49,"avg_patch_time_days":50,"trust_score":51,"computed_at":52},3,620,78,30,79,"2026-04-05T09:47:37.270Z",[54,82,108,131,154],{"slug":55,"name":56,"version":57,"author":58,"author_profile":59,"description":60,"short_description":61,"active_installs":62,"downloaded":63,"rating":64,"num_ratings":65,"last_updated":66,"tested_up_to":67,"requires_at_least":68,"requires_php":69,"tags":70,"homepage":76,"download_link":77,"security_score":78,"vuln_count":79,"unpatched_count":80,"last_vuln_date":81,"fetched_at":30},"wp-asset-clean-up","Asset CleanUp: Page Speed Booster","1.4.0.3","Gabe Livan","https:\u002F\u002Fprofiles.wordpress.org\u002Fgabelivan\u002F","\u003Cp>Don’t just minify & combine CSS\u002FJavaScript files ending up with large, bloated and slow loading pages: \u003Cstrong>Strip the “fat” first and get a faster website\u003C\u002Fstrong> 🙂\u003C\u002Fp>\n\u003Cp>Faster page load = Happier Visitors = More Conversions = More Revenue\u003C\u002Fp>\n\u003Cp>There are often times when you are using a theme and a number of plugins which are enabled and run on the same page. However, you don’t need to use all of them and to improve the speed of your website and make the HTML source code cleaner (convenient for debugging purposes), it’s better to prevent those styles and scripts from loading.\u003C\u002Fp>\n\u003Cp>For instance, you might use a plugin that generates contact forms and it loads its assets (.CSS and .JS files) in every page of your website instead of doing it only in the \u002Fcontact page (if that’s the only place where you need it).\u003C\u002Fp>\n\u003Cp>“Asset CleanUp” scans your page and detects all the assets that are loaded. All you have to do when editing a page\u002Fpost is just to select the CSS\u002FJS that are not necessary to load, this way reducing the bloat.\u003C\u002Fp>\n\u003Cp>The plugin works best in combination with a cache plugin (e.g. WP Rocket, WP Fastest Cache, W3 Total Cache), a hosting company that offers packages with server-level caching available (e.g. WP Engine, Kinsta) or a service like Cloudflare that has page caching enabled.\u003C\u002Fp>\n\u003Ch4>Main plugin’s benefits include\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Decreases the number of HTTP requests loaded and eliminate render-blocking resources (important for faster page load) by unloading useless CSS\u002FJS\u003C\u002Fli>\n\u003Cli>Preload CSS\u002FJS, Local Fonts & Google Fonts files to instruct the browser to download the chosen assets as soon as possible\u003C\u002Fli>\n\u003Cli>Minify CSS files (including inline code within STYLE tags)\u003C\u002Fli>\n\u003Cli>Minify JavaScript files (including inline code within SCRIPT tags)\u003C\u002Fli>\n\u003Cli>Combine remaining loaded CSS & JavaScript files\u003C\u002Fli>\n\u003Cli>Inline CSS Files (automatically & by specifying the path to the stylesheets)\u003C\u002Fli>\n\u003Cli>Defer combined JavaScript files by applying “defer” attribute to the SCRIPT tags\u003C\u002Fli>\n\u003Cli>Site-wide removal for Emojis, Dashicons for guest users and Comment Reply if they are not used\u003C\u002Fli>\n\u003Cli>Disable RSS Feeds\u003C\u002Fli>\n\u003Cli>Reduces the HTML code of the actual page (that’s even better if GZIP compression is enabled)\u003C\u002Fli>\n\u003Cli>Makes source code easier to scan in case you’re a developer and want to search for something\u003C\u002Fli>\n\u003Cli>Remove possible conflicts between plugins\u002Ftheme (e.g. 2 JavaScript files that are loading from different plugins and they interfere one with another)\u003C\u002Fli>\n\u003Cli>Better performance score if you test your URL on websites such as GTmetrix, PageSpeed Insights, Pingdom Website Speed Test\u003C\u002Fli>\n\u003Cli>Google will love your website more as it would be faster and fast page load is nowadays a factor in search ranking\u003C\u002Fli>\n\u003Cli>Your server access log files (e.g the Apache ones) will be easier to scan and would take less space on your server\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Google Fonts Optimization \u002F Removal\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Combine all Google Font requests into fewer (usually one) requests, saving one round trip to the server for each additional font requested\u003C\u002Fli>\n\u003Cli>Choose between three methods of delivery: Render-blocking, Asynchronous via Web Font Loader (webfont.js) or Asynchronous by preloading the CSS stylesheet\u003C\u002Fli>\n\u003Cli>Option to preload Google Font Files from fonts.gstatic.com (e.g. ending in .woff2)\u003C\u002Fli>\n\u003Cli>Apply “font-display” CSS property to all loaded Google Font requests\u003C\u002Fli>\n\u003Cli>Enable preconnect resource hint for fonts.gstatic.com in case you use Google Fonts; don’t let the browser wait until it fetches the CSS for loading the font files before it begins DNS\u002FTCP\u002FTLS\u003C\u002Fli>\n\u003Cli>Remove all Google Font requests including link\u002Ffont preloads, @import\u002F@font-face from CSS files & STYLE tags, resource hints\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Local Fonts Optimization\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Preload local font files (ending in .woff, .woff2, .ttf, etc.)\u003C\u002Fli>\n\u003Cli>Apply “font-display:” CSS property to @font-face from existing to LINK \u002F STYLE tags to improve the PageSpeed score for “Ensure text remains visible during webfont load”\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Critical CSS\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>You can add already generated critical CSS (e.g. via tools such as \u003Ca href=\"https:\u002F\u002Fwww.corewebvitals.io\u002Ftools\u002Fcritical-css-generator\" rel=\"nofollow ugc\">Advanced Critical CSS Generator\u003C\u002Fa> customly for the homepage, posts, pages, taxonomy pages (e.g. category), archive pages (e.g. date, author), search, 404 not found\u003C\u002Fli>\n\u003Cli>The critical CSS can be added within the Dashboard as well as via code \u002F \u003Ca href=\"https:\u002F\u002Fwww.assetcleanup.com\u002Fdocs\u002F?p=608\" rel=\"nofollow ugc\">Read More\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Remove useless links, meta tags and HTML comments within the HEAD and BODY (footer) tags of the website\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Really Simple Discovery (RSD) link tag\u003C\u002Fli>\n\u003Cli>REST API link tag\u003C\u002Fli>\n\u003Cli>Pages\u002FPosts Shortlink tag\u003C\u002Fli>\n\u003Cli>WordPress version meta tag (also good for security reasons)\u003C\u002Fli>\n\u003Cli>All “generator” meta tags (also good for security reasons)\u003C\u002Fli>\n\u003Cli>RSS Feed Link Tags (usually they are not needed if your website is not used for blogging purposes)\u003C\u002Fli>\n\u003Cli>oEmbeds, if you do not need to embed videos (e.g. YouTube), tweets and audios\u003C\u002Fli>\n\u003Cli>Valid HTML Comments (exceptions from stripping can be added and Internet Explorer conditional comments are preserved)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Each option can be turned on\u002Foff depending on your needs. Instructions about each of them are given in the plugin’s settings page.\u003C\u002Fp>\n\u003Ch4>Disable partially or completely XML-RPC protocol\u003C\u002Fh4>\n\u003Cp>This is an API service used by WordPress for 3rd party applications, such as mobile apps, communication between blogs and plugins such as Jetpack. If you use or are planning to use a remote system to post content to your website, you can keep this feature enabled (which it is by default). Many users do not use this function at all and if you’re one of them, you can disable it.\u003C\u002Fp>\n\u003Cp>Plugin works with WordPress Multisite Network enabled!\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Asset CleanUp Pro\u003C\u002Fstrong>\u003Cbr \u002F>\n  This plugin is the lite version of Asset CleanUp Pro that comes with more benefits including managing assets (CSS & JS files) on all WordPress pages, unloading plugins site-wide or via Regex(es), apply “async” and “defer” attributes on loaded JavaScript files which would boost the speed score even higher, move the loading location of CSS\u002FJS files (from HEAD to BODY to reduce render-blocking or vice-versa if you need specific files to trigger earlier) and premium support. \u003Ca href=\"https:\u002F\u002Fwww.gabelivan.com\u002Fitems\u002Fwp-asset-cleanup-pro\u002F?utm_source=wp_org_lite&utm_medium=inside_quote\" rel=\"nofollow ugc\">Click here to purchase Asset CleanUp Pro!\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>NOTES\u003C\u002Fh4>\n\u003Cp>People that have tested the plugin are so far happy with it and I want to keep a good reputation for it. In case something is not working for you or have any suggestions, please write to me on the forum and I will be happy to assist you. \u003Cstrong>BEFORE rating this plugin\u003C\u002Fstrong>, please check the following post http:\u002F\u002Fchrislema.com\u002Ftheres-wrong-way-give-plugin-feedback-wordpress-org\u002F and then use your common sense when writing the feedback 🙂\u003C\u002Fp>\n\u003Ch4>GO PRO\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Unload CSS\u002FJS files on all WordPress pages including Categories, Tags, Custom Taxonomy (e.g. WooCommerce product category), 404 Not Found, Date & Author Archives, Search Results)\u003C\u002Fli>\n\u003Cli>Unload plugins in the frontend view (for guest visitors) * This will not just unload the CSS\u002FJS files loaded from the plugins, but everything else related to them (e.g. slow database queries)\u003C\u002Fli>\n\u003Cli>Unload plugins within the Dashboard \u002Fwp-admin\u002F * Do you have any slow pages that are loading within the Dashboard? You can reduce seconds in page load for some bulky ones or fix plugin conflicts\u003C\u002Fli>\n\u003Cli>Instruct the browser to download a CSS\u002FJS file based on the visitor’s screen size (e.g. avoid downloading assets in mobile view when they are not needed, if the screen size is smaller than 768px)\u003C\u002Fli>\n\u003Cli>Defer CSS by appending it to the BODY to load it asynchronously (Render blocking CSS delays a web page from being visible in a timely manner)\u003C\u002Fli>\n\u003Cli>Move JavaScript files from HEAD to BODY and vice-versa (CSS files moved to the BODY are automatically deferred)\u003C\u002Fli>\n\u003Cli>Defer JavaScript loaded files (by applying “defer” attribute to any enqueued JS file)\u003C\u002Fli>\n\u003Cli>Async JavaScript loaded files (by applying “async” attribute to any enqueued JS file)\u003C\u002Fli>\n\u003Cli>Inline JavaScript files (automatically & by specifying the path to the stylesheets)\u003C\u002Fli>\n\u003Cli>Priority in releasing new features & other improvements (updates that are meant for both Lite and Pro plugins are first released to the Pro users)\u003C\u002Fli>\n\u003Cli>Premium support and updates within the Dashboard\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Give Asset CleanUp a try! If you want to unlock all features, you can \u003Ca href=\"https:\u002F\u002Fwww.gabelivan.com\u002Fitems\u002Fwp-asset-cleanup-pro\u002F?utm_source=wp_org_lite&utm_medium=go_pro\" rel=\"nofollow ugc\">Upgrade to the Pro version\u003C\u002Fa>.\u003C\u002Fp>\n","Make your website load FASTER by stopping specific styles (.CSS) & scripts (.JS) from loading. It works best with a page caching plugin \u002F service.",100000,4846454,98,1550,"2025-03-12T21:24:00.000Z","6.7.5","4.5","5.6",[71,72,73,74,75],"defer-css-javascript","dequeue","minify-css","minify-javascript","page-speed","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-asset-clean-up\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-asset-clean-up.1.4.0.3.zip",89,6,0,"2024-11-27 00:00:00",{"slug":83,"name":84,"version":85,"author":86,"author_profile":87,"description":88,"short_description":89,"active_installs":90,"downloaded":91,"rating":64,"num_ratings":92,"last_updated":93,"tested_up_to":94,"requires_at_least":95,"requires_php":96,"tags":97,"homepage":103,"download_link":104,"security_score":105,"vuln_count":106,"unpatched_count":80,"last_vuln_date":107,"fetched_at":30},"maxbuttons","MaxButtons – Create buttons","9.8.5","maxfoundry","https:\u002F\u002Fprofiles.wordpress.org\u002Fmaxfoundry\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fmaxbuttons.com\u002F?utm_source=repowp1&utm_medium=mbrepo&utm_content=mbr_maxbuttons&utm_campaign=mbr_maxbuttons\" rel=\"nofollow ugc\">MaxButtons\u003C\u002Fa> is a powerful WordPress button, share button and social icon plugin. Create great looking CSS3 WordPress buttons in a minute. Easy to understand. Our button editor with live preview makes it a snap to generate awesome responsive buttons in very little time. The social share buttons and social icon features allow you to add social options to your website in minutes.\u003C\u002Fp>\n\u003Cp>MaxButtons \u003Ca href=\"https:\u002F\u002Fwww.maxbuttons.com\u002F#CSS3\u002F?utm_source=repowbp&utm_medium=mbrepo&utm_content=wordpress_button_plugin&utm_campaign=repowbp\" rel=\"nofollow ugc\">WordPress button plugin\u003C\u002Fa> has been going strong for over 15 years and was the first button plugin for WordPress. MaxButtons has earned over 1000 5-star reviews and over 3.5 million downloads.  Here are couple of our favorites:\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>“The best plugin of its kind”\u003C\u002Fp>\n\u003Cp>“This plugin makes creating buttons sooooo easy.”\u003C\u002Fp>\n\u003Cp>Why aren’t all plugins like this?!?\u003Cbr \u002F>\n  MaxButtons easily solved my problem with lots of options when creating the button and a live view of what it was going to look like. It would have done the job for me there and then but being able to adjust the text AND link with shortcodes on my page made modifications a breeze. – by discgosforth\u003C\u002Fp>\n\u003Cp>“Easy, clear, and robust. I’m a programmer and can write CSS till the cows come home, but why? Just get it, install it and use it. Then, when you’re impressed, buy the pro version”\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>Max Foundry also makes the WordPress Gallery plugin \u003Ca href=\"https:\u002F\u002Fmaxgalleria.com\" rel=\"nofollow ugc\">MaxGalleria\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fmaxgalleria.com\u002Fdownloads\u002Fmedia-library-plus-pro\u002F\" rel=\"nofollow ugc\">WordPress Media Folders\u003C\u002Fa> plugin for real WordPress Media Library folders.\u003C\u002Fp>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>WordPress installed\u003C\u002Fli>\n\u003Cli>PHP 7\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>WordPress Buttons\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmaxbuttons.com\u002Fcreate-wordpress-button\u002F?utm_source=repocreate&utm_medium=mbrepo&utm_content=how-to-create&utm_campaign=repocreate\" rel=\"nofollow ugc\">Create WordPress Buttons\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Getting \u003Ca href=\"https:\u002F\u002Fmaxbuttons.com\u002Fwordpress-share-buttons\u002F?utm_source=repoicons1&utm_medium=mbrepo&utm_content=social_sharing&utm_campaign=repoicons1\" rel=\"nofollow ugc\">Social Icons\u003C\u002Fa> on your WordPress site.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fshare-button\u002F\" rel=\"ugc\">Share Buttons\u003C\u002Fa> on your WordPress site.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmaxbuttons.com\u002Fproduct-category\u002Fbutton-packs\u002F?utm_source=repolibs&utm_medium=mbrepo&utm_content=button_pack&utm_campaign=repolibs\" rel=\"nofollow ugc\">WordPress button\u003C\u002Fa> library and button sets can make my designers and developers more productive.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>MaxButtons\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>No coding, the plugin takes care of everything\u003C\u002Fli>\n\u003Cli>Button shortcodes for ease of use, unlimited text and link combinations possible\u003C\u002Fli>\n\u003Cli>Create unlimited number of buttons\u003C\u002Fli>\n\u003Cli>Live preview window instantly updates as you customize your buttons\u003C\u002Fli>\n\u003Cli>Color picker for unlimited color combinations\u003C\u002Fli>\n\u003Cli>Works with all modern browsers, degrades gracefully for others\u003C\u002Fli>\n\u003Cli>Fully CSS3 compliant with text shadowing, box shadowing, gradients, etc.\u003C\u002Fli>\n\u003Cli>Copy an existing button to use as starting point for others\u003C\u002Fli>\n\u003Cli>See your buttons on different color backgrounds\u003C\u002Fli>\n\u003Cli>Predefined defaults make getting started super easy\u003C\u002Fli>\n\u003Cli>Works with your page builder: Beaver Builder, SiteOrigin, Elementor etc\u003C\u002Fli>\n\u003Cli>Great Gutenberg support, works out of the box.\u003C\u002Fli>\n\u003Cli>Integrates with Popup Builders to open Modals\u003C\u002Fli>\n\u003Cli>Best responsive options. Customize for each mobile device and screen size\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Share Buttons\u003C\u002Fh4>\n\u003Cp>MaxButtons has a \u003Ca href=\"https:\u002F\u002Fmaxbuttons.com\u002F?utm_source=repobestss&utm_medium=mbrepo&utm_content=best_social_share&utm_campaign=repobestss\" rel=\"nofollow ugc\">share buttons addon\u003C\u002Fa> that includes 7 beautifully designed share button sets for the following social networks:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Facebook\u003C\u002Fli>\n\u003Cli>Twitter\u003C\u002Fli>\n\u003Cli>Pinterest\u003C\u002Fli>\n\u003Cli>Linkedin\u003C\u002Fli>\n\u003Cli>Google+\u003C\u002Fli>\n\u003Cli>Pinterest\u003C\u002Fli>\n\u003Cli>StumbleUpon\u003C\u002Fli>\n\u003Cli>Reddit\u003C\u002Fli>\n\u003Cli>Whatsapp\u003C\u002Fli>\n\u003Cli>Buffer\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Plus email and print icons.\u003C\u002Fp>\n\u003Ch4>Social Icons\u003C\u002Fh4>\n\u003Cp>In addition to promoting your content through MaxButtons share buttons you can also use share buttons to promote your social network profiles.  Simply select a social icon or make a button, include the link to your profile and post the button shortcode on your page. Social icons are easy with MaxButtons!\u003C\u002Fp>\n\u003Ch4>MaxButtons Pro\u003C\u002Fh4>\n\u003Cp>Take your buttons to the next level with \u003Ca href=\"https:\u002F\u002Fwww.maxbuttons.com\u002Fpricing\u002F?utm_source=repombp&utm_medium=mbrepo&utm_content=MBPro&utm_campaign=repombp\" rel=\"nofollow ugc\">MaxButtons Pro\u003C\u002Fa>!\u003C\u002Fp>\n\u003Cp>Our premium WordPress plugin for buttons, share buttons and social icons brings you the \u003Ca href=\"https:\u002F\u002Fmaxbuttons.com\u002F?utm_source=mprepo&utm_medium=mbrepo&utm_content=best_css3_button&utm_campaign=repobestcss3\" rel=\"nofollow ugc\">best WordPress button plugin\u003C\u002Fa> through continuous feature updating. Upgrading to the Pro version allows you to add icons and images to your custom WordPress buttons. The Pro features allow you to do so much more!\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Icons and Images\u003C\u002Fstrong> – Add icons and images to your buttons and customize placement and size.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multi-line text\u003C\u002Fstrong> – Add a second line of text and stylize with font, size and placement.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Google Fonts\u003C\u002Fstrong> – We have included the entire set to help your buttons stand out with beautiful typography.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Button Packs\u003C\u002Fstrong> – Ready to use, value priced button sets that make any site good great.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Google Analytics\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fmaxbuttons.com\u002Fgoogle-analytics-event-tracking\u002F\" rel=\"nofollow ugc\">Event Tracking for WordPress Buttons\u003C\u002Fa>. The best way to see you users’ interactions with buttons in Google Analytics. No coding needed.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Import\u002FExport\u003C\u002Fstrong> – Useful for backing up and\u002For moving your buttons. Also, use any of the great free icons listed on our site.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Dynamic Buttons\u003C\u002Fstrong> – Use variables from WordPress or theme in your link and text\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom CSS\u003C\u002Fstrong> – Built-in per button custom CSS\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Button Search\u003C\u002Fstrong> – for easier management of large button sets.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Font Awesome 5\u003C\u002Fstrong> – Largest icon collection, fastest served\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WPBakery Page Builder\u003C\u002Fstrong> – Integrated with WPBakery Page Builder\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Contact Form 7\u003C\u002Fstrong> Integration\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Beaver Builder\u003C\u002Fstrong> Integration\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Easy Digital Downloads\u003C\u002Fstrong> Purchase and Checkout Button Integration\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>WordPress Button Sets\u003C\u002Fh4>\n\u003Cp>In addition to the Basic Buttons and free button packs included with MaxButtons Pro you can also purchase additional professionally designed, production ready button packs from the largest \u003Ca href=\"http:\u002F\u002Fmaxbuttons.com\u002Fproduct-category\u002Fbutton-packs\u002F?utm_source=reposets1&utm_medium=mbrepo&utm_content=buttonsets1&utm_campaign=reposets1\" rel=\"nofollow ugc\">WordPress button\u003C\u002Fa> library in existence.  The library features more than 6,000 buttons.  It is the largest WordPress button library in the known universe.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fmaxbuttons.com\u002Fproduct-category\u002Fbutton-packs\u002F?utm_source=reposets&utm_medium=mbrepo&utm_content=button_pack&utm_campaign=reposets\" rel=\"nofollow ugc\">WordPress button sets\u003C\u002Fa> make designers and developers much more productive.\u003C\u002Fp>\n\u003Ch4>Free Icons\u003C\u002Fh4>\n\u003Cp>You can use free icons when you create your buttons with MaxButtons Pro so we’ve built one of the largest libraries to inspire you and make your buttons really stand out.\u003C\u002Fp>\n\u003Ch4>Button Shortcode\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Click the MaxButtons page from the admin menu.\u003C\u002Fli>\n\u003Cli>Click the Add New button.\u003C\u002Fli>\n\u003Cli>Create and customize your button using the button editor.\u003C\u002Fli>\n\u003Cli>Fill out and select the options needed to build your button.\u003C\u002Fli>\n\u003Cli>Once you’re ready, click Save.\u003C\u002Fli>\n\u003Cli>A \u003Ca href=\"http:\u002F\u002Fmaxbuttons.com\u002Fbutton-shortcode\u002F?utm_source=reposhort&utm_medium=mbrepo&utm_content=reposhort&utm_campaign=reposhort\" rel=\"nofollow ugc\">button shortcode\u003C\u002Fa> will be generated (ex: [maxbutton id=”17″] or [maxbutton name=”My Button Name”]).\u003C\u002Fli>\n\u003Cli>Use the shortcode anywhere in your content and the button will appear.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>You can also pass the button text and URL as parameters in the \u003Ca href=\"http:\u002F\u002Fmaxbuttons.com\u002Fbutton-shortcode\u002F?utm_source=reposhort2&utm_medium=mbrepo&utm_content=reposhort2&utm_campaign=reposhort2\" rel=\"nofollow ugc\">button shortcode\u003C\u002Fa>, giving you even greater flexibility. For example, if you want to create a set of buttons that look exactly the same, except for the text and URL, you could do something like this:\u003C\u002Fp>\n\u003Cp>[maxbutton id=”17″ text=”Search Google” url=”http:\u002F\u002Fgoogle.com”]\u003C\u002Fp>\n\u003Cp>[maxbutton name=”MaxButtons Button Name” text=”Search Yahoo” url=”http:\u002F\u002Fyahoo.com”]\u003C\u002Fp>\n\u003Cp>Another parameter you can give the shortcode is window, which tells the button whether or not to open the URL in a new window (by default the button opens the URL in the current window). To do so you always give the window parameter the value “new”, shown below. Anything else will open the button URL in the current window.\u003C\u002Fp>\n\u003Cp>[maxbutton id=”17″ window=”new”]\u003C\u002Fp>\n\u003Cp>You can also use the nofollow parameter, which will add a rel=”nofollow” attribute to the button when set to true, as shown below (the default is false):\u003C\u002Fp>\n\u003Cp>[maxbutton id=”17″ nofollow=”true”]\u003C\u002Fp>\n\u003Cp>NOTE: Passing parameters to the shortcode overrides those settings saved as part of the button.\u003C\u002Fp>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cp>We work hard to give timely support during the week.  And we give support when we’re on during the weekend.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>MaxButtons.  Bringing the #buttonlove!\u003C\u002Fstrong>\u003C\u002Fp>\n","Maxbuttons is the best and easiest button plugin for WordPress. Within minutes you can create beautiful buttons, share buttons and social icons.",80000,5150223,1093,"2025-09-15T07:45:00.000Z","6.8.5","5.0","7.0",[98,99,100,101,102],"butotn-creator","css-wordpress-button","css3-button-generator","responsive-buttons","share-button","http:\u002F\u002Fmaxbuttons.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmaxbuttons.9.8.5.zip",94,13,"2025-04-17 00:00:00",{"slug":109,"name":110,"version":111,"author":112,"author_profile":113,"description":114,"short_description":115,"active_installs":116,"downloaded":117,"rating":118,"num_ratings":119,"last_updated":120,"tested_up_to":121,"requires_at_least":122,"requires_php":69,"tags":123,"homepage":129,"download_link":130,"security_score":13,"vuln_count":80,"unpatched_count":80,"last_vuln_date":37,"fetched_at":30},"loftloader","LoftLoader","2.5.2","loftocean","https:\u002F\u002Fprofiles.wordpress.org\u002Floftocean\u002F","\u003Cp>Small and powerful. LoftLoader helps you to add a beautiful animated preloader to your website, and have full control of its look, without writing any code.\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FzxiF5hHU1kc?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch4>Features & Options\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Enhanced settings panel with WordPress Customizer.\u003C\u002Fli>\n\u003Cli>Pure CSS3 animations for better performance. Works in any modern browser. \u003C\u002Fli>\n\u003Cli>Use JavaScript to detect if the page is fully loaded.\u003C\u002Fli>\n\u003Cli>5 ending animation effects.\u003C\u002Fli>\n\u003Cli>7 loading animation effects. 2 of them support custom image.\u003C\u002Fli>\n\u003Cli>Unlimited background color. Also can change the opacity.\u003C\u002Fli>\n\u003Cli>Unlimited loader color.\u003C\u002Fli>\n\u003Cli>Can add different loaders for different pages on one site (New feature since v2.0. Only works for “Pages”.).\u003C\u002Fli>\n\u003Cli>Responsive & retina ready.\u003C\u002Fli>\n\u003Cli>Option to enable\u002Fdisable the preloader.\u003C\u002Fli>\n\u003Cli>Option to enable preloader on site homepage only.\u003C\u002Fli>\n\u003Cli>Close button to quit the loading screen. Users can set when to show the close button (range: 5 to 20 seconds), and customize the close button text.\u003C\u002Fli>\n\u003Cli>Ready for translation (.pot file included).\u003C\u002Fli>\n\u003Cli>Light weight, fast. Coded with SASS. CSS & JS minified.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Online Documentation\u003C\u002Fh4>\n\u003Cp>To know how to use the plugin, please click the link to check \u003Ca href=\"http:\u002F\u002Floftocean.com\u002Fdoc\u002Floftloader\u002F\" rel=\"nofollow ugc\">online documentation\u003C\u002Fa>. It’s the documentation of Pro version. But you can still find Lite version features details in it.\u003C\u002Fp>\n\u003Ch4>How to contact us\u003C\u002Fh4>\n\u003Cp>If you have any questions or encounter a problem while using LoftLoader, please \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Floftloader\" rel=\"ugc\">create a topic in the support forum\u003C\u002Fa>. If you contact us via email, please indicate that your question corresponds to LoftLoader Lite.\u003C\u002Fp>\n\u003Ch4>To speed along the support request, please follow the steps below\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Update to the latest versions of your WordPress, themes and plugins.\u003C\u002Fli>\n\u003Cli>Check \u003Ca href=\"http:\u002F\u002Floftocean.com\u002Fdoc\u002Floftloader\u002F\" rel=\"nofollow ugc\">online documentation\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Floftloader\u002F#faq\" rel=\"ugc\">FAQ\u003C\u002Fa> first.\u003C\u002Fli>\n\u003Cli>Test by \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Ftopic\u002Fhow-to-check-for-conflicts\u002F\" rel=\"ugc\">following this guide\u003C\u002Fa> to check if it is a conflict with other plugins or themes.\u003C\u002Fli>\n\u003Cli>If you still cannot find a solution, please contact us.\u003C\u002Fli>\n\u003Cli>When submit your support request, please \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Ftopic\u002Fplease-read-before-posting-63\u002F\" rel=\"ugc\">follow the guide\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Pro Version\u003C\u002Fh4>\n\u003Cp>LoftLoader Pro is available. \u003Ca href=\"https:\u002F\u002Fcodecanyon.net\u002Fitem\u002Floftloader-pro-preloader-plugin-for-wordpress\u002F17339671?ref=LoftOcean\" rel=\"nofollow ugc\">Upgrade to pro version\u003C\u002Fa> and get more stunning features!\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Handpick – Turn the preloader on for specific pages or posts.\u003C\u002Fli>\n\u003Cli>Hide the preloader for picked post types – products, portfolios, etc.\u003C\u002Fli>\n\u003Cli>Option to display the preloader once per visitor session.\u003C\u002Fli>\n\u003Cli>Support gradient background color, full background image, and repeating background pattern.\u003C\u002Fli>\n\u003Cli>More ending animations.\u003C\u002Fli>\n\u003Cli>Loader – 19 types of animations to choose. 6 of them support custom images.\u003C\u002Fli>\n\u003Cli>Looping – Animation can be set to loop forever, and some animations can be set to run just once (ends after page has loaded).\u003C\u002Fli>\n\u003Cli>Progress – Progress bar, counting percentage, or both. Any color. Position, size & font control.\u003C\u002Fli>\n\u003Cli>Message – Enter your custom welcome or loading message to display. Control color, position & font. And supports Random Message feature.\u003C\u002Fli>\n\u003Cli>Load Time – Set a minimum load time to prevent the pre-loader from disappearing too fast.\u003C\u002Fli>\n\u003Cli>Device Control – Choose to show the loading screen on all devices, or hide on mobile, or show on mobile only.\u003C\u002Fli>\n\u003Cli>Option to enable smooth page transition effect. \u003Ca href=\"http:\u002F\u002Fdemo.loftocean.com\u002Floftloader-transition\u002F\" rel=\"nofollow ugc\">Check the example\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Choose to save customize styles as inline styles in \u003Chead> or as an external .css file.\u003C\u002Fli>\n\u003Cli>Option to disable page scrolling while loading.\u003C\u002Fli>\n\u003Cli>Can add different loaders for different Pages, Posts and custom post types (such as portfolios, products, etc.) on one site.\u003C\u002Fli>\n\u003Cli>Users can choose which elements to detect during the loading process (All elements \u002F Images \u002F Videos \u002F Images & Videos).\u003C\u002Fli>\n\u003Cli>Purchase once, free lifetime update with new features.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Check some \u003Ca href=\"http:\u002F\u002Fwww.loftocean.com\u002Floftloader\u002Fexample-13\u002F\" rel=\"nofollow ugc\">examples\u003C\u002Fa> created by pro version.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Please note\u003C\u002Fstrong>: Although you may find that LoftLoader Lite (the free version) can run on older versions of WordPress (below v4.7), \u003Cstrong>LoftLoader Pro only supports WordPress v4.7 or higher\u003C\u002Fstrong>. Because the Pro version has more features than the Lite version, including some new features introduced after WordPress 4.7. We always recommend using the latest versions of WordPress to ensure compatibility with your theme and other plugins.\u003C\u002Fp>\n","An easy to use plugin to add an animated preloader to your website with fully customisations.",70000,785142,90,33,"2025-12-14T23:36:00.000Z","6.9.4","6.0",[124,125,126,127,128],"animated-preloader","css3-preloader","customizable-loader","page-preloader","preloader","http:\u002F\u002Fwww.loftocean.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Floftloader.2.5.2.zip",{"slug":132,"name":133,"version":134,"author":135,"author_profile":136,"description":137,"short_description":138,"active_installs":139,"downloaded":140,"rating":64,"num_ratings":141,"last_updated":142,"tested_up_to":94,"requires_at_least":143,"requires_php":18,"tags":144,"homepage":150,"download_link":151,"security_score":64,"vuln_count":152,"unpatched_count":80,"last_vuln_date":153,"fetched_at":30},"animate-it","Animate It!","3.0.4","eleopard","https:\u002F\u002Fprofiles.wordpress.org\u002Feleopard\u002F","\u003Cp>Add cool CSS3 animations to your content.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Feleopardsolutions.com\u002Fanimate-it-documentation-wordpress\u002F\" title=\"Demo\" rel=\"nofollow ugc\">Demo\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Feleopardsolutions.com\u002Fanimate-it-documentation-wordpress\u002F\" title=\"Documentation\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Feleopardsolutions.com\u002Fanimate-it-class-generator\u002F\" title=\"Class Generator\" rel=\"nofollow ugc\">Class Generator\u003C\u002Fa>\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FJKRn6NUM-i4?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>Some of the Key features Include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Allowing user to apply CSS3 animations on Post, Widget and Pages.\u003C\u002Fli>\n\u003Cli>50+ Entry, Exit and Attention Seeker Animations.\u003C\u002Fli>\n\u003Cli>Capability to apply animation on Scroll.\u003C\u002Fli>\n\u003Cli>Capability to add different scroll offset on individual animation blocks.\u003C\u002Fli>\n\u003Cli>Capability to apply animation on Click.\u003C\u002Fli>\n\u003Cli>Capability to apply animation on Hover.\u003C\u002Fli>\n\u003Cli>Providing delay feature in animation to create a nice animation sequence.\u003C\u002Fli>\n\u003Cli>Providing feature to control the duration for a more precise animation.\u003C\u002Fli>\n\u003Cli>Providing a button in the editor to easily add an animation block in the article or post.\u003C\u002Fli>\n\u003Cli>Allow user to add animation on WordPress widgets. Use \u003Ca href=\"https:\u002F\u002Feleopardsolutions.com\u002Fanimate-it-class-generator\u002F\" rel=\"nofollow ugc\">Class Generator\u003C\u002Fa> to generate the required animation classes. \u003C\u002Fli>\n\u003Cli>Allow user to apply animation infinitely or any fixed number of times.\u003C\u002Fli>\n\u003Cli>Option to add custom CSS classes to individual animation block.\u003C\u002Fli>\n\u003Cli>Options to enable or disable animations on Smartphones and Tablets.\u003C\u002Fli>\n\u003Cli>Spanish and German language support. Thanks to Santiago Marrone, Christian Herrmann \u003C\u002Fli>\n\u003Cli>Custom Animate It! block to apply animations on other Gutenberg blocks.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>All the CSS3 animations are from \u003Ca href=\"http:\u002F\u002Fdaneden.github.io\u002Fanimate.css\u002F\" title=\"Animate.css\" rel=\"nofollow ugc\">Animate.css\u003C\u002Fa> and \u003Ca href=\"http:\u002F\u002Flabs.bigroomstudios.com\u002Flibraries\u002Fanimo-js\" title=\"Animo.js\" rel=\"nofollow ugc\">Animo.js\u003C\u002Fa>\u003C\u002Fp>\n","Add cool CSS3 animations to your content.",30000,724736,127,"2025-11-21T08:44:00.000Z","4.7.0",[145,146,147,148,149],"animate-css","css3-animation","infinite","jquery","on-scroll","http:\u002F\u002Fwww.eleopard.in","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fanimate-it.3.0.4.zip",4,"2022-03-30 00:00:00",{"slug":155,"name":156,"version":157,"author":158,"author_profile":159,"description":160,"short_description":161,"active_installs":139,"downloaded":162,"rating":163,"num_ratings":50,"last_updated":164,"tested_up_to":165,"requires_at_least":95,"requires_php":166,"tags":167,"homepage":171,"download_link":172,"security_score":173,"vuln_count":28,"unpatched_count":80,"last_vuln_date":174,"fetched_at":30},"scripts-n-styles","Scripts n Styles","3.5.8","WraithKenny","https:\u002F\u002Fprofiles.wordpress.org\u002Fwraithkenny\u002F","\u003Cp>This plugin allows Admin users the ability to add custom CSS and JavaScript directly into individual Post, Pages or any other registered custom post types. You can also add classes to the body tag and the post container. There is a Global settings page for which you can write Scripts n Styles for the entire blog.\u003C\u002Fp>\n\u003Cp>Admin’s can also add classes to the TinyMCE “Formats” dropdown which users can use to style posts and pages directly. As of Scripts n Styles 3+ styles are reflected in the post editor.\u003C\u002Fp>\n\u003Cp>Because only well trusted users should ever be allowed to insert JavaScript directly into the pages of your site, this plugin restricts usage to admin type users. Admin’s have access to even more sensitive areas by definition, so that should be relatively safe 😉\u003C\u002Fp>\n\u003Ch4>Notes about the implementation:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Admin users, or more specifically, \u003Cem>any user with the \u003Ccode>manage_options\u003C\u002Fcode> and \u003Ccode>unfiltered_html\u003C\u002Fcode> capabilities\u003C\u002Fem> (which by default is \u003Cem>only\u003C\u002Fem> the admin type user) can use this plugin’s functionality. Some plugins extend user rolls, and so this plugin would naturally extend include rolls that have the appropriate capability.\u003C\u002Fli>\n\u003Cli>CSS Styles are embeded, not linked, at the bottom of the \u003Ccode>head\u003C\u002Fcode> element with \u003Ccode>style\u003C\u002Fcode> tags by using \u003Ccode>wp-head\u003C\u002Fcode>. If your theme doesn’t have this hook, this plugin (as well as most others) won’t work.\u003C\u002Fli>\n\u003Cli>JavaScript is embeded, not linked, at the bottom of the \u003Ccode>body\u003C\u002Fcode> (or \u003Ccode>head\u003C\u002Fcode>) element with \u003Ccode>script\u003C\u002Fcode> tags by using \u003Ccode>wp-footer\u003C\u002Fcode> (or \u003Ccode>wp-head\u003C\u002Fcode>). If your theme doesn’t have this hook, this plugin (as well as most others) won’t work.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>There is no input validation.\u003C\u002Fstrong> This plugin puts exactly what you type in the meta box directly into the \u003Ccode>html\u003C\u002Fcode> with no error checking. You are an Admin, and we trust you to be carefull. Try not to break anything.\u003C\u002Fli>\n\u003Cli>Do to the licensing of the libraries used, this plugin is released “GPL 3.0 or later” if you care about those things.\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin allows Admin users to individually add HTML, custom CSS, Classes and JavaScript directly to Post, Pages or any other custom post types.",379153,88,"2023-06-06T19:13:00.000Z","6.2.9","7.4",[168,169,22,170,24],"admin","code","custom","https:\u002F\u002Fwww.unfocus.com\u002Fprojects\u002Fscripts-n-styles\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fscripts-n-styles.3.5.8.zip",85,"2023-05-18 00:00:00",{"attackSurface":176,"codeSignals":209,"taintFlows":217,"riskAssessment":218,"analyzedAt":229},{"hooks":177,"ajaxHandlers":205,"restRoutes":206,"shortcodes":207,"cronEvents":208,"entryPointCount":80,"unprotectedCount":80},[178,184,188,192,195,198,202],{"type":179,"name":180,"callback":181,"file":182,"line":183},"action","admin_menu","accaj_admin_js_actions","custom_css_js.php",20,{"type":179,"name":185,"callback":186,"file":182,"line":187},"admin_enqueue_scripts","accaj_load_custom_style_for_admin",26,{"type":179,"name":189,"callback":190,"file":182,"line":191},"wp_enqueue_scripts","accaj_load_custom_style_for_front",32,{"type":179,"name":189,"callback":193,"file":182,"line":194},"accaj_load_custom_style_for_login",40,{"type":179,"name":185,"callback":196,"file":182,"line":197},"accaj_add_custom_js_for_admin",45,{"type":179,"name":199,"callback":200,"file":182,"line":201},"wp_head","accaj_add_custom_js_for_front",50,{"type":179,"name":199,"callback":203,"file":182,"line":204},"accaj_add_custom_js_for_login",58,[],[],[],[],{"dangerousFunctions":210,"sqlUsage":211,"outputEscaping":213,"fileOperations":215,"externalRequests":80,"nonceChecks":80,"capabilityChecks":80,"bundledLibraries":216},[],{"prepared":80,"raw":80,"locations":212},[],{"escaped":80,"rawEcho":80,"locations":214},[],31,[],[],{"summary":219,"deductions":220},"The \"add-custom-css-and-js\" plugin, version 1.2.0, exhibits a mixed security posture. On one hand, the static analysis reveals a remarkably clean codebase with no detected dangerous functions, all SQL queries using prepared statements, and all output properly escaped. Furthermore, there are no identified entry points like AJAX handlers, REST API routes, or shortcodes that are unprotected, and no critical or high-severity taint flows were found.\n\nHowever, the plugin's history is a significant concern. It has one known and currently unpatched CVE, classified as medium severity, with the last vulnerability occurring very recently. This indicates a recurring issue with security vulnerabilities, and the fact that it remains unpatched is a critical weakness. The vulnerability type being Cross-Site Request Forgery (CSRF) suggests potential issues with state-changing actions not being properly protected, despite the static analysis not explicitly highlighting missing nonce checks on entry points (as there are none apparent). The presence of numerous file operations (31) without further context is also something to note, as complex file handling can sometimes introduce vulnerabilities if not meticulously secured.\n\nIn conclusion, while the plugin's core code seems to follow good security practices regarding SQL and output handling, the persistent presence of unpatched vulnerabilities, specifically a recent medium-severity CSRF, overshadows these strengths. The lack of unprotected entry points is positive, but the unpatched CVE is a clear and present danger that requires immediate attention.",[221,224,227],{"reason":222,"points":223},"Unpatched CVE (medium severity)",15,{"reason":225,"points":226},"Recurring vulnerability pattern (CSRF)",5,{"reason":228,"points":47},"Numerous file operations (31)","2026-03-17T01:22:09.326Z",{"wat":231,"direct":242},{"assetPaths":232,"generatorPatterns":239,"scriptPaths":240,"versionParams":241},[233,234,235,236,237,238],"\u002Fwp-content\u002Fuploads\u002Fadd-custom-css-and-js\u002Fcs_for_admin.css","\u002Fwp-content\u002Fuploads\u002Fadd-custom-css-and-js\u002Fcs_for_front.css","\u002Fwp-content\u002Fuploads\u002Fadd-custom-css-and-js\u002Fcs_for_login.css","\u002Fwp-content\u002Fuploads\u002Fadd-custom-css-and-js\u002Fjs_for_admin.js","\u002Fwp-content\u002Fuploads\u002Fadd-custom-css-and-js\u002Fjs_for_front.js","\u002Fwp-content\u002Fuploads\u002Fadd-custom-css-and-js\u002Fjs_for_login.js",[],[236,237,238],[],{"cssClasses":243,"htmlComments":244,"htmlAttributes":251,"restEndpoints":252,"jsGlobals":253,"shortcodeOutput":254},[],[245,246,247,248,249,250],"\u002F\u002Fwrite JS file for admin","\u002F\u002Fwrite JS file for frontend","\u002F\u002Fwrite JS file for login","\u002F\u002Fwrite CSS file only for frontend","\u002F\u002Fwrite CSS file only for adminpanel","\u002F\u002Fwrite CSS file only for loginuser",[],[],[],[]]