[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fN1g1Vxw6_syN8kfyTzLuT5t0qjn0uq4cJ5Xvyn5bo_o":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":49,"crawl_stats":38,"alternatives":56,"analysis":151,"fingerprints":657},"add-hierarchy-parent-to-post","Add Hierarchy (parent) to post","4.0","ttodua","https:\u002F\u002Fprofiles.wordpress.org\u002Fttodua\u002F","\u003Cp>[PLUGIN IS DISCONTINUED! we do not have any recommendations for alternative plugins]\u003C\u002Fp>\n\u003Ch4>Plugin Description\u003C\u002Fh4>\n\u003Cp>Plugin adds “parent & hierarchy” functionality to posts (If you have problems, deactivate plugin and in “SETTINGS>PERMALINKS”, do “SAVE PERALINKS” 2 times).\u003C\u002Fp>\n\u003Ch4>Available Options\u003C\u002Fh4>\n\u003Cp>See all available options and their description on plugin’s settings page.\u003C\u002Fp>\n","PLUGIN IS DISCONTINUED!",300,11213,74,6,"2024-05-22T07:06:00.000Z","6.5.8","4.4","",[20,21,22,23,24],"hierarchy","page","parent","permalink","post","https:\u002F\u002Fpuvox.software\u002Fsoftware\u002Fwordpress-plugins\u002F?plugin=add-hierarchy-parent-to-post","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadd-hierarchy-parent-to-post.zip",92,1,0,"2022-08-01 00:00:00","2026-03-15T15:16:48.613Z",[33],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48},"WF-0dd1706c-fb3b-4a5d-947a-435954eb0b15-add-hierarchy-parent-to-post","add-hierarchy-parent-to-post-reflected-cross-site-scripting","Add Hierarchy (parent) to post \u003C= 3.12 - Reflected Cross-Site Scripting","The Add Hierarchy plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.12 due to the use of add_query_arg\u002Fremove_query_arg with insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages via a URL that executes if they can successfully trick a user into performing an action such as clicking on a link.",null,"\u003C=3.12","3.13","medium",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-01-22 19:56:02",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F0dd1706c-fb3b-4a5d-947a-435954eb0b15?source=api-prod",540,{"slug":7,"display_name":7,"profile_url":8,"plugin_count":50,"total_installs":51,"avg_security_score":52,"avg_patch_time_days":53,"trust_score":54,"computed_at":55},4,1600,88,271,71,"2026-04-04T14:22:04.852Z",[57,78,98,116,134],{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":67,"num_ratings":68,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":18,"tags":72,"homepage":75,"download_link":76,"security_score":77,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"permalink-editor","Permalink Editor","0.2.12","Fubra","https:\u002F\u002Fprofiles.wordpress.org\u002Ffubra\u002F","\u003Cp>This plugin adds two areas of functionality: Global page, category or tag permalink structures and individual custom permalinks.\u003C\u002Fp>\n\u003Cp>Options are added to the Permalinks Settings page allowing you to specify the structure for pages, categories, tags and authors.\u003C\u002Fp>\n\u003Cp>By default – if custom permalinks are enabled – pages are accessible in the format \u003Ccode>\u002Fpage\u002F\u003C\u002Fcode> or \u003Ccode>\u002Fparent\u002Fpage\u002F\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cp>You can modify this format in many different ways, for example:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Add an extension: \u003Ccode>\u002F%pagename%.html\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Add a parent directory name: \u003Ccode>\u002Fcontent\u002F%pagename%\u002F\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Prefix the page name: \u003Ccode>\u002Fpage-%pagename%\u002F\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Or using a combination of the above.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This same format applies for categories, tags and authors, however the structure tokens differ:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Categories: \u003Ccode>%category%\u003C\u002Fcode> (E.g. \u003Ccode>\u002Fcategory\u002F%category%.html\u003C\u002Fcode>)\u003C\u002Fli>\n\u003Cli>Tags: \u003Ccode>%post_tag%\u003C\u002Fcode> (E.g. \u003Ccode>\u002Ftag\u002F%post_tag%.html\u003C\u002Fcode>)\u003C\u002Fli>\n\u003Cli>Authors: \u003Ccode>%author%\u003C\u002Fcode> (E.g. \u003Ccode>\u002Fauthor\u002F%author%.html\u003C\u002Fcode>)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Each \u003Cem>permalink base\u003C\u002Fem> can be edited directly via these settings, for example using \u003Ccode>\u002Fpeople\u002F%author%.html\u003C\u002Fcode> as the Author permalink structure will replace \u003Ccode>\u002Fauthor\u002F\u003C\u002Fcode> with \u003Ccode>\u002Fpeople\u002F\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cp>If no prefix is found, permalinks will be prepended with a default (category, tag or author) – with the exception of pages.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Note:\u003C\u002Fstrong> Ensure you have included the correct structure tag somewhere in the url.\u003C\u002Fp>\n\u003Cp>Additionally, an option is added to the edit screen allow you to specify the permalink for an individual post or page.\u003C\u002Fp>\n","Fully customise the permalink for an individual page or post and globally set the permalink structure for pages, categories, tags or authors.",1000,65770,72,5,"2017-11-28T19:46:00.000Z","3.2.1","3.1",[73,21,23,24,74],"link","url","http:\u002F\u002Ffubra.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpermalink-editor.0.2.12.zip",85,{"slug":20,"name":79,"version":80,"author":81,"author_profile":82,"description":83,"short_description":84,"active_installs":85,"downloaded":86,"rating":87,"num_ratings":88,"last_updated":89,"tested_up_to":90,"requires_at_least":91,"requires_php":18,"tags":92,"homepage":96,"download_link":97,"security_score":77,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"Hierarchy","1.0.5.1","Jon Christopher","https:\u002F\u002Fprofiles.wordpress.org\u002Fjchristopher\u002F","\u003Cp>\u003Cstrong>NOTE\u003C\u002Fstrong>: If you’re looking for something more user-focused, take a look at \u003Ca href=\"https:\u002F\u002Forganizewp.com\u002F?utm_source=wordpressorg&utm_medium=link&utm_campaign=readme\" rel=\"nofollow ugc\">OrganizeWP\u003C\u002Fa> which is complete rethinking of Hierarchy!\u003C\u002Fp>\n\u003Cp>Custom Post Types (sometimes) need context, Hierarchy allows you to rework your content management workflow by essentially \u003Cstrong>moving Custom Post Type admin menus into your Pages list\u003C\u002Fstrong>. What this does is mimic the navigation you’ve set up on your site by placing Custom Post Type edit links amongst your Pages where they belong.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhierarchy\u002Fscreenshots\u002F\" rel=\"ugc\">\u003Cstrong>» Check out the screenshots to see Hierarchy in action\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Hierarchy removes unnecessary entries from the Admin Menu and instead injects theme where appropriate amongst your Pages, grouping everything under a single ‘Content’ Admin Menu entry.\u003C\u002Fp>\n\u003Ch4>Custom Post Types NEED context\u003C\u002Fh4>\n\u003Cp>Custom Post Types are great, but the \u003Cstrong>editing workflow can be improved\u003C\u002Fstrong>. Adding a Custom Post Type likely results in \u003Cem>another\u003C\u002Fem> WordPress admin sidebar menu, abstracting the management of that content from the main organization of your site, Pages. Hierarchy intelligently extends your Pages menu by including your Custom Post Type admin links \u003Cem>within\u003C\u002Fem> the Page structure, allowing for a much more natural workflow when managing your content.\u003C\u002Fp>\n\u003Ch4>Examples\u003C\u002Fh4>\n\u003Cp>Chances are you’ve customized your \u003Ccode>Front page displays\u003C\u002Fcode> setting to display a static page instead of your latest blog posts. Now you’ve got a sidebar link to manage your Posts and a WordPress Page called “Blog” that sites in your list of Pages doing absolutely nothing. Hierarchy remedies both problems by converting the “Blog” page link to be one that lists your Posts. It also hides the Posts sidebar entry (if you want it to).\u003C\u002Fp>\n\u003Cp>It’s also likely that you’re utilizing Custom Post Types to power sections of your website, but it’s awkward to manage the content of an internal section of your website using the main WordPress admin sidebar links to your Custom Post Type. Hierarchy will allow you to hide those sidebar links and instead nest them amongst your Pages, providing contextual links to manage the content of your Custom Post Types.\u003C\u002Fp>\n\u003Ch4>More information\u003C\u002Fh4>\n\u003Cp>If you’d like a lot more information on the implementation and workflow changes, \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhierarchy\u002Fscreenshots\u002F\" rel=\"ugc\">check out the screenshots\u003C\u002Fa> and please see \u003Ca href=\"https:\u002F\u002Fmondaybynoon.com\u002Fintroducing-hierarchy\u002F\" rel=\"nofollow ugc\">the introduction\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fmondaybynoon.com\u002Fhierarchy-1-0-is-here\u002F\" rel=\"nofollow ugc\">the follow-up for 1.0\u003C\u002Fa>.\u003C\u002Fp>\n","Move your Pages\u002FPosts\u002FCustom Post Type admin links from the sidebar to a Content menu that nests everything where it should be",100,14536,94,13,"2022-02-10T17:15:00.000Z","5.9.0","3.8",[93,94,20,95,74],"cpt","custom-post-types","pages","https:\u002F\u002Fgithub.com\u002Fjchristopher\u002Fhierarchy\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhierarchy.1.0.5.1.zip",{"slug":99,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":106,"downloaded":107,"rating":29,"num_ratings":29,"last_updated":108,"tested_up_to":109,"requires_at_least":110,"requires_php":18,"tags":111,"homepage":114,"download_link":115,"security_score":77,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"wp-extra-template-tags","WP Extra Template Tags","0.4","Jenst","https:\u002F\u002Fprofiles.wordpress.org\u002Fjenst\u002F","\u003Ch4>WordPress template tags\u003C\u002Fh4>\n\u003Cp>To make it easy to edit themes and plugins there are many build in \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FTemplate_Tags\" rel=\"nofollow ugc\">template tags\u003C\u002Fa> within the WordPress code. I did not found all the tags I wanted so I created them and now provides as a plugin.\u003C\u002Fp>\n\u003Cp>For usage go to “\u003Ca href='https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fwp-extra-template-tags\u002Finstallation\u002F' rel=\"ugc\">Installation\u003C\u002Fa>“\u003C\u002Fp>\n\u003Ch4>Updates\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>0.4 - _get_category_count() and _category_count() functions updated\n0.3 - _get_depth(), _is_child(), is_grandchild() functions created\n0.2 - _get_the_content_with_formatting() function created\n0.1 - Plugin created\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>Prevents collisions\u003C\u002Fh4>\n\u003Cp>Every extra template tag with this plugin has an underscore before the function name. That is to prevent collisions if the WordPress team develop the functions in the future.\u003C\u002Fp>\n\u003Ch4>Add an extra template tag\u003C\u002Fh4>\n\u003Cp>If you have an own extra template tag, send it to me and if it is a good one I will include it in the next plugin update. For bug reports, donations, feedback, more plugins and themes visit \u003Ca href=\"http:\u002F\u002Fwww.web-templates.nu\u002F2008\u002F08\u002F25\u002Fwp-extra-template-tags\u002F\" title=\"web-templates.nu\" rel=\"nofollow ugc\">web-templates.nu\u003C\u002Fa>\u003C\u002Fp>\n","This plugin provides Wordpress users with extra template tags. It can be used in themes or plugins.",70,4211,"2008-09-21T14:40:00.000Z","2.6","2.5",[21,23,24,112,113],"tags","template","http:\u002F\u002Fwww.web-templates.nu\u002F2008\u002F08\u002F25\u002Fwp-extra-template-tags\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-extra-template-tags.0.4.zip",{"slug":117,"name":118,"version":119,"author":120,"author_profile":121,"description":122,"short_description":123,"active_installs":124,"downloaded":125,"rating":29,"num_ratings":29,"last_updated":126,"tested_up_to":127,"requires_at_least":17,"requires_php":18,"tags":128,"homepage":18,"download_link":133,"security_score":85,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"easy-hierarchy","Easy Hierarchy","2.0.3","Marco Milesi","https:\u002F\u002Fprofiles.wordpress.org\u002Fmilmor\u002F","\u003Cp>Managing complex page hierarchies in WordPress can be a challenge. Easy Hierarchy streamlines your workflow by adding powerful tools to the admin area, making it simple to filter top-level pages and visualize parent-child relationships for every item.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features:\u003C\u002Fstrong>\u003Cbr \u002F>\n– Adds a “Page Tree” submenu under Pages for a full visual hierarchy overview.\u003Cbr \u002F>\n– Displays parent and child relationships in a collapsible tree.\u003Cbr \u002F>\n– Quick search box to filter pages by title.\u003Cbr \u002F>\n– Shows publish date, last revision date, and status for each page.\u003Cbr \u002F>\n– Direct Edit and View links for every page in the tree.\u003Cbr \u002F>\n– Highlights number of child pages for each parent.\u003Cbr \u002F>\n– \u003Cstrong>Adds a “Parent” column to the Pages list:\u003C\u002Fstrong>\u003Cbr \u002F>\n  – See the full parent hierarchy for each page, with clickable links to filter by parent.\u003Cbr \u002F>\n  – Instantly view the number of child pages for any page, with quick filtering.\u003Cbr \u002F>\n– Fully integrated with the WordPress admin interface.\u003C\u002Fp>\n","Hierarchies made easy!",10,2964,"2025-05-29T12:19:00.000Z","6.9.4",[129,20,130,131,132],"admin","page-management","page-tree","parent-child","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-hierarchy.2.0.3.zip",{"slug":135,"name":136,"version":137,"author":138,"author_profile":139,"description":140,"short_description":141,"active_installs":124,"downloaded":142,"rating":29,"num_ratings":29,"last_updated":18,"tested_up_to":143,"requires_at_least":144,"requires_php":18,"tags":145,"homepage":148,"download_link":149,"security_score":85,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":150},"rp-recreate-slugs","RP Recreate Slugs","1.1","Alec","https:\u002F\u002Fprofiles.wordpress.org\u002Falecksmart\u002F","\u003Cp>Recreate articles and pages slugs (permalinks) with the most current ruleset. Useful when slug generation is changed or updated, especially with transliteration. Global slugs recovery. Saves sites. Use with care.\u003C\u002Fp>\n\u003Cp>You might need to recreate slugs after modifying the way the slugs generated and\u002For transliterated and you are getting infinite redirections and\u002For 404 errors.\u003C\u002Fp>\n\u003Ch4>Features:\u003C\u002Fh4>\n\u003Ch4>Recreate articles and pages slugs.\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>1. Useful when slug generation is changed or updated, especially with transliteration.\n2. Global slugs recovery.\n2. Requires administrator access.\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Recreate articles and pages slugs.",2357,"3.1.4","3.0",[21,23,24,146,147],"slug","utility","http:\u002F\u002Fwww.rationalplanet.com\u002F2011\u002F03\u002Ffree-plugin-utility-for-wordpress-rp-recreate-slugs\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frp-recreate-slugs.1.1.zip","2026-03-15T14:44:11.924Z",{"attackSurface":152,"codeSignals":309,"taintFlows":517,"riskAssessment":645,"analyzedAt":656},{"hooks":153,"ajaxHandlers":305,"restRoutes":306,"shortcodes":307,"cronEvents":308,"entryPointCount":29,"unprotectedCount":29},[154,161,165,170,174,179,183,185,189,191,195,199,203,207,210,216,218,221,223,226,229,232,235,238,240,243,246,248,251,254,257,260,262,266,270,274,276,280,283,286,290,293,296,298,302],{"type":155,"name":156,"callback":157,"priority":158,"file":159,"line":160},"action","registered_post_type","enable_hierarchy_fields",123,"index.php",64,{"type":155,"name":162,"callback":163,"priority":164,"file":159,"line":54},"init","init_action",777,{"type":166,"name":167,"callback":168,"priority":169,"file":159,"line":13},"filter","pre_post_link","change_permalinks",8,{"type":155,"name":156,"callback":171,"priority":172,"file":159,"line":173},"method__modify_post_obj",150,81,{"type":166,"name":175,"callback":176,"priority":177,"file":159,"line":178},"pre_get_posts","method__query",888,86,{"type":155,"name":156,"callback":180,"priority":181,"file":159,"line":182},"hierarchy_for_custom_post",90,87,{"type":155,"name":162,"callback":184,"priority":172,"file":159,"line":27},"method__rewrite",{"type":155,"name":186,"callback":187,"file":159,"line":188},"current_screen","closure",96,{"type":155,"name":162,"callback":187,"file":159,"line":190},177,{"type":166,"name":192,"callback":193,"priority":124,"file":159,"line":194},"page_attributes_dropdown_pages_args","page_attrs",329,{"type":166,"name":196,"callback":197,"priority":124,"file":159,"line":198},"register_post_type_args","register_cpt_args_gutenberg",334,{"type":166,"name":200,"callback":201,"priority":124,"file":159,"line":202},"get_pages","change_cpts",345,{"type":155,"name":204,"callback":187,"priority":28,"file":205,"line":206},"wp_head","library.php",4753,{"type":155,"name":208,"callback":187,"priority":28,"file":205,"line":209},"admin_head",4754,{"type":155,"name":211,"callback":212,"priority":213,"file":214,"line":215},"wp_enqueue_scripts","my_styles_hook",9,"library_wp.php",73,{"type":155,"name":217,"callback":212,"priority":213,"file":214,"line":13},"admin_enqueue_scripts",{"type":155,"name":219,"callback":187,"file":214,"line":220},"admin_footer",148,{"type":155,"name":162,"callback":187,"file":214,"line":222},163,{"type":155,"name":224,"callback":187,"file":214,"line":225},"admin_init",210,{"type":166,"name":227,"callback":187,"file":214,"line":228},"mce_external_plugins",212,{"type":166,"name":230,"callback":187,"file":214,"line":231},"mce_buttons_2",213,{"type":166,"name":233,"callback":187,"file":214,"line":234},"tiny_mce_version",215,{"type":155,"name":236,"callback":187,"priority":28,"file":214,"line":237},"wp",231,{"type":155,"name":239,"callback":187,"priority":28,"file":214,"line":48},"plugins_loaded",{"type":155,"name":236,"callback":241,"file":214,"line":242},"my_flush__rewrite",550,{"type":155,"name":244,"callback":187,"file":214,"line":245},"wp_footer",700,{"type":155,"name":162,"callback":187,"file":214,"line":247},711,{"type":155,"name":249,"callback":187,"file":214,"line":250},"wp_loaded",854,{"type":155,"name":252,"callback":187,"file":214,"line":253},"shutdown",859,{"type":155,"name":162,"callback":255,"file":214,"line":256},"load_textdomain",1725,{"type":155,"name":208,"callback":258,"file":214,"line":259},"admin_head_func",1736,{"type":155,"name":186,"callback":187,"file":214,"line":261},1737,{"type":155,"name":236,"callback":263,"priority":264,"file":214,"line":265},"flush_checkpoint",999,1746,{"type":166,"name":267,"callback":268,"priority":28,"file":214,"line":269},"upload_mimes","upload_mimes_filter",1752,{"type":166,"name":271,"callback":272,"priority":124,"file":214,"line":273},"wp_handle_upload","wp_handle_upload_filter",1753,{"type":155,"name":162,"callback":187,"file":214,"line":275},1815,{"type":155,"name":277,"callback":278,"file":214,"line":279},"network_admin_menu","plugin__add_menu_or_submenu",1905,{"type":155,"name":281,"callback":278,"file":214,"line":282},"admin_menu",1907,{"type":155,"name":284,"callback":187,"file":214,"line":285},"activated_plugin",1909,{"type":155,"name":287,"callback":288,"file":214,"line":289},"network_admin_notices","admin_error_notice_pro",2096,{"type":155,"name":291,"callback":288,"file":214,"line":292},"admin_notices",2097,{"type":166,"name":294,"callback":187,"priority":124,"file":214,"line":295},"wp_php_error_message",2180,{"type":155,"name":244,"callback":187,"file":214,"line":297},2368,{"type":166,"name":299,"callback":300,"file":214,"line":301},"widget_text","do_shortcode",2392,{"type":166,"name":303,"callback":187,"file":214,"line":304},"site_transient_update_plugins",3266,[],[],[],[],{"dangerousFunctions":310,"sqlUsage":315,"outputEscaping":353,"fileOperations":514,"externalRequests":50,"nonceChecks":68,"capabilityChecks":515,"bundledLibraries":516},[311],{"fn":312,"file":205,"line":313,"context":314},"unserialize",3798,"if ( @unserialize($serialized_string) !== false ) \treturn $serialized_string;",{"prepared":316,"raw":317,"locations":318},46,15,[319,322,325,327,329,331,334,336,338,340,342,345,347,349,351],{"file":159,"line":320,"context":321},114,"$wpdb->get_col() with variable interpolation",{"file":205,"line":323,"context":324},643,"$wpdb->query() with variable interpolation",{"file":214,"line":326,"context":324},784,{"file":214,"line":328,"context":324},785,{"file":214,"line":330,"context":324},1023,{"file":214,"line":332,"context":333},1224,"$wpdb->get_var() with variable interpolation",{"file":214,"line":335,"context":324},1353,{"file":214,"line":337,"context":324},1355,{"file":214,"line":339,"context":324},1368,{"file":214,"line":341,"context":324},1420,{"file":214,"line":343,"context":344},1421,"$wpdb->get_results() with variable interpolation",{"file":214,"line":346,"context":324},1430,{"file":214,"line":348,"context":324},1434,{"file":214,"line":350,"context":344},3058,{"file":214,"line":352,"context":324},3074,{"escaped":354,"rawEcho":173,"locations":355},80,[356,359,361,363,365,367,369,370,372,373,375,377,379,381,383,385,387,389,391,393,395,397,399,401,403,405,407,409,411,413,415,417,419,420,421,423,425,427,429,431,433,435,437,439,441,442,444,446,448,450,452,454,456,458,460,462,464,466,468,470,472,474,476,478,480,482,484,486,488,490,492,494,496,498,500,502,504,506,508,510,512],{"file":159,"line":357,"context":358},430,"raw output",{"file":159,"line":360,"context":358},503,{"file":159,"line":362,"context":358},506,{"file":159,"line":364,"context":358},517,{"file":159,"line":366,"context":358},518,{"file":159,"line":368,"context":358},547,{"file":159,"line":368,"context":358},{"file":159,"line":371,"context":358},574,{"file":159,"line":371,"context":358},{"file":159,"line":374,"context":358},581,{"file":159,"line":376,"context":358},594,{"file":205,"line":378,"context":358},478,{"file":205,"line":380,"context":358},2314,{"file":205,"line":382,"context":358},2900,{"file":205,"line":384,"context":358},3216,{"file":205,"line":386,"context":358},3223,{"file":205,"line":388,"context":358},3263,{"file":205,"line":390,"context":358},3376,{"file":205,"line":392,"context":358},3631,{"file":205,"line":394,"context":358},4179,{"file":205,"line":396,"context":358},4180,{"file":205,"line":398,"context":358},4230,{"file":205,"line":400,"context":358},4232,{"file":205,"line":402,"context":358},4427,{"file":205,"line":404,"context":358},4436,{"file":205,"line":406,"context":358},4438,{"file":205,"line":408,"context":358},4587,{"file":205,"line":410,"context":358},4679,{"file":205,"line":412,"context":358},4683,{"file":205,"line":414,"context":358},4690,{"file":205,"line":416,"context":358},4701,{"file":205,"line":418,"context":358},4707,{"file":205,"line":206,"context":358},{"file":205,"line":209,"context":358},{"file":205,"line":422,"context":358},5104,{"file":205,"line":424,"context":358},5106,{"file":214,"line":426,"context":358},396,{"file":214,"line":428,"context":358},401,{"file":214,"line":430,"context":358},410,{"file":214,"line":432,"context":358},442,{"file":214,"line":434,"context":358},576,{"file":214,"line":436,"context":358},655,{"file":214,"line":438,"context":358},660,{"file":214,"line":440,"context":358},674,{"file":214,"line":440,"context":358},{"file":214,"line":443,"context":358},1312,{"file":214,"line":445,"context":358},1317,{"file":214,"line":447,"context":358},1328,{"file":214,"line":449,"context":358},2313,{"file":214,"line":451,"context":358},2489,{"file":214,"line":453,"context":358},2503,{"file":214,"line":455,"context":358},2541,{"file":214,"line":457,"context":358},2543,{"file":214,"line":459,"context":358},2544,{"file":214,"line":461,"context":358},2572,{"file":214,"line":463,"context":358},2576,{"file":214,"line":465,"context":358},2579,{"file":214,"line":467,"context":358},2626,{"file":214,"line":469,"context":358},2646,{"file":214,"line":471,"context":358},2656,{"file":214,"line":473,"context":358},2661,{"file":214,"line":475,"context":358},2663,{"file":214,"line":477,"context":358},2690,{"file":214,"line":479,"context":358},2697,{"file":214,"line":481,"context":358},2744,{"file":214,"line":483,"context":358},2759,{"file":214,"line":485,"context":358},2772,{"file":214,"line":487,"context":358},2779,{"file":214,"line":489,"context":358},2780,{"file":214,"line":491,"context":358},2781,{"file":214,"line":493,"context":358},2786,{"file":214,"line":495,"context":358},2788,{"file":214,"line":497,"context":358},2796,{"file":214,"line":499,"context":358},2857,{"file":214,"line":501,"context":358},2972,{"file":214,"line":503,"context":358},2997,{"file":214,"line":505,"context":358},3006,{"file":214,"line":507,"context":358},3148,{"file":214,"line":509,"context":358},3393,{"file":214,"line":511,"context":358},3420,{"file":214,"line":513,"context":358},3423,19,2,[],[518,535,543,554,564,604,615,636],{"entryPoint":519,"graph":520,"unsanitizedCount":28,"severity":41},"force_redirect_to_https (library.php:101)",{"nodes":521,"edges":532},[522,527],{"id":523,"type":524,"label":525,"file":205,"line":526},"n0","source","$_SERVER['REQUEST_URI']",102,{"id":528,"type":529,"label":530,"file":205,"line":526,"wp_function":531},"n1","sink","header() [Header Injection]","header",[533],{"from":523,"to":528,"sanitized":534},false,{"entryPoint":536,"graph":537,"unsanitizedCount":28,"severity":41},"password_site (library.php:2310)",{"nodes":538,"edges":541},[539,540],{"id":523,"type":524,"label":525,"file":205,"line":449},{"id":528,"type":529,"label":530,"file":205,"line":449,"wp_function":531},[542],{"from":523,"to":528,"sanitized":534},{"entryPoint":544,"graph":545,"unsanitizedCount":28,"severity":41},"redirect_to_https (library.php:3775)",{"nodes":546,"edges":552},[547,550],{"id":523,"type":524,"label":548,"file":205,"line":549},"$_SERVER",3778,{"id":528,"type":529,"label":530,"file":205,"line":551,"wp_function":531},3780,[553],{"from":523,"to":528,"sanitized":534},{"entryPoint":555,"graph":556,"unsanitizedCount":28,"severity":41},"redirect_to_nonwww (library.php:3785)",{"nodes":557,"edges":562},[558,560],{"id":523,"type":524,"label":548,"file":205,"line":559},3787,{"id":528,"type":529,"label":530,"file":205,"line":561,"wp_function":531},3789,[563],{"from":523,"to":528,"sanitized":534},{"entryPoint":565,"graph":566,"unsanitizedCount":213,"severity":41},"\u003Clibrary> (library.php:0)",{"nodes":567,"edges":598},[568,570,571,574,579,581,586,589,591,594],{"id":523,"type":524,"label":569,"file":205,"line":526},"$_SERVER['REQUEST_URI'] (x2)",{"id":528,"type":529,"label":530,"file":205,"line":526,"wp_function":531},{"id":572,"type":524,"label":548,"file":205,"line":573},"n2",254,{"id":575,"type":529,"label":576,"file":205,"line":577,"wp_function":578},"n3","wp_remote_get() [SSRF]",3051,"wp_remote_get",{"id":580,"type":524,"label":548,"file":205,"line":573},"n4",{"id":582,"type":529,"label":583,"file":205,"line":584,"wp_function":585},"n5","wp_remote_post() [SSRF]",3057,"wp_remote_post",{"id":587,"type":524,"label":588,"file":205,"line":549},"n6","$_SERVER (x2)",{"id":590,"type":529,"label":530,"file":205,"line":551,"wp_function":531},"n7",{"id":592,"type":524,"label":593,"file":205,"line":573},"n8","$_SERVER (x3)",{"id":595,"type":529,"label":596,"file":205,"line":398,"wp_function":597},"n9","echo() [XSS]","echo",[599,600,601,602,603],{"from":523,"to":528,"sanitized":534},{"from":572,"to":575,"sanitized":534},{"from":580,"to":582,"sanitized":534},{"from":587,"to":590,"sanitized":534},{"from":592,"to":595,"sanitized":534},{"entryPoint":605,"graph":606,"unsanitizedCount":29,"severity":614},"ajax_backend_call (library_wp.php:432)",{"nodes":607,"edges":611},[608,610],{"id":523,"type":524,"label":609,"file":214,"line":432},"$_POST['PRO_check_key']",{"id":528,"type":529,"label":596,"file":214,"line":432,"wp_function":597},[612],{"from":523,"to":528,"sanitized":613},true,"low",{"entryPoint":616,"graph":617,"unsanitizedCount":29,"severity":614},"\u003Clibrary_wp> (library_wp.php:0)",{"nodes":618,"edges":632},[619,620,621,624,628,631],{"id":523,"type":524,"label":609,"file":214,"line":432},{"id":528,"type":529,"label":596,"file":214,"line":432,"wp_function":597},{"id":572,"type":524,"label":622,"file":214,"line":623},"$_POST (x2)",1454,{"id":575,"type":529,"label":625,"file":214,"line":626,"wp_function":627},"get_var() [SQLi]",1456,"get_var",{"id":580,"type":524,"label":629,"file":214,"line":630},"$_POST",2517,{"id":582,"type":529,"label":596,"file":214,"line":483,"wp_function":597},[633,634,635],{"from":523,"to":528,"sanitized":613},{"from":572,"to":575,"sanitized":613},{"from":580,"to":582,"sanitized":613},{"entryPoint":637,"graph":638,"unsanitizedCount":515,"severity":644},"change_slug_2_old (library_wp.php:1451)",{"nodes":639,"edges":642},[640,641],{"id":523,"type":524,"label":622,"file":214,"line":623},{"id":528,"type":529,"label":625,"file":214,"line":626,"wp_function":627},[643],{"from":523,"to":528,"sanitized":534},"high",{"summary":646,"deductions":647},"The 'add-hierarchy-parent-to-post' plugin v4.0 exhibits a mixed security posture. On one hand, it demonstrates good practices by having a seemingly small attack surface with no identified AJAX handlers, REST API routes, shortcodes, or cron events that lack authentication checks. The majority of its SQL queries also utilize prepared statements, which is a positive sign. However, the presence of a dangerous `unserialize` function is a significant concern, as it can lead to critical vulnerabilities if user-supplied data is passed to it without proper sanitization.  The taint analysis revealing a high-severity flow with unsanitized paths further exacerbates this risk, indicating that data intended for deserialization might not be adequately validated.",[648,650,652,654],{"reason":649,"points":317},"Dangerous function detected (unserialize)",{"reason":651,"points":124},"Taint flow with unsanitized paths (high severity)",{"reason":653,"points":68},"Moderate output escaping (50% properly escaped)",{"reason":655,"points":169},"1 medium severity vulnerability in history","2026-03-16T20:07:58.380Z",{"wat":658,"direct":669},{"assetPaths":659,"generatorPatterns":662,"scriptPaths":663,"versionParams":665},[660,661],"\u002Fwp-content\u002Fplugins\u002Fadd-hierarchy-parent-to-post\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fadd-hierarchy-parent-to-post\u002Fadmin.css",[],[664],"\u002Fwp-content\u002Fplugins\u002Fadd-hierarchy-parent-to-post\u002Fadmin.js",[666,667,668],"add-hierarchy-parent-to-post\u002Fstyle.css?ver=","add-hierarchy-parent-to-post\u002Fadmin.js?ver=","add-hierarchy-parent-to-post\u002Fadmin.css?ver=",{"cssClasses":670,"htmlComments":671,"htmlAttributes":675,"restEndpoints":677,"jsGlobals":678,"shortcodeOutput":680},[],[672,673,674],"\u003C!-- Add Hierarchy (parent) to post -->","\u003C!-- Start URL hierarchy -->","\u003C!-- Add PARENT FIELD to POST TYPE support -->",[676],"data-plugin-path",[],[679],"ahtpp_data",[]]