[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqDf0HZVbDc57GYUOzZJixOVqW5MOIGDb8_iLEM0nMUk":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":37,"analysis":125,"fingerprints":169},"add-wpgraphql-send-mail","WPGraphQL Send Mail","1.2.0","ash_hitch","https:\u002F\u002Fprofiles.wordpress.org\u002Fash_hitch\u002F","\u003Cp>This plugin enables to send email via WPGraphQL.\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cpre>\u003Ccode>`\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>mutation SEND_EMAIL {\u003Cbr \u002F>\n  sendEmail(\u003Cbr \u002F>\n    input: {\u003Cbr \u002F>\n      to: “test@test.com”\u003Cbr \u002F>\n      from: “test@test.com”\u003Cbr \u002F>\n      subject: “test email”\u003Cbr \u002F>\n      body: “test email”\u003Cbr \u002F>\n      clientMutationId: “test”\u003Cbr \u002F>\n    }\u003Cbr \u002F>\n  ) {\u003Cbr \u002F>\n    origin\u003Cbr \u002F>\n    sent\u003Cbr \u002F>\n    message\u003Cbr \u002F>\n  }\u003Cbr \u002F>\n}\u003C\u002Fp>\n\u003Cpre>\u003Ccode>`\n\u003C\u002Fcode>\u003C\u002Fpre>\n","This plugin enables to send email via WPGraphQL.",500,3351,0,"2021-01-27T08:15:00.000Z","5.6.17","5.0","7.0",[19,20,21,22,23],"decoupled-wordpress","graphql","headless-wordpress","mail","wpgraphql","https:\u002F\u002Fgithub.com\u002Fashhitch\u002Fwp-graphql-send-mail","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadd-wpgraphql-send-mail.1.2.0.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":33,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},3,9800,90,30,87,"2026-04-04T01:16:25.285Z",[38,53,69,86,110],{"slug":39,"name":40,"version":41,"author":7,"author_profile":8,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":13,"num_ratings":13,"last_updated":46,"tested_up_to":47,"requires_at_least":16,"requires_php":48,"tags":49,"homepage":51,"download_link":52,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"add-wpgraphql-redirection","WPGraphQL Redirection Addon","0.0.3","\u003Cp>Add WPGraphQl support for redirects made using the popular \u003Ca href=\"https:\u002F\u002Fen-gb.wordpress.org\u002Fplugins\u002Fredirection\u002F\" rel=\"nofollow ugc\">Redirection Plugin\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Example Query\u003C\u002Fh3>\n\u003Cpre>\u003Ccode>redirection {\n  redirects {\n    groupId\n    groupName\n    origin\n    target\n    type\n    matchType\n  }\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Add WPGraphQl support for redirects made using the popular Redirection Plugin",300,11331,"2021-04-20T11:37:00.000Z","5.7.15","7.1",[19,20,21,50,23],"redirection","https:\u002F\u002Fgithub.com\u002Fashhitch\u002Fwp-graphql-redirection","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadd-wpgraphql-redirection.0.0.3.zip",{"slug":54,"name":55,"version":56,"author":57,"author_profile":58,"description":59,"short_description":60,"active_installs":61,"downloaded":62,"rating":13,"num_ratings":13,"last_updated":63,"tested_up_to":64,"requires_at_least":16,"requires_php":48,"tags":65,"homepage":67,"download_link":68,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"generate-wpgraphql-image-dataurl","Generate WpGraphql Image DataUrl","1.0.2","dipankarmaikap","https:\u002F\u002Fprofiles.wordpress.org\u002Fdipankarmaikap\u002F","\u003Cp>This plugin Generates DataUrl of MediaItem in WPGraphQL.\u003C\u002Fp>\n\u003Cp>This is an extension to the awsome WPGraphQL plugin (https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql) that Generate DataUrl of MediaItems.\u003C\u002Fp>\n\u003Cp>If you are working with Headless WordPress and NextJS you can notice that NextJS don’t offer BlurUp image like GatsbyJS by default. You have to pass a base64 dataUrl in to make it work.\u003Cbr \u002F>\nOr you will see a blank space until the image loads. This plugin adds a dataUrl on each media item so you can use it as a placeholder until the image fully loads and NextJS will also create the fade\u002FBlurUp Effect like in GatsbyJS.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Returning DataUrl for:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>MediaItem\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin Generates DataUrl of MediaItem in WPGraphQL.",50,1981,"2022-02-01T18:39:00.000Z","5.9.13",[19,20,21,66,23],"jamstack","https:\u002F\u002Fgithub.com\u002Fdipankarmaikap\u002Fwp-graphql-image-dataurl","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgenerate-wpgraphql-image-dataurl.1.0.2.zip",{"slug":70,"name":71,"version":72,"author":7,"author_profile":8,"description":73,"short_description":74,"active_installs":75,"downloaded":76,"rating":77,"num_ratings":78,"last_updated":79,"tested_up_to":80,"requires_at_least":16,"requires_php":48,"tags":81,"homepage":84,"download_link":85,"security_score":77,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"add-wpgraphql-seo","WPGraphQL Yoast SEO Addon","v5.0.2","\u003Cp>This plugin enables Yoast SEO Support for WPGraphQL\u003C\u002Fp>\n\u003Cp>This is an extension to the WPGraphQL plugin (https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql) that returns Yoast SEO data.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Currently returning SEO data for:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Pages\u003C\u002Fli>\n\u003Cli>Posts\u003C\u002Fli>\n\u003Cli>Custom post types\u003C\u002Fli>\n\u003Cli>Products (WooCommerce)\u003C\u002Fli>\n\u003Cli>Categories\u003C\u002Fli>\n\u003Cli>Custom taxonomies\u003C\u002Fli>\n\u003Cli>WooCommerce Products\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Yoast Configuration\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Webmaster verification\u003C\u002Fli>\n\u003Cli>Social profiles\u003C\u002Fli>\n\u003Cli>Schemas\u003C\u002Fli>\n\u003Cli>Breadcrumbs\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cblockquote>\n\u003Cp>Please Note: Yoast and WPGraphQL and their logos are copyright to their respective owners.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin enables Yoast SEO Support for WPGraphQL.",9000,159968,100,2,"2026-02-04T21:54:00.000Z","6.9.4",[20,21,82,23,83],"seo","yoast","https:\u002F\u002Fgithub.com\u002Fashhitch\u002Fwp-graphql-yoast-seo","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadd-wpgraphql-seo.5.0.2.zip",{"slug":87,"name":88,"version":89,"author":90,"author_profile":91,"description":92,"short_description":93,"active_installs":94,"downloaded":95,"rating":77,"num_ratings":96,"last_updated":97,"tested_up_to":80,"requires_at_least":98,"requires_php":99,"tags":100,"homepage":105,"download_link":106,"security_score":107,"vuln_count":108,"unpatched_count":13,"last_vuln_date":109,"fetched_at":28},"wpgraphql-smart-cache","WPGraphQL Smart Cache","2.0.1","Jason Bahl","https:\u002F\u002Fprofiles.wordpress.org\u002Fjasonbahl\u002F","\u003Cp>Do you want your API data \u003Cem>fast\u003C\u002Fem> or \u003Cem>accurate\u003C\u002Fem>? With WPGraphQL Smart Cache, you can have both.\u003C\u002Fp>\n\u003Cp>WPGraphQL Smart Cache is a free, open-source WordPress plugin that provides support for caching and cache invalidation of WPGraphQL Queries.\u003C\u002Fp>\n\u003Cp>To get the most out of this plugin, we recommend using GET requests with Network Caching, which requires your WordPress install to be on a \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql-smart-cache\u002Fblob\u002Fmain\u002Fdocs\u002Fnetwork-cache.md#supported-hosts\" rel=\"nofollow ugc\">supported host\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cem>BREAKING CHANGES:\u003C\u002Fem> We may make breaking changes in the future to improve functionality and experience. If we do, we will use semver to do so. Pay attention to release notes and upgrade notices before updating.\u003C\u002Fp>\n\u003Ch3>Video Overview\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fyoutu.be\u002Ft_y6q02q7K4\" rel=\"nofollow ugc\">\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Docs\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql-smart-cache#overview\" rel=\"nofollow ugc\">Overview\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql-smart-cache#-quick-start\" rel=\"nofollow ugc\">Quick Start\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Features\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql-smart-cache\u002Fblob\u002Fmain\u002Fdocs\u002Fnetwork-cache.md\" rel=\"nofollow ugc\">Network Cache\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql-smart-cache\u002Fblob\u002Fmain\u002Fdocs\u002Fobject-cache.md\" rel=\"nofollow ugc\">Object Cache\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql-smart-cache\u002Fblob\u002Fmain\u002Fdocs\u002Fpersisted-queries.md\" rel=\"nofollow ugc\">Persisted Queries\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql-smart-cache\u002Fblob\u002Fmain\u002Fdocs\u002Fcache-invalidation.md\" rel=\"nofollow ugc\">Cache Invalidation\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql-smart-cache\u002Fblob\u002Fmain\u002Fdocs\u002Fextending.md\" rel=\"nofollow ugc\">Extending \u002F Customizing Functionality\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql-smart-cache#faq--troubleshooting\" rel=\"nofollow ugc\">FAQ and Troubleshooting\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql-smart-cache#known-issues\" rel=\"nofollow ugc\">Known Issues\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql-smart-cache#providing-feedback\" rel=\"nofollow ugc\">Providing Feedback\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Upgrading\u003C\u002Fh4>\n\u003Cp>It is recommended that anytime you want to update WPGraphQL Smart Cache that you get familiar with what’s changed in the release.\u003C\u002Fp>\n\u003Cp>WPGraphQL Smart Cache publishes \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql-smart-cache\u002Freleases\" rel=\"nofollow ugc\">release notes on GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>WPGraphQL Smart Cache will follow Semver versioning.\u003C\u002Fp>\n\u003Cp>The summary of Semver versioning is as follows:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cem>MAJOR\u003C\u002Fem> version when you make incompatible API changes,\u003C\u002Fli>\n\u003Cli>\u003Cem>MINOR\u003C\u002Fem> version when you add functionality in a backwards compatible manner, and\u003C\u002Fli>\n\u003Cli>\u003Cem>PATCH\u003C\u002Fem> version when you make backwards compatible bug fixes.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can read more about the details of Semver at \u003Ca href=\"https:\u002F\u002Fsemver.org\" rel=\"nofollow ugc\">semver.org\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Privacy Policy\u003C\u002Fh3>\n\u003Cp>WPGraphQL Smart Cache uses \u003Ca href=\"https:\u002F\u002Fappsero.com\" rel=\"nofollow ugc\">Appsero\u003C\u002Fa> SDK to collect some telemetry data upon user’s confirmation. This helps us to troubleshoot problems faster & make product improvements.\u003C\u002Fp>\n\u003Cp>Appsero SDK \u003Cstrong>does not gather any data by default.\u003C\u002Fstrong> The SDK only starts gathering basic telemetry data \u003Cstrong>when a user allows it via the admin notice\u003C\u002Fstrong>. We collect the data to ensure a great user experience for all our users.\u003C\u002Fp>\n\u003Cp>Integrating Appsero SDK \u003Cstrong>DOES NOT IMMEDIATELY\u003C\u002Fstrong> start gathering data, \u003Cstrong>without confirmation from users in any case.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Learn more about how \u003Ca href=\"https:\u002F\u002Fappsero.com\u002Fprivacy-policy\u002F\" rel=\"nofollow ugc\">Appsero collects and uses this data\u003C\u002Fa>.\u003C\u002Fp>\n","WPGraphQL Smart Cache is a WordPress plugin that provides fast, accurate API responses by intelligently caching and invalidating WPGraphQL queries.",6000,70323,4,"2025-12-12T01:06:00.000Z","6.0","7.4",[101,102,103,104,23],"api","cache","performance","persisted-queries","https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql-smart-cache","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpgraphql-smart-cache.2.0.1.zip",99,1,"2025-12-12 00:00:00",{"slug":111,"name":112,"version":113,"author":112,"author_profile":114,"description":115,"short_description":116,"active_installs":117,"downloaded":118,"rating":77,"num_ratings":108,"last_updated":119,"tested_up_to":120,"requires_at_least":16,"requires_php":48,"tags":121,"homepage":123,"download_link":124,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"stellate","Stellate","0.1.8","https:\u002F\u002Fprofiles.wordpress.org\u002Fstellatehq\u002F","\u003Ch3>Stellate plugin for WordPress\u003C\u002Fh3>\n\u003Cp>This plugin is an addon for the popular \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql\" rel=\"nofollow ugc\">WPGraphQL\u003C\u002Fa> plugin. It helps set up \u003Ca href=\"https:\u002F\u002Fstellate.co\" rel=\"nofollow ugc\">Stellate\u003C\u002Fa> in front of a WordPress GraphQL API by automatically invalidating the cache when content is updated in WordPress. It works no matter the source of the update, whether that is via the WordPress admin panel, a GraphQL mutation, the REST API, or another method. It also supports custom post types and custom taxonomies that are exposed over the GraphQL API.\u003C\u002Fp>\n\u003Cp>This plugin only works when you already have the WPGraphQL plugin installed. After adding this plugin, you’ll see a new menu item named “Caching” in the “GraphQL” section of the dashboard sidebar. Here you can:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Add the name of your Stellate service and a purging token (without that, the plugin will do nothing).\u003C\u002Fli>\n\u003Cli>Toggle between soft and hard purging. (Soft purging means the cache will continue serving stale data even after the purge while Stellate updates the data in the background.)\u003C\u002Fli>\n\u003Cli>Purge the entire Stellate cache right from the WordPress dashboard.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For more information, check out our \u003Ca href=\"https:\u002F\u002Fstellate.co\u002Fdocs\u002Fintegrations\u002Fwordpress-plugin\" rel=\"nofollow ugc\">documentation\u003C\u002Fa>.\u003C\u002Fp>\n","Stellate plugin for WordPress",80,4286,"2024-03-07T10:29:00.000Z","6.4.0",[101,122,20,111,23],"caching","https:\u002F\u002Fgithub.com\u002FStellateHQ\u002Fwp-stellate","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstellate.0.1.8.zip",{"attackSurface":126,"codeSignals":146,"taintFlows":156,"riskAssessment":157,"analyzedAt":168},{"hooks":127,"ajaxHandlers":142,"restRoutes":143,"shortcodes":144,"cronEvents":145,"entryPointCount":13,"unprotectedCount":13},[128,134,138],{"type":129,"name":130,"callback":131,"file":132,"line":133},"action","admin_menu","wpgraphql_send_mail_add_admin_menu","wp-graphql-send-mail.php",18,{"type":129,"name":135,"callback":136,"file":132,"line":137},"admin_init","wpgraphql_send_mail_settings_init",19,{"type":129,"name":139,"callback":140,"file":132,"line":141},"graphql_register_types","closure",125,[],[],[],[],{"dangerousFunctions":147,"sqlUsage":148,"outputEscaping":150,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":155},[],{"prepared":13,"raw":13,"locations":149},[],{"escaped":13,"rawEcho":108,"locations":151},[152],{"file":132,"line":153,"context":154},103,"raw output",[],[],{"summary":158,"deductions":159},"The \"add-wpgraphql-send-mail\" plugin v1.2.0 exhibits a generally positive security posture based on the provided static analysis. The absence of known vulnerabilities in its history and the lack of dangerous functions are strong indicators of good development practices. Furthermore, the fact that all SQL queries utilize prepared statements is commendable, mitigating common SQL injection risks.\n\nHowever, a significant concern arises from the output escaping analysis. With one total output and zero percent properly escaped, this presents a clear risk of Cross-Site Scripting (XSS) vulnerabilities. Any dynamic data displayed to users without proper sanitization could be exploited by attackers. The plugin also lacks nonce and capability checks on its entry points, which, while currently few, could become a weakness if the attack surface expands in future versions. The current lack of taint flows and critical signals is encouraging, but the unescaped output remains a critical oversight.\n\nIn conclusion, while the plugin demonstrates a solid foundation in avoiding common vulnerabilities like SQL injection and has a clean vulnerability history, the glaring issue with output escaping significantly detracts from its security. Developers should prioritize addressing this XSS risk. The absence of comprehensive checks on entry points also warrants attention to prevent potential privilege escalation or unauthorized access if the plugin's functionality grows.",[160,163,166],{"reason":161,"points":162},"Unescaped output detected",8,{"reason":164,"points":165},"Missing capability checks on entry points",5,{"reason":167,"points":165},"Missing nonce checks on entry points","2026-03-16T19:36:46.323Z",{"wat":170,"direct":175},{"assetPaths":171,"generatorPatterns":172,"scriptPaths":173,"versionParams":174},[],[],[],[],{"cssClasses":176,"htmlComments":177,"htmlAttributes":178,"restEndpoints":179,"jsGlobals":181,"shortcodeOutput":182},[],[],[],[180],"\u002Fwp-json\u002Fgraphql-send-mail\u002Fv1",[],[]]