[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzqU35OKaKAYOql8n6pQ7vwu2HM9iXeecUC0cN4152N8":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":13,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":46,"crawl_stats":36,"alternatives":49,"analysis":141,"fingerprints":200},"adstxt-guru-connect","ads.txt Guru Connect","1.1.2","ads.txt Guru","https:\u002F\u002Fprofiles.wordpress.org\u002Fadstxtguru\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fadstxt.guru\u002F\" title=\"ads.txt Guru\" rel=\"nofollow ugc\">ads.txt Guru\u003C\u002Fa> is a revolutionary tool to eliminate the burden of maintaining website ads.txt files! The ads.txt Guru system allows you to manage your ads.txt files online, automatically \u003Ca href=\"https:\u002F\u002Fadstxt.guru\u002Fvalidator\u002F\" title=\"ads.txt Validator\" rel=\"nofollow ugc\">validate your ads.txt files\u003C\u002Fa>, and collaborate between publisher and ad network to automate ads.txt updates.\u003C\u002Fp>\n\u003Cp>By allowing ad networks to manage their ads.txt records on your website without your intervention, the time-consuming process of manually updating your ads.txt files when ad networks make changes can now be totally eliminated.\u003C\u002Fp>\n\u003Cp>The ads.txt Guru Connect plugin enables you to connect your \u003Ca href=\"https:\u002F\u002Fadstxt.guru\u002F\" title=\"ads.txt Guru\" rel=\"nofollow ugc\">ads.txt Guru\u003C\u002Fa> account to your WordPress installation to automate your ads.txt file upload whenever you or a collaborator makes changes to your ads.txt file via the ads.txt Guru management system, this eliminates the need to connect your FTP account.\u003C\u002Fp>\n\u003Cp>Features & Benefits:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Automate your ads.txt management: No more text editors! Manage your ads.txt records for multiple domains from a simple online interface, on any device.\u003C\u002Fli>\n\u003Cli>Collaborate with ad networks: Eliminate urgent updates and lost revenue, simply allow your ad networks to contribute to your ads.txt file and their ads.txt changes are automatically synchronized with your ads.txt file.\u003C\u002Fli>\n\u003Cli>Built-in validation: Inherent validation eliminates ads.txt errors ensuring you don’t lose revenue and waste time correcting mistakes. Quickly create consistent & properly validated ads.txt files with ease.\u003C\u002Fli>\n\u003Cli>Automatic uploads: No more uploads! Connect your WordPress installation and upload your latest ads.txt file with a single click, and optionally allow automatic uploads whenever a collaborator makes a change.\u003C\u002Fli>\n\u003Cli>Version control: Made a mistake, or simply need to go back to an old version? Quickly revert to any past version of your ads.txt file at the click of a button.\u003C\u002Fli>\n\u003Cli>Protection against fraud: Ensure you only collaborate with your trusted ad networks to avoid fraudulent ads.txt records creeping in and losing you valuable revenue.\u003C\u002Fli>\n\u003Cli>Quick start: Don’t worry about creating a new ads.txt file, simply import your existing ads.txt file and be up and running in seconds.\u003C\u002Fli>\n\u003C\u002Ful>\n","ads.txt Guru is a revolutionary tool to eliminate the burden of maintaining website ads.txt files!",80,5834,0,"2025-08-15T14:10:00.000Z","6.8.5","2.8","5.0",[19,20,21,22,23],"ads-txt","adstxt","advertising","manager","validation","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fadstxt-guru-connect\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadstxt-guru-connect.1.1.2.zip",99,1,"2025-08-20 00:00:00","2026-03-15T15:16:48.613Z",[31],{"id":32,"url_slug":33,"title":34,"description":35,"plugin_slug":4,"theme_slug":36,"affected_versions":37,"patched_in_version":6,"severity":38,"cvss_score":39,"cvss_vector":40,"vuln_type":41,"published_date":28,"updated_date":42,"references":43,"days_to_patch":45},"CVE-2025-49381","adstxt-guru-connect-cross-site-request-forgery","ads.txt Guru Connect \u003C= 1.1.1 - Cross-Site Request Forgery","The ads.txt Guru Connect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site administrator into performing an action such as clicking on a link.",null,"\u003C=1.1.1","medium",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2025-08-26 13:43:47",[44],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F1ebb5d2c-2357-49a0-ac39-045cc1d4c0b3?source=api-prod",7,{"slug":47,"display_name":7,"profile_url":8,"plugin_count":27,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":45,"trust_score":26,"computed_at":48},"adstxtguru","2026-04-04T05:39:49.372Z",[50,72,88,106,125],{"slug":19,"name":51,"version":52,"author":53,"author_profile":54,"description":55,"short_description":56,"active_installs":57,"downloaded":58,"rating":59,"num_ratings":60,"last_updated":61,"tested_up_to":62,"requires_at_least":63,"requires_php":64,"tags":65,"homepage":69,"download_link":70,"security_score":71,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":29},"Ads.txt Manager","1.4.6","10up","https:\u002F\u002Fprofiles.wordpress.org\u002F10up\u002F","\u003Cp>Create, manage, and validate your ads.txt and app-ads.txt from within WordPress, like any other content asset. Requires PHP 7.4+.\u003C\u002Fp>\n\u003Ch3>What is ads.txt?\u003C\u002Fh3>\n\u003Cp>Ads.txt is an initiative by the Interactive Advertising Bureau to enable publishers to take control over who can sell their ad inventory. Through our work at 10up with various publishers, we’ve created a way to manage and validate your ads.txt file from within WordPress, eliminating the need to upload a file. The validation baked into the plugin helps avoid malformed records, which can cause issues that end up cached for up to 24 hours and can lead to a drop in ad revenue.\u003C\u002Fp>\n\u003Ch3>Technical Notes\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Requires PHP 7.4+.\u003C\u002Fli>\n\u003Cli>Ad blockers may break syntax highlighting and pre-save error checking on the edit screen.\u003C\u002Fli>\n\u003Cli>Rewrites need to be enabled. Without rewrites, WordPress cannot know to supply \u003Ccode>\u002Fads.txt\u003C\u002Fcode> when requested.\u003C\u002Fli>\n\u003Cli>Your site URL must not contain a path (e.g. \u003Ccode>https:\u002F\u002Fexample.com\u002Fsite\u002F\u003C\u002Fcode> or path-based multisite installs). While the plugin will appear to function in the admin, it will not display the contents at \u003Ccode>https:\u002F\u002Fexample.com\u002Fsite\u002Fads.txt\u003C\u002Fcode>. This is because the plugin follows the IAB spec, which requires that the ads.txt file be located at the root of a domain or subdomain.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>What about ads.cert?\u003C\u002Fh3>\n\u003Cp>We’re closely monitoring continued developments in the ad fraud space, and see this plugin as not only a way to create and manage your ads.txt file but also be prepared for future changes and upgrades to specifications. Ads.cert is still in the extremely early stages so we don’t see any immediate concerns with implementing ads.txt.\u003C\u002Fp>\n\u003Ch3>Can I use this with multisite?\u003C\u002Fh3>\n\u003Cp>Yes! However, if you are using a subfolder installation it will only work for the main site. This is because you can only have one ads.txt for a given domain or subdomain per the \u003Ca href=\"https:\u002F\u002Fiabtechlab.com\u002Fads-txt\u002F\" rel=\"nofollow ugc\">ads.txt spec\u003C\u002Fa>.  Our recommendation is to only activate Ads.txt Manager per-site.\u003C\u002Fp>\n","Create, manage, and validate your ads.txt and app-ads.txt from within WordPress, like any other content asset.",100000,1903612,92,14,"2026-01-04T21:09:00.000Z","6.9.4","6.6","7.4",[66,67,19,21,68],"ad-manager","ads","app-ads-txt","https:\u002F\u002Fgithub.com\u002F10up\u002Fads-txt","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fads-txt.1.4.6.zip",100,{"slug":73,"name":51,"version":74,"author":75,"author_profile":76,"description":77,"short_description":78,"active_installs":79,"downloaded":80,"rating":81,"num_ratings":82,"last_updated":83,"tested_up_to":15,"requires_at_least":84,"requires_php":85,"tags":86,"homepage":85,"download_link":87,"security_score":71,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":29},"ads-txt-manager","1.2.0","ezoic","https:\u002F\u002Fprofiles.wordpress.org\u002Fezoic\u002F","\u003Cp>Ads.txt Manager is a free way to manage, update, and easily maintain your ads.txt file.\u003Cbr \u002F>\nSave time by eliminating manual file updates and authorize sellers to ensure you have the most up to date file possible.\u003C\u002Fp>\n\u003Cp>Free, Simple, & Easy\u003Cbr \u002F>\nAds.Txt Manager is a free tool designed to help sites easily manage their ads.txt files by providing step-by-step ads.txt setup, management, and validation (and it will always be free).\u003C\u002Fp>\n\u003Cp>Easily authorize sellers, update files, and validate your ads.txt before publishing. Save time and ensure that Ads.txt implementation isn’t causing you to leave money on the table.\u003C\u002Fp>\n\u003Cp>Visit \u003Ca href=\"https:\u002F\u002Fadstxtmanager.com\u002F\" rel=\"nofollow ugc\">adstxtmanager.com\u003C\u002Fa> to create your account now!\u003C\u002Fp>\n","Ads.txt Manager is a plugin to help WordPress sites easily take advantage of the Ads.txt Manager service.",4000,85921,70,2,"2025-05-09T19:38:00.000Z","4.6","",[66,67,19,21],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fads-txt-manager.zip",{"slug":68,"name":89,"version":90,"author":91,"author_profile":92,"description":93,"short_description":94,"active_installs":95,"downloaded":96,"rating":97,"num_ratings":98,"last_updated":99,"tested_up_to":62,"requires_at_least":100,"requires_php":101,"tags":102,"homepage":85,"download_link":104,"security_score":26,"vuln_count":27,"unpatched_count":13,"last_vuln_date":105,"fetched_at":29},"Ads.txt & App-ads.txt Manager for WordPress","1.1.9","Pagup","https:\u002F\u002Fprofiles.wordpress.org\u002Fpagup\u002F","\u003Cp>Ad partners are frequently adding new demand sources to their Ads.txt & App-ads.txt lists of authorized sellers.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Create your Ads.txt & App-Ads.txt files with the same tool (all-in-one)\u003C\u002Fli>\n\u003Cli>Add manual entries (copy-paste) for « ready-to-use » code snippets. \u003C\u002Fli>\n\u003Cli>Edit & manage your files on demand\u003C\u002Fli>\n\u003Cli>View WordPress Ads.txt & App-ads.txt files before\u002Fafter publishing\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Note :\u003C\u002Fstrong> Google Ad Manager and AdMob, Google’s mobile ad network, now support app-ads.txt, the anti-ad fraud protocol for app publishers. \u003Cstrong>Why we should care?\u003C\u002Fstrong> Google said in April 2019 that its DSP Display & Video 360 would stop buying unauthorized in-app inventory starting in August 2019 (same with Centro). Given its market leadership position, Google’s support for app-ads.txt from both the buy and sell sides will help propel adoption of the standard by app publishers.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>How does WordPress Ads.txt & App-ads.txt Manager work\u003C\u002Fstrong> to implement app-ads.txt:\u003C\u002Fp>\n\u003Cp>Provide a developer website in your app store listings. Ensure that the proper developer website URL is accessible in the developer website section of the app store (advertising platforms will use this website to verify ads.txt or app-ads.txt files).\u003C\u002Fp>\n\u003Cp>In WordPress Ads.txt & App-ads.txt Manager, go to setting page.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Ad Source Domain\u003Cbr \u002F>\n— The canonical domain name of the SSP, Exchange, system that bidders connect to (they publishes a document detailing what domain name to use).\u003C\u002Fli>\n\u003Cli>Publisher ID\u003Cbr \u002F>\n— This must contain the same value used in transactions (i.e. OpenRTB bid requests) in the field specified by the SSP\u002Fexchange (For OpenRTB = publisher ID | For OpenDirect = publisher’s organization ID).\u003C\u002Fli>\n\u003Cli>Type of Relationship: (Direct, reseller)\u003Cbr \u002F>\n— Your direct demand partners should be listed as “direct.” If your partners are using third-party resellers to sell your inventory, such providers should be listed as “reseller.” In any case, you should not add any provider to your app-ads.txt file unless you or your partner have a direct relationship with them.\u003C\u002Fli>\n\u003Cli>Ad Source ID\u003Cbr \u002F>\n— An ID that uniquely identifies the advertising system within a certification authority. \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Do it for all your authorized digital sellers or resellers of your ad inventory.\u003C\u002Fp>\n\u003Cp>Click « Save changes » and WordPress Ads.txt & App-ads.txt Manager plugin will create a virtual .txt file in the root of your website; for example, www.mysite.com\u002Fads.txt OR www.mysite.com\u002Fapp-ads.txt. You can edit the content whenever you need.\u003C\u002Fp>\n\u003Cp>Make sure to clear your cache\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Note 1 :\u003C\u002Fstrong> Use of app-ads.txt is not mandatory, but is highly recommended, especially if you are concerned that others may be spoofing your app.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Note 2 :\u003C\u002Fstrong> It can take up to 24 hours to crawl and verify your app-ads.txt files. Please wait at least 24 hours for the app-ads.txt status to update.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Note 3 :\u003C\u002Fstrong>  Since ads.txt file is supposed to be in the root directory of a domain name, this plugin currently only works for root level domain like example.com. It does not work for WordPress installed in subdomain, subdirectory, or a single site in a multi-site network.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>What’s app-ads.txt?\u003C\u002Fstrong>\u003Cbr \u002F>\nIn June 2017, the \u003Ca href=\"https:\u002F\u002Fiabtechlab.com\u002Fads-txt\u002F\" rel=\"nofollow ugc\">IAB\u003C\u002Fa> (The Interactive Advertising Bureau Tech Lab) launched ads.txt, a file enabling web publishers to designate authorized digital sellers of their ad inventory. Ads.txt helped the industry distinguish real supply sources from fake ones, and after its immediate success and adoption, the next logical step was to extend the reach of ads.txt into the mobile app ecosystem. App-ads.txt is the mobile in-app equivalent of this specification, which mobile publishers can implement.\u003C\u002Fp>\n\u003Cp>The app-ads.txt file is the version of ads.txt for mobile in-app and \u003Ca href=\"https:\u002F\u002Fsmartyads.com\u002Fblog\u002Fwhat-is-ott-advertising\u002F\" rel=\"nofollow ugc\">OTT advertising\u003C\u002Fa>, to combat bad actors that disguise themselves as another company’s app in order to siphon the money that advertisers are spending on mobile and OTT advertising. App-ads.txt files are formatted the same as ads.txt files (\u003Ca href=\"https:\u002F\u002Fiabtechlab.com\u002Fwp-content\u002Fuploads\u002F2019\u002F03\u002FFAQ-for-ads.txt-and-app-ads.txt-UPDATED-March-4-2019.pdf\" rel=\"nofollow ugc\">view IAB FAQ for ads.txt and app-ads.txt\u003C\u002Fa>).\u003C\u002Fp>\n\u003Cp>Thanks to app-ads.txt file, Mobile and OTT app publishers can list the ad tech vendors that are authorized to sell or resell their ad inventory, and programmatic ad buyers can check these lists to make sure that a company claiming to offer an app’s inventory is actually able to sell the app’s inventory.\u003C\u002Fp>\n\u003Cp>This file opens the door for a new level of transparency.\u003C\u002Fp>\n","App-ads.txt & Ads.txt manager allows you to create, manage & publish your app-ads.txt & ads.txt file from your WordPress dashboard.",2000,69637,98,46,"2026-01-16T23:49:00.000Z","4.1","5.6",[67,19,20,21,103],"app-adstxt","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fapp-ads-txt.zip","2024-10-24 00:00:00",{"slug":107,"name":108,"version":109,"author":110,"author_profile":111,"description":112,"short_description":113,"active_installs":114,"downloaded":115,"rating":71,"num_ratings":27,"last_updated":116,"tested_up_to":117,"requires_at_least":118,"requires_php":119,"tags":120,"homepage":85,"download_link":123,"security_score":124,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":29},"purpleads-ads-txt-manager","PurpleAds Ads.txt Manager","1.0.1","PurpleAds Network","https:\u002F\u002Fprofiles.wordpress.org\u002Fpurpleads\u002F","\u003Ch4>Simplify Your Ads.txt Management with PurpleAds\u003C\u002Fh4>\n\u003Cp>PurpleAds Ads.txt Manager is a powerful WordPress plugin that streamlines the process of managing your Ads.txt file.\u003Cbr \u002F>\nOur tool is designed to help publishers effortlessly manage their ad network relationships, ensuring that authorized sellers are correctly identified and verified by advertisers.\u003Cbr \u002F>\nWith PurpleAds Ads.txt Manager, managing your Ads.txt file has never been easier.\u003C\u002Fp>\n\u003Ch4>A Transparent View of Your Advertising Relationships\u003C\u002Fh4>\n\u003Cp>With PurpleAds Ads.txt Manager, you can easily create and manage your Ads.txt file directly from your WordPress dashboard.\u003Cbr \u002F>\nOur intuitive interface allows you to quickly add, edit, and delete ad network information, ensuring that your Ads.txt file is always up-to-date and accurate.\u003Cbr \u002F>\nThe plugin provides a clear and transparent view of your advertising relationships, giving you full control over your ad network partnerships.\u003C\u002Fp>\n\u003Ch4>Compliant with IAB’s Ads.txt Standard\u003C\u002Fh4>\n\u003Cp>PurpleAds Ads.txt Manager is fully compliant with the IAB’s Ads.txt standard, which means that your ad network information will be displayed correctly and will meet industry standards. This ensures that your advertising relationships are fully transparent and compliant, giving you peace of mind and enabling you to focus on growing your business.\u003C\u002Fp>\n\u003Ch3>Why Use PurpleAds Ads.txt Manager?\u003C\u002Fh3>\n\u003Cp>Simplify the process of managing your Ads.txt file.\u003Cbr \u002F>\nEnsure that authorized sellers are correctly identified and verified by advertisers.\u003Cbr \u002F>\nEasily add, edit, and delete ad network information.\u003Cbr \u002F>\nProvides a clear and transparent view of your advertising relationships.\u003Cbr \u002F>\nFully compliant with the IAB’s Ads.txt standard.\u003C\u002Fp>\n\u003Ch3>Easy Installation\u003C\u002Fh3>\n\u003Cp>Installing the PurpleAds Ads.txt Manager plugin is a breeze:\u003C\u002Fp>\n\u003Cp>Install the plugin through the WordPress plugins screen or upload the plugin files to the \u002Fwp-content\u002Fplugins\u002F directory.\u003Cbr \u002F>\nActivate the plugin through the ‘Plugins’ screen in WordPress.\u003Cbr \u002F>\nGo to the PurpleAds Ads.txt Manager page in your WordPress dashboard.\u003Cbr \u002F>\nAdd your ad network information using the simple form provided.\u003Cbr \u002F>\nClick ‘Save’ to update your Ads.txt file.\u003C\u002Fp>\n","Simplify Your Ads.txt Management with PurpleAds",90,3588,"2023-08-15T08:33:00.000Z","6.2.9","3.1.0","5.2",[121,19,20,21,122],"ad-network","publishers","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpurpleads-ads-txt-manager.zip",85,{"slug":126,"name":127,"version":128,"author":129,"author_profile":130,"description":131,"short_description":132,"active_installs":133,"downloaded":134,"rating":13,"num_ratings":13,"last_updated":135,"tested_up_to":117,"requires_at_least":136,"requires_php":85,"tags":137,"homepage":139,"download_link":140,"security_score":124,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":29},"videoo-manager","Videoo.tv Manager","1.0.0","Digital Green SL","https:\u002F\u002Fprofiles.wordpress.org\u002Fdigitalgreensl\u002F","\u003Cp>Manage your ads.txt file. Includes automatic update of videoo.tv network lines. Insert videoo.tv tag code. Requires PHP 7.4+ and WordPress 5.7+.\u003C\u002Fp>\n\u003Ch3>ads.txt manager\u003C\u002Fh3>\n\u003Cp>Manage your ads.txt file in a simple and efficient way. Ads.txt is an IAB Tech Lab initiative that helps ensure that your digital ad inventory is only sold through sellers who you’ve identified as authorized.\u003Cbr \u002F>\nThis plugin implements:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Classification of lines into groups to simplify their management.\u003C\u002Fli>\n\u003Cli>Duplicate line detection.\u003C\u002Fli>\n\u003Cli>Line validation.\u003C\u002Fli>\n\u003Cli>Bulk insert tool.\u003C\u002Fli>\n\u003Cli>Automatic update of videoo.tv network lines.\u003C\u002Fli>\n\u003Cli>Multisite support: if you are using a subfolder installation, you must activate ads.txt manager in the main site: \u003Ca href=\"https:\u002F\u002Fiabtechlab.com\u002Fads-txt\u002F\" title=\"Ads.txt spec\" rel=\"nofollow ugc\">ads.txt spec\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>videoo.tv tag manager\u003C\u002Fh3>\n\u003Cp>Tool for inserting the videoo.tv tag.\u003C\u002Fp>\n\u003Col>\n\u003Cli>Insert your tag code (you need first a valid tag code).\u003C\u002Fli>\n\u003Cli>Select content’s paragraph to be displayed.\u003C\u002Fli>\n\u003Cli>Activate and start generating income.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>1. videoo.tv tag manager\u003C\u002Fh3>\n\u003C\u002Fp>\n\u003Ch3>2. Ads.txt manager\u003C\u002Fh3>\n\u003C\u002Fp>\n\u003Ch3>1.0.0\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Implements ads.txt manager.\u003C\u002Fli>\n\u003Cli>Implements videoo.tv tag manager.\u003C\u002Fli>\n\u003C\u002Ful>\n","Manage your ads.txt file. Includes automatic update of videoo.tv network lines. Insert videoo.tv tag code. Requires PHP 7.4+ and WordPress 5.7+.",10,773,"2023-06-01T14:48:00.000Z","5.7",[66,67,19,21,138],"display-ads","https:\u002F\u002Fvideoo.tv\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvideoo-manager.1.0.0.zip",{"attackSurface":142,"codeSignals":161,"taintFlows":187,"riskAssessment":188,"analyzedAt":199},{"hooks":143,"ajaxHandlers":157,"restRoutes":158,"shortcodes":159,"cronEvents":160,"entryPointCount":13,"unprotectedCount":13},[144,150,153],{"type":145,"name":146,"callback":147,"file":148,"line":149},"action","init","atg_connect_init","adstxt_guru_connect.php",39,{"type":145,"name":146,"callback":151,"file":148,"line":152},"atg_connect_wp_loaded",45,{"type":145,"name":154,"callback":155,"file":148,"line":156},"admin_menu","atg_connect_admin_menu",59,[],[],[],[],{"dangerousFunctions":162,"sqlUsage":167,"outputEscaping":169,"fileOperations":45,"externalRequests":185,"nonceChecks":185,"capabilityChecks":27,"bundledLibraries":186},[163],{"fn":164,"file":148,"line":165,"context":166},"unserialize",673,"$option = unserialize(base64_decode($option));",{"prepared":13,"raw":13,"locations":168},[],{"escaped":27,"rawEcho":170,"locations":171},6,[172,175,177,179,181,183],{"file":148,"line":173,"context":174},117,"raw output",{"file":148,"line":176,"context":174},310,{"file":148,"line":178,"context":174},349,{"file":148,"line":180,"context":174},365,{"file":148,"line":182,"context":174},392,{"file":148,"line":184,"context":174},639,3,[],[],{"summary":189,"deductions":190},"The 'adstxt-guru-connect' v1.1.2 plugin exhibits a mixed security posture. On one hand, it demonstrates good practices by utilizing prepared statements for all SQL queries and performing nonce checks. There are no identified taint flows of critical or high severity, and the attack surface appears to be minimal with no apparent unprotected entry points. This suggests a generally cautious approach to handling user-supplied data and securing critical operations.\n\nHowever, significant concerns arise from the use of the `unserialize` function, which is inherently dangerous if not handled with extreme care, as it can lead to Remote Code Execution vulnerabilities if untrusted data is serialized and then unserialized. Furthermore, the output escaping is alarmingly low at only 14%, indicating a high risk of Cross-Site Scripting (XSS) vulnerabilities. The plugin's history of a known CVE, although currently patched, suggests a past vulnerability that might have been related to Cross-Site Request Forgery (CSRF), and the medium severity of this historical vulnerability warrants attention.\n\nIn conclusion, while the plugin has strengths in its SQL handling and nonce checks, the presence of `unserialize` and critically low output escaping represent substantial security weaknesses. The historical CVE, even if patched, serves as a reminder of potential past flaws. The overall risk is moderate to high due to the potential for severe vulnerabilities like RCE and XSS.",[191,193,196],{"reason":192,"points":133},"Dangerous function: unserialize used",{"reason":194,"points":195},"Low output escaping (14%)",8,{"reason":197,"points":198},"Medium severity vulnerability in history",5,"2026-03-16T21:30:00.758Z",{"wat":201,"direct":208},{"assetPaths":202,"generatorPatterns":204,"scriptPaths":205,"versionParams":206},[203],"\u002Fwp-content\u002Fplugins\u002Fadstxt-guru-connect\u002Fassets\u002Fcss\u002Fadstxt-guru-connect.css",[],[],[207],"adstxt-guru-connect\u002Fassets\u002Fcss\u002Fadstxt-guru-connect.css?ver=",{"cssClasses":209,"htmlComments":211,"htmlAttributes":213,"restEndpoints":216,"jsGlobals":217,"shortcodeOutput":219},[210],"adstxt-guru-connect-wrap",[212],"\u003C!-- ATG-CUSTOM -->",[214,215],"data-atg-connect-key","data-atg-connect-secret",[],[218],"ATG_CONNECT_OBJ",[]]