[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fD_VEAG1O-0CRIaQU64Q5N-kIo09VoxOfDtkG4uDKazU":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":22,"download_link":23,"security_score":24,"vuln_count":25,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":45,"crawl_stats":35,"alternatives":48,"analysis":89,"fingerprints":136},"animated-typing-effect","Typing Effect","1.3.7","93digital","https:\u002F\u002Fprofiles.wordpress.org\u002F93digital\u002F","\u003Cp>\u003Cstrong>This plugin is no longer be supported from v1.3.6.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Typing Effect allows you to generate a shortcode that will ‘type out’ words on to a page or post, in a widget or directly in a theme or template file. The plugin is based on the Typed.js typing animation script by Matt Boldt.\u003C\u002Fp>\n\u003Cp>Simply add your words or sentences, click ‘Generate Shortcode’ and copy and paste the shortcode into a page, post or text widget.\u003C\u002Fp>\n\u003Cp>You can also configure settings such as how quickly the typing effect takes place, delays before starting or backspacing, set the animation to loop repeatedly or randomise the order your words or sentences are typed out and deleted.\u003C\u002Fp>\n\u003Cp>To view a demo of the original animation \u003Ca href=\"http:\u002F\u002Fwww.mattboldt.com\u002Fdemos\u002Ftyped-js\u002F\" rel=\"nofollow ugc\">click here\u003C\u002Fa>\u003C\u002Fp>\n","Create an animated typing effect that allows words to be 'typed out' on to a post or page.",10000,173522,86,28,"2023-10-26T15:06:00.000Z","6.3.8","3.5","",[4,20,21],"typewriter-effect","typing-effect-plugin","http:\u002F\u002F93digital.co.uk\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fanimated-typing-effect.zip",85,1,0,"2023-08-17 00:00:00","2026-03-15T15:16:48.613Z",[30],{"id":31,"url_slug":32,"title":33,"description":34,"plugin_slug":4,"theme_slug":35,"affected_versions":36,"patched_in_version":6,"severity":37,"cvss_score":38,"cvss_vector":39,"vuln_type":40,"published_date":27,"updated_date":41,"references":42,"days_to_patch":44},"CVE-2023-40605","typing-effect-authenticated-contributor-stored-cross-site-scripting-via-shortcode","Typing Effect \u003C= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode","The Typing Effect plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcode in versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=1.3.6","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-01-22 19:56:02",[43],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fdb12f986-580e-4e81-8bd2-124393e5d21b?source=api-prod",159,{"slug":7,"display_name":7,"profile_url":8,"plugin_count":25,"total_installs":11,"avg_security_score":24,"avg_patch_time_days":44,"trust_score":46,"computed_at":47},69,"2026-04-04T05:55:23.697Z",[49,69],{"slug":50,"name":51,"version":52,"author":53,"author_profile":54,"description":55,"short_description":56,"active_installs":57,"downloaded":58,"rating":59,"num_ratings":60,"last_updated":61,"tested_up_to":62,"requires_at_least":63,"requires_php":64,"tags":65,"homepage":67,"download_link":68,"security_score":24,"vuln_count":26,"unpatched_count":26,"last_vuln_date":35,"fetched_at":28},"typing-animation-block","Typing Animation Block","1.2.0","middlewayapproach","https:\u002F\u002Fprofiles.wordpress.org\u002Fmiddlewayapproach\u002F","\u003Cp>You can use the block inside the Gutenberg editor as you would use a headline block. You can find it in the common section. You can change the text that appears in the animation in the editor (Number 1 in the screenshot). The different sentences are separated by a pipe (|). You can format the text by using \u003Ccode>\u003Ci>...\u003C\u002Fi>\u003C\u002Fcode> for italic or \u003Ccode>\u003Cb>...\u003C\u002Fb>\u003C\u002Fcode> for bold text. To change the underlying element that is used in the html of the page (h1 to h6 or span) there is a dropdown menu in the block toolbar(Number 2 in the screenshot). In the block panel you find different options to customize the speed, looping and other options of the typing (Number 3 in the screenshot). The underlying library used is Typed.js. You can find more information in the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmattboldt\u002Ftyped.js\" rel=\"nofollow ugc\">repo\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Icon made by \u003Ca href=\"https:\u002F\u002Fwww.flaticon.com\u002Fde\u002Fautoren\u002Ffreepik\" rel=\"nofollow ugc\">freepik\u003C\u002Fa> from www.flaticon.com\u003C\u002Fp>\n","A Gutenberg block to render a typing animation or typewriter effect.",200,5674,74,3,"2021-05-18T23:18:00.000Z","5.7.15","5.0","5.6",[20,66],"typing-animation","https:\u002F\u002Fgithub.com\u002Fmiddle-way-approach\u002Fgutenberg-typing-animation-block","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftyping-animation-block.zip",{"slug":70,"name":71,"version":72,"author":73,"author_profile":74,"description":75,"short_description":76,"active_installs":77,"downloaded":78,"rating":79,"num_ratings":80,"last_updated":81,"tested_up_to":82,"requires_at_least":83,"requires_php":64,"tags":84,"homepage":87,"download_link":88,"security_score":24,"vuln_count":26,"unpatched_count":26,"last_vuln_date":35,"fetched_at":28},"wp-typeit","WP TypeIt Lite","1.0.3","Alex MacArthur","https:\u002F\u002Fprofiles.wordpress.org\u002Falexmacarthur\u002F","\u003Cp>This is the official free WordPress plugin for \u003Ca href=\"https:\u002F\u002Ftypeitjs.com\" rel=\"nofollow ugc\">TypeIt\u003C\u002Fa>, the most versatile animated typing utility on the planet. WP TypeIt Lite allows you to easily generate typewriter effects for your website by use of a single easy-to-configure shortcode. Place this shortcode on any post or page, and the effect will be live.\u003C\u002Fp>\n\u003Ch4>The Perks\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cem>Unobtrusive\u003C\u002Fem> – All this plugin does is register a shortcode you can use in your posts. \u003C\u002Fli>\n\u003Cli>\u003Cem>Lightweight\u003C\u002Fem> – TypeIt is 100% vanilla JavaScript, so it won’t load any dependencies like jQuery.\u003C\u002Fli>\n\u003Cli>\u003Cem>Performance in Mind\u003C\u002Fem> – TypeIt will only be enqueued if it’s actually needed on the page. \u003C\u002Fli>\n\u003Cli>\u003Cem>The Real Deal\u003C\u002Fem> – This plugin is created and maintained by the creator of TypeIt itself. \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Want More Features & Active Development?\u003C\u002Fh4>\n\u003Cp>Being a “lite” version, this plugin largely receives maintenance updates and will probably not gain any more features than what’s currently here. By purchasing a license for the fully-featured version of the plugin, you’ll get the following:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Access to a Gutenberg block for creating highly customizable, dynamic effects. \u003C\u002Fli>\n\u003Cli>More features for the shortcode provided by the plugin.\u003C\u002Fli>\n\u003Cli>More frequent TypeIt source updates.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For more information, \u003Ca href=\"https:\u002F\u002Ftypeitjs.com\u002Fdocs\u002Fwordpress\" rel=\"nofollow ugc\">see here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Using the Plugin\u003C\u002Fh3>\n\u003Ch4>Make an Effect Using Shortcode Attributes\u003C\u002Fh4>\n\u003Cp>You can generate a typewriter effect by using a variation of the following shortcode in a post or page, passing each setting as a shortcode attribute.\u003C\u002Fp>\n\u003Cp>At bare minimum, you need to pass a \u003Ccode>strings\u003C\u002Fcode> attribute:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[typeit strings=\"Look, I'm typing a string!\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>There also exists a wide set of attributes you may use to customize the typing effects. For example, setting speed (in milliseconds):\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Ch2>[typeit strings=\"Look, I'm typing a string!\" speed=\"500\"]\u003C\u002Fh2>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Or, making an effect continuously loop:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Ch2>[typeit strings=\"This is a string that will loop!\" speed=\"100\" loop=\"true\"]\u003C\u002Fh2>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>Define Strings in an SEO-Friendly Way\u003C\u002Fh4>\n\u003Cp>As demonstrated, you can define a string to be typed by passing it in as a “strings” attribute. However, you may also define them by passing them inside of two enclosing shortcode tags:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[typeit speed=\"300\"]This string will exist in your HTML, and when the page is loaded, TypeIt will take over and animate it.[\u002Ftypeit]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>When the tag is rendered, that string will be hard-coded on the page, rather than stored in memory on page load. The advantage to this approach is that web crawlers will be able to parse the text without JavaScript, making the content a bit more SEO-friendly.\u003C\u002Fp>\n\u003Ch4>View All Available Options\u003C\u002Fh4>\n\u003Cp>For the full list of options you may pass, refer to the documentation at \u003Ca href=\"https:\u002F\u002Ftypeitjs.com\u002Fdocs#options\" rel=\"nofollow ugc\">typeitjs.com\u002Fdocs#options\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Feedback\u003C\u002Fh3>\n\u003Cp>You like it? \u003Ca href=\"mailto:alex@macarthur.me\" rel=\"nofollow ugc\">Email\u003C\u002Fa> or \u003Ca href=\"http:\u002F\u002Fwww.twitter.com\u002Famacarthur\" rel=\"nofollow ugc\">tweet\u003C\u002Fa> me. You hate it? \u003Ca href=\"mailto:alex@macarthur.me\" rel=\"nofollow ugc\">Email\u003C\u002Fa> or \u003Ca href=\"http:\u002F\u002Fwww.twitter.com\u002Famacarthur\" rel=\"nofollow ugc\">tweet\u003C\u002Fa> me.\u003C\u002Fp>\n","This is the official free WordPress plugin for TypeIt, the most versatile animated typing utility on the planet. WP TypeIt Lite allows you to easily g …",100,3712,40,2,"2020-05-28T02:25:00.000Z","5.4.19","4.0",[85,86,20],"text-animation","text-effect","https:\u002F\u002Ftypeitjs.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-typeit.1.0.3.zip",{"attackSurface":90,"codeSignals":114,"taintFlows":121,"riskAssessment":122,"analyzedAt":135},{"hooks":91,"ajaxHandlers":106,"restRoutes":107,"shortcodes":108,"cronEvents":113,"entryPointCount":25,"unprotectedCount":26},[92,98,102],{"type":93,"name":94,"callback":95,"file":96,"line":97},"action","admin_menu","add_menu_pages","typingeffect.php",38,{"type":93,"name":99,"callback":100,"file":96,"line":101},"admin_enqueue_scripts","register_admin_scripts",41,{"type":93,"name":103,"callback":104,"file":96,"line":105},"wp_enqueue_scripts","register_scripts",42,[],[],[109],{"tag":110,"callback":111,"file":96,"line":112},"typed","do_shortcode",45,[],{"dangerousFunctions":115,"sqlUsage":116,"outputEscaping":118,"fileOperations":26,"externalRequests":26,"nonceChecks":26,"capabilityChecks":26,"bundledLibraries":120},[],{"prepared":26,"raw":26,"locations":117},[],{"escaped":25,"rawEcho":26,"locations":119},[],[],[],{"summary":123,"deductions":124},"The \"animated-typing-effect\" plugin v1.3.7 exhibits a generally good security posture based on the static analysis provided. The absence of dangerous functions, proper use of prepared statements for SQL queries, and 100% output escaping are strong indicators of well-written and secure code. File operations and external HTTP requests are also absent, reducing potential attack vectors.  Furthermore, the lack of unpatched CVEs is a positive sign, indicating that past vulnerabilities have been addressed.\n\nHowever, there are areas for improvement. The plugin has a known history of a medium-severity Cross-Site Scripting (XSS) vulnerability, with the last one occurring in August 2023. While currently unpatched, this suggests a recurring pattern of input sanitization issues. The static analysis shows 0 capability checks and 0 nonce checks, which, while not directly linked to specific vulnerabilities in this snapshot, represent a potential weakness. If any of the entry points were to expose functionality that could be exploited, the absence of these checks would significantly lower the barrier to entry for an attacker.  The presence of a shortcode as an entry point without explicit checks is a mild concern, as it could be a vector for less severe issues if not handled carefully within the shortcode's logic.\n\nIn conclusion, the \"animated-typing-effect\" plugin benefits from solid coding practices regarding SQL and output handling, and its current lack of unpatched vulnerabilities is reassuring. Nevertheless, the past XSS vulnerability highlights a potential area of weakness in input sanitization. The absence of comprehensive capability and nonce checks also represents a theoretical risk that, while not materialized in the provided static analysis, should be considered for a truly robust security profile.",[125,128,131,133],{"reason":126,"points":127},"Medium severity XSS vulnerability history",10,{"reason":129,"points":130},"No capability checks",5,{"reason":132,"points":130},"No nonce checks",{"reason":134,"points":80},"Shortcode as an entry point without explicit auth","2026-03-16T17:37:37.099Z",{"wat":137,"direct":147},{"assetPaths":138,"generatorPatterns":144,"scriptPaths":145,"versionParams":146},[139,140,141,142,143],"\u002Fwp-content\u002Fplugins\u002Fanimated-typing-effect\u002Fassets\u002Fcss\u002Fcursor.css","\u002Fwp-content\u002Fplugins\u002Fanimated-typing-effect\u002Fassets\u002Fjs\u002Ftyped.js","\u002Fwp-content\u002Fplugins\u002Fanimated-typing-effect\u002Fassets\u002Fjs\u002Ftyped.fe.js","\u002Fwp-content\u002Fplugins\u002Fanimated-typing-effect\u002Fassets\u002Fjs\u002Ftyped.admin.js","\u002Fwp-content\u002Fplugins\u002Fanimated-typing-effect\u002Fassets\u002Fcss\u002Fstyle.css",[],[140,141,142],[],{"cssClasses":148,"htmlComments":151,"htmlAttributes":152,"restEndpoints":160,"jsGlobals":161,"shortcodeOutput":162},[149,150],"typed-me","preview",[],[153,154,155,156,157,158,159],"data-typespeed","data-startdelay","data-backspeed","data-backdelay","data-loopcount","data-loop","data-shuffle",[],[],[163,164,165,166,167,168,169,170],"\u003Cspan class=\"typed-me\">","\u003Cspan class=\"typed-me\" data-typespeed=","\u003Cspan class=\"typed-me\" data-startdelay=","\u003Cspan class=\"typed-me\" data-backspeed=","\u003Cspan class=\"typed-me\" data-backdelay=","\u003Cspan class=\"typed-me\" data-loopcount=","\u003Cspan class=\"typed-me\" data-loop=","\u003Cspan class=\"typed-me\" data-shuffle="]