[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOPxso1P_NkRrk_ThmQgErywCBm0HpTyjY3riqMv0GWM":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":44,"crawl_stats":35,"alternatives":49,"analysis":154,"fingerprints":200},"aparat-shortcode","Aparat Video Shortcode","0.2.4","Ali Aghdam","https:\u002F\u002Fprofiles.wordpress.org\u002Faliaghdam\u002F","\u003Cp>AparatVideoShortcode allows you to easily post \u003Ca href=\"http:\u002F\u002Faparat.com\" rel=\"nofollow ugc\">Aparat.com\u003C\u002Fa> video to your site with [aparat] shortcode.\u003C\u002Fp>\n\u003Ch3>Plugin Usage\u003C\u002Fh3>\n\u003Cp>Just wrap your Aparat video link in \u003Ccode>[aparat]\u003C\u002Fcode> or paste and select Aparat video link and then press “Aparat Video Shortcode” button.\u003Cbr \u002F>\nsimple example: \u003Ccode>[aparat]http:\u002F\u002Fwww.aparat.com\u002Fv\u002Fnjf6r[\u002Faparat]\u003C\u002Fcode>\u003C\u002Fp>\n\u003Cp>You can define video width and height with ‘width’ and ‘height’ parameters. also you can define ability of fullscreen mode for videos with ‘fullscreen’ with boolean value.\u003Cbr \u002F>\ncomplex example: \u003Ccode>[aparat fullscreen=\"false\" width=\"500\" height=\"300\"]http:\u002F\u002Fwww.aparat.com\u002Fv\u002Fnjf6r[\u002Faparat]\u003C\u002Fcode>\u003C\u002Fp>\n\u003Cp>Send email for Translation files: alitopack[a]gmail[dot].com\u003C\u002Fp>\n","Add [aparat] shortcode to WordPress for easy video sharing in WordPress",50,7162,100,3,"2013-08-06T07:29:00.000Z","3.6.1","2.0.2","",[20,21,22],"aparat","shortcode","video","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Faparat-shortcode\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faparat-shortcode.zip",63,1,"2025-09-05 00:00:00","2026-03-15T15:16:48.613Z",[30],{"id":31,"url_slug":32,"title":33,"description":34,"plugin_slug":4,"theme_slug":35,"affected_versions":36,"patched_in_version":35,"severity":37,"cvss_score":38,"cvss_vector":39,"vuln_type":40,"published_date":27,"updated_date":41,"references":42,"days_to_patch":35},"CVE-2025-58876","aparat-video-shortcode-authenticated-contributor-stored-cross-site-scripting","Aparat Video Shortcode \u003C= 0.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting","The Aparat Video Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 0.2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=0.2.4","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-09-09 22:27:04",[43],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F1ec7d4f6-75fa-497b-a639-f7c365c7f195?source=api-prod",{"slug":45,"display_name":7,"profile_url":8,"plugin_count":26,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":46,"trust_score":47,"computed_at":48},"aliaghdam",30,68,"2026-04-05T15:07:24.204Z",[50,74,96,114,134],{"slug":51,"name":52,"version":53,"author":54,"author_profile":55,"description":56,"short_description":57,"active_installs":58,"downloaded":59,"rating":60,"num_ratings":61,"last_updated":62,"tested_up_to":63,"requires_at_least":64,"requires_php":65,"tags":66,"homepage":69,"download_link":70,"security_score":71,"vuln_count":26,"unpatched_count":72,"last_vuln_date":73,"fetched_at":28},"wp-aparat","Aparat for WordPress","2.2.4","Alireza Sedghi","https:\u002F\u002Fprofiles.wordpress.org\u002Fas911\u002F","\u003Cp>Aparat is one of Iran’s video-sharing services. With this plugin, you can easily add your Aparat videos to posts, pages, or widgets in WordPress, or display a list of them in widgets.\u003C\u002Fp>\n\u003Cp>Features include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Shortcode and Block feature to display Aparat videos within posts\u002Fpages.\u003C\u002Fli>\n\u003Cli>Aparat widget for showcasing a video list.\u003C\u002Fli>\n\u003Cli>Option to customize the number of videos displayed in widgets.\u003C\u002Fli>\n\u003Cli>Integration of an Aparat video button into the WordPress editor.\u003C\u002Fli>\n\u003C\u002Ful>\n","Displaying Aparat videos on website content, along with a widget for showing a list of channel videos.",4000,31595,82,9,"2025-01-03T10:07:00.000Z","6.7.5","4.0","7.0",[20,67,22,68],"embed","%d8%a2%d9%be%d8%a7%d8%b1%d8%a7%d8%aa","https:\u002F\u002Falirezasedghi.com\u002Fplugins\u002Faparat-for-wordPress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-aparat.2.2.4.zip",92,0,"2024-03-25 00:00:00",{"slug":75,"name":76,"version":77,"author":78,"author_profile":79,"description":80,"short_description":81,"active_installs":82,"downloaded":83,"rating":84,"num_ratings":85,"last_updated":86,"tested_up_to":87,"requires_at_least":88,"requires_php":18,"tags":89,"homepage":93,"download_link":94,"security_score":95,"vuln_count":72,"unpatched_count":72,"last_vuln_date":35,"fetched_at":28},"vimeo-master","TechGasp Video Master","5.1.4","TechGasp","https:\u002F\u002Fprofiles.wordpress.org\u002Ftechgasp\u002F","\u003Cp>Another outstanding plugin for wordpress. Vimeo Master let’s you integrate the superb Vimeo Video Sharing Network into any wordpress website.\u003C\u002Fp>\n\u003Cp>Done with TechGasp style, uses minimal html5 code (error free, no javascipt or Ajax, no conflicts) for fast page load times.\u003C\u002Fp>\n\u003Cp>The superior solution of professional video presentations for business, design, arts, etc. Looks great inside pages, posts or blogs with our shortcode framework implementation. Have full control over Auto-Play, Video Loop, Video Color and Video Size to match your template.\u003C\u002Fp>\n\u003Cp>Both the widget and the shortcode framework are fully mobile devices responsive, a must for any professional website.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Quality Videos for WordPress\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>IMPORTANT: Errors and conflicts free. NO JAVASCRIPT or AJAX\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Cstrong>LITE Version Contains\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Display, change or hide Widget Title\u003C\u002Fli>\n\u003Cli>Vimeo Buttons Widget (Connect to Profile Button)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>ADVANCED Version Contains\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Display, change or hide Widget Title\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Fully Mobile Responsive\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Vimeo Buttons Widget\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Connect to Profile Button\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Vimeo Basic Player Widget\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>Fast page load times\u003C\u002Fli>\n\u003Cli>\n\u003Cp>designed for fast deployments\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Vimeo Advanced Player Widget\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>Vimeo Video Intro (Portrait, Title, Byline)\u003C\u002Fli>\n\u003Cli>Player Width\u003C\u002Fli>\n\u003Cli>Player Height\u003C\u002Fli>\n\u003Cli>Auto-Play Option\u003C\u002Fli>\n\u003Cli>Video Loop Option\u003C\u002Fli>\n\u003Cli>Vimeo Color Option\u003C\u002Fli>\n\u003Cli>Vimeo Video Underneath Text Link\u003C\u002Fli>\n\u003Cli>Vimeo Description Below Video\u003C\u002Fli>\n\u003Cli>TechGasp Video Responsiveness, automatically sets the perfect video size both on desktops and mobile devices\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Vimeo Player width and height Option\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>TechGasp Shortcode Framework v5\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>Universal Shortcode for all pages and posts, same Shortcode applies to all pages and posts. Option to Automatically add the shortcode to all pages and posts or manually add the pre-built shortcode individually per page or post. Option to automatically only show the shortcode in Posts and not Pages. Option to Automatically show the shortcode After the Title or After the Content.\u003C\u002Fli>\n\u003Cli>Individual Shortcode for each page or post, individual customized shortcode per page or post\u003C\u002Fli>\n\u003Cli>Shortcodes allow you to professionally display your plugin inside pages and posts maintaining fast page load times and excellent Google SEO\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.techgasp.com\u002Fvimeo-master\u002F\" rel=\"nofollow ugc\">Advanced Version Link\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>ONLINE DEMO\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Right of the page, sidebar widget\u003C\u002Fli>\n\u003Cli>Inside the post. With shortcode framework v5\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.techgasp.com\u002Fvimeo-master\u002F\" rel=\"nofollow ugc\">Demo Link\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>More High Quality Plugins?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>For professional wordpress websites\u003C\u002Fli>\n\u003Cli>Tested for fast page load times and SEO\u003C\u002Fli>\n\u003Cli>Errors and conflicts free. NO JAVASCRIPT or AJAX\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.techgasp.com\u002Fbuy-all-techgasp-wordpress-plugins\u002F\" rel=\"nofollow ugc\">Click Here\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","TechGasp Video Master for let's you integrate the superb Vimeo Video quality into any Wordpress widget position. Only for professional websites.",200,66936,58,10,"2021-03-11T11:09:00.000Z","5.7.15","3.5",[21,90,22,91,92],"techgasp","vimeo","widget","https:\u002F\u002Fwordpress.techgasp.com\u002Fvimeo-master\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvimeo-master.5.1.4.zip",85,{"slug":97,"name":98,"version":99,"author":100,"author_profile":101,"description":102,"short_description":103,"active_installs":82,"downloaded":104,"rating":71,"num_ratings":105,"last_updated":106,"tested_up_to":107,"requires_at_least":108,"requires_php":18,"tags":109,"homepage":112,"download_link":113,"security_score":95,"vuln_count":72,"unpatched_count":72,"last_vuln_date":35,"fetched_at":28},"wp-theater","WP Theater","1.2.3","kentfarst","https:\u002F\u002Fprofiles.wordpress.org\u002Fkentfarst\u002F","\u003Cp>WP Theater provides shortcodes for integrating \u003Cstrong>YouTube\u003C\u002Fstrong> and \u003Cstrong>Vimeo\u003C\u002Fstrong> video embeds and feeds into your posts or widgets. Some options include traditional embedding, single video previews, a wrapped “Theater” embed, and video listings from playlists, channels, albums and groups.  WP Theater was built with developers in mind, those who need flexibility. With that said, great effort was put into making sure this plugin stayed simple.\u003C\u002Fp>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Current version tested on WordPress version 3.9 and later.\u003C\u002Fli>\n\u003Cli>PHP 5.3 or later with cURL\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Usage\u003C\u002Fh4>\n\u003Cp>For parameters and their usage please visit:\u003C\u002Fp>\n\u003Cp>http:\u002F\u002Fredshiftstudio.com\u002Fwp-theater\u002F\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Boring Embed\u003C\u002Fstrong> – The classic\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C!--YouTube Error: bad URL entered-->\n\u003C!-- vimeo error: not a vimeo video -->\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Preview\u003C\u002Fstrong> – Thumbnail and title of a single video\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C!--YouTube Error: bad URL entered-->\n\u003C!-- vimeo error: not a vimeo video -->\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Theater\u003C\u002Fstrong> – Traditional embed that’s wrapped for styling, has optional Lower Lights and Full Window buttons, and is responsive.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C!--YouTube Error: bad URL entered-->\n\u003C!-- vimeo error: not a vimeo video -->\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cem>The following contain a “theater” by default\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>User\u003C\u002Fstrong> – Listing of a user’s videos\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C!--YouTube Error: bad URL entered-->\n\u003C!-- vimeo error: not a vimeo video -->\n\u002F\u002F for YouTube's v3 API see FAQ about user uploads vs playlists.\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Channel\u003C\u002Fstrong> – Listing of videos from a specific channel\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C!-- vimeo error: not a vimeo video -->\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Playlist\u003C\u002Fstrong> – Listing of videos from a user’s playlist\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C!--YouTube Error: bad URL entered-->\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Album\u003C\u002Fstrong> – Listing of videos from a specific album\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C!-- vimeo error: not a vimeo video -->\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Group\u003C\u002Fstrong> – Listing of videos from a specific group\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C!-- vimeo error: not a vimeo video -->\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch3>Developer FAQ\u003C\u002Fh3>\n\u003Ch4>How can I customize the output\u003C\u002Fh4>\n\u003Cp>Filters exist that can handle complete customization of the output.  Written as “Filter_Hook” ($callback_params … )\u003C\u002Fp>\n\u003Cp>Display — Override built in output\u003C\u002Fp>\n\u003Cul>\n\u003Cli>“wp_theater-pre_video_shortcode” ( FALSE, $feed, $atts )\u003C\u002Fli>\n\u003Cli>“wp_theater-pre_theater” ( FALSE, $atts, $content, $tag )\u003C\u002Fli>\n\u003Cli>“wp_theater-pre_video_preview” ( FALSE, $video, $atts, $selected )\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Attributes\u003C\u002Fp>\n\u003Cul>\n\u003Cli>“wp_theater-format_params” ( $atts, $content, $tag )\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>API Feeds — Override built in api request and parsing.  NOTE: Keep in mind that these filters will only be called when the transient cache is updated.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>“wp_theater-pre_get_request_url” ( FALSE, $atts, $request, $output )\u003C\u002Fli>\n\u003Cli>“wp_theater-parse_{$service}_response” ( $out, $response, $atts) \u002F\u002F v1.1.3\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Content\u003C\u002Fp>\n\u003Cul>\n\u003Cli>“wp_theater-section_title” ( $title )\u003C\u002Fli>\n\u003Cli>“wp_theater-video_title” ( $title )\u003C\u002Fli>\n\u003Cli>“wp_theater-{$service}_more_url” ( FALSE, $atts, $data ) \u002F\u002F v1.1.4\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Presets\u003C\u002Fp>\n\u003Cul>\n\u003Cli>“wp_theater-get_preset” ( $name )\u003C\u002Fli>\n\u003Cli>“wp_theater-set_preset” ( $arr, $name )\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>How do I add my own preset?\u003C\u002Fh4>\n\u003Cp>The following code will create a preset named “my_preset”.  We do not currently, but are planning to, offer a method of saving presets to the database so that they stick around between theme’s.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>function my_preset_init ($presets) {\n    $presets->set_preset( 'my_preset', shortcode_atts( $presets->get_preset( 'youtube' ), array(\n        'embed_width' => 342,\n        'embed_height' => 192,\n        'max' => 9,\n    ) ) );\n    add_shortcode( 'my_preset', array( WP_Theater::$shortcodes, 'video_shortcode' ) );\n}\nadd_action('wp_theater-shortcodes_init', 'my_preset_init');\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>What values can I define in presets\u003C\u002Fh4>\n\u003Cp>Listed below are all of the possible settings you can define in a preset with their base values\u003C\u002Fp>\n\u003Cpre>\u003Ccode>array(\n    \u002F\u002F general options\n    'preset' => '',\n    'service' => '',\n    'mode' => 'embed',\n    'id' => '',\n    'embed_width' => FALSE,\n    'embed_height' => FALSE,\n    'class' => '',\n    'cache' => FALSE,\n\n    \u002F\u002F preview & listing options\n    'img_size' => 'medium',\n    'columns' => 3,\n    'max' => 12,\n    'autoplay_onclick' => TRUE,\n\n    \u002F\u002F Title options\n    'show_title' => TRUE,\n    'show_video_title' => TRUE,\n    'title' => '',\n\n    \u002F\u002F More link options\n    'show_more_link' => TRUE,\n    'more_url' => FALSE,\n    'more_text' => FALSE,\n\n    \u002F\u002F Theater options\n    'show_theater' => TRUE,\n    'theater_id' => FALSE,\n    'show_fullwindow' => FALSE,\n    'show_lowerlights' => FALSE,\n    'keep_ratio' => TRUE,\n    'iframe_placeholder' = > TRUE            \u002F\u002F since 1.2.0\n\n    \u002F\u002F can only be defined in presets\n    'modes' => array(), \u002F\u002F the modes array with matching link formats\n    'classes' => array( \u002F\u002F the classes to apply to their respective elements\n        'section' => 'entry-section wp-theater-section %service%',\n        'theater' => 'wp-theater-bigscreen',\n        'embed' => 'wp-theater-iframe',\n        'list' => 'wp-theater-listing',\n        'preview' => 'video-preview'\n    )\n);\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>How can I modify the embed url?\u003C\u002Fh4>\n\u003Cp>Each preset requires a modes array to store the different link formats used.  You can directly access and modify these yourself through a theme’s functions.php.\u003Cbr \u002F>\ne.g.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002F\u002F make youtube embed with https and youtube-nocookie.com\nfunction my_preset_init ($presets) {\n    $youtube_preset = $presets->get_preset( 'youtube' );\n    $youtube_preset['modes']['embed'] = 'https:\u002F\u002Fwww.youtube-nocookie.com\u002Fembed\u002F%id%?wmode=transparent&autohide=1';\n    $presets->set_preset( 'youtube', $youtube_preset );\n}\nadd_action('wp_theater-shortcodes_init', 'my_preset_init');\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>NOTE:  Each mode URL must have %id% in the place of the id.  And, it’s a bit dumb but, for now you must include at least one query parameter in an embed’s url.\u003C\u002Fp>\n\u003Ch4>What do the formatted feeds look like?\u003C\u002Fh4>\n\u003Cp>Vimeo’s feed will return exactly what their API states except we merge their info and video requests into one and clone values to help normalize the feeds.  Youtube on the other hand is almost completely reformatted into a format based on Vimeo’s\u003C\u002Fp>\n\u003Cp>You can count on the full feeds returning the following content with an exception being that single preview feeds do not have the feed title or url.\u003C\u002Fp>\n\u003Cp>Also, with YouTube’s v3 API enabled, rating, likeCount and viewCount will always be empty strings since you must use OAuth2 and be a verified content owner:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>object\n    'title' => string\n    'url' => string\n    'videos' => array\n        0 => object\n            'title' => string\n            'id' => string\n            'url' => string\n            'upload_date' => string\n            'description' => string\n            'category' => string\n            'duration' => string\n            'rating' => string\n            'likeCount' => string\n            'viewCount' => string\n            'width' => string\n            'height' => string\n            'thumbnails' => array\n                'small' => string\n                'medium' => string\n                'large' => string\n                'cover' => string       \u002F\u002F since 1.2.0 -- set to the largest available image.\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Shortcodes for YouTube and Vimeo. Includes embeds, \"Theater\" embed, thumbed previews, playlist, channel, user uploads and groups.",14124,5,"2015-04-26T16:18:00.000Z","4.2.39","3.6",[67,21,22,110,111],"vimeo-shortcode","youtube-shortcode","http:\u002F\u002Fredshiftstudio.com\u002Fwp-theater\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-theater.1.2.3.zip",{"slug":115,"name":116,"version":117,"author":118,"author_profile":119,"description":120,"short_description":121,"active_installs":13,"downloaded":122,"rating":123,"num_ratings":124,"last_updated":125,"tested_up_to":126,"requires_at_least":127,"requires_php":18,"tags":128,"homepage":132,"download_link":133,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"auto-last-youtube-video","Auto Last Youtube Video","1.0.7","David Merinas","https:\u002F\u002Fprofiles.wordpress.org\u002Fdavidmerinas\u002F","\u003Cp>This plugin provides both Widget and Shortcode to show latest videos from any public Youtube channel. Using [auto_last_youtube_video user=’channel_name’ width=’450′ height=’320′][\u002Fauto_last_youtube_video] in a page or post will show last video uploaded to that channel and will change if another video is uploaded. The widget let you show as many videos as you want from any Youtube channel.\u003C\u002Fp>\n","This plugin provides both Widget and Shortcode to show latest videos from any public Youtube channel.",8951,84,6,"2020-05-08T12:28:00.000Z","5.4.19","3.3",[129,130,21,92,131],"davidmerinas","last-videos","youtube","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fauto-last-youtube-video\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fauto-last-youtube-video.zip",{"slug":135,"name":136,"version":137,"author":138,"author_profile":139,"description":140,"short_description":141,"active_installs":13,"downloaded":142,"rating":123,"num_ratings":105,"last_updated":143,"tested_up_to":63,"requires_at_least":144,"requires_php":145,"tags":146,"homepage":18,"download_link":151,"security_score":152,"vuln_count":26,"unpatched_count":26,"last_vuln_date":153,"fetched_at":28},"lazy-load-videos-and-sticky-control","Lazy load videos and sticky control","3.0.1","Aishan","https:\u002F\u002Fprofiles.wordpress.org\u002Faishan\u002F","\u003Cp>This plugin enhances page load times by loading only the YouTube video preview image initially. Additionally, it offers the option to make your video sticky, positioning it at the top or bottom of the window when the user scrolls away from the video viewport.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Lazy Load Videos:\u003C\u002Fstrong> Reduce the amount of time it takes to load your video by loading just the video thumbnail.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multiple Video Support:\u003C\u002Fstrong> You may quickly and simply add more than one video to a page. Videos can only be played one at a time, and when one is playing, the other one instantly pauses.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Sticky Video:\u003C\u002Fstrong> Keep videos visible as you navigate by adhering them to the top or bottom of the screen to ensure ongoing playback.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Styling:\u003C\u002Fstrong> Adapt your videos’ look to perfectly match the style of your website by using your own CSS.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Ch3>Method 1: Using the Classic Editor (WP Editor)\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong>Generate Shortcode in WP Editor:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Open the post\u002Fpage where you want to add the YouTube video.\u003C\u002Fli>\n\u003Cli>In the WordPress editor, click on the \u003Cstrong>LLVASC\u003C\u002Fstrong> icon. This will open a popup window.\u003C\u002Fli>\n\u003Cli>In the popup, add your YouTube video ID. The video ID is the unique alphanumeric code found at the end of your YouTube video URL. For example, in \u003Ccode>https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=iXGoAj7IEys\u003C\u002Fcode>, the video ID is \u003Ccode>iXGoAj7IEys\u003C\u002Fcode>.\u003C\u002Fli>\n\u003Cli>After entering the video ID, click “Ok”. This action will generate and insert a shortcode into your content.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Shortcode Format:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>The shortcode added to your content will look like this:\u003Cbr \u002F>\n  [lazy-load-videos-and-sticky-control id=”Youtube-video-ID”]\u003C\u002Fli>\n\u003Cli>For example, if your video ID is \u003Ccode>iXGoAj7IEys\u003C\u002Fcode>, the shortcode will be:\u003Cbr \u002F>\n  [lazy-load-videos-and-sticky-control id=”iXGoAj7IEys”]\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Save\u002FUpdate:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Save or update your post\u002Fpage to apply the changes.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Preview and Customize:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Preview your page to see the embedded video.\u003C\u002Fli>\n\u003Cli>If you need to adjust the styling, you can add custom CSS in the General tab of the plugin settings.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Method 2: Using Gutenberg Block\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong>Add a Block:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Open the post\u002Fpage where you want to add the YouTube video using the Gutenberg editor.\u003C\u002Fli>\n\u003Cli>Click on the “+” icon to add a new block.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Select the \u003C\u002Fstrong>\u003Cstrong>\u003Cem>LLVASC\u003C\u002Fem>\u003C\u002Fstrong> Block:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Search for the “LLVASC” block in the block library.\u003C\u002Fli>\n\u003Cli>Add this block to your content.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Enter YouTube Video ID:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>In the LLVASC block settings inspect control, select your video platform and enter your video ID. For example, if your YouTube video URL is \u003Ccode>https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=iXGoAj7IEys\u003C\u002Fcode>, the video ID is \u003Ccode>iXGoAj7IEys\u003C\u002Fcode>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Save\u002FUpdate:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Save or update your post\u002Fpage to apply the changes.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Preview and Customize:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Preview your page to see the embedded video.\u003C\u002Fli>\n\u003Cli>Customize the block settings as needed to adjust the appearance and functionality.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Demo Preview\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpreview-plugin.web.app\u002Flazy-load-videos-and-sticky-control.html\" rel=\"nofollow ugc\">Demo\u003C\u002Fa>\u003C\u002Fp>\n","Lazy load and sticky your video. Super-easy and fun!",5422,"2024-11-21T15:25:00.000Z","5.2","7.2",[147,148,21,149,150],"floating-video","lazyload","sticky-video","videos","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flazy-load-videos-and-sticky-control.3.0.1.zip",71,"2024-11-20 13:38:27",{"attackSurface":155,"codeSignals":178,"taintFlows":188,"riskAssessment":189,"analyzedAt":199},{"hooks":156,"ajaxHandlers":167,"restRoutes":168,"shortcodes":169,"cronEvents":176,"entryPointCount":177,"unprotectedCount":72},[157,163],{"type":158,"name":159,"callback":160,"file":161,"line":162},"filter","mce_external_plugins","aparatplugin_register","aparat-video-shortcut.php",52,{"type":158,"name":164,"callback":165,"priority":72,"file":161,"line":166},"mce_buttons","aparatplugin_add_button",53,[],[],[170,173],{"tag":20,"callback":171,"file":161,"line":172},"aparat_embed_video_player",48,{"tag":174,"callback":171,"file":161,"line":175},"APARAT",49,[],2,{"dangerousFunctions":179,"sqlUsage":180,"outputEscaping":182,"fileOperations":72,"externalRequests":72,"nonceChecks":72,"capabilityChecks":72,"bundledLibraries":184},[],{"prepared":72,"raw":72,"locations":181},[],{"escaped":72,"rawEcho":72,"locations":183},[],[185],{"name":186,"version":35,"knownCves":187},"TinyMCE",[],[],{"summary":190,"deductions":191},"The 'aparat-shortcode' plugin exhibits a generally good security posture with no immediate critical risks identified through static code analysis.  It demonstrates strong adherence to secure coding practices, as evidenced by the absence of dangerous functions, raw SQL queries, unescaped output, file operations, and external HTTP requests.  The complete lack of taint analysis findings further suggests that user input is likely handled safely within the analyzed code paths.\n\nHowever, a significant concern arises from the plugin's vulnerability history. The presence of one unpatched medium-severity CVE, specifically a Cross-Site Scripting (XSS) vulnerability, indicates a past weakness that has not been addressed. While static analysis found no XSS issues in the current version (0.2.4), the historical pattern of XSS vulnerabilities, coupled with the fact that one remains unpatched, suggests a potential for recurring issues or a delayed patching process within the plugin's development lifecycle. The absence of any capability checks or nonce checks on its entry points (shortcodes) is a minor concern, but given the absence of other direct vulnerabilities in static analysis, this is less critical.\n\nIn conclusion, while the code itself appears to be written with good security practices, the unpatched vulnerability is a serious drawback. Users should be aware of this history and exercise caution, prioritizing the resolution of the identified CVE. The plugin's strengths lie in its secure coding habits for the current version, but its weakness lies in its maintenance and response to past security flaws.",[192,195,197],{"reason":193,"points":194},"Unpatched medium severity CVE",15,{"reason":196,"points":105},"No capability checks on entry points",{"reason":198,"points":105},"No nonce checks on entry points","2026-03-16T21:56:40.473Z",{"wat":201,"direct":207},{"assetPaths":202,"generatorPatterns":204,"scriptPaths":205,"versionParams":206},[203],"\u002Fwp-content\u002Fplugins\u002Faparat-shortcode\u002FtinyMCE\u002Feditor_plugin.js",[],[],[],{"cssClasses":208,"htmlComments":209,"htmlAttributes":210,"restEndpoints":211,"jsGlobals":212,"shortcodeOutput":213},[],[],[],[],[],[214,215],"\u003Ciframe src=\"http:\u002F\u002Fwww.aparat.com\u002Fvideo\u002Fvideo\u002Fembed\u002Fvideohash\u002F","\u002Fvt\u002Fframe\""]