[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcPmQg6iAij_x_w1sOVlOkDHOI2vRm_a_1z95bJxSQqs":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":37,"analysis":137,"fingerprints":217},"auto-tag","Auto-tags","0.5.1","jfoucher","https:\u002F\u002Fprofiles.wordpress.org\u002Fjfoucher\u002F","\u003Cp>This plugin uses the yahoo.com API to find the most relevant keywords from the content of your post, and then adds them as tags.\u003C\u002Fp>\n\u003Cp>The tagging is \u003Cstrong>fully automatic\u003C\u002Fstrong>, so if you’re using a plugin like feedwordpress to display RSS feeds on your blog as posts, everything will get done as the feed posts are published. \u003Cstrong>No user intervention necessary!\u003C\u002Fstrong>\u003C\u002Fp>\n","Automatically add relevant tags to new posts.",200,101821,82,20,"2012-08-04T00:10:00.000Z","3.4.2","3.0","",[20,21,22,23],"automatic","tag","tagging","tags","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fauto-tag\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fauto-tag.0.5.1.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":26,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},2,210,30,84,"2026-04-04T15:09:06.266Z",[38,59,80,98,116],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":18,"tags":53,"homepage":57,"download_link":58,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"already-existing-tags","Already Existing Tags","2.4","digitalemphasis","https:\u002F\u002Fprofiles.wordpress.org\u002Fdigitalemphasis\u002F","\u003Cp>This plugin detects your ‘already existing tags’ into your post each time you create or edit\u002Fsave one. The found tags will be automatically assigned.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Easy configuration.\u003C\u002Fli>\n\u003Cli>Allow or block manually added tags; the choice is yours.\u003C\u002Fli>\n\u003Cli>You can choose if the plugin examines the title, the content or both.\u003C\u002Fli>\n\u003Cli>You can activate a filter and select which categories will be affected and which ones will be ignored by the plugin.\u003C\u002Fli>\n\u003Cli>Clean uninstall option: If this option is enabled, the plugin will leave absolutely no traces when uninstalling.\u003C\u002Fli>\n\u003Cli>Visit \u003Ca href=\"https:\u002F\u002Fdigitalemphasis.com\" rel=\"nofollow ugc\">digitalemphasis.com\u003C\u002Fa> for more info.\u003C\u002Fli>\n\u003C\u002Ful>\n","Looks for already existing tags within your posts.",600,11266,92,7,"2021-05-23T12:07:00.000Z","5.7.15","4.0",[54,55,56,22,23],"auto-tagger","auto-tagging","automatic-tags","https:\u002F\u002Fdigitalemphasis.com\u002Fwordpress-plugins\u002Falready-existing-tags\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Falready-existing-tags.2.4.zip",{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":67,"downloaded":68,"rating":67,"num_ratings":69,"last_updated":70,"tested_up_to":71,"requires_at_least":72,"requires_php":18,"tags":73,"homepage":78,"download_link":79,"security_score":67,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"smart-tag-insert","Smart Tag Insert","1.0.1","Stefano","https:\u002F\u002Fprofiles.wordpress.org\u002Fste_95\u002F","\u003Cp>Once you have defined a list of tags, this plugin will add a box in the post editing page through which look for relevant tags basing on the post content. The most relevant will automatically be selected (although the selection can be changed), and selected tags can be added to the post with a click.\u003C\u002Fp>\n\u003Cp>It is also possible to use the plugin to reassign all blog’s posts tags through a handy posts tags rebuilder.\u003C\u002Fp>\n","Automatically adds most relevant tags to posts selecting them from an admin-defined list.",100,6298,3,"2025-12-06T05:08:00.000Z","6.9.4","3.7",[74,75,76,77,23],"automatic-tagging","post","post-management","smart-tagging","http:\u002F\u002Fwww.thecrowned.org\u002Fwordpress-plugins\u002Fsmart-tag-insert","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsmart-tag-insert.1.0.1.zip",{"slug":81,"name":82,"version":83,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":88,"downloaded":89,"rating":67,"num_ratings":90,"last_updated":91,"tested_up_to":16,"requires_at_least":92,"requires_php":18,"tags":93,"homepage":96,"download_link":97,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"page-tagger","Page Tagger","0.4.2","hiddentao","https:\u002F\u002Fprofiles.wordpress.org\u002Frandomaniac\u002F","\u003Cp>Page Tagger is a WordPress plugin which lets you tag your pages just like you do with your posts. It adds a tagging widget in the page-editing view in the admin interface. Page Tagger requires PHP 5.\u003C\u002Fp>\n\u003Cp>Detailed information including installation and usage is available at http:\u002F\u002Fwww.hiddentao.com\u002Fcode\u002Fwordpress-page-tagger-plugin\u002F\u003C\u002Fp>\n\u003Ch3>Known Issues\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>None at the moment.\u003C\u002Fli>\n\u003C\u002Ful>\n","Page Tagger is a Wordpress plugin which lets you tag your pages just like you do with your posts. It adds a tagging widget in the page-editing view in …",2000,64163,1,"2017-11-28T17:02:00.000Z","2.8.4",[94,95,22,23],"pages","posts","http:\u002F\u002Fwww.hiddentao.com\u002Fcode\u002Fwordpress-page-tagger-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpage-tagger.0.4.2.zip",{"slug":99,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":106,"downloaded":107,"rating":67,"num_ratings":69,"last_updated":108,"tested_up_to":109,"requires_at_least":17,"requires_php":110,"tags":111,"homepage":114,"download_link":115,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"tagpages","TagPages","1.64","Bernhard Riedl","https:\u002F\u002Fprofiles.wordpress.org\u002Fneoxx\u002F","\u003Cp>This plugin is a \u003Ca href=\"https:\u002F\u002Fwww.bernhard-riedl.com\u002F2010\u002F08\u002F01\u002Ftagpages-tags-functionality-for-pages-in-wordpress-30\u002F\" rel=\"nofollow ugc\">follow-up\u003C\u002Fa> to the post which I wrote \u003Ca href=\"https:\u002F\u002Fwww.bernhard-riedl.com\u002F2007\u002F10\u002F06\u002Fwordpress-23-tagging-posts-and-pages\u002F\" rel=\"nofollow ugc\">a few years ago\u003C\u002Fa>. – The idea was (and still is) to equip pages with \u003Ca href=\"https:\u002F\u002Fen.support.wordpress.com\u002Fposts\u002Ftags\u002F\" rel=\"nofollow ugc\">tags\u003C\u002Fa> and include their number in a combined posts and pages \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FFunction_Reference\u002Fwp_tag_cloud\" rel=\"nofollow ugc\">tag-cloud\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>TagPages is fully compatible with \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FAdministration_Over_SSL\" rel=\"nofollow ugc\">https\u002FSSL\u002FTLS-sites\u003C\u002Fa> and WordPress multisite network.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Plugin’s website:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwww.bernhard-riedl.com\u002Fprojects\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.bernhard-riedl.com\u002Fprojects\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Author’s website:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwww.bernhard-riedl.com\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.bernhard-riedl.com\u002F\u003C\u002Fa>\u003C\u002Fp>\n","Adds post-tags functionality for pages.",1000,47139,"2017-11-09T06:11:00.000Z","4.9.29","5.3",[21,22,23,112,113],"taxonomies","taxonomy","https:\u002F\u002Fwww.bernhard-riedl.com\u002Fprojects\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftagpages.zip",{"slug":117,"name":118,"version":119,"author":120,"author_profile":121,"description":122,"short_description":123,"active_installs":124,"downloaded":125,"rating":67,"num_ratings":90,"last_updated":126,"tested_up_to":127,"requires_at_least":128,"requires_php":18,"tags":129,"homepage":133,"download_link":134,"security_score":135,"vuln_count":90,"unpatched_count":90,"last_vuln_date":136,"fetched_at":29},"calais-auto-tagger","WP Calais Auto Tagger","2.0","dangrossman","https:\u002F\u002Fprofiles.wordpress.org\u002Fdangrossman\u002F","\u003Cp>With the Calais Auto Tagger plugin, you’ll never have to think of tags for your posts again. The plugin uses the Open Calais API to perform semantic analysis of your post text and suggest tags for you. Add them to your post with just a click.\u003C\u002Fp>\n","The plugin performs semantic analysis of your posts to suggest tags using Open Calais.",40,31404,"2015-06-10T21:07:00.000Z","4.2.39","2.7",[130,131,132,22,23],"semantic","suggest","tagger","http:\u002F\u002Fwww.dangrossman.info\u002Fwp-calais-auto-tagger","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcalais-auto-tagger.zip",63,"2025-04-09 00:00:00",{"attackSurface":138,"codeSignals":170,"taintFlows":207,"riskAssessment":208,"analyzedAt":216},{"hooks":139,"ajaxHandlers":166,"restRoutes":167,"shortcodes":168,"cronEvents":169,"entryPointCount":27,"unprotectedCount":27},[140,146,151,156,160],{"type":141,"name":142,"callback":143,"file":144,"line":145},"action","add_meta_boxes","add_auto_tag_meta_box","auto-tag-meta-box.class.php",9,{"type":141,"name":147,"callback":148,"file":149,"line":150},"admin_menu","display_menu","auto-tag-setup.class.php",28,{"type":141,"name":152,"callback":153,"priority":90,"file":154,"line":155},"save_post","tag_posts","auto-tag.class.php",76,{"type":141,"name":157,"callback":158,"file":159,"line":124},"load-post.php","call_AutoTagMetaBox","auto-tag.php",{"type":161,"name":162,"callback":163,"priority":164,"file":159,"line":165},"filter","plugin_action_links","autotag_settings_link",10,61,[],[],[],[],{"dangerousFunctions":171,"sqlUsage":172,"outputEscaping":174,"fileOperations":27,"externalRequests":90,"nonceChecks":27,"capabilityChecks":32,"bundledLibraries":206},[],{"prepared":27,"raw":27,"locations":173},[],{"escaped":27,"rawEcho":175,"locations":176},14,[177,180,182,184,186,188,190,192,194,196,199,200,202,204],{"file":144,"line":178,"context":179},43,"raw output",{"file":149,"line":181,"context":179},73,{"file":149,"line":183,"context":179},75,{"file":149,"line":185,"context":179},95,{"file":149,"line":187,"context":179},105,{"file":149,"line":189,"context":179},107,{"file":149,"line":191,"context":179},131,{"file":149,"line":193,"context":179},202,{"file":149,"line":195,"context":179},213,{"file":197,"line":198,"context":179},"options-form.class.php",41,{"file":197,"line":178,"context":179},{"file":197,"line":201,"context":179},46,{"file":197,"line":203,"context":179},104,{"file":197,"line":205,"context":179},115,[],[],{"summary":209,"deductions":210},"The 'auto-tag' plugin v0.5.1 exhibits a generally positive security posture based on the provided static analysis. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events with unprotected entry points is a strong indicator of a limited attack surface. Furthermore, the code demonstrates a commitment to secure database interactions by exclusively using prepared statements for SQL queries. The plugin also correctly implements capability checks for its identified code signals.\n\nHowever, a significant concern arises from the complete lack of output escaping across all 14 identified output points. This indicates a high likelihood of cross-site scripting (XSS) vulnerabilities, allowing attackers to inject malicious scripts into the website if user-supplied data is not properly sanitized before being displayed. The single external HTTP request also warrants careful review to ensure it is not susceptible to man-in-the-middle attacks or other related vulnerabilities.\n\nThe plugin's vulnerability history is clean, with no recorded CVEs. This, combined with the limited attack surface and prepared SQL statements, suggests a well-maintained or less complex codebase. Nevertheless, the critical issue of unescaped output significantly overshadows these strengths, presenting a clear and present danger that needs immediate remediation.",[211,214],{"reason":212,"points":213},"All outputs are unescaped, risking XSS",8,{"reason":215,"points":32},"External HTTP request is a potential risk","2026-03-16T20:27:18.942Z",{"wat":218,"direct":227},{"assetPaths":219,"generatorPatterns":222,"scriptPaths":223,"versionParams":224},[220,221],"\u002Fwp-content\u002Fplugins\u002Fauto-tag\u002Fcss\u002Fauto-tag-admin.css","\u002Fwp-content\u002Fplugins\u002Fauto-tag\u002Fjs\u002Fauto-tag-admin.js",[],[221],[225,226],"auto-tag\u002Fcss\u002Fauto-tag-admin.css?ver=","auto-tag\u002Fjs\u002Fauto-tag-admin.js?ver=",{"cssClasses":228,"htmlComments":233,"htmlAttributes":234,"restEndpoints":240,"jsGlobals":241,"shortcodeOutput":242},[229,230,231,232],"taghint","newtag","tagadd","tagchecklist",[],[235,236,237,238,239],"id=\"tax-input-post_tag\"","name=\"auto_tag_removed_tags\"","id=\"new-tag-post_tag\"","name=\"auto_tag_removed_tag\"","name=\"autotag_disabled_on_post\"",[],[],[]]