[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLmLAe6JdRcTQ5pnVCpXaWWLMprsjUsGS9BMtKv0qBNo":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":38,"analysis":39,"fingerprints":325},"autoblog-wpmagic","Autoblog WPMagic","1.0.0","WPMagic","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpmagics\u002F","\u003Cp>Autoblog WPMagic Plugin for WordPress makes it possible to automate the task of publishing blog posts.\u003Cbr \u002F>\nThe plugin searches for files in a specific folder and publishes content in a blog post.\u003C\u002Fp>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>English – default, always included\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Tags\u003C\u002Fh3>\n\u003Cp>autoblog wordpress, auto blogging website, autoblogging plugin, wp robot autoblog plugin, wordpress autoblogging plugin, auto blogging news website, free autoblogging plugin for wordpress, best autoblogging plugin for wordpress, auto blog post wordpress plugin, best autoblogging plugin, wordpress autoblogging plugin free, auto blog plugin wordpress, wp autoblogging plugin, wordpress auto blog content generator\u003C\u002Fp>\n","Autoblog WPMagis is a WordPress Plugin for automatically publishing posts from a specific folder.",10,1293,0,"2022-02-16T21:24:00.000Z","5.9.13","4.7","7.0",[19,20,21,22,23],"auto-blog-post-wordpress-plugin","auto-blogging-website","autoblog-wordpress","autoblogging-plugin","wordpress-autoblogging-plugin","https:\u002F\u002Fwpmagic.cloud","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fautoblog-wpmagic.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":34,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},"wpmagics",2,1010,93,30,89,"2026-04-05T03:38:37.911Z",[],{"attackSurface":40,"codeSignals":82,"taintFlows":150,"riskAssessment":311,"analyzedAt":324},{"hooks":41,"ajaxHandlers":78,"restRoutes":79,"shortcodes":80,"cronEvents":81,"entryPointCount":13,"unprotectedCount":13},[42,48,51,54,58,61,64,67,70,73],{"type":43,"name":44,"callback":45,"file":46,"line":47},"action","admin_enqueue_scripts","anonymous","includes\\class-plugin.php",44,{"type":43,"name":49,"callback":45,"file":46,"line":50},"admin_init",45,{"type":43,"name":52,"callback":45,"file":46,"line":53},"admin_menu",47,{"type":55,"name":56,"callback":45,"file":46,"line":57},"filter","set-screen-option",49,{"type":43,"name":59,"callback":45,"file":46,"line":60},"before_delete_post",50,{"type":55,"name":62,"callback":45,"file":46,"line":63},"plugin_action_links_autoblog-wpm-free\u002Fautoblog-wpm-free.php",51,{"type":43,"name":65,"callback":45,"file":46,"line":66},"wp_enqueue_scripts",56,{"type":43,"name":68,"callback":45,"file":46,"line":69},"wp_footer",57,{"type":55,"name":71,"callback":45,"file":46,"line":72},"the_content",58,{"type":43,"name":74,"callback":75,"file":76,"line":77},"admin_footer","_js_vars","includes\\class-wp-list-table.php",167,[],[],[],[],{"dangerousFunctions":83,"sqlUsage":84,"outputEscaping":87,"fileOperations":148,"externalRequests":32,"nonceChecks":85,"capabilityChecks":13,"bundledLibraries":149},[],{"prepared":85,"raw":13,"locations":86},3,[],{"escaped":69,"rawEcho":88,"locations":89},28,[90,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128,130,132,134,136,138,140,142,144,146],{"file":91,"line":92,"context":93},"admin\\class-admin.php",247,"raw output",{"file":91,"line":95,"context":93},254,{"file":91,"line":97,"context":93},939,{"file":91,"line":99,"context":93},1042,{"file":91,"line":101,"context":93},1046,{"file":91,"line":103,"context":93},1175,{"file":91,"line":105,"context":93},1188,{"file":91,"line":107,"context":93},1227,{"file":91,"line":109,"context":93},1267,{"file":76,"line":111,"context":93},370,{"file":76,"line":113,"context":93},418,{"file":76,"line":115,"context":93},467,{"file":76,"line":117,"context":93},468,{"file":76,"line":119,"context":93},469,{"file":76,"line":121,"context":93},474,{"file":76,"line":123,"context":93},924,{"file":76,"line":125,"context":93},1174,{"file":76,"line":127,"context":93},1190,{"file":76,"line":129,"context":93},1200,{"file":76,"line":131,"context":93},1275,{"file":76,"line":133,"context":93},1344,{"file":76,"line":135,"context":93},1347,{"file":76,"line":137,"context":93},1355,{"file":76,"line":139,"context":93},1356,{"file":76,"line":141,"context":93},1357,{"file":76,"line":143,"context":93},1360,{"file":76,"line":145,"context":93},1361,{"file":76,"line":147,"context":93},1362,7,[],[151,175,186,205,217,228,241,270,279],{"entryPoint":152,"graph":153,"unsanitizedCount":173,"severity":174},"publishNextArticle (admin\\class-admin.php:391)",{"nodes":154,"edges":169},[155,160,164],{"id":156,"type":157,"label":158,"file":91,"line":159},"n0","source","$_GET",477,{"id":161,"type":162,"label":163,"file":91,"line":159},"n1","transform","→ autoblog_wpm_redirectUrl()",{"id":165,"type":166,"label":167,"file":91,"line":101,"wp_function":168},"n2","sink","echo() [XSS]","echo",[170,172],{"from":156,"to":161,"sanitized":171},false,{"from":161,"to":165,"sanitized":171},1,"medium",{"entryPoint":176,"graph":177,"unsanitizedCount":173,"severity":174},"articlePartsArray (admin\\class-admin.php:736)",{"nodes":178,"edges":183},[179,181,182],{"id":156,"type":157,"label":158,"file":91,"line":180},796,{"id":161,"type":162,"label":163,"file":91,"line":180},{"id":165,"type":166,"label":167,"file":91,"line":101,"wp_function":168},[184,185],{"from":156,"to":161,"sanitized":171},{"from":161,"to":165,"sanitized":171},{"entryPoint":187,"graph":188,"unsanitizedCount":32,"severity":174},"\u003Cclass-admin> (admin\\class-admin.php:0)",{"nodes":189,"edges":200},[190,193,194,196,198],{"id":156,"type":157,"label":191,"file":91,"line":192},"$_REQUEST['page']",269,{"id":161,"type":166,"label":167,"file":91,"line":192,"wp_function":168},{"id":165,"type":157,"label":195,"file":91,"line":159},"$_GET (x2)",{"id":197,"type":162,"label":163,"file":91,"line":159},"n3",{"id":199,"type":166,"label":167,"file":91,"line":101,"wp_function":168},"n4",[201,203,204],{"from":156,"to":161,"sanitized":202},true,{"from":165,"to":197,"sanitized":171},{"from":197,"to":199,"sanitized":171},{"entryPoint":206,"graph":207,"unsanitizedCount":173,"severity":174},"process_bulk_action (includes\\class-tables.php:357)",{"nodes":208,"edges":214},[209,212,213],{"id":156,"type":157,"label":158,"file":210,"line":211},"includes\\class-tables.php",417,{"id":161,"type":162,"label":163,"file":210,"line":211},{"id":165,"type":166,"label":167,"file":91,"line":101,"wp_function":168},[215,216],{"from":156,"to":161,"sanitized":171},{"from":161,"to":165,"sanitized":171},{"entryPoint":218,"graph":219,"unsanitizedCount":173,"severity":174},"add_page_on_top_links_wp_http_referrer (includes\\class-tables.php:693)",{"nodes":220,"edges":226},[221,224],{"id":156,"type":157,"label":222,"file":210,"line":223},"$_SERVER",694,{"id":161,"type":166,"label":167,"file":210,"line":225,"wp_function":168},713,[227],{"from":156,"to":161,"sanitized":171},{"entryPoint":229,"graph":230,"unsanitizedCount":173,"severity":174},"\u003Cclass-tables> (includes\\class-tables.php:0)",{"nodes":231,"edges":237},[232,233,234,235,236],{"id":156,"type":157,"label":222,"file":210,"line":223},{"id":161,"type":166,"label":167,"file":210,"line":225,"wp_function":168},{"id":165,"type":157,"label":158,"file":210,"line":211},{"id":197,"type":162,"label":163,"file":210,"line":211},{"id":199,"type":166,"label":167,"file":91,"line":101,"wp_function":168},[238,239,240],{"from":156,"to":161,"sanitized":202},{"from":165,"to":197,"sanitized":171},{"from":197,"to":199,"sanitized":171},{"entryPoint":242,"graph":243,"unsanitizedCount":269,"severity":174},"search_box (includes\\class-wp-list-table.php:349)",{"nodes":244,"edges":264},[245,248,249,252,253,256,258,262],{"id":156,"type":157,"label":246,"file":76,"line":247},"$_REQUEST['orderby']",357,{"id":161,"type":166,"label":167,"file":76,"line":247,"wp_function":168},{"id":165,"type":157,"label":250,"file":76,"line":251},"$_REQUEST['order']",360,{"id":197,"type":166,"label":167,"file":76,"line":251,"wp_function":168},{"id":199,"type":157,"label":254,"file":76,"line":255},"$_REQUEST['post_mime_type']",363,{"id":257,"type":166,"label":167,"file":76,"line":255,"wp_function":168},"n5",{"id":259,"type":157,"label":260,"file":76,"line":261},"n6","$_REQUEST['detached']",366,{"id":263,"type":166,"label":167,"file":76,"line":261,"wp_function":168},"n7",[265,266,267,268],{"from":156,"to":161,"sanitized":171},{"from":165,"to":197,"sanitized":171},{"from":199,"to":257,"sanitized":171},{"from":259,"to":263,"sanitized":171},4,{"entryPoint":271,"graph":272,"unsanitizedCount":13,"severity":278},"autoblogwpmview (admin\\class-admin.php:215)",{"nodes":273,"edges":276},[274,275],{"id":156,"type":157,"label":191,"file":91,"line":192},{"id":161,"type":166,"label":167,"file":91,"line":192,"wp_function":168},[277],{"from":156,"to":161,"sanitized":202},"low",{"entryPoint":280,"graph":281,"unsanitizedCount":309,"severity":310},"\u003Cclass-wp-list-table> (includes\\class-wp-list-table.php:0)",{"nodes":282,"edges":302},[283,284,285,286,287,288,289,290,291,294,296,298],{"id":156,"type":157,"label":246,"file":76,"line":247},{"id":161,"type":166,"label":167,"file":76,"line":247,"wp_function":168},{"id":165,"type":157,"label":250,"file":76,"line":251},{"id":197,"type":166,"label":167,"file":76,"line":251,"wp_function":168},{"id":199,"type":157,"label":254,"file":76,"line":255},{"id":257,"type":166,"label":167,"file":76,"line":255,"wp_function":168},{"id":259,"type":157,"label":260,"file":76,"line":261},{"id":263,"type":166,"label":167,"file":76,"line":261,"wp_function":168},{"id":292,"type":157,"label":222,"file":76,"line":293},"n8",1111,{"id":295,"type":166,"label":167,"file":76,"line":135,"wp_function":168},"n9",{"id":297,"type":157,"label":222,"file":76,"line":293},"n10",{"id":299,"type":166,"label":300,"file":76,"line":135,"wp_function":301},"n11","call_user_func() [RCE]","call_user_func",[303,304,305,306,307,308],{"from":156,"to":161,"sanitized":171},{"from":165,"to":197,"sanitized":171},{"from":199,"to":257,"sanitized":171},{"from":259,"to":263,"sanitized":171},{"from":292,"to":295,"sanitized":171},{"from":297,"to":299,"sanitized":171},6,"high",{"summary":312,"deductions":313},"The autoblog-wpmagic v1.0.0 plugin exhibits a mixed security posture. On the positive side, it demonstrates good practices by utilizing prepared statements for all SQL queries and incorporating nonce checks. The absence of known CVEs and bundled libraries is also a positive indicator. However, significant concerns arise from the taint analysis, which reveals a high number of flows with unsanitized paths, including one of high severity. This suggests a potential for sensitive data to be mishandled or exposed if these paths are exploited.",[314,317,319,322],{"reason":315,"points":316},"High severity taint flow with unsanitized path",12,{"reason":318,"points":148},"8 flows with unsanitized paths",{"reason":320,"points":321},"67% of output properly escaped",5,{"reason":323,"points":11},"0 capability checks","2026-03-17T01:23:57.806Z",{"wat":326,"direct":336},{"assetPaths":327,"generatorPatterns":330,"scriptPaths":331,"versionParams":333},[328,329],"\u002Fwp-content\u002Fplugins\u002Fautoblog-wpm-free\u002Fadmin\u002Fcss\u002Fautoblog-wpm-free-admin.min.css","\u002Fwp-content\u002Fplugins\u002Fautoblog-wpm-free\u002Fadmin\u002Fcss\u002Ffontawesome\u002Fall.min.css",[],[332],"\u002Fwp-content\u002Fplugins\u002Fautoblog-wpm-free\u002Fadmin\u002Fjs\u002Fautoblog-wpm-free-admin.min.js",[334,335],"autoblog-wpm-free\u002Fadmin\u002Fcss\u002Fautoblog-wpm-free-admin.min.css?ver=","autoblog-wpm-free\u002Fadmin\u002Fjs\u002Fautoblog-wpm-free-admin.min.js?ver=",{"cssClasses":337,"htmlComments":338,"htmlAttributes":339,"restEndpoints":340,"jsGlobals":341,"shortcodeOutput":342},[],[],[],[],[],[]]