[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fD7VRbLm0BzoovUdAITAKyT91hC-4h2qEhcWhQhQZGlk":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":36,"analysis":130,"fingerprints":216},"b2-analytics","B2 Analytics","1.0.5","b2","https:\u002F\u002Fprofiles.wordpress.org\u002Fb2stealth\u002F","\u003Cp>Up to 37% of adults use some form of ad blocking. This can be a big problem for some publishers and\u002For websites that monetize their assets with ads.\u003C\u002Fp>\n\u003Cp>B2 Ad Block Detection informs site owners of the number of visitors that they are unable to monetize due to ad blockers.\u003C\u002Fp>\n\u003Cp>The B2 Analytics service is free to use. Please agree to our \u003Ca href=\"https:\u002F\u002Fwww.b2.ai\u002Fterms-of-service\" rel=\"nofollow ugc\">Terms of Service\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwww.b2.ai\u002Fprivacy-policy\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa> before deploying this plugin.\u003C\u002Fp>\n\u003Cp>Features include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Overall view of visits to your site with and without ad blockers \u003C\u002Fli>\n\u003Cli>Breakdown by day and device type (mobile, tablet, desktop)\u003C\u002Fli>\n\u003Cli>Breakdown by country \u003C\u002Fli>\n\u003Cli>7 day & 30 day overview\u003C\u002Fli>\n\u003C\u002Ful>\n","B2 Ad Block Detection informs you of the number of browser hits on your WordPress site that have ad blockers",10,949,0,"2024-06-25T08:38:00.000Z","6.3.8","4.1","",[19,20,21,22,23],"ad-blocking","ad-blockers","adblockers","ads","advertising","https:\u002F\u002Fwww.b2.ai\u002Fwordpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fb2-analytics.1.0.5.zip",92,null,"2026-03-15T15:16:48.613Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"b2stealth",1,30,88,"2026-04-04T07:58:16.752Z",[37,58,79,92,114],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":26,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":55,"download_link":56,"security_score":57,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"ads-txt","Ads.txt Manager","1.4.6","10up","https:\u002F\u002Fprofiles.wordpress.org\u002F10up\u002F","\u003Cp>Create, manage, and validate your ads.txt and app-ads.txt from within WordPress, like any other content asset. Requires PHP 7.4+.\u003C\u002Fp>\n\u003Ch3>What is ads.txt?\u003C\u002Fh3>\n\u003Cp>Ads.txt is an initiative by the Interactive Advertising Bureau to enable publishers to take control over who can sell their ad inventory. Through our work at 10up with various publishers, we’ve created a way to manage and validate your ads.txt file from within WordPress, eliminating the need to upload a file. The validation baked into the plugin helps avoid malformed records, which can cause issues that end up cached for up to 24 hours and can lead to a drop in ad revenue.\u003C\u002Fp>\n\u003Ch3>Technical Notes\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Requires PHP 7.4+.\u003C\u002Fli>\n\u003Cli>Ad blockers may break syntax highlighting and pre-save error checking on the edit screen.\u003C\u002Fli>\n\u003Cli>Rewrites need to be enabled. Without rewrites, WordPress cannot know to supply \u003Ccode>\u002Fads.txt\u003C\u002Fcode> when requested.\u003C\u002Fli>\n\u003Cli>Your site URL must not contain a path (e.g. \u003Ccode>https:\u002F\u002Fexample.com\u002Fsite\u002F\u003C\u002Fcode> or path-based multisite installs). While the plugin will appear to function in the admin, it will not display the contents at \u003Ccode>https:\u002F\u002Fexample.com\u002Fsite\u002Fads.txt\u003C\u002Fcode>. This is because the plugin follows the IAB spec, which requires that the ads.txt file be located at the root of a domain or subdomain.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>What about ads.cert?\u003C\u002Fh3>\n\u003Cp>We’re closely monitoring continued developments in the ad fraud space, and see this plugin as not only a way to create and manage your ads.txt file but also be prepared for future changes and upgrades to specifications. Ads.cert is still in the extremely early stages so we don’t see any immediate concerns with implementing ads.txt.\u003C\u002Fp>\n\u003Ch3>Can I use this with multisite?\u003C\u002Fh3>\n\u003Cp>Yes! However, if you are using a subfolder installation it will only work for the main site. This is because you can only have one ads.txt for a given domain or subdomain per the \u003Ca href=\"https:\u002F\u002Fiabtechlab.com\u002Fads-txt\u002F\" rel=\"nofollow ugc\">ads.txt spec\u003C\u002Fa>.  Our recommendation is to only activate Ads.txt Manager per-site.\u003C\u002Fp>\n","Create, manage, and validate your ads.txt and app-ads.txt from within WordPress, like any other content asset.",100000,1903612,14,"2026-01-04T21:09:00.000Z","6.9.4","6.6","7.4",[53,22,38,23,54],"ad-manager","app-ads-txt","https:\u002F\u002Fgithub.com\u002F10up\u002Fads-txt","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fads-txt.1.4.6.zip",100,{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":66,"downloaded":67,"rating":13,"num_ratings":13,"last_updated":68,"tested_up_to":69,"requires_at_least":70,"requires_php":71,"tags":72,"homepage":17,"download_link":77,"security_score":57,"vuln_count":32,"unpatched_count":13,"last_vuln_date":78,"fetched_at":28},"website-article-monetization-by-magenet","Website Article Monetization By MageNet","1.0.12","MageNet","https:\u002F\u002Fprofiles.wordpress.org\u002Fmagenet\u002F","\u003Cp>Article Plugin by MageNet is a free WordPress plugin that allows you to monetize your website through the automated placement of third-party content on your site.\u003C\u002Fp>\n\u003Cp>To install the Article Plugin, you need to \u003Ca href=\"https:\u002F\u002Fwww.magenet.com\u002F\" rel=\"nofollow ugc\">sign in\u002Fup\u003C\u002Fa> to your MageNet account and get your MageNet Key.\u003C\u002Fp>\n\u003Cp>Time-saving\u003Cbr \u002F>\nWith the Article Plugin, you’ll start getting new relevant content on your website automatically. After your approval, this plugin creates a new webpage on your site and place an article from your buyers.\u003C\u002Fp>\n\u003Cp>Full control\u003Cbr \u002F>\nYou have the total control over the content placed on your site even though the Article Plugin does all the content placement work for you. You can reject the task for the content placement if you don’t like the provided content or find it irrelevant to your website niche.\u003C\u002Fp>\n\u003Cp>Better chances to rank high in SERPs\u003Cbr \u002F>\nWith the Article Plugin, you’ll be able to regularly update your website with the new content. As a result, you’ll boost your chances to rank for new keywords in SERPs.\u003C\u002Fp>\n\u003Cp>Automated changes\u003Cbr \u002F>\nArticle Plugin will take control of any changes or amendments in the provided content if there will be any.\u003C\u002Fp>\n\u003Cp>Auto removal\u003Cbr \u002F>\nIf the buyer cancels the provided content, the Article Plugin will automatically remove such an article from your website as soon as possible.\u003C\u002Fp>\n\u003Cp>Error checking\u003Cbr \u002F>\nThe Article Plugin will save you from errors that might occur during manual content placement.\u003C\u002Fp>\n","Get additional income from your website or blog by placing text ads automatically.",20000,94404,"2025-05-21T08:32:00.000Z","6.8.5","4.9","5.2.4",[23,73,74,75,76],"contextual-ads","contextual-advertising","earn-money-online","website-monetization","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwebsite-article-monetization-by-magenet.zip","2024-03-19 00:00:00",{"slug":80,"name":81,"version":82,"author":62,"author_profile":63,"description":83,"short_description":65,"active_installs":66,"downloaded":84,"rating":85,"num_ratings":86,"last_updated":87,"tested_up_to":69,"requires_at_least":88,"requires_php":17,"tags":89,"homepage":17,"download_link":90,"security_score":57,"vuln_count":32,"unpatched_count":13,"last_vuln_date":91,"fetched_at":28},"website-monetization-by-magenet","Website Monetization by MageNet","1.0.29.3","\u003Cp>\u003Ca href=\"http:\u002F\u002Fwww.magenet.com\u002F\" rel=\"nofollow ugc\">Website Monetization Plugin by MageNet\u003C\u002Fa> is a WordPress plugin that allows you to sell contextual ads from your pages automatically and receive payments with PayPal.\u003C\u002Fp>\n\u003Cp>To get started \u003Ca href=\"http:\u002F\u002Fwww.magenet.com\u002F\" rel=\"nofollow ugc\">sign up\u003C\u002Fa> for a MageNet Key.\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FNNgahP_4DOo?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Hassle free\u003C\u002Fstrong>\u003Cbr \u002F>\nWe deal with the advertisers and offer relevant contextual ads to place. It’s free and easy to use.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Regular payouts\u003C\u002Fstrong>\u003Cbr \u002F>\nWithdraw your earnings with ease. Transfers are made via PayPal and WebMoney.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Full control\u003C\u002Fstrong>\u003Cbr \u002F>\nWe crawl all the pages of your site and list them for sales. You can set up the pages available or forbidden for advertising and set up the desired prices for your ads.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Safe and secure\u003C\u002Fstrong>\u003Cbr \u002F>\nAll your personal data is safe. Your websites will only be available to our trusted advertisers.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Statistics\u003C\u002Fstrong>\u003Cbr \u002F>\nDetailed information on all your current ads and listed pages of your sites.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Affiliate\u003C\u002Fstrong>\u003Cbr \u002F>\nYou will have access to awesome affiliate program available to our publishers.\u003C\u002Fp>\n",236447,58,7,"2025-05-20T15:55:00.000Z","4.0",[23,73,74,75,76],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwebsite-monetization-by-magenet.zip","2023-03-16 00:00:00",{"slug":93,"name":94,"version":95,"author":96,"author_profile":97,"description":98,"short_description":99,"active_installs":100,"downloaded":101,"rating":102,"num_ratings":47,"last_updated":103,"tested_up_to":104,"requires_at_least":105,"requires_php":17,"tags":106,"homepage":110,"download_link":111,"security_score":112,"vuln_count":32,"unpatched_count":13,"last_vuln_date":113,"fetched_at":28},"meks-easy-ads-widget","Meks Easy Ads Widget","2.0.9","Meks","https:\u002F\u002Fprofiles.wordpress.org\u002Fmekshq\u002F","\u003Cp>With this plugin you can create unlimited number of ads inside your WordPress widget. There are several smart options provided to customize ads for your needs.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Create unlimited number of ads inside one widget\u003C\u002Fli>\n\u003Cli>Choose from predefined sizes or define your custom size\u003C\u002Fli>\n\u003Cli>Support for both image ads and script based ads\u003C\u002Fli>\n\u003Cli>Randomize ads ordering\u003C\u002Fli>\n\u003Cli>Limit number of ads per view (page load)\u003C\u002Fli>\n\u003Cli>Autoplay rotate ads\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Meks Easy Ads Widget plugin is created by \u003Ca href=\"https:\u002F\u002Fmekshq.com\" rel=\"nofollow ugc\">Meks\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Live example?\u003C\u002Fh3>\n\u003Cp>You can see Meks Easy Ads Widget live example on our \u003Ca href=\"https:\u002F\u002Fmekshq.com\u002Fdemo\u002Fherald\" rel=\"nofollow ugc\">Herald theme demo website\u003C\u002Fa>\u003C\u002Fp>\n","Display unlimited number of ads inside your WordPress widget.",10000,467911,82,"2024-07-25T13:08:00.000Z","6.6.5","3.0",[107,22,23,108,109],"ad","affiliate","widget","http:\u002F\u002Fmekshq.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmeks-easy-ads-widget.zip",91,"2024-07-06 00:00:00",{"slug":115,"name":116,"version":6,"author":115,"author_profile":117,"description":118,"short_description":119,"active_installs":120,"downloaded":121,"rating":13,"num_ratings":13,"last_updated":122,"tested_up_to":104,"requires_at_least":123,"requires_php":124,"tags":125,"homepage":128,"download_link":129,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"hbagency","HBAgency","https:\u002F\u002Fprofiles.wordpress.org\u002Fhbagency\u002F","\u003Cp>The official HBAgency (https:\u002F\u002Fwww.hbagency.it) plugin makes the integration process effortless.\u003C\u002Fp>\n\u003Cp>With this plugin, you can:\u003Cbr \u002F>\n – Easily integrate your WordPress website with our advanced technology.\u003Cbr \u002F>\n – Automatically insert and update ads.txt, scripts, and ad placements.\u003Cbr \u002F>\n – Manage placements and edit additional lines in your ads.txt file with ease.\u003C\u002Fp>\n\u003Cp>Thank you for choosing our platform.\u003C\u002Fp>\n\u003Cp>By using this plugin you agree to our Terms and Conditions (https:\u002F\u002Fwww.hbagency.it\u002Fterms https:\u002F\u002Fwww.hbagency.ai\u002Fterms)\u003C\u002Fp>\n","Effortlessly integrate HBAgency on your website with our official plugin. Insert ads.txt, manage placements, and integrate our script seamlessly.",9000,9781,"2024-12-10T10:33:00.000Z","6.0","7.3",[22,23,115,126,127],"monetize","revenues","https:\u002F\u002Fhbagency.ai\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhbagency.1.0.5.zip",{"attackSurface":131,"codeSignals":168,"taintFlows":177,"riskAssessment":205,"analyzedAt":215},{"hooks":132,"ajaxHandlers":164,"restRoutes":165,"shortcodes":166,"cronEvents":167,"entryPointCount":13,"unprotectedCount":13},[133,138,142,146,149,153,155,157,159,161],{"type":134,"name":135,"callback":136,"file":137,"line":102},"action","admin_menu","create_plugin_settings_page","includes\\class-b2-analytics.php",{"type":134,"name":139,"callback":140,"file":137,"line":141},"admin_init","add_css_js",83,{"type":134,"name":143,"callback":144,"file":137,"line":145},"wp_enqueue_scripts","my_plugin_scripts",113,{"type":134,"name":147,"callback":140,"file":137,"line":148},"admin_enqueue_scripts",114,{"type":134,"name":150,"callback":151,"file":137,"line":152},"plugins_loaded","anonymous",993,{"type":134,"name":147,"callback":151,"file":137,"line":154},1009,{"type":134,"name":147,"callback":151,"file":137,"line":156},1010,{"type":134,"name":143,"callback":151,"file":137,"line":158},1025,{"type":134,"name":143,"callback":151,"file":137,"line":160},1026,{"type":134,"name":162,"callback":151,"file":137,"line":163},"wp_footer",1028,[],[],[],[],{"dangerousFunctions":169,"sqlUsage":170,"outputEscaping":172,"fileOperations":13,"externalRequests":175,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":176},[],{"prepared":13,"raw":13,"locations":171},[],{"escaped":173,"rawEcho":13,"locations":174},20,[],2,[],[178,197],{"entryPoint":179,"graph":180,"unsanitizedCount":13,"severity":196},"plugin_settings_page_content (includes\\class-b2-analytics.php:111)",{"nodes":181,"edges":193},[182,187],{"id":183,"type":184,"label":185,"file":137,"line":186},"n0","source","$_SERVER",145,{"id":188,"type":189,"label":190,"file":137,"line":191,"wp_function":192},"n1","sink","echo() [XSS]",843,"echo",[194],{"from":183,"to":188,"sanitized":195},true,"low",{"entryPoint":198,"graph":199,"unsanitizedCount":13,"severity":196},"\u003Cclass-b2-analytics> (includes\\class-b2-analytics.php:0)",{"nodes":200,"edges":203},[201,202],{"id":183,"type":184,"label":185,"file":137,"line":186},{"id":188,"type":189,"label":190,"file":137,"line":191,"wp_function":192},[204],{"from":183,"to":188,"sanitized":195},{"summary":206,"deductions":207},"The b2-analytics plugin v1.0.5 exhibits a generally strong security posture based on the provided static analysis. The absence of dangerous functions, raw SQL queries, file operations, and the consistent use of prepared statements and output escaping are significant strengths.  Furthermore, the lack of known CVEs and a clear vulnerability history suggests a well-maintained codebase. However, there are notable areas for improvement. The plugin makes external HTTP requests without clear indications of secure handling or authentication, which could be a potential vector for certain attacks if the endpoints are not properly secured. Additionally, the complete lack of nonce and capability checks across all identified entry points is a significant concern. While the attack surface is reported as zero, this could be due to the analysis not identifying any traditional entry points, or it implies that any potential entry points would be entirely unprotected, leaving the plugin vulnerable to unauthorized actions if any were discovered or introduced.\n\nOverall, the plugin has a good foundation with its secure coding practices for SQL and output handling. The primary weaknesses lie in the lack of explicit authorization and validation mechanisms (nonces and capabilities) for any potential interactions, and the external HTTP requests that could introduce risks if not carefully managed. The absence of historical vulnerabilities is positive, but the identified code signals necessitate a cautious approach.  The plugin's security could be significantly enhanced by implementing robust authorization checks and securing its external communication channels.",[208,210,212],{"reason":209,"points":11},"No nonce checks found",{"reason":211,"points":11},"No capability checks found",{"reason":213,"points":214},"External HTTP requests without explicit checks",5,"2026-03-17T01:21:49.277Z",{"wat":217,"direct":232},{"assetPaths":218,"generatorPatterns":224,"scriptPaths":225,"versionParams":226},[219,220,221,222,223],"\u002Fwp-content\u002Fplugins\u002Fb2-analytics\u002Fcss\u002Fbootstrap\u002Fbootstrap.min.css","\u002Fwp-content\u002Fplugins\u002Fb2-analytics\u002Fcss\u002Fapp.css","\u002Fwp-content\u002Fplugins\u002Fb2-analytics\u002Fjs\u002Fapexcharts.min.js","\u002Fwp-content\u002Fplugins\u002Fb2-analytics\u002Fjs\u002Fpopper.min.js","\u002Fwp-content\u002Fplugins\u002Fb2-analytics\u002Fjs\u002Fbootstrap.min.js",[],[221,222,223],[227,228,229,230,231],"b2-analytics\u002Fcss\u002Fbootstrap\u002Fbootstrap.min.css?ver=","b2-analytics\u002Fcss\u002Fapp.css?ver=","b2-analytics\u002Fjs\u002Fapexcharts.min.js?ver=","b2-analytics\u002Fjs\u002Fpopper.min.js?ver=","b2-analytics\u002Fjs\u002Fbootstrap.min.js?ver=",{"cssClasses":233,"htmlComments":234,"htmlAttributes":235,"restEndpoints":236,"jsGlobals":237,"shortcodeOutput":238},[],[],[],[],[],[]]