[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRRniJ_cOz4quF2vo3B51MIp-KLTXisJ8MUA4VVogxV4":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":38,"analysis":133,"fingerprints":229},"batch-validator","Batch Validator","1.2","Roland Rust","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpdprx\u002F","\u003Cp>It functions as a frontend for the Markup Validator Web Service API on http:\u002F\u002Fvalidator.w3.org. Stylesheets are checked as well.\u003C\u002Fp>\n\u003Cp>Languages available:\u003Cbr \u002F>\n+ english\u003Cbr \u002F>\n+ deutsch(german)\u003C\u002Fp>\n","This plugin performs a batch markup validation check over your entire WordPress website.",10,3311,0,"2007-09-02T23:46:00.000Z","2.2.2","2.1","",[19,20,21,22,23],"html","markup-validation","validator","w3c","xhtml","http:\u002F\u002Fwordpress.designpraxis.at","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbatch-validator.zip",85,null,"2026-03-15T14:54:45.397Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":34,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},"wpdprx",9,180,88,30,86,"2026-04-04T14:07:27.727Z",[39,62,84,99,115],{"slug":40,"name":41,"version":42,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":49,"num_ratings":50,"last_updated":51,"tested_up_to":52,"requires_at_least":53,"requires_php":17,"tags":54,"homepage":57,"download_link":58,"security_score":26,"vuln_count":59,"unpatched_count":13,"last_vuln_date":60,"fetched_at":61},"validated","Validated","2.1.2","Allan Collins","https:\u002F\u002Fprofiles.wordpress.org\u002Fcollinsinternet\u002F","\u003Cp>Is your website up to W3C HTML coding standards?  This plugin will allow you to test each page or post on your site against the W3C Validator.\u003C\u002Fp>\n\u003Cp>Want to contribute? Fork it: https:\u002F\u002Fgithub.com\u002Fallan23\u002Fvalidated\u003C\u002Fp>\n","This plugin will allow you to check your pages\u002Fposts HTML against the W3C Validator.",700,25451,80,5,"2019-12-04T00:15:00.000Z","5.3.21","3.7",[55,19,56,22,23],"code","validation","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fvalidated\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvalidated.zip",1,"2014-05-28 00:00:00","2026-03-15T15:16:48.613Z",{"slug":63,"name":64,"version":65,"author":66,"author_profile":67,"description":68,"short_description":69,"active_installs":70,"downloaded":71,"rating":72,"num_ratings":59,"last_updated":73,"tested_up_to":74,"requires_at_least":75,"requires_php":76,"tags":77,"homepage":81,"download_link":82,"security_score":83,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":61},"html-validation","HTML Validation","1.0.17","seshelby","https:\u002F\u002Fprofiles.wordpress.org\u002Fseshelby\u002F","\u003Cp>The HTML Validation Plugin runs in the background, identifies and reports HTML validation errors on your website. Once activated, the HTML Validation plugin uses WordPress cron to scan your website content in the background. A progress bar on the report screen indicates scan progress. HTML Validation is provided by \u003Ca href=\"https:\u002F\u002Fabout.validator.nu\u002F\" rel=\"nofollow ugc\">Validator.nu\u003C\u002Fa>. Please refer to the provided \u003Ca href=\"https:\u002F\u002Fabout.validator.nu\u002F#tos\" rel=\"nofollow ugc\">privacy policy and terms of use\u003C\u002Fa>. Posts may also be scanned using the Validate HTML link provided on the “All Posts” screen.\u003C\u002Fp>\n\u003Cp>The HTML Validation Pro extension adds options to automatically correct many HTML Validation issues. This one of a kind plugin could save you hundreds of hours of work finding and correcting HTML validation issues. \u003Ca href=\"https:\u002F\u002Fwww.alumnionlineservices.com\u002Fphp-scripts\u002Fhtml-validation\u002F#proext\" rel=\"nofollow ugc\">Visit our website to learn more and add the Pro Extension\u003C\u002Fa>\u003C\u002Fp>\n","The HTML Validation Plugin runs in the background, identifies and reports HTML validation errors on your website. Once activated, the HTML Validation  …",400,9075,20,"2025-11-16T12:47:00.000Z","6.8.5","4.6","5.5",[78,79,63,80,20],"accessibility","code-validation","html-validator","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhtml-validation","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhtml-validation.1.0.17.zip",100,{"slug":85,"name":86,"version":87,"author":88,"author_profile":89,"description":90,"short_description":91,"active_installs":72,"downloaded":92,"rating":49,"num_ratings":59,"last_updated":17,"tested_up_to":93,"requires_at_least":17,"requires_php":17,"tags":94,"homepage":17,"download_link":97,"security_score":83,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":98},"xhtml-easy-validator","(x)html easy validator","0.4","Nikoya","https:\u002F\u002Fprofiles.wordpress.org\u002Fnicolas-andre\u002F","\u003Cp>Check the doctype validity using W3c validator (html , xhtml , … ) when creating or updating  page \u002F post \u002F custom post type and show the result in backend\u003Cbr \u002F>\nIt show the result in back-end in sortable column, a link is add to the w3c for all file to help you to correct html error.\u003C\u002Fp>\n\u003Cp>Very easy to see if a post \u002F page is valid or not.\u003C\u002Fp>\n\u003Cp>This plugin can check the W3C validity of your page \u002F post or custom post type even if the site is not accessible from the Internet (if you work on local system for example)\u003C\u002Fp>\n","Check the doctype validity using W3c validator (html , xhtml , ... ) when creating or updating  page \u002F post \u002F custom post type and show the result in  …",5538,"3.2.1",[19,95,22,96,23],"html5","w3c-validation","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fxhtml-easy-validator.0.4.zip","2026-03-15T10:48:56.248Z",{"slug":100,"name":101,"version":102,"author":17,"author_profile":103,"description":104,"short_description":105,"active_installs":11,"downloaded":106,"rating":13,"num_ratings":13,"last_updated":107,"tested_up_to":108,"requires_at_least":109,"requires_php":17,"tags":110,"homepage":113,"download_link":114,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":61},"wp-validator","WP-Validate","1.0","https:\u002F\u002Fprofiles.wordpress.org\u002Fjamierumbelow\u002F","\u003Cp>WP-Validate indexes your site, collecting all the blog posts, pages and other published content, and submits it to the W3C’s HTML Validator, which then returns the response.\u003C\u002Fp>\n\u003Cp>WP-Validate then lists the valid pages, and the invalid pages, with a link to the specific validator URL.\u003C\u002Fp>\n","WP-Validate collects all the pages on your site and runs them through the W3C's HTML Validator.",3187,"2009-01-30T23:33:00.000Z","2.7","2.5",[111,112,56,22,23],"automatic","css","http:\u002F\u002Fwww.jamierumbelow.net\u002Fphp\u002Fwp-validator","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-validator.1.03.zip",{"slug":116,"name":117,"version":118,"author":119,"author_profile":120,"description":121,"short_description":122,"active_installs":83,"downloaded":123,"rating":83,"num_ratings":59,"last_updated":124,"tested_up_to":125,"requires_at_least":126,"requires_php":17,"tags":127,"homepage":131,"download_link":132,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":61},"gallery-shortcode-style-to-head","Gallery Shortcode Style to Head","2.4","Matt Martz","https:\u002F\u002Fprofiles.wordpress.org\u002Fsivel\u002F","\u003Cp>Moves the gallery shortcode styles to the head so it doesn’t break XHTML\u003Cbr \u002F>\nvalidation; allows disabling or modifying the default gallery styles.\u003C\u002Fp>\n\u003Cp>By default when using the WordPress gallery, the styles are placed into the\u003Cbr \u002F>\npost content which breaks XHTML validation. This plugin moves the style into\u003Cbr \u002F>\nthe head of the page using a look-ahead to determine if the [gallery]\u003Cbr \u002F>\nshortcode is used in any posts.\u003C\u002Fp>\n\u003Cp>This plugin also gives you the option to modify the default gallery style\u003Cbr \u002F>\nCSS or disable the gallery styles entirely (so you can control it from your\u003Cbr \u002F>\ntemplate CSS files).\u003C\u002Fp>\n\u003Cp>This plugin uses ideas recommended in a patch located at\u003Cbr \u002F>\nhttps:\u002F\u002Ftrac.wordpress.org\u002Fattachment\u002Fticket\u002F6380\u002F6380-style.diff\u003C\u002Fp>\n\u003Cp>Special thanks to\u003Cbr \u002F>\n* The original author: Matt Martz, http:\u002F\u002Fsivel.net\u003Cbr \u002F>\n* Serbo-Croatian (sr_RS) translation: Borisa Djuraskovic, http:\u002F\u002Fwww.webhostinghub.com\u003Cbr \u002F>\n* Spanish (es_ES) translation: Ogi Djuraskovic, http:\u002F\u002Fwww.webhostinghub.com\u002F\u003C\u002Fp>\n","Moves the gallery shortcode styles to the head so it doesn't break XHTML validation; allows disabling or modifying the default gallery styles.",11493,"2015-04-02T16:12:00.000Z","4.1.42","3.3",[112,128,129,130,23],"gallery","shortcode","style","http:\u002F\u002Fwww.intersanity.com\u002Fsoftware\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgallery-shortcode-style-to-head.2.4.zip",{"attackSurface":134,"codeSignals":157,"taintFlows":188,"riskAssessment":215,"analyzedAt":228},{"hooks":135,"ajaxHandlers":153,"restRoutes":154,"shortcodes":155,"cronEvents":156,"entryPointCount":13,"unprotectedCount":13},[136,142,146,150],{"type":137,"name":138,"callback":139,"file":140,"line":141},"action","init","dprx_bval_init_locale","batch-validator.php",25,{"type":137,"name":138,"callback":143,"priority":144,"file":140,"line":145},"dprx_bval_ajax_validate",99,26,{"type":137,"name":147,"callback":148,"file":140,"line":149},"admin_menu","dprx_bval_add_admin_pages",44,{"type":137,"name":151,"callback":152,"file":140,"line":144},"admin_print_scripts","dprx_bval_loadjs",[],[],[],[],{"dangerousFunctions":158,"sqlUsage":159,"outputEscaping":161,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":187},[],{"prepared":50,"raw":13,"locations":160},[],{"escaped":13,"rawEcho":162,"locations":163},11,[164,167,169,171,173,175,177,179,181,183,185],{"file":140,"line":165,"context":166},65,"raw output",{"file":140,"line":168,"context":166},68,{"file":140,"line":170,"context":166},71,{"file":140,"line":172,"context":166},73,{"file":140,"line":174,"context":166},81,{"file":140,"line":176,"context":166},109,{"file":140,"line":178,"context":166},135,{"file":140,"line":180,"context":166},151,{"file":140,"line":182,"context":166},156,{"file":140,"line":184,"context":166},157,{"file":140,"line":186,"context":166},158,[],[189,206],{"entryPoint":190,"graph":191,"unsanitizedCount":59,"severity":205},"dprx_bval_loadjs (batch-validator.php:101)",{"nodes":192,"edges":202},[193,197],{"id":194,"type":195,"label":196,"file":140,"line":176},"n0","source","$_REQUEST['page']",{"id":198,"type":199,"label":200,"file":140,"line":176,"wp_function":201},"n1","sink","echo() [XSS]","echo",[203],{"from":194,"to":198,"sanitized":204},false,"medium",{"entryPoint":207,"graph":208,"unsanitizedCount":59,"severity":214},"\u003Cbatch-validator> (batch-validator.php:0)",{"nodes":209,"edges":212},[210,211],{"id":194,"type":195,"label":196,"file":140,"line":176},{"id":198,"type":199,"label":200,"file":140,"line":176,"wp_function":201},[213],{"from":194,"to":198,"sanitized":204},"low",{"summary":216,"deductions":217},"The 'batch-validator' plugin v1.2 exhibits a mixed security posture. On the positive side, it has no known vulnerabilities and utilizes prepared statements for all SQL queries, demonstrating good data handling practices. There are no external HTTP requests or file operations, which generally reduces the attack surface. However, the complete lack of output escaping is a significant concern, leaving the plugin vulnerable to Cross-Site Scripting (XSS) attacks. Additionally, the absence of nonce checks and capability checks on all identified entry points (though currently zero) suggests a potential future risk if new entry points are added without proper security considerations. The taint analysis showing unsanitized paths, even without critical or high severity, is also a red flag that warrants attention, indicating potential data leakage or manipulation vectors that could be exploited if the entry points were accessible.",[218,221,224,226],{"reason":219,"points":220},"0% of outputs properly escaped",15,{"reason":222,"points":223},"Taint analysis shows unsanitized paths",7,{"reason":225,"points":50},"No nonce checks",{"reason":227,"points":50},"No capability checks","2026-03-16T23:38:11.160Z",{"wat":230,"direct":236},{"assetPaths":231,"generatorPatterns":233,"scriptPaths":234,"versionParams":235},[232],"\u002Fwp-content\u002Fplugins\u002Fbatch-validator\u002Fimages\u002Floading.gif",[],[],[],{"cssClasses":237,"htmlComments":239,"htmlAttributes":240,"restEndpoints":244,"jsGlobals":245,"shortcodeOutput":249},[238],"wrap",[],[241,242,243],"id=\"dprx_loadingstatus\"","id=\"dprx_batchvalidator\"","name=\"dprx_bval_ajax\"",[],[246,247,248],"dprxu","dprx_bval_js","Ajax.PeriodicalUpdater",[]]