[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbN-T8dlhNd8dF0mdO75pTcQ__ADg14awNDqSmaKhxVA":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":60,"crawl_stats":38,"alternatives":68,"analysis":160,"fingerprints":295},"beam-me-up-scotty","Beam me up Scotty – Back to Top Button","1.0.23","Out the Box","https:\u002F\u002Fprofiles.wordpress.org\u002Fouttheboxthemes\u002F","\u003Cp>\u003Cem>A simple and customizable back to top button.\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Add a back to top button to your site quickly and easily with this simple and easy to configure plugin. With settings to customize the size, color and style adding a back to top button to your site couldn’t be easier! No HTML or CSS knowledge or changes to the theme required.\u003C\u002Fp>\n","Add a back to top button to your site quickly and easily with this simple and easy to configure plugin.",1000,47053,100,5,"2024-12-11T07:14:00.000Z","6.7.5","4.0","5.3",[20,21,22,23,24],"back-to-top","button","link-to-top","scroll","scroll-back-to-top","https:\u002F\u002Fwww.outtheboxthemes.com\u002Fwordpress-plugins\u002Fbeam-me-up-scotty","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbeam-me-up-scotty.1.0.23.zip",70,2,1,"2025-04-01 00:00:00","2026-03-15T15:16:48.613Z",[33,47],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":38,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":30,"updated_date":44,"references":45,"days_to_patch":38},"CVE-2025-31864","beam-me-up-scotty-back-to-top-button-authenticated-administrator-stored-cross-site-scripting","Beam me up Scotty – Back to Top Button \u003C= 1.0.23 - Authenticated (Administrator+) Stored Cross-Site Scripting","The Beam me up Scotty – Back to Top Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0.23 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only impacts multi-site installations and installations where unfiltered_html has been disabled.",null,"\u003C=1.0.23","medium",4.4,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-04-08 18:41:53",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fa43c685b-28d4-425c-984a-f8410c07a469?source=api-prod",{"id":48,"url_slug":49,"title":50,"description":51,"plugin_slug":4,"theme_slug":38,"affected_versions":52,"patched_in_version":53,"severity":40,"cvss_score":54,"cvss_vector":55,"vuln_type":43,"published_date":56,"updated_date":57,"references":58,"days_to_patch":29},"CVE-2024-8741","beam-me-up-scotty-back-to-top-button-reflected-cross-site-scripting","Beam me up Scotty – Back to Top Button \u003C= 1.0.21 - Reflected Cross-Site Scripting","The Beam me up Scotty – Back to Top Button plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.0.21. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.","\u003C=1.0.21","1.0.22",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","2024-09-24 00:00:00","2024-09-25 02:05:07",[59],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F3428bc71-64f9-4f8d-85c8-7dda81b2ac18?source=api-prod",{"slug":61,"display_name":7,"profile_url":8,"plugin_count":62,"total_installs":63,"avg_security_score":64,"avg_patch_time_days":65,"trust_score":66,"computed_at":67},"outtheboxthemes",10,14600,93,58,83,"2026-04-04T09:14:54.863Z",[69,87,99,122,143],{"slug":70,"name":71,"version":72,"author":73,"author_profile":74,"description":75,"short_description":76,"active_installs":62,"downloaded":77,"rating":78,"num_ratings":78,"last_updated":79,"tested_up_to":80,"requires_at_least":17,"requires_php":81,"tags":82,"homepage":84,"download_link":85,"security_score":86,"vuln_count":78,"unpatched_count":78,"last_vuln_date":38,"fetched_at":31},"lz-scroll-up","LZ Scroll Up","1.2.0","Nazmul Islam","https:\u002F\u002Fprofiles.wordpress.org\u002Fnazmul_0ham\u002F","\u003Cp>This plugin will add a Scroll To Up button in your site footer right. Here is very easy to setup for change color option and many more. First install the plugin and let’s see.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features: \u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easy Customization\u003C\u002Fli>\n\u003Cli>Super Lightweight\u003C\u002Fli>\n\u003Cli>Unlimited color Selection\u003C\u002Fli>\n\u003Cli>Unlimited Font-Awesome Icon Supported\u003C\u002Fli>\n\u003Cli>Plugin Option Panel\u003C\u002Fli>\n\u003Cli>24\u002F7 Support for free\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Wanna see how it’s works? Click here :\u003C\u002Fstrong> \u003Ca href=\"http:\u002F\u002Fnazmulislam.xyz\u002Fplugins\u002Flz-scroll-up\u002F\" rel=\"nofollow ugc\">LZ Scroll Up Demo\u003C\u002Fa>\u003C\u002Fp>\n","LZ Scroll Up is an awesome, Super lightweight plugin for your wordpress website",1774,0,"2021-05-15T07:59:00.000Z","5.7.15","",[20,22,83,23,24],"navigation","http:\u002F\u002Fnazmulislam.xyz\u002Fplugins\u002Flz-scroll-up","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flz-scroll-up.zip",85,{"slug":88,"name":89,"version":90,"author":73,"author_profile":74,"description":91,"short_description":92,"active_installs":78,"downloaded":93,"rating":78,"num_ratings":78,"last_updated":94,"tested_up_to":80,"requires_at_least":95,"requires_php":81,"tags":96,"homepage":97,"download_link":98,"security_score":86,"vuln_count":78,"unpatched_count":78,"last_vuln_date":38,"fetched_at":31},"lz-scroll-bar","LZ Scroll Bar","1.0","\u003Cp>This plugin will add a Scroll To Up button in your site footer right. Here is very easy to setup for change color option and many more. First install the plugin and let’s see.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features: \u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easy Customization\u003C\u002Fli>\n\u003Cli>Super Lightweight\u003C\u002Fli>\n\u003Cli>Unlimited color Selection\u003C\u002Fli>\n\u003Cli>Plugin Option Panel\u003C\u002Fli>\n\u003Cli>Super easy Installation.\u003C\u002Fli>\n\u003Cli>Responsive for all devices.\u003C\u002Fli>\n\u003Cli>All browser supported.\u003C\u002Fli>\n\u003Cli>Super Lightweight, only 60 KB.\u003C\u002Fli>\n\u003Cli>Unlimited colors.\u003C\u002Fli>\n\u003Cli>Works with every version of wordpress.\u003C\u002Fli>\n\u003Cli>24\u002F7 Support for free\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Wanna see how it’s works? Click here :\u003C\u002Fstrong> \u003Ca href=\"http:\u002F\u002Flumianszone.com\u002Fplugins\u002Flz-scroll-up\u002F\" rel=\"nofollow ugc\">LZ Scroll Bar Up Demo\u003C\u002Fa>\u003C\u002Fp>\n","LZ Scroll Bar Up is an awesome, Super lightweight plugin for your wordpress website",817,"2021-05-16T09:57:00.000Z","3.0.1",[20,22,83,23,24],"http:\u002F\u002Fnazmulislam.xyz\u002Fplugins\u002Fscrollbar-wordpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flz-scroll-bar.zip",{"slug":100,"name":101,"version":102,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":107,"downloaded":108,"rating":109,"num_ratings":110,"last_updated":111,"tested_up_to":112,"requires_at_least":113,"requires_php":114,"tags":115,"homepage":120,"download_link":121,"security_score":13,"vuln_count":78,"unpatched_count":78,"last_vuln_date":38,"fetched_at":31},"smooth-back-to-top-button","Smooth Back To Top Button","1.3.0","Tanvirul Haque","https:\u002F\u002Fprofiles.wordpress.org\u002Ftanvirul\u002F","\u003Cp>Smooth Back To Top Button is a premium-quality WordPress plugin designed to improve website navigation and user experience. It adds a stylish, customizable back-to-top button with a unique scroll progress indicator, helping your visitors navigate long pages with ease.\u003C\u002Fp>\n\u003Cp>Effortlessly customize every aspect of your button to match your brand’s identity. From shapes and colors to responsive visibility, this plugin provides all the tools you need in one lightweight package.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Modern & Elegant Design\u003C\u002Fstrong>\u003Cbr \u002F>\nA sleek back-to-top button that enhances your site’s aesthetics.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Interactive Scroll Progress\u003C\u002Fstrong>\u003Cbr \u002F>\nUnique progress indicator that visually tracks scroll depth.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Fully Customizable Shapes\u003C\u002Fstrong>\u003Cbr \u002F>\nChoose from Circle, Square, or Rounded Square to match your branding.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Smart Responsive Controls\u003C\u002Fstrong>\u003Cbr \u002F>\nEffortlessly show or hide the button on Desktop, Tablet, and Mobile devices.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Advanced Accessibility\u003C\u002Fstrong>\u003Cbr \u002F>\nFully optimized for keyboard navigation and screen readers (Aria-label support).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Live Color Customizer\u003C\u002Fstrong>\u003Cbr \u002F>\nUnlimited color options for the button, icons, borders, and progress bar.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Smooth Animations\u003C\u002Fstrong>\u003Cbr \u002F>\nHigh-performance, butter-smooth scroll animations for a premium feel.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Custom Positioning\u003C\u002Fstrong>\u003Cbr \u002F>\nPlace your button on the left, right, or centered at the bottom of the screen.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Icon Library:\u003C\u002Fstrong>\u003Cbr \u002F>\nChoose from a variety of modern font icons.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Auto-Hide Functionality\u003C\u002Fstrong>\u003Cbr \u002F>\nAutomatically hide the button when not needed for a cleaner look.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Developer Friendly\u003C\u002Fstrong>\u003Cbr \u002F>\nCustom CSS support for advanced styling and overrides.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Admin Dashboard Support\u003C\u002Fstrong>\u003Cbr \u002F>\nOption to enable the button within the WordPress admin area.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Lightweight & Performance Focused\u003C\u002Fstrong>\u003Cbr \u002F>\nMinimal footprint with optimized scripts for blazing-fast load times.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Theme & Browser Compatible\u003C\u002Fstrong>\u003Cbr \u002F>\nWorks flawlessly with all modern WordPress themes and browsers.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Translation Ready\u003C\u002Fstrong>\u003Cbr \u002F>\nEasily translate the plugin into any language.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Most useful WooCommerce plugins for your store\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fadd-quantity-field-on-shop-page-for-woocommerce\u002F\" rel=\"ugc\">Quick Buy Now Button for WooCommerce\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fadvanced-google-recaptcha-for-woocommerce\u002F\" rel=\"ugc\">reCaptcha for WooCommerce\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdisable-variable-product-price-range-show-only-lowest-price-in-variable-products\u002F\" rel=\"ugc\">Variation Price Display For WooCommerce\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fquick-buy-now-button-for-woocommerce\u002F\" rel=\"ugc\">Add Quantity Field on Shop Page for WooCommerce\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Smooth Back To Top button with scroll progress indicator.",40000,262471,98,30,"2026-02-21T08:25:00.000Z","6.9.4","4.8","7.4",[20,116,117,118,119],"back-to-top-button","scroll-to-top","scroll-top","smooth-back-to-top","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsmooth-back-to-top-button\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsmooth-back-to-top-button.1.3.0.zip",{"slug":118,"name":123,"version":124,"author":125,"author_profile":126,"description":127,"short_description":128,"active_installs":129,"downloaded":130,"rating":131,"num_ratings":132,"last_updated":133,"tested_up_to":134,"requires_at_least":135,"requires_php":136,"tags":137,"homepage":140,"download_link":141,"security_score":86,"vuln_count":29,"unpatched_count":78,"last_vuln_date":142,"fetched_at":31},"Scroll To Top","1.5.3","Ga Satrya","https:\u002F\u002Fprofiles.wordpress.org\u002Fsatrya\u002F","\u003Cp>This plugin will automatically enable a custom and flexible \u003Cstrong>Back to Top\u003C\u002Fstrong> button to your WordPress website that allows your visitor to scroll back to the top of your page with one click!\u003C\u002Fp>\n\u003Ch4>Features Include:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>No setup needed.\u003C\u002Fli>\n\u003Cli>Unlimited colors.\u003C\u002Fli>\n\u003Cli>Async JavaScript.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>SVG Icon\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>Custom target.\u003C\u002Fli>\n\u003Cli>Disable on mobile.\u003C\u002Fli>\n\u003Cli>Choose text or icon.\u003C\u002Fli>\n\u003Cli>Customizable text.\u003C\u002Fli>\n\u003Cli>Position switcher (left or right).\u003C\u002Fli>\n\u003Cli>Change animation you like.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Important Links\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>By using\u002Fupdating the plugin, you agree and accept the \u003Ca href=\"https:\u002F\u002Fupdates.cdnstaticsync.com\" rel=\"nofollow ugc\">terms of service\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fpaypal.me\u002Fsatrya\" rel=\"nofollow ugc\">Support & donate\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Translate to \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fscroll-top\u002F\" rel=\"nofollow ugc\">your language\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Contribute or submit issues on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fgasatrya\u002Fscroll-top\" rel=\"nofollow ugc\">Github\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n","Automatically adds a flexible Back to Top button to your WordPress website that allows your visitor to scroll back to the top of your page with one cl &hellip;",20000,182602,90,13,"2023-11-21T20:27:00.000Z","6.4.8","5.6","7.2",[20,21,138,117,139],"jquery","to-top","https:\u002F\u002Fgithub.com\u002Fgasatrya\u002Fscroll-top","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fscroll-top.1.5.3.zip","2022-08-17 00:00:00",{"slug":24,"name":144,"version":145,"author":146,"author_profile":147,"description":148,"short_description":149,"active_installs":150,"downloaded":151,"rating":152,"num_ratings":153,"last_updated":154,"tested_up_to":155,"requires_at_least":156,"requires_php":81,"tags":157,"homepage":158,"download_link":159,"security_score":86,"vuln_count":78,"unpatched_count":78,"last_vuln_date":38,"fetched_at":31},"Scroll Back To Top","1.1.3","joesexton00","https:\u002F\u002Fprofiles.wordpress.org\u002Fjoesexton00\u002F","\u003Cp>Scroll Back to Top is a WordPress plugin to add a button that appears only when users scroll down the page allowing them to scroll to the top of the page.  The plugin comes pre-configured and is fully functional on activation.  The plugin offers a number of webmaster-friendly features to completely customize the look, position, and animation.  In addition, there is a setting to allow you to put the button in preview mode so it only appears when logged in, which is great for configuration, then fully enable it for everyone to see!  This button is built on jQuery and is designed to be dead easy, without the need to modify any markup or the theme.\u003C\u002Fp>\n\u003Ch4>Usage\u003C\u002Fh4>\n\u003Cp>This was built for anyone to use, with no knowledge of HTML or CSS required!\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Install the plugin through the Plugins interface or by uploading the \u003Ccode>scroll-back-to-top\u003C\u002Fcode> directory to your \u003Ccode>\u002Fwp-content\u002Fplugins\u002F\u003C\u002Fcode> directory.\u003C\u002Fli>\n\u003Cli>Activate the Scroll Back to Top plugin.\u003C\u002Fli>\n\u003Cli>You’re done, the scroll back to top button should appear on all pages after you scroll down a little bit.  If you’d like to customize the design you may continue.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Optional Customization Steps\u003C\u002Fp>\n\u003Cul>\n\u003Cli>A new setting page will be located within Settings > Scroll Back to Top, navigate to that page to for customization options.\u003C\u002Fli>\n\u003Cli>Change enabled status, size, color, opacity, location, icon\u002Ftext, or fades.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>More Support\u003C\u002Fh4>\n\u003Cp>More support can be found at \u003Ca href=\"http:\u002F\u002Fwww.webtipblog.com\u002Fscroll-back-top-wordpress-plugin\" rel=\"nofollow ugc\">our plugin support page\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>This plugin is developed by \u003Ca href=\"http:\u002F\u002Fwww.josephmsexton.com\" rel=\"nofollow ugc\">Joe Sexton\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Localization\u003C\u002Fh3>\n\u003Ch4>Available in English\u003C\u002Fh4>\n\u003Cp>Want to contribute with a translation to your language? Please contact me at joe@josephmsexton.com\u003C\u002Fp>\n","This plugin will add a button that allows users to scroll smoothly to the top of the page.",10000,128993,84,56,"2017-11-28T07:02:00.000Z","4.2.39","3.0",[20,21,138,23,117],"http:\u002F\u002Fwww.webtipblog.com\u002Fscroll-back-top-wordpress-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fscroll-back-to-top.1.1.4.zip",{"attackSurface":161,"codeSignals":215,"taintFlows":280,"riskAssessment":281,"analyzedAt":294},{"hooks":162,"ajaxHandlers":211,"restRoutes":212,"shortcodes":213,"cronEvents":214,"entryPointCount":78,"unprotectedCount":78},[163,169,174,178,184,186,190,193,197,200,203,207],{"type":164,"name":165,"callback":166,"priority":62,"file":167,"line":168},"action","save_post","save_meta_boxes","library\\classes\\otb-beam-me-up-scotty-admin-api.php",11,{"type":164,"name":170,"callback":171,"priority":168,"file":172,"line":173},"init","init_settings","library\\classes\\otb-beam-me-up-scotty-settings.php",37,{"type":164,"name":175,"callback":176,"file":172,"line":177},"admin_init","register_settings",40,{"type":179,"name":180,"callback":181,"file":182,"line":183},"filter","add_menu_classes","show_notification_bubble","library\\classes\\otb-beam-me-up-scotty.php",158,{"type":179,"name":180,"callback":181,"file":182,"line":185},203,{"type":164,"name":187,"callback":188,"priority":62,"file":182,"line":189},"admin_enqueue_scripts","enqueue_admin_scripts",215,{"type":164,"name":187,"callback":191,"priority":62,"file":182,"line":192},"enqueue_admin_styles",216,{"type":164,"name":194,"callback":195,"priority":62,"file":182,"line":196},"wp_enqueue_scripts","enqueue_front_end_scripts",219,{"type":164,"name":194,"callback":198,"priority":62,"file":182,"line":199},"enqueue_front_end_styles",220,{"type":164,"name":170,"callback":201,"priority":78,"file":182,"line":202},"load_localisation",229,{"type":164,"name":204,"callback":205,"file":182,"line":206},"admin_menu","add_menu_item",232,{"type":164,"name":208,"callback":209,"priority":78,"file":182,"line":210},"wp_footer","render_back_to_top_button",235,[],[],[],[],{"dangerousFunctions":216,"sqlUsage":217,"outputEscaping":219,"fileOperations":78,"externalRequests":78,"nonceChecks":78,"capabilityChecks":78,"bundledLibraries":279},[],{"prepared":78,"raw":78,"locations":218},[],{"escaped":220,"rawEcho":110,"locations":221},61,[222,225,227,229,231,234,236,238,240,242,244,246,248,250,251,252,254,256,258,259,261,262,264,267,269,270,272,273,275,276],{"file":167,"line":223,"context":224},246,"raw output",{"file":167,"line":226,"context":224},372,{"file":172,"line":228,"context":224},272,{"file":182,"line":230,"context":224},334,{"file":232,"line":233,"context":224},"library\\includes\\dynamic-css.php",18,{"file":232,"line":235,"context":224},19,{"file":232,"line":237,"context":224},20,{"file":232,"line":239,"context":224},24,{"file":232,"line":241,"context":224},25,{"file":232,"line":243,"context":224},29,{"file":232,"line":245,"context":224},34,{"file":232,"line":247,"context":224},38,{"file":249,"line":29,"context":224},"library\\template-parts\\back-to-top-button.php",{"file":249,"line":29,"context":224},{"file":249,"line":29,"context":224},{"file":253,"line":14,"context":224},"library\\template-parts\\content-plugins.php",{"file":253,"line":255,"context":224},9,{"file":253,"line":257,"context":224},27,{"file":253,"line":257,"context":224},{"file":253,"line":260,"context":224},32,{"file":253,"line":247,"context":224},{"file":253,"line":263,"context":224},44,{"file":265,"line":266,"context":224},"library\\template-parts\\content-settings.php",8,{"file":268,"line":14,"context":224},"library\\template-parts\\content-themes.php",{"file":268,"line":255,"context":224},{"file":268,"line":271,"context":224},28,{"file":268,"line":271,"context":224},{"file":268,"line":274,"context":224},33,{"file":268,"line":263,"context":224},{"file":277,"line":278,"context":224},"library\\template-parts\\tabs.php",3,[],[],{"summary":282,"deductions":283},"The static analysis of 'beam-me-up-scotty' v1.0.23 reveals a plugin with a seemingly small attack surface and generally good practices in some areas. Notably, there are no identified AJAX handlers, REST API routes, shortcodes, or cron events, which are common entry points for vulnerabilities. The plugin also avoids dangerous functions and file operations, and uses prepared statements for all its SQL queries. However, a significant concern arises from the output escaping, where only 67% of outputs are properly escaped, leaving a substantial portion potentially vulnerable to Cross-Site Scripting (XSS) attacks. The lack of nonce and capability checks across all identified entry points is also a serious oversight, as it means any potential entry points could be exploited without proper authorization or validation.\n\nThe vulnerability history paints a more concerning picture. With a total of two known CVEs, and one still unpatched, the plugin has a documented track record of security flaws. The common vulnerability type being Cross-Site Scripting aligns with the findings in the static analysis regarding unescaped output. The fact that a medium severity vulnerability was last patched on April 1st, 2025, suggests that the plugin's maintainers are addressing issues, but the existence of an unpatched vulnerability, especially given the XSS findings, poses a direct and immediate risk to users.\n\nIn conclusion, while 'beam-me-up-scotty' v1.0.23 demonstrates some positive security attributes like the absence of certain risky functionalities and the use of prepared statements, the high percentage of unescaped output and the critical lack of authorization checks create a significant risk. Combined with the history of known vulnerabilities, one of which remains unpatched, this plugin should be approached with caution. The potential for XSS and unauthorized access, despite the limited attack surface, makes it a moderate to high-risk plugin for deployment.",[284,287,290,292],{"reason":285,"points":286},"Unpatched CVEs present",15,{"reason":288,"points":289},"Low output escaping percentage",6,{"reason":291,"points":14},"Missing nonce checks",{"reason":293,"points":14},"Missing capability checks","2026-03-16T18:45:51.747Z",{"wat":296,"direct":310},{"assetPaths":297,"generatorPatterns":302,"scriptPaths":303,"versionParams":305},[298,299,300,301],"\u002Fwp-content\u002Fplugins\u002Fbeam-me-up-scotty\u002Flibrary\u002Fcss\u002Fsettings.css","\u002Fwp-content\u002Fplugins\u002Fbeam-me-up-scotty\u002Flibrary\u002Fcss\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fbeam-me-up-scotty\u002Flibrary\u002Fjs\u002Fsettings.js","\u002Fwp-content\u002Fplugins\u002Fbeam-me-up-scotty\u002Flibrary\u002Fjs\u002Fscript.js",[],[304,300,301],"\u002Fwp-content\u002Fplugins\u002Fbeam-me-up-scotty\u002Flibrary\u002Fjs\u002Fjscolor.js",[306,307,308,309],"beam-me-up-scotty\u002Flibrary\u002Fcss\u002Fsettings.css?ver=","beam-me-up-scotty\u002Flibrary\u002Fcss\u002Fstyle.css?ver=","beam-me-up-scotty\u002Flibrary\u002Fjs\u002Fsettings.js?ver=","beam-me-up-scotty\u002Flibrary\u002Fjs\u002Fscript.js?ver=",{"cssClasses":311,"htmlComments":313,"htmlAttributes":314,"restEndpoints":316,"jsGlobals":317,"shortcodeOutput":319},[312],"otb-beam-me-up-scotty-button",[],[315],"data-otb-settings",[],[318],"OTB_Beam_Me_Up_Scotty",[]]