[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIO15HKFp0eK-NEbPYR5uETxeTMGc86bQh5suhfJKHPk":3,"$fMGNXko-_h0lvsUlvlAoSxNr6YPcpqVVGPPWQQigHgUM":390,"$f1i-nMxtWy4sT4w3QpD5mFu3BJvBs1_4tCvXbutfSvA0":395},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"discovery_status":28,"vulnerabilities":29,"developer":30,"crawl_stats":26,"alternatives":35,"analysis":136,"fingerprints":375},"best-wp-lightweight","WOW Best WP Lightweight","2.1.0","baonguyenyam","https:\u002F\u002Fprofiles.wordpress.org\u002Fbaonguyenyam\u002F","\u003Cp>Boost your site’s speed and performance. Best WP Lightweight help you configure your websites without any coding knowledge required. Lightweight and using best practices for fastest load time. You not need use many plugins any more\u003C\u002Fp>\n","Boost your site's speed and performance. Best WP Lightweight help you configure your websites without any coding knowledge required.",0,1459,"2022-10-30T00:40:00.000Z","6.1.10","4.7","7.0",[18,19,20,21,22],"admin","configure","lightweight","setup","system","https:\u002F\u002Fwow-wp.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbest-wp-lightweight.zip",85,null,"2026-07-22T17:31:50.256Z","no_bundle",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},3,30,84,"2026-08-29T18:03:38.043Z",[36,61,80,97,117],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":46,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":58,"download_link":59,"security_score":60,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"booking-system-edoobox","Online Buchungssystem – edoobox","3.4.3","edoobox","https:\u002F\u002Fprofiles.wordpress.org\u002Fedoobox\u002F","\u003Cp>The Edoobox booking system simplifies the planning and advertising of courses and events with the online booking solutions.\u003C\u002Fp>\n\u003Ch4>Online Booking System\u003C\u002Fh4>\n\u003Cp>edoobox is the clever online booking system. Customers can book and pay for courses, seminars and events around the clock in real time.\u003C\u002Fp>\n\u003Ch4>Promotion-Campaigns\u003C\u002Fh4>\n\u003Cp>With edoobox you choose a well-rounded online booking system. Efficient management of your courses, seminars, events, congresses and symposia. Increase your success.\u003C\u002Fp>\n\u003Ch4>Integration into your website\u003C\u002Fh4>\n\u003Cp>Integrate the booking system into your website and adapt the design to your web presence. All offer pages are optimised for smartphones, tablets and PC.\u003C\u002Fp>\n\u003Ch4>Participant management\u003C\u002Fh4>\n\u003Cp>Your participants are your most valuable asset. All customer details and offers can easily be viewed and changed anywhere at any time.\u003C\u002Fp>\n\u003Ch4>Payment systems\u003C\u002Fh4>\n\u003Cp>Your participants pay online by credit card or bank transfer, edoobox itself does not charge a discount. From the many payment systems provided you can activate the desired system and\u002For activate the automatic invoice generation.\u003C\u002Fp>\n\u003Ch4>Real-time price control\u003C\u002Fh4>\n\u003Cp>The online presence\u002Fattendee list is always available in real time. For optimal communication, the provider is informed by e-mail in case of changes.\u003C\u002Fp>\n","Simplify event and course management with Edoobox, an intuitive online booking system.",200,17226,86,8,"2026-06-26T13:38:00.000Z","7.0.2","6.0","8.2",[53,54,55,56,57],"booking-software","course-administration","event-registration-system","online-booking-system","seminar-registration","https:\u002F\u002Fwww.edoobox.com\u002Fwordpress-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbooking-system-edoobox.3.4.3.zip",100,{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":60,"downloaded":69,"rating":11,"num_ratings":11,"last_updated":70,"tested_up_to":71,"requires_at_least":72,"requires_php":73,"tags":74,"homepage":78,"download_link":79,"security_score":60,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"apex-digital-toolbox","Apex Digital Toolbox","1.8.1","nwells","https:\u002F\u002Fprofiles.wordpress.org\u002Fnwells\u002F","\u003Cp>Too many plugins installed to do basic things? This plugin tries to bring some common ones into one plugin to make life that little bit easier.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Current functionality\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Identify the production URL so as to apply specific logic or hooks depending on which environment the site is in\u003C\u002Fli>\n\u003Cli>Block visitors to the staging site based on IP or by using a specific cookie – great for showing clients but not the world\u003C\u002Fli>\n\u003Cli>Find & replace functionality – great for changing from a staging URL to a production URL\u003C\u002Fli>\n\u003Cli>Auto 301 redirect to the site domain for WordPress – useful to ensure everyone is using the correct path i.e. with www (or not) and https (or not)\u003C\u002Fli>\n\u003Cli>Add additional classes to the main body tag to easily target device and operating system i.e. iOS, Android, Chrome, etc…\u003C\u002Fli>\n\u003Cli>Sitemap generator to display a list of pages (or any post type) on the site as well as offering the ability to exclude pages\u003C\u002Fli>\n\u003Cli>WooCommerce settings to disable categories list on single product page, remove reviews tab, remove product count on categories\u003C\u002Fli>\n\u003Cli>When using Visual Composer you can automatically load in any PHP files that make use of vc_map() within your theme\u003C\u002Fli>\n\u003Cli>When using Gravity Forms & Bootstrap all correct classes will be applied to input boxes and buttons. Also, a new field type is added to add columns to forms as well as placing the submit button wherever you like\u003C\u002Fli>\n\u003Cli>Gravity Forms confirmation message appear underneath any fixed header when using AJAX. This hook allows you to scroll to the correct position based on the header\u003C\u002Fli>\n\u003Cli>Can specify a stylesheet that you want to appear last in the enqueue – useful for overwriting parent themes or other plugins\u003C\u002Fli>\n\u003Cli>YouTube embedded videos can have the title, related videos, and controls switched off\u003C\u002Fli>\n\u003Cli>Change the sender name and email address for emails sent\u003C\u002Fli>\n\u003Cli>Short code for displaying the current year – useful for keeping copyright notices up-to-date\u003C\u002Fli>\n\u003Cli>WooCommerce template tweaks for improved usability when using the Jupiter theme\u003C\u002Fli>\n\u003Cli>Set parent hierarchy pages as place holders so they don’t provide links in menus to empty pages\u003C\u002Fli>\n\u003Cli>Simple short code for the current page title – useful to add in to links\u003C\u002Fli>\n\u003Cli>Disable certain notifications for admin\u003C\u002Fli>\n\u003Cli>Added Relevanssi support for XforWooCommerce filter plugin when AJAX is in use\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Coming soon\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Drag & drop page re-ordering\u003C\u002Fli>\n\u003Cli>Improve noindexing on WooCommerce hidden products as well as ensuring the don’t appear in sitemaps both HTML & XML\u003C\u002Fli>\n\u003Cli>Auto hide a page from any menu when its status is no longer published\u003C\u002Fli>\n\u003Cli>Additional default settings for Visual Composer to make it easier to extend and remove built in elements & templates\u003C\u002Fli>\n\u003Cli>More to come!\u003C\u002Fli>\n\u003C\u002Ful>\n","Too many plugins installed to do basic things? Bring some common functions ones into one plugin to make life that little bit easier for developers.",6994,"2026-06-09T03:36:00.000Z","6.7.5","3.0.1","7.4",[75,76,21,77],"administration","production","staging","https:\u002F\u002Fwww.apexdigital.co.nz\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fapex-digital-toolbox.1.8.1.zip",{"slug":81,"name":82,"version":83,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":88,"downloaded":89,"rating":11,"num_ratings":11,"last_updated":90,"tested_up_to":49,"requires_at_least":50,"requires_php":73,"tags":91,"homepage":95,"download_link":96,"security_score":60,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"ellies-checklist","Ellie’s Checklist","1.0.1","Ellie Miguel","https:\u002F\u002Fprofiles.wordpress.org\u002Felliemiguel\u002F","\u003Cp>Ellie’s Checklist is a QA and setup checklist for WordPress projects. I built it for my own sites and, after using it for a few months, decided to share it with other freelancers, developers and small teams.\u003C\u002Fp>\n\u003Cp>It helps review sites during development, before delivery and before launch, with automatic checks and simple manual tracking.\u003C\u002Fp>\n\u003Cp>The plugin focuses on safe diagnostics and manual checklist tracking. It does not install plugins, activate themes, delete content, edit configuration files, upload premium packages or make destructive changes.\u003C\u002Fp>\n\u003Cp>Main features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Setup review dashboard for common WordPress tasks.\u003C\u002Fli>\n\u003Cli>Checklist sections for build, handoff and launch.\u003C\u002Fli>\n\u003Cli>Automatic read-only checks for selected settings.\u003C\u002Fli>\n\u003Cli>Manual states: pending, done and not applicable.\u003C\u002Fli>\n\u003Cli>Focus mode for unresolved items.\u003C\u002Fli>\n\u003Cli>Simple history log and saved checklist state.\u003C\u002Fli>\n\u003C\u002Ful>\n","QA and setup checklist for reviewing WordPress sites during development, launch and handoff.",60,286,"2026-06-20T16:53:00.000Z",[18,92,93,94,21],"checklist","launch","qa","https:\u002F\u002Felliemiguel.es\u002Fellies-checklist\u002F?utm_source=wordpress_admin&utm_medium=plugin_link&utm_campaign=ellies_checklist","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fellies-checklist.1.0.1.zip",{"slug":98,"name":99,"version":100,"author":101,"author_profile":102,"description":103,"short_description":104,"active_installs":88,"downloaded":105,"rating":60,"num_ratings":106,"last_updated":107,"tested_up_to":108,"requires_at_least":109,"requires_php":73,"tags":110,"homepage":115,"download_link":116,"security_score":60,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"infomon","InfoMon – System Info & Server Monitor","1.3.5","Hakan GERMAN","https:\u002F\u002Fprofiles.wordpress.org\u002Fmarkadestek\u002F","\u003Cp>InfoMon is a lightweight system monitor for WordPress administrators. It provides an at-a-glance view of your environment:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>WordPress version, Site\u002FHome URLs, REST API URL\u003C\u002Fli>\n\u003Cli>Active theme and number of active plugins\u003C\u002Fli>\n\u003Cli>Server software, server IP, your IP; PHP version\u003C\u002Fli>\n\u003Cli>Memory limit, max execution time, upload\u002Fpost limits, input vars\u003C\u002Fli>\n\u003Cli>Database version, table prefix, charset\u002Fcollation\u003C\u002Fli>\n\u003Cli>Timezone configured in WordPress\u003C\u002Fli>\n\u003Cli>REST API endpoint returning JSON: \u003Ccode>\u002Fwp-json\u002Finfomon\u002Fv1\u002Fstatus\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Copy\u002FExport helpers: Copy Table, Copy JSON, Download JSON\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Only administrators (users with \u003Ccode>manage_options\u003C\u002Fcode>) can view the data. All output is escaped.\u003C\u002Fp>\n","InfoMon shows WordPress, PHP, database and server details in a clean admin page and a compact dashboard widget, with handy JSON export.",524,1,"2025-09-15T14:24:00.000Z","6.8.6","5.2",[18,111,112,113,114],"dashboard","monitor","server","system-info","https:\u002F\u002Fwww.markadestek.com\u002Finfomon","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Finfomon.1.3.5.zip",{"slug":118,"name":119,"version":120,"author":121,"author_profile":122,"description":123,"short_description":124,"active_installs":125,"downloaded":126,"rating":11,"num_ratings":11,"last_updated":127,"tested_up_to":128,"requires_at_least":129,"requires_php":73,"tags":130,"homepage":134,"download_link":135,"security_score":60,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"admin-bar-server-info","Admin Bar Server Info","1.2.1","Raúl Fernández","https:\u002F\u002Fprofiles.wordpress.org\u002Fraulfg\u002F","\u003Cp>\u003Cstrong>Admin Bar Server Info\u003C\u002Fstrong> displays essential server and environment information in a convenient dropdown menu on the WordPress admin bar.\u003C\u002Fp>\n\u003Cp>The plugin is intentionally minimal and focused. It does not add settings pages, dashboard widgets, frontend output, or database storage. It simply shows key environment information in an organized dropdown menu accessible with one click from the admin bar for users with administrative permissions.\u003C\u002Fp>\n\u003Cp>Displayed information includes:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>PHP Information:\u003C\u002Fstrong>\u003Cbr \u002F>\n– PHP version (full version with architecture bits)\u003Cbr \u002F>\n– PHP SAPI (Server API: mod_php, fpm, cgi, etc.)\u003Cbr \u002F>\n– Operating system (Linux, Windows, Darwin, etc.)\u003Cbr \u002F>\n– Max execution time\u003Cbr \u002F>\n– Max upload size\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Memory Information:\u003C\u002Fstrong>\u003Cbr \u002F>\n– Current memory usage and limit (with percentage)\u003Cbr \u002F>\n– WordPress memory limit (WP_MEMORY_LIMIT)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Server Information:\u003C\u002Fstrong>\u003Cbr \u002F>\n– Server software (Apache, Nginx, LiteSpeed, IIS, Caddy, etc.)\u003Cbr \u002F>\n– Database version (MySQL or MariaDB with version)\u003Cbr \u002F>\n– Server IP address (with hostname)\u003Cbr \u002F>\n– Disk space (free\u002Ftotal with percentage used)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>WordPress Information:\u003C\u002Fstrong>\u003Cbr \u002F>\n– WordPress version\u003C\u002Fp>\n\u003Cp>The information is visible only to users with the \u003Ccode>manage_options\u003C\u002Fcode> capability.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key characteristics:\u003C\u002Fstrong>\u003Cbr \u002F>\n– Dropdown menu – all information organized and accessible with one click\u003Cbr \u002F>\n– Icon-only display in admin bar for space efficiency\u003Cbr \u002F>\n– No configuration required – works immediately after activation\u003Cbr \u002F>\n– No frontend output – admin area only\u003Cbr \u002F>\n– No database tables or stored options\u003Cbr \u002F>\n– No external requests – all data gathered locally\u003Cbr \u002F>\n– Minimal CSS – only for admin bar styling (follows WordPress best practices)\u003Cbr \u002F>\n– No JavaScript dependencies\u003Cbr \u002F>\n– No tracking or data collection\u003Cbr \u002F>\n– Developer-friendly format – compact and logically organized\u003Cbr \u002F>\n– Fully responsive – adapts to mobile screens\u003C\u002Fp>\n","Lightweight plugin that displays essential server and environment information in a dropdown menu on the WordPress admin bar.",20,604,"2026-01-18T12:33:00.000Z","6.9.5","5.0",[131,132,133,114],"admin-bar","php-version","server-info","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadmin-bar-server-info.1.2.1.zip",{"attackSurface":137,"codeSignals":347,"taintFlows":368,"riskAssessment":369,"analyzedAt":374},{"hooks":138,"ajaxHandlers":343,"restRoutes":344,"shortcodes":345,"cronEvents":346,"entryPointCount":11,"unprotectedCount":11},[139,144,150,154,157,159,162,165,168,171,174,178,183,187,190,194,197,200,204,208,213,215,219,224,228,231,233,235,237,239,242,245,247,250,253,255,258,262,265,268,271,275,279,282,285,288,291,294,297,300,303,306,310,313,316,320,323,326,328,332,335,340],{"type":140,"name":141,"callback":142,"file":143,"line":47},"action","wp_before_admin_bar_render","WP_LightWeightCleanUPS::removeLogo","classes\\wp_lightweight_cleanup.php",{"type":145,"name":146,"callback":147,"priority":148,"file":143,"line":149},"filter","contextual_help","WP_LightWeightCleanUPS::removeHelp",999,11,{"type":140,"name":151,"callback":152,"file":143,"line":153},"wp_dashboard_setup","WP_LightWeightCleanUPS::removeDashboardQuickPress",14,{"type":140,"name":151,"callback":155,"file":143,"line":156},"WP_LightWeightCleanUPS::removeDashboardPrimary",17,{"type":140,"name":151,"callback":158,"file":143,"line":125},"WP_LightWeightCleanUPS::removeYoast",{"type":140,"name":151,"callback":160,"file":143,"line":161},"WP_LightWeightCleanUPS::removeSiteHealth",23,{"type":140,"name":151,"callback":163,"file":143,"line":164},"WP_LightWeightCleanUPS::removeDashboardActivity",26,{"type":140,"name":151,"callback":166,"file":143,"line":167},"WP_LightWeightCleanUPS::removeAtAGlance",29,{"type":140,"name":151,"callback":169,"file":143,"line":170},"WP_LightWeightCleanUPS::removeWelcome",32,{"type":140,"name":151,"callback":172,"file":143,"line":173},"WP_LightWeightCleanUPS::removeUpdate",35,{"type":145,"name":175,"callback":176,"file":143,"line":177},"show_admin_bar","__return_false",40,{"type":145,"name":179,"callback":180,"priority":181,"file":143,"line":182},"admin_title","WP_LightWeightCleanUPS::removeAdminText",10,44,{"type":140,"name":184,"callback":185,"file":143,"line":186},"login_head","WP_LightWeightCleanUPS::removeGotoLogin",47,{"type":145,"name":188,"callback":176,"file":143,"line":189},"use_widgets_block_editor",50,{"type":140,"name":191,"callback":192,"file":143,"line":193},"admin_head","WP_LightWeightCleanUPS::removeDashboardbyID",54,{"type":140,"name":191,"callback":195,"file":143,"line":196},"WP_LightWeightCleanUPS::removeNotice",58,{"type":140,"name":151,"callback":198,"file":143,"line":199},"WP_LightWeightCleanUPS::removeGutenbergPanel",61,{"type":140,"name":201,"callback":202,"file":143,"line":203},"admin_footer_text","WP_LightWeightCleanUPS::addCopyright",64,{"type":140,"name":205,"callback":206,"file":143,"line":207},"carbon_fields_fields_registered","___wp_lightweight_clearUpSystem",151,{"type":145,"name":209,"callback":210,"file":211,"line":212},"show_password_fields","disable","classes\\wp_lightweight_disable_password_reset.php",7,{"type":145,"name":214,"callback":210,"file":211,"line":47},"allow_password_reset",{"type":145,"name":216,"callback":217,"file":211,"line":218},"gettext","remove",9,{"type":140,"name":220,"callback":221,"priority":60,"file":222,"line":223},"admin_bar_menu","___wp_lightweight_admin_menu","classes\\wp_lightweight_init.php",5,{"type":140,"name":225,"callback":226,"file":222,"line":227},"login_enqueue_scripts","___wp_lightweight_login_logo",6,{"type":145,"name":229,"callback":230,"priority":181,"file":222,"line":212},"plugin_action_links","___wp_lightweight_add_setting_link_core",{"type":140,"name":205,"callback":232,"file":222,"line":47},"___wp_lightweight_auto_rename_img",{"type":140,"name":205,"callback":234,"file":222,"line":218},"___wp_lightweight_remove_core_email",{"type":140,"name":205,"callback":236,"file":222,"line":181},"___wp_lightweight_remove_plugins_email",{"type":140,"name":205,"callback":238,"file":222,"line":149},"___wp_lightweight_remove_theme_email",{"type":140,"name":205,"callback":240,"file":222,"line":241},"___wp_lightweight_remove_core_update",12,{"type":140,"name":205,"callback":243,"file":222,"line":244},"___wp_lightweight_remove_plugins_update",13,{"type":140,"name":205,"callback":246,"file":222,"line":153},"___wp_lightweight_remove_theme_update",{"type":140,"name":205,"callback":248,"file":222,"line":249},"___wp_lightweight_remove_gutenberg_editor",15,{"type":140,"name":205,"callback":251,"file":222,"line":252},"___wp_lightweight_disable_theme_plugin_edit",16,{"type":140,"name":205,"callback":254,"file":222,"line":156},"___wp_lightweight_disable_comments",{"type":140,"name":205,"callback":256,"file":222,"line":257},"___wp_lightweight_disable_password_reset",18,{"type":145,"name":259,"callback":260,"file":222,"line":261},"wp_handle_upload_prefilter","___wp_lightweight_custom_upload_filter",65,{"type":145,"name":263,"callback":176,"file":222,"line":264},"auto_core_update_send_email",140,{"type":145,"name":266,"callback":176,"file":222,"line":267},"auto_plugin_update_send_email",145,{"type":145,"name":269,"callback":176,"file":222,"line":270},"auto_theme_update_send_email",150,{"type":145,"name":272,"callback":273,"file":222,"line":274},"pre_option_update_core","__return_null",155,{"type":145,"name":276,"callback":277,"file":222,"line":278},"pre_site_transient_update_core","___wp_lightweight_remove_wp_core_updates",156,{"type":145,"name":280,"callback":176,"file":222,"line":281},"auto_update_plugin",161,{"type":145,"name":283,"callback":176,"file":222,"line":284},"plugins_auto_update_enabled",162,{"type":145,"name":286,"callback":273,"file":222,"line":287},"site_transient_update_plugins",163,{"type":145,"name":289,"callback":277,"file":222,"line":290},"pre_site_transient_update_plugins",165,{"type":145,"name":292,"callback":176,"file":222,"line":293},"auto_update_theme",170,{"type":145,"name":295,"callback":176,"file":222,"line":296},"themes_auto_update_enabled",171,{"type":145,"name":298,"callback":273,"file":222,"line":299},"site_transient_update_themes",172,{"type":145,"name":301,"callback":277,"file":222,"line":302},"pre_site_transient_update_themes",174,{"type":145,"name":304,"callback":176,"file":222,"line":305},"use_block_editor_for_post",185,{"type":140,"name":307,"callback":308,"file":222,"line":309},"admin_init","closure",199,{"type":145,"name":311,"callback":176,"priority":125,"file":222,"line":312},"comments_open",213,{"type":145,"name":314,"callback":176,"priority":125,"file":222,"line":315},"pings_open",214,{"type":145,"name":317,"callback":318,"priority":181,"file":222,"line":319},"comments_array","__return_empty_array",215,{"type":140,"name":321,"callback":308,"file":222,"line":322},"admin_menu",216,{"type":140,"name":324,"callback":308,"file":222,"line":325},"init",219,{"type":140,"name":141,"callback":308,"file":222,"line":327},224,{"type":140,"name":329,"callback":330,"file":331,"line":181},"carbon_fields_register_fields","wp_lightweight_option_attach_theme_options","classes\\wp_lightweight_setup.php",{"type":140,"name":333,"callback":334,"file":331,"line":149},"after_setup_theme","crb_load",{"type":140,"name":336,"callback":337,"file":338,"line":339},"plugins_loaded","anonymous","includes\\class-bn-wp.php",127,{"type":140,"name":341,"callback":337,"file":338,"line":342},"admin_enqueue_scripts",142,[],[],[],[],{"dangerousFunctions":348,"sqlUsage":349,"outputEscaping":351,"fileOperations":11,"externalRequests":11,"nonceChecks":11,"capabilityChecks":11,"bundledLibraries":367},[],{"prepared":11,"raw":11,"locations":350},[],{"escaped":352,"rawEcho":212,"locations":353},2,[354,357,358,360,362,364,365],{"file":143,"line":355,"context":356},123,"raw output",{"file":222,"line":46,"context":356},{"file":222,"line":359,"context":356},87,{"file":222,"line":361,"context":356},88,{"file":222,"line":363,"context":356},89,{"file":222,"line":355,"context":356},{"file":222,"line":366,"context":356},126,[],[],{"summary":370,"deductions":371},"The \"best-wp-lightweight\" plugin v2.1.0 exhibits a seemingly strong security posture based on the provided static analysis.  The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events significantly limits its attack surface.  Furthermore, the code signals indicate no dangerous functions, no file operations, and no external HTTP requests, which are positive indicators. The reliance on prepared statements for SQL queries is also a good practice, mitigating SQL injection risks.  However, a concerning aspect is the low percentage (22%) of properly escaped output, suggesting potential for Cross-Site Scripting (XSS) vulnerabilities if user-supplied data is not handled with sufficient care before being displayed.\n\nThe plugin's vulnerability history is clean, with no recorded CVEs, which is a positive sign and suggests a history of secure development or limited exposure. The taint analysis also yielded no critical or high severity flows, further bolstering the perception of security. Despite the clean vulnerability history, the insufficient output escaping remains a notable concern that could be exploited. The lack of nonce and capability checks across all entry points (which are zero in this analysis, but would be a concern if they existed) would be a significant issue if the attack surface were larger. Overall, while the plugin demonstrates good practices in many areas, the output escaping deficiency warrants attention.",[372],{"reason":373,"points":223},"Low percentage of properly escaped output","2026-03-17T06:21:09.986Z",{"wat":376,"direct":383},{"assetPaths":377,"generatorPatterns":380,"scriptPaths":381,"versionParams":382},[378,379],"\u002Fwp-content\u002Fplugins\u002Fbest-wp-lightweight\u002Fassets\u002Fcss\u002Fdist\u002Fmain.min.css","\u002Fwp-content\u002Fplugins\u002Fbest-wp-lightweight\u002Fassets\u002Fjs\u002Fdist\u002Fmain.prod.js",[],[],[],{"cssClasses":384,"htmlComments":385,"htmlAttributes":386,"restEndpoints":387,"jsGlobals":388,"shortcodeOutput":389},[],[],[],[],[],[],{"error":391,"url":392,"statusCode":393,"statusMessage":394,"message":394},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fbest-wp-lightweight\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":31,"versions":396},[397,405,412],{"version":398,"download_url":399,"svn_tag_url":400,"released_at":26,"has_diff":401,"diff_files_changed":402,"diff_lines":26,"trac_diff_url":403,"vulnerabilities":404,"is_current":401},"2.0.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbest-wp-lightweight.2.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fbest-wp-lightweight\u002Ftags\u002F2.0.1\u002F",false,[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fbest-wp-lightweight%2Ftags%2F2.0.0&new_path=%2Fbest-wp-lightweight%2Ftags%2F2.0.1",[],{"version":406,"download_url":407,"svn_tag_url":408,"released_at":26,"has_diff":401,"diff_files_changed":409,"diff_lines":26,"trac_diff_url":410,"vulnerabilities":411,"is_current":401},"2.0.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbest-wp-lightweight.2.0.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fbest-wp-lightweight\u002Ftags\u002F2.0.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fbest-wp-lightweight%2Ftags%2F1.0.0&new_path=%2Fbest-wp-lightweight%2Ftags%2F2.0.0",[],{"version":413,"download_url":414,"svn_tag_url":415,"released_at":26,"has_diff":401,"diff_files_changed":416,"diff_lines":26,"trac_diff_url":26,"vulnerabilities":417,"is_current":401},"1.0.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbest-wp-lightweight.1.0.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fbest-wp-lightweight\u002Ftags\u002F1.0.0\u002F",[],[]]