[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNjgL6BJ2dJ2ORSROkjFM06v-OI2HAgr2usO5XgV_YvQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":22,"download_link":23,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":33,"analysis":78,"fingerprints":130},"bing-ads-uet","Bing Ads UET","1.0","jamiechung","https:\u002F\u002Fprofiles.wordpress.org\u002Fjamiechung\u002F","\u003Cp>Easily setup Bing Ads UET tag in your WordPress website. A time saver for any #ppc advertiser! This plugin will add Bing Ads UET tag to your WordPress website without you manually modifying the theme or digging into the code.\u003C\u002Fp>\n","Easily setup Bing Ads UET tag in your WordPress website. A time saver for any #ppc advertiser!",100,4854,0,"2015-05-08T22:34:00.000Z","4.2.39","3.5.0","",[19,4,20,21],"bing-ads","bing-ads-uet-tag","uet-tag","https:\u002F\u002Fgithub.com\u002FJamieChung\u002FBingAds-UET-WordPress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbing-ads-uet.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":29,"total_installs":11,"avg_security_score":24,"avg_patch_time_days":30,"trust_score":31,"computed_at":32},1,30,84,"2026-04-05T20:26:14.160Z",[34,57],{"slug":35,"name":36,"version":37,"author":38,"author_profile":39,"description":40,"short_description":41,"active_installs":42,"downloaded":43,"rating":44,"num_ratings":29,"last_updated":45,"tested_up_to":46,"requires_at_least":47,"requires_php":48,"tags":49,"homepage":54,"download_link":55,"security_score":11,"vuln_count":29,"unpatched_count":13,"last_vuln_date":56,"fetched_at":26},"microsoft-advertising-universal-event-tracking-uet","Microsoft Advertising Universal Event Tracking (UET)","1.0.8","Microsoft","https:\u002F\u002Fprofiles.wordpress.org\u002Fmicrosoft\u002F","\u003Cp>This plugin will install Microsoft Advertising Universal Event Tracking (UET) tag for your page so you can use powerful Microsoft Advertising features such as conversion tracking and audience targeting. UET tag records what customers do on your website and sends that information to Microsoft Advertising. UET is a prerequisite for conversion tracking, remarketing in paid search, and automated bidding bid strategies. These features can help you better understand your customer’s journey from when they click on your ad to when they convert on your website. You can use this to create more relevant ad campaigns for your business and to target the right audience for your campaigns. You can learn more \u003Ca href=\"https:\u002F\u002Fgo.microsoft.com\u002Ffwlink\u002F?linkid=2155938\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Additional Information\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fopensource.microsoft.com\u002Fcodeofconduct\" rel=\"nofollow ugc\">Microsoft Open Source Code of Conduct\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fdocs.opensource.microsoft.com\u002Fcontent\u002Freleasing\u002Findex.html\" rel=\"nofollow ugc\">Trademark Notice\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fdocs.opensource.microsoft.com\u002Fcontent\u002Freleasing\u002Fsecurity.html\" rel=\"nofollow ugc\">Security Reporting Instructions\u003C\u002Fa>\u003C\u002Fp>\n","The official plugin for setting up Microsoft Advertising UET",4000,45395,60,"2026-01-27T05:54:00.000Z","6.6.5","5.1","7.2",[50,19,51,52,53],"advertising","microsoft","microsoft-advertising","uet","https:\u002F\u002Fads.microsoft.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmicrosoft-advertising-universal-event-tracking-uet.1.0.8.zip","2022-07-07 00:00:00",{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":11,"num_ratings":29,"last_updated":67,"tested_up_to":68,"requires_at_least":69,"requires_php":70,"tags":71,"homepage":76,"download_link":77,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"muzaara-micosoft-bing-product-data-feed","Muzaara Content API Microsoft\u002FBing Data Feed","2.0","muzaara","https:\u002F\u002Fprofiles.wordpress.org\u002Fmuzaara\u002F","\u003Cp>Microsoft Ads Data Feed – Integrates your WooCommerce Products into Microsoft Merchant Center using the content API or XML data feeds.\u003C\u002Fp>\n\u003Ch3>Sync your products to Microsoft Merchant Center Using Content API\u003C\u002Fh3>\n\u003Cp>Our plugin allows you to sync your products to Microsoft Merchant center using the content api from Microsoft, this is perfect for large stores that need to sync large categories of products to Bing shopping campaigns and it updates evey 30mins to ensure that your products, prices, stock levels are all correct on your Microsoft shopping ads.\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FJm-PzXLSCuM?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch3>Updates Every 30min – Unlimited Number Of Products & Feeds\u003C\u002Fh3>\n\u003Cp>The Content API for Shopping allows apps to interact directly with the Merchant Center platform, vastly increasing the efficiency of managing large or complex Merchant Center accounts. The Content API for Shopping can be used as an input source for product data in Merchant Center, directly delivering your data as it is updated on your site.\u003C\u002Fp>\n\u003Ch3>Improve your ROI With Microsoft Shopping\u003C\u002Fh3>\n\u003Cp>If you’re a retailer, you can use Shopping campaigns to promote your online and local inventory, boost traffic to your website or local store, and find better qualified leads.\u003C\u002Fp>\n\u003Ch3>Bing Shopping Data Feeds Via API\u003C\u002Fh3>\n\u003Cp>Bing Shopping Campaigns have recently added a variety of innovative ad types and optimisations. Manage your campaigns with greater ease and create engaging retail experiences for your customers. Expand your reach on the Microsoft Search Network and put the searcher closer to a purchase decision\u003C\u002Fp>\n\u003Ch3>Bing Shopping Data Feed To Reach New Customers\u003C\u002Fh3>\n\u003Cp>Drive more customers to your products with engaging retail experiences through Bing Shopping Campaigns. Product ads showcase products in impactful ways that can include custom images, pricing or your company name – putting searchers closer to making a purchasing decision even before they click.\u003C\u002Fp>\n\u003Ch3>Content API in Bing Merchant Center\u003C\u002Fh3>\n\u003Cp>The Content API for Shopping allows apps to interact directly with the Merchant Center platform, vastly increasing the efficiency of managing large or complex Merchant Center accounts. The Content API for Shopping can be used as an input source for product data in Merchant Center, directly delivering your data as it is updated on your site.\u003C\u002Fp>\n\u003Cp>Microsoft Merchant Center helps you get your shop and product info into Bing and make it available to shoppers across Microsoft. That means that everything about your shops and products is available to customers when they search on a Microsoft property.\u003C\u002Fp>\n\u003Ch3>Provide your most accurate product data\u003C\u002Fh3>\n\u003Cp>Use the most up-to-date and complete information you have to build trust with your customers.\u003C\u002Fp>\n\u003Cp>Maintain up-to-date price and availability, including tax and shipping, by using automated feed delivery (including intraday updates), the Content API, or structured data markup. Customers will leave your site if they don’t see the price or availability they expect. Mismatches will also cause disapprovals.\u003Cbr \u002F>\nProvide the most detailed product_type values that you have and values for the google_product_category attribute that are at least 2-3 levels deep. Arrange your product type to start with a broad group and end with a more specific group. Avoid adding synonyms, search query terms, or promotional text. Products should only be categorized by type. For example: Apparel & Accessories > Clothing > Outerwear > Coats & Jackets > Denim Jackets.\u003C\u002Fp>\n\u003Ch3>Microsoft Shopping is available in these markets:\u003C\u002Fh3>\n\u003Cp>Australia, Austria, Belgium, Canada, France, Germany, India, Italy, Netherlands, Spain, Sweden, Switzerland, the United Kingdom, Albania, Andorra, Bosnia, Bulgaria, Croatia, Cyprus, the Czech Republic, Estonia, Greece, Hungary, Iceland, Latvia, Lichtenstein, Lithuania, Luxembourg, Malta, Monaco, Montenegro, North Macedonia, Poland, Portugal, Romania, San Marino, Serbia, Slovakia, Slovenia, South Africa, Turkey,the Vatican City and the United States.\u003C\u002Fp>\n\u003Ch3>Provide your most accurate product data\u003C\u002Fh3>\n\u003Cp>Use the most up-to-date and complete information you have to build trust with your customers.\u003C\u002Fp>\n\u003Ch3>What is the Microsoft Search Network?\u003C\u002Fh3>\n\u003Cp>With Microsoft Advertising, when you create a campaign you are automatically opted-in to our owned-and-operated sites and to those of some of our key partners, such as Yahoo and AOL.\u003C\u002Fp>\n","Microsoft Ads Data Feed - Integrates your WooCommerce Products into Microsoft Merchant Center using the content API or XML data feeds.",10,4186,"2024-03-01T01:42:00.000Z","6.4.8","4.9","7.3",[19,72,73,74,75],"bing-data-feed","microsoft-ads","microsoft-shopping","woocommerce","https:\u002F\u002Fapp.muzaara.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmuzaara-micosoft-bing-product-data-feed.2.0.zip",{"attackSurface":79,"codeSignals":102,"taintFlows":117,"riskAssessment":118,"analyzedAt":129},{"hooks":80,"ajaxHandlers":98,"restRoutes":99,"shortcodes":100,"cronEvents":101,"entryPointCount":13,"unprotectedCount":13},[81,87,90,94],{"type":82,"name":83,"callback":84,"file":85,"line":86},"action","admin_notices","bingads_notices","index.php",57,{"type":82,"name":88,"callback":89,"file":85,"line":24},"admin_menu","add_bingads_uet_menu",{"type":82,"name":91,"callback":92,"file":85,"line":93},"wp_footer","add_bingads_uet_scripts",94,{"type":82,"name":95,"callback":96,"file":85,"line":97},"admin_init","bingads_uet_admin_init",104,[],[],[],[],{"dangerousFunctions":103,"sqlUsage":104,"outputEscaping":106,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":116},[],{"prepared":13,"raw":13,"locations":105},[],{"escaped":13,"rawEcho":107,"locations":108},3,[109,112,114],{"file":85,"line":110,"context":111},99,"raw output",{"file":85,"line":113,"context":111},122,{"file":85,"line":115,"context":111},141,[],[],{"summary":119,"deductions":120},"The 'bing-ads-uet' v1.0 plugin exhibits a generally positive security posture based on the provided static analysis and vulnerability history.  The complete absence of AJAX handlers, REST API routes, shortcodes, and cron events significantly limits the plugin's attack surface.  Furthermore, the code signals indicate no dangerous functions were used, all SQL queries are prepared, and there are no file operations or external HTTP requests. This suggests a cautious approach to handling sensitive operations. \n\nHowever, a critical concern arises from the output escaping analysis. With 100% of outputs being unescaped, this indicates a high risk of Cross-Site Scripting (XSS) vulnerabilities. Any data displayed by the plugin that is not properly escaped could be manipulated by an attacker to inject malicious scripts, which could then be executed in the context of a logged-in user's browser. The lack of nonce and capability checks, while potentially less critical given the limited attack surface, further exacerbates this risk by not enforcing proper authorization for any potential entry points that might exist in future versions or are not captured by this analysis. \n\nGiven the clean vulnerability history with zero recorded CVEs, it suggests the plugin has been relatively secure in the past or has not been a significant target. Nevertheless, the unescaped output is a significant and immediate risk that needs to be addressed. The plugin's strength lies in its minimal attack surface and safe handling of database queries, but its weakness in output escaping presents a clear vulnerability. Addressing the unescaped outputs should be the immediate priority.",[121,124,127],{"reason":122,"points":123},"Unescaped output detected",8,{"reason":125,"points":126},"Missing nonce checks",5,{"reason":128,"points":126},"Missing capability checks","2026-03-16T21:02:11.519Z",{"wat":131,"direct":136},{"assetPaths":132,"generatorPatterns":133,"scriptPaths":134,"versionParams":135},[],[],[],[],{"cssClasses":137,"htmlComments":138,"htmlAttributes":139,"restEndpoints":140,"jsGlobals":141,"shortcodeOutput":142},[],[],[],[],[],[]]