[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIF-BW8UF8spbn7V-r2nJSPMnXU2kP5RTxldGJwJ_b4A":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":23,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":37,"analysis":128,"fingerprints":262},"blockx","BlockX","1.10.3","EdwardBock","https:\u002F\u002Fprofiles.wordpress.org\u002Fedwardbock\u002F","\u003Cp>Elevate your Gutenberg Block development experience with BlockX. This powerful plugin bridges the gap between the modern\u003Cbr \u002F>\nGutenberg JavaScript API and the traditional PHP methods WordPress developers know and love. With BlockX,\u003Cbr \u002F>\nyou can effortlessly create custom Gutenberg blocks entirely using PHP, bypassing the need for complex JavaScript coding.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features:\u003C\u002Fstrong>\u003Cbr \u002F>\n– \u003Cstrong>Seamless Integration:\u003C\u002Fstrong> Simplifies the process of building custom Gutenberg blocks using PHP.\u003Cbr \u002F>\n– \u003Cstrong>Developer-Friendly:\u003C\u002Fstrong> Leverages familiar PHP syntax and functions to create and manage blocks.\u003Cbr \u002F>\n– \u003Cstrong>Time-Saving:\u003C\u002Fstrong> Reduces the learning curve and development time by avoiding intricate JavaScript coding.\u003Cbr \u002F>\n– \u003Cstrong>Customizable:\u003C\u002Fstrong> Provides a robust API to create highly customizable blocks tailored to your needs.\u003Cbr \u002F>\n– \u003Cstrong>Efficient Workflow:\u003C\u002Fstrong> Streamlines the block creation process, allowing you to focus on functionality and design.\u003Cbr \u002F>\n– \u003Cstrong>Comprehensive Documentation:\u003C\u002Fstrong> Includes detailed guides and examples to help you get started quickly.\u003Cbr \u002F>\n– \u003Cstrong>Compatibility:\u003C\u002Fstrong> Fully compatible with the latest WordPress versions and Gutenberg updates.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Why Choose PHP Block Builder for Gutenberg?\u003C\u002Fstrong>\u003Cbr \u002F>\n– \u003Cstrong>Enhanced Productivity:\u003C\u002Fstrong> Build and deploy custom blocks faster using familiar PHP code.\u003Cbr \u002F>\n– \u003Cstrong>Reduced Complexity:\u003C\u002Fstrong> No need to delve into JavaScript intricacies; keep your development workflow simple.\u003Cbr \u002F>\n– \u003Cstrong>Versatile:\u003C\u002Fstrong> Perfect for developers looking to extend Gutenberg without abandoning their PHP expertise.\u003C\u002Fp>\n\u003Ch3>Arbitrary section\u003C\u002Fh3>\n","Elevate your Gutenberg Block development experience.",30,3561,0,"2024-07-01T17:35:00.000Z","6.5.8","5.0","8.1",[19,20,21,22],"block","developer","gutenberg","utils","https:\u002F\u002Fgithub.com\u002Fpalasthotel\u002FblockX","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fblockx.1.10.3.zip",92,null,"2026-03-15T15:16:48.613Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":33,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"edwardbock",22,2430,90,107,72,"2026-04-04T16:24:21.147Z",[38,52,72,91,109],{"slug":39,"name":40,"version":41,"author":7,"author_profile":8,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":13,"num_ratings":13,"last_updated":46,"tested_up_to":47,"requires_at_least":16,"requires_php":48,"tags":49,"homepage":50,"download_link":51,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"headless","Headless","2.3.1","\u003Cp>Adds features to use WordPress as headless CMS\u003C\u002Fp>\n\u003Ch3>Arbitrary section\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>BREAKING CHANGE 1.7.0: core\u002Fblock for block references has changed\u003C\u002Fli>\n\u003C\u002Ful>\n","Adds features to use WordPress as headless CMS",20,2438,"2025-03-12T17:16:00.000Z","6.7.5","8.0",[19,20,21,22],"https:\u002F\u002Fgithub.com\u002Fpalasthotel\u002Fheadless","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fheadless.2.3.1.zip",{"slug":53,"name":54,"version":55,"author":56,"author_profile":57,"description":58,"short_description":59,"active_installs":60,"downloaded":61,"rating":60,"num_ratings":62,"last_updated":63,"tested_up_to":64,"requires_at_least":65,"requires_php":66,"tags":67,"homepage":70,"download_link":71,"security_score":60,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"block-catalog","Block Catalog","1.6.2","10up","https:\u002F\u002Fprofiles.wordpress.org\u002F10up\u002F","\u003Cul>\n\u003Cli>Find which blocks are used across your site.\u003C\u002Fli>\n\u003Cli>Fully Integrated with the WordPress Admin.\u003C\u002Fli>\n\u003Cli>Use filters to see Posts that use a specific block.\u003C\u002Fli>\n\u003Cli>Find Posts that use Reusable Blocks.\u003C\u002Fli>\n\u003Cli>Use the WP CLI to quickly find blocks from the command line.\u003C\u002Fli>\n\u003Cli>Use custom WordPress filters to extend the Block Catalog.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002F10up\u002Fblock-catalog\" rel=\"nofollow ugc\">Fork on GitHub\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Getting Started\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>On activation, the plugin will prompt you to index your content. You need to do this first before you will be able to see the various blocks used on your site. You can also go to \u003Cem>WP-Admin > Tools > Block Catalog\u003C\u002Fem> to do this yourself. Alternately, you can run the WP CLI command \u003Ccode>wp block-catalog index\u003C\u002Fcode> to index your content from the command line.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Once indexed, you will be able to see the different blocks used on your site in the Block Catalog Taxonomy.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Navigating to any Block Editor post type will also show you the list of blocks present in a post.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>You can also filter the listing to only show Posts that have a specific block.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n","Keep track of which Gutenberg Blocks are used across your site.",100,148543,1,"2025-04-23T11:31:00.000Z","6.8.5","6.5","7.4",[68,69,20,21],"blocks","custom-blocks","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fblock-catalog.1.6.2.zip",{"slug":73,"name":74,"version":75,"author":76,"author_profile":77,"description":78,"short_description":79,"active_installs":44,"downloaded":80,"rating":60,"num_ratings":81,"last_updated":82,"tested_up_to":83,"requires_at_least":84,"requires_php":85,"tags":86,"homepage":89,"download_link":90,"security_score":60,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"block-xray-attributes","Block X-ray Attributes","1.2.1","Sal Ferrarello","https:\u002F\u002Fprofiles.wordpress.org\u002Fsalcode\u002F","\u003Cp>This plugin adds a section called “Block X-ray” to the Document sidebar in the editor. This “Block X-ray” section displays the attributes for the currently selected block.\u003C\u002Fp>\n","This plugin adds a section called \"Block X-ray\" to the Document sidebar in the editor. This \"Block X-ray\" section displays the att …",6894,4,"2026-01-13T02:27:00.000Z","6.9.4","5.5","7.2",[19,87,20,88,21],"block-attributes","editor","https:\u002F\u002Fgithub.com\u002Fsalcode\u002Fblock-xray-attributes","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fblock-xray-attributes.1.2.1.zip",{"slug":92,"name":93,"version":94,"author":95,"author_profile":96,"description":97,"short_description":98,"active_installs":99,"downloaded":100,"rating":60,"num_ratings":101,"last_updated":102,"tested_up_to":64,"requires_at_least":103,"requires_php":66,"tags":104,"homepage":107,"download_link":108,"security_score":60,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"wicked-block-builder","Wicked Block Builder","1.4.6","wickedplugins","https:\u002F\u002Fprofiles.wordpress.org\u002Fwickedplugins\u002F","\u003Cp>Create your own custom blocks with Wicked Block Builder!  There’s no setup required and you can build blocks in as little as a few minutes.\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FxZ18r-w7C9k?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Ch4>Native Blocks\u003C\u002Fh4>\n\u003Cp>Blocks created with Wicked Block Builder are truly native blocks that don’t use server-side rendering.\u003C\u002Fp>\n\u003Ch4>Build Custom Blocks\u003C\u002Fh4>\n\u003Cp>Build blocks using your own semantic markup.  Simply drag-and-drop HTML elements and components to build your block in minutes.\u003C\u002Fp>\n\u003Ch4>Make Your Block Editable\u003C\u002Fh4>\n\u003Cp>Add interactive components such as rich text and images so you can edit your block’s content directly in the editor.\u003C\u002Fp>\n\u003Ch4>Customize Your Block’s Sidebar\u003C\u002Fh4>\n\u003Cp>Add text boxes, checkboxes, radio buttons, color palettes, and more to your block’s sidebar.  Add panels or HTML elements to organize the sidebar.\u003C\u002Fp>\n\u003Ch4>Dynamic Blocks\u003C\u002Fh4>\n\u003Cp>Optionally make your blocks dynamic and use PHP to output your block.  Easily access your block’s data via an argument containing your block’s attributes.\u003C\u002Fp>\n\u003Ch4>Flexible Front-end View\u003C\u002Fh4>\n\u003Cp>Save time and skip the step of creating a similar (but slightly different) view for the front-end of your block (i.e. the “save” function if you’re a developer).\u003C\u002Fp>\n\u003Ch4>Style Editor\u003C\u002Fh4>\n\u003Cp>Add your block’s styles in a convenient CSS editor.\u003C\u002Fp>\n\u003Ch4>Block Patterns\u003C\u002Fh4>\n\u003Cp>Create block patterns with no code and easily update them as needed.\u003C\u002Fp>\n\u003Ch3>🚀 Get More With Wicked Block Builder Pro\u003C\u002Fh3>\n\u003Cp>Take your blocks to the next level with these additional features in Wicked Block Builder Pro.  \u003Ca href=\"https:\u002F\u002Fwickedplugins.com\u002Fplugins\u002Fwicked-block-builder\u002F?utm_source=readme&utm_campaign=wicked_block_builder&utm_content=pro_learn_more_link\" rel=\"nofollow ugc\">Learn more about Wicked Block Builder Pro\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Repeater\u003C\u002Fh4>\n\u003Cp>Add repeaters to your block.  Add, sort, and delete any number of items in your block.  Nest repeaters for even greater functionality.\u003C\u002Fp>\n\u003Ch4>Conditional Logic\u003C\u002Fh4>\n\u003Cp>Use conditions to do incredible things with your block.  Conditionally add classes, inline styles, and HTML attributes.  Even change the output of your block based on conditional logic.\u003C\u002Fp>\n\u003Ch4>PostSelect\u003C\u002Fh4>\n\u003Cp>Add a PostSelect component to your block to let people select one or more posts and sort them.\u003C\u002Fp>\n\u003Ch4>TermSelect\u003C\u002Fh4>\n\u003Cp>Add a TermSelect component to your block to let people choose one or more terms.  Choose from different display types like checkboxes, radios, or dropdown.\u003C\u002Fp>\n\u003Ch4>InnerBlocks\u003C\u002Fh4>\n\u003Cp>Add an InnerBlocks component to nest blocks within your block.\u003C\u002Fp>\n\u003Ch4>Export Blocks to Plugin\u003C\u002Fh4>\n\u003Cp>Export your blocks to a stand-alone plugin.  Install the plugin on any WordPress site to use your blocks without needing to have Wicked Block Builder installed.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwickedplugins.com\u002Fplugins\u002Fwicked-block-builder\u002F?utm_source=readme&utm_campaign=wicked_block_builder&utm_content=pro_get_link\" rel=\"nofollow ugc\">Get Wicked Block Builder Pro\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Who is Wicked Block Builder for?\u003C\u002Fh3>\n\u003Cp>Wicked Block Builder is for anyone who wants to create blocks that can be used in the WordPress editor.  This includes non-technical people (there’s no programming required) but also developers.\u003C\u002Fp>\n\u003Cp>Non-technical people will appreciate the intuitive drag-and-drop interface.  For developers, complete control over the block’s output, conditional logic (pro version only), automatic deprecations, dynamic blocks, and more make it a powerful must-have time-saving development tool.\u003C\u002Fp>\n","Create your own custom blocks and patterns in as little as a few minutes!",10,5497,5,"2025-04-22T04:30:00.000Z","6.7",[105,106,68,20,21],"administration","block-builder","https:\u002F\u002Fwickedplugins.com\u002Fwicked-block-builder\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwicked-block-builder.1.4.6.zip",{"slug":110,"name":111,"version":112,"author":113,"author_profile":114,"description":115,"short_description":116,"active_installs":117,"downloaded":118,"rating":119,"num_ratings":120,"last_updated":121,"tested_up_to":83,"requires_at_least":122,"requires_php":123,"tags":124,"homepage":126,"download_link":127,"security_score":60,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"classic-editor","Classic Editor","1.6.7","WordPress.org","https:\u002F\u002Fprofiles.wordpress.org\u002Fwordpressdotorg\u002F","\u003Cp>Classic Editor is an official plugin maintained by the WordPress team that restores the previous (“classic”) WordPress editor and the “Edit Post” screen. It makes it possible to use plugins that extend that screen, add old-style meta boxes, or otherwise depend on the previous editor.\u003C\u002Fp>\n\u003Cp>Classic Editor is an official WordPress plugin, and will be fully supported and maintained until 2024, or as long as is necessary.\u003C\u002Fp>\n\u003Cp>At a glance, this plugin adds the following:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Administrators can select the default editor for all users.\u003C\u002Fli>\n\u003Cli>Administrators can allow users to change their default editor.\u003C\u002Fli>\n\u003Cli>When allowed, the users can choose which editor to use for each post.\u003C\u002Fli>\n\u003Cli>Each post opens in the last editor used regardless of who edited it last. This is important for maintaining a consistent experience when editing content.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>In addition, the Classic Editor plugin includes several filters that let other plugins control the settings, and the editor choice per post and per post type.\u003C\u002Fp>\n\u003Cp>By default, this plugin hides all functionality available in the new block editor (“Gutenberg”).\u003C\u002Fp>\n","Enables the previous \"classic\" editor and the old-style Edit Post screen with TinyMCE, Meta Boxes, etc. Supports all plugins that extend this screen.",9000000,85599606,98,1223,"2025-12-08T10:40:00.000Z","4.9","5.2.4",[125,110,88,21],"block-editor","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fclassic-editor\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fclassic-editor.1.6.7.zip",{"attackSurface":129,"codeSignals":187,"taintFlows":253,"riskAssessment":254,"analyzedAt":261},{"hooks":130,"ajaxHandlers":177,"restRoutes":184,"shortcodes":185,"cronEvents":186,"entryPointCount":62,"unprotectedCount":13},[131,135,141,144,147,150,153,156,160,163,167,170,174],{"type":132,"name":133,"callback":133,"priority":13,"file":134,"line":44},"action","init","classes\\Assets.php",{"type":132,"name":136,"callback":137,"priority":138,"file":139,"line":140},"plugins_loaded","closure",99,"classes\\BlockAssetsGenerator.php",23,{"type":132,"name":133,"callback":137,"file":142,"line":143},"classes\\Components\\Plugin.php",77,{"type":132,"name":133,"callback":137,"priority":138,"file":145,"line":146},"classes\\Gutenberg.php",52,{"type":132,"name":148,"callback":137,"file":145,"line":149},"enqueue_block_editor_assets",105,{"type":132,"name":151,"callback":137,"file":145,"line":152},"enqueue_block_assets",128,{"type":132,"name":136,"callback":136,"file":154,"line":155},"classes\\Headless.php",18,{"type":132,"name":157,"callback":157,"priority":99,"file":158,"line":159},"save_post","classes\\PostHooks.php",13,{"type":132,"name":161,"callback":161,"file":158,"line":162},"delete_post",14,{"type":132,"name":164,"callback":165,"file":166,"line":31},"rest_api_init","init_rest_api","classes\\REST.php",{"type":132,"name":168,"callback":168,"file":169,"line":162},"admin_menu","classes\\Settings.php",{"type":132,"name":171,"callback":172,"file":169,"line":173},"admin_init","custom_settings",15,{"type":132,"name":171,"callback":175,"file":176,"line":162},"update","classes\\Update.php",[178],{"action":179,"nopriv":180,"callback":181,"hasNonce":180,"hasCapCheck":182,"file":169,"line":183},"blockx_regenerate_containers",false,"regenerate_containers",true,16,[],[],[],{"dangerousFunctions":188,"sqlUsage":189,"outputEscaping":192,"fileOperations":155,"externalRequests":13,"nonceChecks":13,"capabilityChecks":251,"bundledLibraries":252},[],{"prepared":190,"raw":13,"locations":191},8,[],{"escaped":173,"rawEcho":11,"locations":193},[194,197,199,201,203,205,207,209,211,213,215,217,219,221,223,225,227,229,231,232,234,235,237,239,240,242,244,246,248,250],{"file":169,"line":195,"context":196},160,"raw output",{"file":169,"line":198,"context":196},179,{"file":169,"line":200,"context":196},181,{"file":169,"line":202,"context":196},182,{"file":169,"line":204,"context":196},196,{"file":169,"line":206,"context":196},197,{"file":169,"line":208,"context":196},207,{"file":169,"line":210,"context":196},255,{"file":169,"line":212,"context":196},257,{"file":169,"line":214,"context":196},258,{"file":169,"line":216,"context":196},260,{"file":169,"line":218,"context":196},284,{"file":220,"line":31,"context":196},"scripts\\container-styles.php",{"file":220,"line":222,"context":196},26,{"file":220,"line":224,"context":196},32,{"file":220,"line":226,"context":196},37,{"file":220,"line":228,"context":196},41,{"file":220,"line":230,"context":196},50,{"file":220,"line":230,"context":196},{"file":220,"line":233,"context":196},51,{"file":220,"line":146,"context":196},{"file":236,"line":173,"context":196},"templates\\blockx__blockx--authors.php",{"file":238,"line":183,"context":196},"templates\\blockx__blockx--debug__editor.php",{"file":238,"line":11,"context":196},{"file":241,"line":173,"context":196},"templates\\blockx__blockx--post-embed.php",{"file":243,"line":183,"context":196},"templates\\blockx__blockx--post-embed__editor.php",{"file":243,"line":245,"context":196},19,{"file":247,"line":173,"context":196},"templates\\blockx__blockx--posts.php",{"file":249,"line":155,"context":196},"templates\\blockx__blockx--posts__editor.php",{"file":249,"line":140,"context":196},7,[],[],{"summary":255,"deductions":256},"The blockx plugin version 1.10.3 demonstrates a generally positive security posture with several strong practices in place. The absence of any known CVEs, unpatched vulnerabilities, or critical\u002Fhigh severity taint flows is a significant strength, indicating a history of security awareness. The plugin also utilizes prepared statements for all its SQL queries and implements capability checks, which are crucial for secure WordPress development.  However, there are areas that warrant attention and introduce some risk. The most notable concern is the relatively low percentage of properly escaped output (33%). This indicates a significant risk of Cross-Site Scripting (XSS) vulnerabilities, as user-supplied data or dynamic content could be rendered without proper sanitization, allowing attackers to inject malicious scripts. Additionally, the lack of nonce checks on the single AJAX handler is a notable oversight. While the AJAX handler does have capability checks, the absence of nonce verification leaves it susceptible to Cross-Site Request Forgery (CSRF) attacks, where a user could be tricked into executing an action unintentionally.  In conclusion, blockx has a good foundation with secure SQL handling and authorization checks, but the identified output escaping and AJAX nonce issues represent tangible risks that should be addressed to improve its overall security.",[257,259],{"reason":258,"points":190},"Low percentage of properly escaped output",{"reason":260,"points":251},"Missing nonce checks on AJAX handler","2026-03-16T22:35:13.092Z",{"wat":263,"direct":270},{"assetPaths":264,"generatorPatterns":267,"scriptPaths":268,"versionParams":269},[265,266],"\u002Fwp-content\u002Fplugins\u002Fblockx\u002Fassets\u002Fdist\u002Fgutenberg.css","\u002Fwp-content\u002Fplugins\u002Fblockx\u002Fassets\u002Fdist\u002Fgutenberg.js",[],[266],[],{"cssClasses":271,"htmlComments":272,"htmlAttributes":273,"restEndpoints":274,"jsGlobals":276,"shortcodeOutput":277},[4],[],[],[275],"\u002Fwp-json\u002Fblockx\u002F",[5],[]]