[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fgvH1LhtHAA43Y8rSSAyax5bGkPF97zw9ym0z6fcZ24E":3,"$fH8Edc3Fc9sgZVXTvHd5gKnPtm7lnKdSoO3qT5OyX_v0":360,"$fVBmb40Uwg3YH6OaMgPtry_c_nVvtD1EMwFL1N-dU26E":365},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":17,"tags":18,"homepage":22,"download_link":23,"security_score":24,"vuln_count":14,"unpatched_count":14,"last_vuln_date":25,"fetched_at":26,"discovery_status":27,"vulnerabilities":28,"developer":46,"crawl_stats":34,"alternatives":53,"analysis":160,"fingerprints":342},"board-document-manager-from-chuhpl","Board Document Manager from CHUHPL","1.9.1","Cleveland Heights-University Heights Public Library Webdeveloper","https:\u002F\u002Fprofiles.wordpress.org\u002Fchuhpl\u002F","\u003Cp>This plugin collects PDF board minutes and agendas (regular and special) and displays them in an archive for your patrons and customers. You manage and upload the files from your Administration console.\u003C\u002Fp>\n\u003Cp>There is a short code that will then display the latest agenda and all of your meeting notes.\u003C\u002Fp>\n\u003Ch3>Other plugins\u003C\u002Fh3>\n","A simple management system for Board Meeting agendas and meeting minutes.",10,2021,20,1,"2023-04-24T15:39:00.000Z","6.2.9","",[19,20,21],"board","documents","library","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fboard-document-manager-from-chuhpl\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fboard-document-manager-from-chuhpl.zip",64,"2024-12-05 00:00:00","2026-04-16T10:56:18.058Z","no_bundle",[29],{"id":30,"url_slug":31,"title":32,"description":33,"plugin_slug":4,"theme_slug":34,"affected_versions":35,"patched_in_version":34,"severity":36,"cvss_score":37,"cvss_vector":38,"vuln_type":39,"published_date":25,"updated_date":40,"references":41,"days_to_patch":34,"patch_diff_files":43,"patch_trac_url":34,"research_status":34,"research_verified":44,"research_rounds_completed":45,"research_plan":34,"research_summary":34,"research_vulnerable_code":34,"research_fix_diff":34,"research_exploit_outline":34,"research_model_used":34,"research_started_at":34,"research_completed_at":34,"research_error":34,"poc_status":34,"poc_video_id":34,"poc_summary":34,"poc_steps":34,"poc_tested_at":34,"poc_wp_version":34,"poc_php_version":34,"poc_playwright_script":34,"poc_exploit_code":34,"poc_has_trace":44,"poc_model_used":34,"poc_verification_depth":34},"CVE-2024-54238","board-document-manager-from-chuhpl-reflected-cross-site-scripting","Board Document Manager from CHUHPL \u003C= 1.9.1 - Reflected Cross-Site Scripting","The Board Document Manager from CHUHPL plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.9.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",null,"\u003C=1.9.1","medium",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-01-17 13:27:34",[42],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fd5ed7f73-34aa-45ac-a4c8-81bb78d9e63f?source=api-prod",[],false,0,{"slug":47,"display_name":7,"profile_url":8,"plugin_count":48,"total_installs":49,"avg_security_score":50,"avg_patch_time_days":49,"trust_score":51,"computed_at":52},"chuhpl",3,30,71,74,"2026-07-14T13:15:52.957Z",[54,78,98,117,139],{"slug":55,"name":56,"version":57,"author":58,"author_profile":59,"description":60,"short_description":61,"active_installs":62,"downloaded":63,"rating":64,"num_ratings":65,"last_updated":66,"tested_up_to":67,"requires_at_least":68,"requires_php":69,"tags":70,"homepage":75,"download_link":76,"security_score":77,"vuln_count":45,"unpatched_count":45,"last_vuln_date":34,"fetched_at":26},"the-paste","The Paste","2.1.4","podpirate","https:\u002F\u002Fprofiles.wordpress.org\u002Fpodpirate\u002F","\u003Cp>Speed up your workflow by pasting files and image data directly into the WordPress media library.\u003C\u002Fp>\n\u003Cp>You can copy files and image data from many desktop applications:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>macOS Finder\u003C\u002Fli>\n\u003Cli>Windows Filesystem\u003C\u002Fli>\n\u003Cli>Screenshots\u003C\u002Fli>\n\u003Cli>Adobe Photoshop\u003C\u002Fli>\n\u003Cli>Gimp\u003C\u002Fli>\n\u003Cli>LibreOffice\u003C\u002Fli>\n\u003Cli>GoogleDocs\u003C\u002Fli>\n\u003Cli>Adobe XD\u003C\u002Fli>\n\u003Cli>SVG from Adobe XD, Illustrator, Figma and Affinity Designer (\u003Cstrong>Note:\u003C\u002Fstrong> An additional plugin for SVG Support is required. My favorite: \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsafe-svg\u002F\" rel=\"ugc\">Safe SVG\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmcguffin\u002Fthe-paste#applications-tested-so-far\" rel=\"nofollow ugc\">And some more…\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>… and paste it to Classic Editor or directly to the media library.\u003C\u002Fp>\n\u003Cp>The most recent Desktop versions of Chrome, Edge, Firefox and Safari are supported.\u003C\u002Fp>\n\u003Cp>Install \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsafe-svg\u002F\" rel=\"ugc\">Safe SVG\u003C\u002Fa> to enable SVG support.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmcguffin\u002Fthe-paste\" rel=\"nofollow ugc\">The paste at GitHub\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>You like it? You can’t stop pasting? \u003Ca href=\"https:\u002F\u002Fwww.paypal.com\u002Fdonate\u002F?hosted_button_id=F8NKC6TCASUXE\" rel=\"nofollow ugc\">Paste some cash with PayPal\u003C\u002Fa>!\u003C\u002Fp>\n\u003Ch3>Known Issues\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cem>Firefox\u003C\u002Fem> does not support pasting multiple files from the OS filesystem.\u003C\u002Fli>\n\u003Cli>\u003Cem>Safari\u003C\u002Fem> lacks the support to convert images to the webP format.\u003C\u002Fli>\n\u003Cli>Pasting in TinyMCE triggers a JavaScript error if \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Freal-media-library-lite\u002F\" rel=\"ugc\">Real Media Library\u003C\u002Fa> is active. Pasting in the media library is still working.\u003C\u002Fli>\n\u003Cli>\u003Cem>Edge\u003C\u002Fem> is working suspiciously well, which is very unusal in the Microsoft world and must be considered a bug.\u003C\u002Fli>\n\u003C\u002Ful>\n","Paste files and image data from clipboard and instantly upload them to the WordPress media library.",10000,100270,96,35,"2025-12-05T13:32:00.000Z","6.9.4","4.8","7.4",[71,72,73,74],"clipboard","copy-paste","media-library","productivity","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fthe-paste\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fthe-paste.2.1.4.zip",100,{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":86,"downloaded":87,"rating":64,"num_ratings":88,"last_updated":89,"tested_up_to":67,"requires_at_least":90,"requires_php":91,"tags":92,"homepage":96,"download_link":97,"security_score":77,"vuln_count":45,"unpatched_count":45,"last_vuln_date":34,"fetched_at":26},"document-gallery","Document Gallery","5.1.0","Dan Rossiter","https:\u002F\u002Fprofiles.wordpress.org\u002Fdanrossiter\u002F","\u003Cp>Display your documents beautifully! Document Gallery creates thumbnail galleries for PDFs, Word documents, PowerPoint presentations, and other file types—just like WordPress does for images.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>WordPress Block Editor\u003C\u002Fstrong> – Insert galleries with a single click, configure visually\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Automatic Thumbnails\u003C\u002Fstrong> – Generates preview images for documents (PDF, Office files, etc.)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Modern Image Formats\u003C\u002Fstrong> – Full support for WebP and AVIF images (WordPress 6.5+)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Flexible Display\u003C\u002Fstrong> – Grid or list layout with optional descriptions\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Smart Filtering\u003C\u002Fstrong> – Show all attachments, current post only, or specific documents\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Pagination Support\u003C\u002Fstrong> – Handle large document libraries efficiently\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Fully Customizable\u003C\u002Fstrong> – Control columns, sorting, links, and styling\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Classic Shortcode\u003C\u002Fstrong> – \u003Ccode>[dg]\u003C\u002Fcode> shortcode available for template use\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Perfect For\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Document libraries and resource centers\u003C\u002Fli>\n\u003Cli>Portfolio and work sample galleries\u003C\u002Fli>\n\u003Cli>Publication and whitepaper collections\u003C\u002Fli>\n\u003Cli>Course materials and downloads\u003C\u002Fli>\n\u003Cli>Legal document repositories\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Block Editor Integration\u003C\u002Fh4>\n\u003Cp>Click the ‘+’ button in the editor and search for “Document Gallery” to insert a gallery block. All configuration options appear in the sidebar—no shortcode knowledge required. Select specific documents or let the gallery auto-populate based on your criteria.\u003C\u002Fp>\n\u003Ch4>Shortcode Support\u003C\u002Fh4>\n\u003Cp>The classic \u003Ccode>[dg]\u003C\u002Fcode> shortcode continues to work perfectly for template files, widgets, and power users who prefer code-based configuration. See the Installation tab for all available options.\u003C\u002Fp>\n\u003Ch4>Developer Friendly\u003C\u002Fh4>\n\u003Cp>Document Gallery provides extensive filters and actions for customizing thumbnail generation, HTML output, and gallery queries. See the Installation tab for complete developer documentation.\u003C\u002Fp>\n\u003Ch4>Partners\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>WP Real Media Library\u003C\u002Fstrong>: Document Gallery seamlessly integrates with RML by way of a\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdg-real-media-library\u002F\" rel=\"ugc\">helper plugin\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Translation\u003C\u002Fh4>\n\u003Cp>Document Gallery has to-date been translated into \u003Cstrong>6\u003C\u002Fstrong> languages, listed below.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Finnish\u003C\u002Fstrong> — \u003Cem>Thanks, \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fprofile\u002Fvillevetela\" rel=\"ugc\">villevetela\u003C\u002Fa>!\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>French\u003C\u002Fstrong> — \u003Cem>Thanks, Marc Liotard and \u003Ca href=\"http:\u002F\u002Fwww.trafic-influence.com\u002F\" rel=\"nofollow ugc\">Traffic Influence\u003C\u002Fa>!\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Russian\u003C\u002Fstrong> — \u003Cem>Thanks, \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fprofile\u002Fdemur\" rel=\"ugc\">demur\u003C\u002Fa>!\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Spanish\u003C\u002Fstrong> — \u003Cem>Thanks, Andrew Kurtis and \u003Ca href=\"http:\u002F\u002Fwww.webhostinghub.com\u002F\" rel=\"nofollow ugc\">WebHostingHub\u003C\u002Fa>!\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Swedish\u003C\u002Fstrong> — \u003Cem>Thanks, \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fprofile\u002Fmepmepmep\" rel=\"ugc\">mepmepmep\u003C\u002Fa>!\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Ukrainian\u003C\u002Fstrong> — \u003Cem>Thanks, \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fprofile\u002Fdemur\" rel=\"ugc\">demur\u003C\u002Fa>!\u003C\u002Fem>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Developers\u003C\u002Fh4>\n\u003Cp>Document Gallery includes features intended to make integration with other plugins\u003Cbr \u002F>\nsimple. See the bottom of the \u003Cstrong>Installation\u003C\u002Fstrong> tab for specific documentation on\u003Cbr \u002F>\nthe various features provided.\u003C\u002Fp>\n\u003Cp>\u003Cem>If this plugin has helped you, please take a moment to \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fview\u002Fplugin-reviews\u002Fdocument-gallery#postform\" rel=\"ugc\">rate it\u003C\u002Fa>!\u003C\u002Fem>\u003C\u002Fp>\n","This plugin generates thumbnails for documents and displays them in a gallery-like format for easy sharing.",9000,321319,112,"2025-12-09T01:05:00.000Z","6.1","5.6",[93,20,21,94,95],"attachments","pdf","word","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdocument-gallery\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdocument-gallery.5.1.0.zip",{"slug":99,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":106,"downloaded":107,"rating":108,"num_ratings":109,"last_updated":110,"tested_up_to":67,"requires_at_least":90,"requires_php":111,"tags":112,"homepage":17,"download_link":116,"security_score":77,"vuln_count":45,"unpatched_count":45,"last_vuln_date":34,"fetched_at":26},"catfolders-document-gallery","CatFolders Document Gallery & PDF Library","2.0.5","CatFolders","https:\u002F\u002Fprofiles.wordpress.org\u002Fcatfolders\u002F","\u003Cp>\u003Cstrong>Document Gallery\u003C\u002Fstrong> is a 100% free addon for \u003Cstrong>CatFolders, a WordPress media folder plugin\u003C\u002Fstrong>. It allows users to create and display file galleries (especially for documents like PDFs, Word, Excel files, ebooks, etc.) directly on posts or pages using the block editor or a shortcode.\u003C\u002Fp>\n\u003Cp>With \u003Cstrong>Document Gallery\u003C\u002Fstrong>, you can:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Display a folder’s documents in a neat grid or list view.\u003C\u002Fli>\n\u003Cli>Enable front-end file previews and downloads.\u003C\u002Fli>\n\u003Cli>Customize how file titles, icons, and other metadata appear.\u003C\u002Fli>\n\u003Cli>Filter files by folder, type, date, or topic.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>💥 \u003Cstrong>New Feature: Nested Folders with Breadcrumb Navigation!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The CatFolders Document Gallery now supports \u003Cstrong>multi-level folder structure\u003C\u002Fstrong>, making it easier than ever to organize and present your documents. With intuitive breadcrumb navigation, your website visitors can quickly explore subfolders and find exactly what they need!\u003C\u002Fp>\n\u003Cp>📌 \u003Ca href=\"https:\u002F\u002Fwpmediafolders.com\u002Fdocs\u002Faddons\u002Fdocument-gallery\u002F\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwpmediafolders.com\u002Fcatfolders-document-gallery-demo\u002F\" rel=\"nofollow ugc\">Quick Demo\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>It will save you a huge amount of time thanks to these built-in features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Two customizable layouts: \u003Cstrong>list\u003C\u002Fstrong> and \u003Cstrong>grid\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Over 5 file details available:: title, file type, icon, file size, updated date, and download link\u003C\u002Fli>\n\u003Cli>Automatically shows \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwpmediafolders.com\u002Fdocs\u002Faddons\u002Fdocument-gallery\u002Fthumbnails\u002F\" rel=\"nofollow ugc\">PDF first-page thumbnails\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Supports all standard WordPress media file types\u003C\u002Fli>\n\u003Cli>Fully mobile responsive\u003C\u002Fli>\n\u003Cli>Clean, modern gallery design\u003C\u002Fli>\n\u003Cli>Option to show or hide specific columns\u003C\u002Fli>\n\u003Cli>Built-in file title search box\u003C\u002Fli>\n\u003Cli>Sort files by size, title, file type, or last modified date\u003C\u002Fli>\n\u003Cli>Flexible pagination settings\u003C\u002Fli>\n\u003Cli>Click to preview, open in a popup, or download any file\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🎯 FEATURES\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>CatFolders Document Gallery\u003C\u002Fstrong> support displaying all WordPress file types:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Documents: pdf, doc, ppt, odt, xls\u003C\u002Fli>\n\u003Cli>Graphics: psd, svg\u003C\u002Fli>\n\u003Cli>eBooks: epub, mobi, azw, azw3\u003C\u002Fli>\n\u003Cli>Images: jpg, jpeg, png, gif, ico, webp\u003C\u002Fli>\n\u003Cli>Audios: mp3, m4a, ogg, wav\u003C\u002Fli>\n\u003Cli>Videos: mp4, mov, wmv, avi, mpg\u003C\u002Fli>\n\u003Cli>Others: svg, zip, json, and custom file types\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>To get started with this WordPress PDF gallery plugin, simply follow these steps:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Install CatFolders – \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcatfolders\u002F\" rel=\"ugc\">WP Media Folders free\u003C\u002Fa>, or \u003Ca href=\"https:\u002F\u002Fwpmediafolders.com\u002F\" rel=\"nofollow ugc\">CatFolders pro version\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Install CatFolders Document Gallery (this plugin)\u003C\u002Fli>\n\u003Cli>Start organizing documents into folders\u003C\u002Fli>\n\u003Cli>Pick a folder to create WordPress gallery from folder\u003C\u002Fli>\n\u003Cli>Customize the gallery appearances and publish\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FgLxi4CTItKE?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch3>💪 WHY YOU SHOULD USE DOCUMENT GALLERY BY CATFOLDERS?\u003C\u002Fh3>\n\u003Cp>It’s especially useful for WordPress websites that offer downloadable resources, such as:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>eCommerce websites offering \u003Cstrong>digital products\u003C\u002Fstrong> or \u003Cstrong>file downloads\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>Membership sites providing gated access to \u003Cstrong>exclusive files\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>Schools or universities sharing \u003Cstrong>study materials\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>Companies providing \u003Cstrong>white papers\u003C\u002Fstrong> or \u003Cstrong>reports\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>Nonprofits sharing \u003Cstrong>brochures\u003C\u002Fstrong> and \u003Cstrong>legal docs\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Here’s what you get:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Live content syncing\u003C\u002Fstrong>: Any changes made to your media folders are instantly reflected wherever they’re displayed. No need to edit pages manually.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Easy to explore\u003C\u002Fstrong>: Visitors can quickly locate files with a built-in search bar and organize the view by date, name, size, popularity, and more.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Smooth browsing experience\u003C\u002Fstrong>: Load more items dynamically without refreshing the page, keeping navigation seamless.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Optimized for all devices\u003C\u002Fstrong>: Whether on desktop, tablet, or smartphone, your content adapts beautifully to every screen.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>As an admin, you will get the advantages of the customization options:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easily tweak the layout and columns.\u003C\u002Fli>\n\u003Cli>Create a WordPress file gallery that fits perfectly with your website’s design.\u003C\u002Fli>\n\u003Cli>Keep your documents and files organized within folders.\u003C\u002Fli>\n\u003Cli>Dynamically update your galleries.\u003C\u002Fli>\n\u003Cli>100% free: No need to upgrade as this is already packed with premium features. Yay!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>As you add new documents to your folders, it will automatically reflect those changes. This will ensure that your visitors always have access to the most up-to-date information.\u003C\u002Fp>\n\u003Cp>Happy gallery-ing 💖\u003C\u002Fp>\n","Display WordPress PDF gallery and file gallery from folders. Comes with a clean, searchable & sortable list\u002Fgrid layout.",3000,31320,88,12,"2026-03-17T12:10:00.000Z","7.0",[113,114,20,115,94],"document-library","document-management","downloads","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcatfolders-document-gallery.2.0.5.zip",{"slug":118,"name":119,"version":120,"author":121,"author_profile":122,"description":123,"short_description":124,"active_installs":125,"downloaded":126,"rating":64,"num_ratings":127,"last_updated":128,"tested_up_to":67,"requires_at_least":129,"requires_php":111,"tags":130,"homepage":134,"download_link":135,"security_score":136,"vuln_count":137,"unpatched_count":45,"last_vuln_date":138,"fetched_at":26},"wp-docs","WP Docs","2.3.0","Fahad Mahmood","https:\u002F\u002Fprofiles.wordpress.org\u002Ffahadmahmood\u002F","\u003Cul>\n\u003Cli>\n\u003Cp>Author: \u003Ca href=\"https:\u002F\u002Fwww.androidbubbles.com\u002Fcontact\" rel=\"nofollow ugc\">Fahad Mahmood\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Project URI: \u003Ca href=\"http:\u002F\u002Fandroidbubble.com\u002Fblog\u002Fwordpress\u002Fplugins\u002Fwp-docs\" rel=\"nofollow ugc\">http:\u002F\u002Fandroidbubble.com\u002Fblog\u002Fwordpress\u002Fplugins\u002Fwp-docs\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Demo URI: \u003Ca href=\"https:\u002F\u002Fnsvwaterplan.org\u002Fdocuments-library\" rel=\"nofollow ugc\">https:\u002F\u002Fnsvwaterplan.org\u002Fdocuments-library\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>License: GPL 3. See License below for copyright jots and titles.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>WP Docs is a documents management plugin. You can manage user roles to restrict access to files, directory view, file types allowed for uploading. Nicely managed layouts with optional Bootstrap wrappers.\u003C\u002Fp>\n\u003Ch4>Tags\u003C\u002Fh4>\n\u003Cp>upload, download, library, files, breadcrumb\u003C\u002Fp>\n\u003Ch4>How it works?\u003C\u002Fh4>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Fk5bZqZ5dW30?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch4>WP Docs Insights\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Breadcrumb bar is available for a better navigation.\u003C\u002Fli>\n\u003Cli>Front end refresh based files browser.\u003C\u002Fli>\n\u003Cli>Front end ajax based browsing.\u003C\u002Fli>\n\u003Cli>Document preview and thumbnails available for most file types.\u003C\u002Fli>\n\u003Cli>Multiple directory views are available, also with the shortcodes.\u003C\u002Fli>\n\u003Cli>Multiple instances are possible with the shortcodes, icons, list and details.\u003C\u002Fli>\n\u003Cli>Posts created for each new directory and your library items will be considered as file items using meta fields for post efficiently.\u003C\u002Fli>\n\u003Cli>The ability to create unlimited, edit and delete directories and sub-directories.\u003C\u002Fli>\n\u003Cli>A smooth navigation experience based on jQuery\u002FAjax instead of page refresh. This is a premium feature.\u003C\u002Fli>\n\u003Cli>Each folder can have a separate shortcode so you can use different pages for different directory listing and files inside.\u003C\u002Fli>\n\u003Cli>Folder icon and title size can be changed in pixels or percentage from settings page.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This WordPress Plugin is free software: you can redistribute it and\u002For modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 2 of the License, or any later version. This free software is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this software. If not, see http:\u002F\u002Fwww.gnu.org\u002Flicenses\u002Fgpl-2.0.html.\u003C\u002Fp>\n","A documents management tool for education portals.",1000,61792,17,"2026-03-13T09:57:00.000Z","3.5",[131,20,132,133,118],"directory","library-folders","memphis-documents-library","http:\u002F\u002Fandroidbubble.com\u002Fblog\u002Fwp-docs","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-docs.2.3.0.zip",95,9,"2026-04-15 14:25:18",{"slug":140,"name":141,"version":142,"author":143,"author_profile":144,"description":145,"short_description":146,"active_installs":147,"downloaded":148,"rating":77,"num_ratings":149,"last_updated":150,"tested_up_to":151,"requires_at_least":152,"requires_php":153,"tags":154,"homepage":17,"download_link":158,"security_score":159,"vuln_count":45,"unpatched_count":45,"last_vuln_date":34,"fetched_at":26},"aam-protected-media-files","AAM Protected Media Files","1.3.2","AAM Plugin","https:\u002F\u002Fprofiles.wordpress.org\u002Fvasyltech\u002F","\u003Cp>Prevent direct access to the unlimited number of media library items either for visitors, individual users or groups of users (roles). This plugin does not modify a physical file’s location or URL.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>The AAM Protected Media Files plugins is the official add-on to the free Advanced Access Manager (aka AAM). While this plugin actually manages physical access to the media files, AAM provides the UI interface to define access to files.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>Few Facts\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>It requires a simple manual steps in order to configure a webserver to protect direct access to \u003Ccode>\u002Fwp-content\u002Fuploads\u003C\u002Fcode> folder. For more information, please check \u003Ca href=\"https:\u002F\u002Faamportal.com\u002Farticle\u002Fprotected-media-files-installation\" rel=\"nofollow ugc\">our installation instructions\u003C\u002Fa>;\u003C\u002Fli>\n\u003Cli>It does not change a physical file’s location, content or URL. Upon deactivation, everything goes back to normal;\u003C\u002Fli>\n\u003Cli>It protects all the allowed by WordPress core file types and those that are extended with third-party plugins (e.g. \u003Ccode>.svg\u003C\u002Fcode>, \u003Ccode>.sketch\u003C\u002Fcode>, etc.). For the list of all allowed extensions, check official WP documentation for the \u003Ca href=\"https:\u002F\u002Fdeveloper.wordpress.org\u002Freference\u002Ffunctions\u002Fwp_get_ext_types\u002F\" rel=\"nofollow ugc\">wp_get_ext_types()\u003C\u002Fa> core function;\u003C\u002Fli>\n\u003Cli>It allows you to manage access to any media file for visitors, any individual user, roles or even define the default access to all media files for everybody (this one is available with \u003Ca href=\"https:\u002F\u002Faamportal.com\u002Fpremium\" rel=\"nofollow ugc\">premium\u003C\u002Fa> add-on for AAM plugin);\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For more information about how properly install and use it, refer to \u003Ca href=\"https:\u002F\u002Faamportal.com\u002Fsupport\" rel=\"nofollow ugc\">our documentation\u003C\u002Fa>.\u003C\u002Fp>\n","Add-on to the free Advanced Access Manager plugin that protects media files from direct access for visitors, roles or users",600,16689,2,"2025-06-05T11:29:00.000Z","6.8.0","4.7.0","5.6.0",[20,155,73,156,157],"files","protected-media","protected-videos","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faam-protected-media-files.1.3.2.zip",92,{"attackSurface":161,"codeSignals":187,"taintFlows":281,"riskAssessment":321,"analyzedAt":341},{"hooks":162,"ajaxHandlers":179,"restRoutes":180,"shortcodes":181,"cronEvents":186,"entryPointCount":14,"unprotectedCount":45},[163,168,171,175,178],{"type":164,"name":165,"callback":166,"file":167,"line":49},"action","wp_enqueue_scripts","bdmchuhpl_script_enqueuer","board_document_manager_from_CHUHPL.php",{"type":164,"name":165,"callback":169,"file":167,"line":170},"bdmchuhpl_load_textdomain",31,{"type":164,"name":172,"callback":173,"file":167,"line":174},"admin_menu","add_settingsPage",33,{"type":164,"name":172,"callback":176,"file":167,"line":177},"add_menu",34,{"type":164,"name":172,"callback":176,"file":167,"line":65},[],[],[182],{"tag":183,"callback":184,"file":167,"line":185},"showBoardDocumentManager","showPublic",44,[],{"dangerousFunctions":188,"sqlUsage":189,"outputEscaping":201,"fileOperations":279,"externalRequests":45,"nonceChecks":45,"capabilityChecks":45,"bundledLibraries":280},[],{"prepared":190,"raw":48,"locations":191},8,[192,195,199],{"file":167,"line":193,"context":194},127,"$wpdb->query() with variable interpolation",{"file":196,"line":197,"context":198},"templates\\recent_list.php",15,"$wpdb->get_row() with variable interpolation",{"file":196,"line":200,"context":198},16,{"escaped":48,"rawEcho":202,"locations":203},40,[204,208,210,212,214,216,218,219,221,223,225,227,229,231,233,235,237,240,242,243,245,247,248,249,251,252,253,255,257,259,261,263,265,267,268,269,271,273,275,278],{"file":205,"line":206,"context":207},"templates\\form_add.php",32,"raw output",{"file":205,"line":209,"context":207},48,{"file":205,"line":211,"context":207},52,{"file":205,"line":213,"context":207},72,{"file":205,"line":215,"context":207},76,{"file":205,"line":217,"context":207},84,{"file":205,"line":108,"context":207},{"file":205,"line":220,"context":207},94,{"file":205,"line":222,"context":207},99,{"file":205,"line":224,"context":207},118,{"file":205,"line":226,"context":207},122,{"file":205,"line":228,"context":207},130,{"file":205,"line":230,"context":207},134,{"file":205,"line":232,"context":207},140,{"file":205,"line":234,"context":207},145,{"file":205,"line":236,"context":207},159,{"file":238,"line":239,"context":207},"templates\\form_add_success.php",18,{"file":241,"line":200,"context":207},"templates\\form_delete.php",{"file":241,"line":239,"context":207},{"file":241,"line":244,"context":207},24,{"file":241,"line":246,"context":207},28,{"file":241,"line":246,"context":207},{"file":241,"line":170,"context":207},{"file":250,"line":200,"context":207},"templates\\form_list.php",{"file":250,"line":174,"context":207},{"file":250,"line":211,"context":207},{"file":250,"line":254,"context":207},54,{"file":250,"line":256,"context":207},56,{"file":250,"line":258,"context":207},59,{"file":250,"line":260,"context":207},60,{"file":250,"line":262,"context":207},61,{"file":196,"line":264,"context":207},37,{"file":196,"line":266,"context":207},38,{"file":196,"line":215,"context":207},{"file":196,"line":215,"context":207},{"file":196,"line":270,"context":207},77,{"file":196,"line":272,"context":207},78,{"file":196,"line":274,"context":207},79,{"file":276,"line":277,"context":207},"templates\\show_shortcode.php",46,{"file":276,"line":277,"context":207},6,[],[282,298],{"entryPoint":283,"graph":284,"unsanitizedCount":14,"severity":297},"\u003Cform_delete> (templates\\form_delete.php:0)",{"nodes":285,"edges":295},[286,290],{"id":287,"type":288,"label":289,"file":241,"line":170},"n0","source","$_GET['id']",{"id":291,"type":292,"label":293,"file":241,"line":170,"wp_function":294},"n1","sink","echo() [XSS]","echo",[296],{"from":287,"to":291,"sanitized":44},"low",{"entryPoint":299,"graph":300,"unsanitizedCount":319,"severity":320},"\u003CshowMe> (showMe.php:0)",{"nodes":301,"edges":316},[302,305,309,312],{"id":287,"type":288,"label":303,"file":304,"line":239},"$_GET","showMe.php",{"id":291,"type":292,"label":306,"file":304,"line":307,"wp_function":308},"get_row() [SQLi]",19,"get_row",{"id":310,"type":288,"label":311,"file":304,"line":239},"n2","$_GET (x3)",{"id":313,"type":292,"label":314,"file":304,"line":264,"wp_function":315},"n3","header() [Header Injection]","header",[317,318],{"from":287,"to":291,"sanitized":44},{"from":310,"to":313,"sanitized":44},4,"high",{"summary":322,"deductions":323},"The plugin \"board-document-manager-from-chuhpl\" v1.9.1 presents a mixed security posture. While it boasts a small attack surface and no known critical or high severity vulnerabilities stemming from the static analysis, significant concerns arise from the code quality and its vulnerability history.  The low percentage of properly escaped output (7%) and the presence of unsanitized paths in taint analysis, including one high severity flow, indicate potential for cross-site scripting (XSS) or other input validation vulnerabilities. The lack of any nonce or capability checks on the identified entry points further exacerbates these risks, as any user could potentially interact with these functionalities without proper authorization or protection. The vulnerability history, which includes a medium severity XSS vulnerability last patched in late 2024, reinforces these concerns, suggesting a pattern of insecure coding practices that have led to exploitable issues. Despite its limited attack surface, the poor output escaping and taint flow issues, coupled with past vulnerabilities, suggest a need for significant code review and remediation to improve its overall security.",[324,326,329,331,334,336,339],{"reason":325,"points":127},"Unpatched CVE (medium severity)",{"reason":327,"points":328},"High severity taint flow with unsanitized path",13,{"reason":330,"points":190},"Low output escaping percentage (7%)",{"reason":332,"points":333},"0 Nonce checks on entry points",7,{"reason":335,"points":333},"0 Capability checks on entry points",{"reason":337,"points":338},"Unsanitized paths found in taint analysis",5,{"reason":340,"points":319},"Low percentage of prepared SQL statements (73%)","2026-03-17T00:59:38.195Z",{"wat":343,"direct":349},{"assetPaths":344,"generatorPatterns":346,"scriptPaths":347,"versionParams":348},[345],"\u002Fwp-content\u002Fplugins\u002Fboard-document-manager-from-chuhpl\u002FbdmStyle.css",[],[],[],{"cssClasses":350,"htmlComments":351,"htmlAttributes":352,"restEndpoints":354,"jsGlobals":355,"shortcodeOutput":358},[],[],[353],"data-code",[],[356,357],"window.bdmchuhpl_formCode","window.bdmchuhpl_formSource",[359],"[showBoardDocumentManager]",{"error":361,"url":362,"statusCode":363,"statusMessage":364,"message":364},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fboard-document-manager-from-chuhpl\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":149,"versions":366},[367,375],{"version":368,"download_url":369,"svn_tag_url":370,"released_at":34,"has_diff":44,"diff_files_changed":371,"diff_lines":34,"trac_diff_url":372,"vulnerabilities":373,"is_current":44},"1.8","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fboard-document-manager-from-chuhpl.1.8.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fboard-document-manager-from-chuhpl\u002Ftags\u002F1.8\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fboard-document-manager-from-chuhpl%2Ftags%2F1.7&new_path=%2Fboard-document-manager-from-chuhpl%2Ftags%2F1.8",[374],{"id":30,"url_slug":31,"title":32,"severity":36,"cvss_score":37,"vuln_type":39,"patched_in_version":34},{"version":376,"download_url":377,"svn_tag_url":378,"released_at":34,"has_diff":44,"diff_files_changed":379,"diff_lines":34,"trac_diff_url":34,"vulnerabilities":380,"is_current":44},"1.7","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fboard-document-manager-from-chuhpl.1.7.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fboard-document-manager-from-chuhpl\u002Ftags\u002F1.7\u002F",[],[381],{"id":30,"url_slug":31,"title":32,"severity":36,"cvss_score":37,"vuln_type":39,"patched_in_version":34}]