[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2lMuP4qD8CQqgWFw-AyPThAV6t7kbQA6rdwpcsL0XMw":3,"$fZOG8GXJPaF1US9C8sKzugRk8zi3WBqvotItQvotTWcg":373,"$fVPHOZS60Nnmj3IVg74s_jKx5SDC89-r5QoUkg6GUzQM":378},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"discovery_status":30,"vulnerabilities":31,"developer":49,"crawl_stats":37,"alternatives":56,"analysis":156,"fingerprints":342},"boot-modal","Boot-Modal","1.10","albedo0","https:\u002F\u002Fprofiles.wordpress.org\u002Falbedo0\u002F","\u003Cp>This plugin use a simple shortcode to insert a link anywhere to open any page in a Bootstrap modal window.\u003Cbr \u002F>\nYou can use a button in the editor to generate the shortcode for you or use the default settings.\u003C\u002Fp>\n\u003Cp>You can setup several params like :\u003Cbr \u002F>\n– Size of the modal,\u003Cbr \u002F>\n– Type of the button to open modal (link or button),\u003Cbr \u002F>\n– CSS class for buttons,\u003Cbr \u002F>\n– etc\u003C\u002Fp>\n","This plugin use a simple shortcode to insert a link anywhere to open any page in a Bootstrap modal window.",90,6357,100,2,"2025-01-07T09:11:00.000Z","6.7.5","3.0.1","",[20,21,22],"bootstrap","modal","shortcode","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fboot-modal\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fboot-modal.zip",91,1,0,"2025-01-07 00:00:00","2026-04-16T10:56:18.058Z","no_bundle",[32],{"id":33,"url_slug":34,"title":35,"description":36,"plugin_slug":4,"theme_slug":37,"affected_versions":38,"patched_in_version":6,"severity":39,"cvss_score":40,"cvss_vector":41,"vuln_type":42,"published_date":28,"updated_date":43,"references":44,"days_to_patch":46,"patch_diff_files":47,"patch_trac_url":37,"research_status":37,"research_verified":48,"research_rounds_completed":27,"research_plan":37,"research_summary":37,"research_vulnerable_code":37,"research_fix_diff":37,"research_exploit_outline":37,"research_model_used":37,"research_started_at":37,"research_completed_at":37,"research_error":37,"poc_status":37,"poc_video_id":37,"poc_summary":37,"poc_steps":37,"poc_tested_at":37,"poc_wp_version":37,"poc_php_version":37,"poc_playwright_script":37,"poc_exploit_code":37,"poc_has_trace":48,"poc_model_used":37,"poc_verification_depth":37},"CVE-2025-22551","boot-modal-authenticated-contributor-stored-cross-site-scripting","Boot-Modal \u003C= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting","The Boot-Modal plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=1.9.1","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-01-14 19:31:50",[45],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F509a24ef-160a-4e54-bd83-ac1704a32766?source=api-prod",8,[],false,{"slug":7,"display_name":7,"profile_url":8,"plugin_count":50,"total_installs":51,"avg_security_score":52,"avg_patch_time_days":53,"trust_score":54,"computed_at":55},3,510,96,177,76,"2026-05-20T08:41:15.420Z",[57,79,100,120,140],{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":13,"num_ratings":67,"last_updated":68,"tested_up_to":69,"requires_at_least":70,"requires_php":18,"tags":71,"homepage":75,"download_link":76,"security_score":77,"vuln_count":26,"unpatched_count":26,"last_vuln_date":78,"fetched_at":29},"bootstrap-shortcodes","Bootstrap Shortcodes","3.4.4","sinetheta","https:\u002F\u002Fprofiles.wordpress.org\u002Fsinetheta\u002F","\u003Cp>WordPress plugin to add shortcodes for Twitter Bootstrap 3.3\u003C\u002Fp>\n\u003Ch3>Latest Bootstrap\u003C\u002Fh3>\n\u003Cp>Bootstrap Shortcodes allow quick and easy implementation of Twitter Bootstrap components through the TinyMCE rich-editor.\u003C\u002Fp>\n\u003Ch3>Supported Shortcodes\u003C\u002Fh3>\n\u003Cp>We add a row of buttons to the bottom of your post editor Visual mode, each of which gives options for inserting Bootstrap’s most popular components.\u003C\u002Fp>\n\u003Ch3>CSS\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Alerts\u003C\u002Fli>\n\u003Cli>Buttons\u003C\u002Fli>\n\u003Cli>Grid (container, row, columns, fully responsive)\u003C\u002Fli>\n\u003Cli>Icons\u003C\u002Fli>\n\u003Cli>Labels\u003C\u002Fli>\n\u003Cli>Lead Text\u003C\u002Fli>\n\u003Cli>Wells\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>JavaScript\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Collapse\u003C\u002Fli>\n\u003Cli>Tabs\u003C\u002Fli>\n\u003Cli>Tooltip\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>Please report issues directly to our \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FTheWebShop\u002Fbootstrap-shortcodes\u002Fissues\" rel=\"nofollow ugc\">Github repository\u003C\u002Fa>.\u003C\u002Fp>\n","Wordpress plugin to add shortcodes for Twitter Bootstrap 3.3",5000,110783,23,"2026-03-10T01:10:00.000Z","6.9.4","3.9",[20,72,73,22,74],"buttons","grid","shortcodes","https:\u002F\u002Fgithub.com\u002FTheWebShop\u002Fbootstrap-shortcodes","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbootstrap-shortcodes.3.4.4.zip",79,"2023-01-27 00:00:00",{"slug":80,"name":81,"version":82,"author":83,"author_profile":84,"description":85,"short_description":86,"active_installs":87,"downloaded":88,"rating":11,"num_ratings":46,"last_updated":89,"tested_up_to":90,"requires_at_least":91,"requires_php":18,"tags":92,"homepage":96,"download_link":97,"security_score":98,"vuln_count":26,"unpatched_count":26,"last_vuln_date":99,"fetched_at":29},"bootstrap-modals","Bootstrap Modals","1.3.2","neilgee","https:\u002F\u002Fprofiles.wordpress.org\u002Fneilgee\u002F","\u003Cp>This plugin adds Bootstrap v3 Modal functionality to WordPress.\u003C\u002Fp>\n\u003Cp>It adds just the Bootstrap Javascript Plugin for Modals and associated CSS.\u003C\u002Fp>\n\u003Cp>This does not bring in any other Bootstrap javascript or CSS functionality.\u003C\u002Fp>\n\u003Cp>There is sample HTML mark up code in the readme.txt for a selector and modal target element.\u003C\u002Fp>\n\u003Cp>Options to override the default CSS modal styling and also use a shortcode.\u003C\u002Fp>\n\u003Cp>Option to disable Bootstrap JS\u002FCSS files in case of conflict.\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>Use either the Bootstrap API markup or Javascript to trigger the modal windows, this can be found here: http:\u002F\u002Fgetbootstrap.com\u002Fjavascript\u002F#modals\u003C\u002Fp>\n\u003Cp>There is also further usage information here: http:\u002F\u002Fcoolestguidesontheplanet.com\u002Fbootstrap\u002Fmodal.php\u003C\u002Fp>\n\u003Cp>Mark up needs to be directly applied to post\u002Fpage or widget area or via a shortcode.\u003C\u002Fp>\n\u003Cp>Options to override the default CSS styling.\u003C\u002Fp>\n\u003Cp>Here is a simple HTML Modal MarkUp\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C!-- Button trigger modal -->\n\u003Ca class=\"btn btn-primary btn-lg\" href=\"#myModal1\" data-toggle=\"modal\">Launch demo modal\u003C\u002Fa>\n\n\u003C!-- Modal -->\n\u003Cdiv id=\"myModal1\" class=\"modal fade\" tabindex=\"-1\">\n    \u003Cdiv class=\"modal-dialog\">\n        \u003Cdiv class=\"modal-content\">\n            \u003Cdiv class=\"modal-header\">\n                \u003Cbutton class=\"close\" type=\"button\" data-dismiss=\"modal\">×\u003C\u002Fbutton>\n                    \u003Ch4 class=\"modal-title\">My Title in a Modal Window\u003C\u002Fh4>\n            \u003C\u002Fdiv>\n            \u003Cdiv class=\"modal-body\">This is the body of a modal...\u003C\u002Fdiv>\n            \u003Cdiv class=\"modal-footer\">This is the footer of a modal...\u003C\u002Fdiv>\n            \u003C\u002Fdiv>\u003C!-- \u002F.modal-content -->\n    \u003C\u002Fdiv>\u003C!-- \u002F.modal-dialog -->\n\u003C\u002Fdiv>\u003C!-- \u002F.modal -->\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>You can change the modal size by adding an extra CSS class to the \u003Cstrong>.modal-dialog\u003C\u002Fstrong> div;\u003C\u002Fp>\n\u003Cpre>modal-lg\u003C\u002Fpre>\n\u003Cp>or\u003C\u002Fp>\n\u003Cpre>modal-sm\u003C\u002Fpre>\n\u003Cp>for large and small respectively.\u003C\u002Fp>\n\u003Cp>Since version 1.0.2 extra CSS is included to set the close button to a state similar to Bootstrap install, to override the default CSS for the close button use a CSS selector .modal-dialog .close { } in your CSS styles.\u003C\u002Fp>\n","This plugin adds Bootstrap Modal functionality to WordPress. All you need to do is add the Modal HTML mark up code.",1000,43577,"2019-05-17T06:49:00.000Z","5.2.24","3.8",[20,93,94,95],"modals","pop-ups","windows","http:\u002F\u002Fwpbeaches.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbootstrap-modals.1.3.2.zip",63,"2025-12-31 00:00:00",{"slug":101,"name":102,"version":103,"author":104,"author_profile":105,"description":106,"short_description":107,"active_installs":108,"downloaded":109,"rating":13,"num_ratings":50,"last_updated":110,"tested_up_to":111,"requires_at_least":112,"requires_php":18,"tags":113,"homepage":117,"download_link":118,"security_score":119,"vuln_count":27,"unpatched_count":27,"last_vuln_date":37,"fetched_at":29},"twitters-bootstrap-shortcodes-ultimate","Twitter's Bootstrap Shortcodes Ultimate Add-on","1.0.4","bassjobsen","https:\u002F\u002Fprofiles.wordpress.org\u002Fbassjobsen\u002F","\u003Cp>Add short codes for \u003Ca href=\"http:\u002F\u002Fwww.getbootstrap.com\u002F\" rel=\"nofollow ugc\">Twitter’s Bootstrap 3\u003C\u002Fa> CSS and components to your site add-on for \u003Ca href=\"http:\u002F\u002Fgndev.info\u002Fshortcodes-ultimate\u002F\" rel=\"nofollow ugc\">Shortcodes Ultimate\u003C\u002Fa>. Shortcodes Ultimate is WordPress plugin that provides mega pack of shortcodes. With this plugin you can easily create tabs, buttons, boxes, different sliders, responsive videos and much, much more. Turn your free theme to premium in just a few clicks. Bootstrap is a sleek, intuitive, and powerful mobile first front-end framework for faster and easier web development. This add-on give you the full power of Bootstrap without editing any code.\u003C\u002Fp>\n\u003Cp>Contribute!\u003C\u002Fp>\n\u003Cp>If you have suggestions for a new feature or improvement, feel free to contact us on \u003Ca href=\"http:\u002F\u002Ftwitter.com\u002FJamedoWebsites\" rel=\"nofollow ugc\">@JamedoWebsites\u003C\u002Fa>. Alternatively, you can fork the plugin from \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fbassjobsen\u002Ftwitterbootstrap-shortcodes-ultimate\" rel=\"nofollow ugc\">Github\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Requirements\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fdownload\u002F\" rel=\"ugc\">WordPress\u003C\u002Fa> tested with >= 3.6\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fshortcodes-ultimate\u002F\" rel=\"ugc\">Shortcodes Ultimate\u003C\u002Fa> tested with >= 4.3.2\u003C\u002Fli>\n\u003Cli>A Bootstrap ready WordPress Theme, try \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fbassjobsen\u002Fjamedo-bootstrap-start-theme\u002F\" rel=\"nofollow ugc\">JBST\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>We are always happy to help you. If you have any question regarding this code. \u003Ca href=\"http:\u002F\u002Fwww.jamedowebsites.nl\u002Fcontact\u002F\" rel=\"nofollow ugc\">Send us a message\u003C\u002Fa> or contact us on twitter \u003Ca href=\"http:\u002F\u002Ftwitter.com\u002FJamedoWebsites\" rel=\"nofollow ugc\">@JamedoWebsites\u003C\u002Fa>.\u003C\u002Fp>\n","Add short codes for Twitter's Bootstrap 3 CSS and components to your site add-on for Shortcodes Ultimate.",300,14231,"2014-01-05T23:25:00.000Z","3.9.40","3.6",[114,115,116],"short-codes","shortcodes-ultimate","twitters-bootstrap-3","https:\u002F\u002Fgithub.com\u002Fbassjobsen\u002Ftwitterbootstrap-shortcodes-ultimate","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftwitters-bootstrap-shortcodes-ultimate.1.0.4.zip",85,{"slug":121,"name":122,"version":123,"author":124,"author_profile":125,"description":126,"short_description":127,"active_installs":128,"downloaded":129,"rating":27,"num_ratings":27,"last_updated":130,"tested_up_to":131,"requires_at_least":132,"requires_php":18,"tags":133,"homepage":138,"download_link":139,"security_score":119,"vuln_count":27,"unpatched_count":27,"last_vuln_date":37,"fetched_at":29},"flexia-core","Flexia Core","1.4.2","WPDeveloper","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpdevteam\u002F","\u003Cp>Core plugin for \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fflexia\u002F\" rel=\"ugc\">Flexia\u003C\u002Fa> theme. Controls all the plugin territory functionality for Flexia.\u003C\u002Fp>\n\u003Ch3>Requirements\u003C\u002Fh3>\n\u003Cp>This is a specialized plugin for the theme \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fflexia\u002F\" rel=\"ugc\">Flexia\u003C\u002Fa> that is available for free on \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fflexia\u002F\" rel=\"ugc\">WordPress.org\u003C\u002Fa>. But since plugin works independently, it will work with any standard theme if you deactivate Flexia.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cp>The plan is to keep all the plugin territory functionality of Flexia within this plugin and it’s a continuous process. It will provide the shortcodes, metabox and extra Customizer options.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Shortcodes\u003C\u002Fli>\n\u003Cli>Extra Customizer Options\u003C\u002Fli>\n\u003Cli>Metaboxes\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Customizer Options\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Custom JavaScripts\u003C\u002Fstrong>\n\u003Cul>\n\u003Cli>Header Script\u003C\u002Fli>\n\u003Cli>Footer Script\u003C\u002Fli>\n\u003Cli>Google Analytics\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can add custom JavaScripts to your site header and footer through Customizer and edit your scripts with CodeMirror editor. You can place any custom JavaScript, Google Analytics, Facebook Pixel or any kind of embed script. Extremely helpful if you need to place any custom javascript or jQuery code to header or footer. This plugin gives you the ability to place different scripts to header or footer separately. Uses Customizer so you can edit the code live and see the changes on the fly.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>CodeMirror Editor\u003C\u002Fli>\n\u003Cli>Ability to add custom scripts to wp header.\u003C\u002Fli>\n\u003Cli>Ability to add custom scripts to wp footer.\u003C\u002Fli>\n\u003Cli>Ability to add multiple scripts.\u003C\u002Fli>\n\u003Cli>Ability to add Google Alalytics code.\u003C\u002Fli>\n\u003Cli>Ability to add any embed code.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Go to \u003Cstrong>Customize > Custom JavaScripts\u003C\u002Fstrong> to add your scripts.\u003C\u002Fp>\n\u003Ch3>Custom Metaboxes (Page and Post Settings)\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Post Header style control\u003C\u002Fli>\n\u003Cli>Additional Body Classes option\u003C\u002Fli>\n\u003Cli>Show\u002FHide Page\u002FPost Title\u003C\u002Fli>\n\u003Cli>Show\u002FHide Post Meta\u003C\u002Fli>\n\u003Cli>Show\u002FHide Post Navigation\u003C\u002Fli>\n\u003Cli>Show\u002FHide Post Social Sharing\u003C\u002Fli>\n\u003Cli>And lots more control for individual posts\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Shortcodes\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"#grid\" rel=\"nofollow ugc\">Bootstrap 4 Grid\u003C\u002Fa>\n\u003Cul>\n\u003Cli>Container\u003C\u002Fli>\n\u003Cli>Container Fluid\u003C\u002Fli>\n\u003Cli>Row\u003C\u002Fli>\n\u003Cli>Columns (1-12)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Shortcode usage\u003C\u002Fh3>\n\u003Ch3>Grid\u003C\u002Fh3>\n\u003Cpre>\u003Ccode>[row]\n    [column md=\"6\"]\n        ...\n    [\u002Fcolumn]\n    [column md=\"6\"]\n        ...\n    [\u002Fcolumn]\n[\u002Frow]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Add container (different max-width for various screen size)\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[container]\n    [row]\n        [column md=\"6\"]\n            ...\n        [\u002Fcolumn]\n        [column md=\"6\"]\n            ...\n        [\u002Fcolumn]\n    [\u002Frow]\n[\u002Fcontainer]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Add container-fluid (100% width container)\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[container-fluid]\n    [container]\n        [row]\n            [column md=\"6\"]\n                ...\n            [\u002Fcolumn]\n            [column md=\"6\"]\n                ...\n            [\u002Fcolumn]\n        [\u002Frow]\n    [\u002Fcontainer]\n[\u002Fcontainer-fluid]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>All shortcodes containes number of parameteres. \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frupok\u002Fflexia-core\" rel=\"nofollow ugc\">See the Github Repo for detailed documentation\u003C\u002Fa>.\u003C\u002Fp>\n","Core plugin for Flexia theme. Controls all the plugin territory functionality for Flexia.",200,16449,"2020-10-22T06:03:00.000Z","5.5.18","4.0",[134,135,136,137,74],"bootstrap-4","customizer","flexia","metabox","https:\u002F\u002Fflexia.pro","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexia-core.1.4.2.zip",{"slug":141,"name":142,"version":143,"author":144,"author_profile":145,"description":146,"short_description":147,"active_installs":148,"downloaded":149,"rating":13,"num_ratings":14,"last_updated":150,"tested_up_to":151,"requires_at_least":132,"requires_php":18,"tags":152,"homepage":153,"download_link":154,"security_score":119,"vuln_count":26,"unpatched_count":27,"last_vuln_date":155,"fetched_at":29},"lana-shortcodes","Lana Shortcodes","1.2.0","Lana Codes","https:\u002F\u002Fprofiles.wordpress.org\u002Flanacodes\u002F","\u003Cp>The Lana Shortcodes are optimized for Bootstrap.\u003C\u002Fp>\n\u003Cp>The Lana Shortcodes are developed primarily for Lana themes.\u003C\u002Fp>\n\u003Ch4>Video\u003C\u002Fh4>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Fjuri_dOCrvI?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch4>Shortcodes list:\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Button shortcode\u003C\u002Fstrong>\u003Cbr \u002F>\n    [lana_button size=”md” type=”primary” class=”custom-color”]Lana Button[\u002Flana_button]\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Icon shortcode\u003C\u002Fstrong>\u003Cbr \u002F>\n    [lana_icon name=”home”]\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Label shortcode\u003C\u002Fstrong>\u003Cbr \u002F>\n    [lana_label type=”primary”]New[\u002Flana_label]\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Badges shortcode\u003C\u002Fstrong>\u003Cbr \u002F>\n    [lana_badges]2[\u002Flana_badges]\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Progress Bar shortcode\u003C\u002Fstrong>\u003Cbr \u002F>\n    [lana_progress_bar value=”15″ type=”primary” label=”visible” striped=”1″ active=”1″]\u003C\u002Fp>\n\u003Ch4>Lana Codes\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Flana.codes\u002Fproduct\u002Flana-shortcodes\u002F\" rel=\"nofollow ugc\">Lana Shortcodes\u003C\u002Fa>\u003C\u002Fp>\n","Bootstrap framework based shortcodes",30,4799,"2023-06-23T04:35:00.000Z","6.2.9",[20,58],"https:\u002F\u002Flana.codes\u002Fproduct\u002Flana-shortcodes\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flana-shortcodes.1.2.0.zip","2023-06-23 00:00:00",{"attackSurface":157,"codeSignals":220,"taintFlows":328,"riskAssessment":329,"analyzedAt":341},{"hooks":158,"ajaxHandlers":212,"restRoutes":213,"shortcodes":214,"cronEvents":219,"entryPointCount":26,"unprotectedCount":27},[159,164,169,173,177,181,185,189,193,197,200,204,208],{"type":160,"name":161,"callback":162,"file":163,"line":67},"action","plugins_loaded","bootmodal_load_textdomain","boot_modal.php",{"type":165,"name":166,"callback":167,"file":163,"line":168},"filter","widget_text","do_shortcode",72,{"type":160,"name":170,"callback":171,"file":163,"line":172},"wp_enqueue_scripts","addBootstrap",77,{"type":160,"name":174,"callback":175,"priority":13,"file":163,"line":176},"wp_head","custom_styles",80,{"type":160,"name":178,"callback":179,"file":163,"line":180},"admin_enqueue_scripts","load_admin_css",368,{"type":160,"name":182,"callback":183,"file":163,"line":184},"admin_init","register_settings_and_fields",369,{"type":160,"name":186,"callback":187,"file":163,"line":188},"admin_menu","options_init",370,{"type":160,"name":190,"callback":191,"file":163,"line":192},"admin_notices","bootmodal_version_warning",378,{"type":160,"name":194,"callback":195,"file":163,"line":196},"admin_head","tinymce_add_editor_button",753,{"type":160,"name":178,"callback":198,"file":163,"line":199},"tinymce_css",756,{"type":165,"name":201,"callback":202,"file":163,"line":203},"mce_external_languages","tinymce_multilingual_support",759,{"type":165,"name":205,"callback":206,"file":163,"line":207},"mce_external_plugins","tinymce_add_plugin",774,{"type":165,"name":209,"callback":210,"file":163,"line":211},"mce_buttons","tinymce_register_button",776,[],[],[215],{"tag":216,"callback":217,"file":163,"line":218},"bootmodal","shortcodeLauncher",73,[],{"dangerousFunctions":221,"sqlUsage":222,"outputEscaping":224,"fileOperations":27,"externalRequests":27,"nonceChecks":27,"capabilityChecks":14,"bundledLibraries":324},[],{"prepared":14,"raw":27,"locations":223},[],{"escaped":225,"rawEcho":226,"locations":227},22,53,[228,231,233,235,237,238,240,242,244,246,247,249,251,252,254,256,258,259,261,263,264,266,268,269,271,273,274,276,278,280,281,283,285,286,288,290,292,294,296,298,300,302,303,305,307,308,310,312,314,316,318,320,322],{"file":163,"line":229,"context":230},88,"raw output",{"file":163,"line":232,"context":230},181,{"file":163,"line":234,"context":230},183,{"file":163,"line":236,"context":230},185,{"file":163,"line":236,"context":230},{"file":163,"line":239,"context":230},186,{"file":163,"line":241,"context":230},195,{"file":163,"line":243,"context":230},197,{"file":163,"line":245,"context":230},199,{"file":163,"line":128,"context":230},{"file":163,"line":248,"context":230},211,{"file":163,"line":250,"context":230},212,{"file":163,"line":250,"context":230},{"file":163,"line":253,"context":230},213,{"file":163,"line":255,"context":230},216,{"file":163,"line":257,"context":230},217,{"file":163,"line":257,"context":230},{"file":163,"line":260,"context":230},220,{"file":163,"line":262,"context":230},224,{"file":163,"line":262,"context":230},{"file":163,"line":265,"context":230},235,{"file":163,"line":267,"context":230},236,{"file":163,"line":267,"context":230},{"file":163,"line":270,"context":230},237,{"file":163,"line":272,"context":230},240,{"file":163,"line":272,"context":230},{"file":163,"line":275,"context":230},241,{"file":163,"line":277,"context":230},246,{"file":163,"line":279,"context":230},250,{"file":163,"line":279,"context":230},{"file":163,"line":282,"context":230},261,{"file":163,"line":284,"context":230},262,{"file":163,"line":284,"context":230},{"file":163,"line":287,"context":230},263,{"file":163,"line":289,"context":230},266,{"file":163,"line":291,"context":230},267,{"file":163,"line":293,"context":230},272,{"file":163,"line":295,"context":230},405,{"file":163,"line":297,"context":230},406,{"file":163,"line":299,"context":230},413,{"file":163,"line":301,"context":230},569,{"file":163,"line":301,"context":230},{"file":163,"line":304,"context":230},571,{"file":163,"line":306,"context":230},582,{"file":163,"line":306,"context":230},{"file":163,"line":309,"context":230},584,{"file":163,"line":311,"context":230},591,{"file":163,"line":313,"context":230},592,{"file":163,"line":315,"context":230},594,{"file":163,"line":317,"context":230},601,{"file":163,"line":319,"context":230},603,{"file":163,"line":321,"context":230},604,{"file":163,"line":323,"context":230},609,[325],{"name":326,"version":37,"knownCves":327},"TinyMCE",[],[],{"summary":330,"deductions":331},"The \"boot-modal\" v1.10 plugin exhibits a mixed security posture. On the positive side, it demonstrates good practices by utilizing prepared statements for all SQL queries and implements capability checks for its identified entry points. The absence of file operations and external HTTP requests further reduces potential attack vectors.  However, a significant concern arises from the low percentage (29%) of properly escaped output across 75 identified output points. This indicates a high risk of Cross-Site Scripting (XSS) vulnerabilities, especially given the plugin's history of a medium-severity XSS vulnerability discovered on January 7, 2025. The static analysis reveals no critical or high severity taint flows, and the attack surface is relatively small with no immediately unprotected entry points. Despite these strengths, the prevalent lack of output escaping coupled with past XSS issues warrants careful consideration, as unsanitized output can lead to malicious code injection and user compromise.",[332,335,338],{"reason":333,"points":334},"Low output escaping rate",15,{"reason":336,"points":337},"Past medium severity XSS vulnerability",10,{"reason":339,"points":340},"No nonce checks on entry points",5,"2026-03-16T21:17:20.879Z",{"wat":343,"direct":350},{"assetPaths":344,"generatorPatterns":346,"scriptPaths":347,"versionParams":348},[345],"\u002Fwp-content\u002Fplugins\u002Fboot-modal\u002Fjs\u002Fboot-modal.js",[],[345],[349],"boot-modal\u002Fjs\u002Fboot-modal.js?ver=",{"cssClasses":351,"htmlComments":354,"htmlAttributes":359,"restEndpoints":368,"jsGlobals":369,"shortcodeOutput":371},[216,352,353],"boot-modal-open-button","boot-modal-close-button",[355,356,357,358],"\u003C!-- Shortcode's params -->","\u003C!-- Other params -->","\u003C!-- Button or link text -->","\u003C!-- Construct link or button -->",[360,361,362,363,364,365,366,367],"data-bs-dismiss","data-bs-target","data-bs-toggle","data-dismiss","data-target","data-toggle","data-bs-backdrop","data-bs-keyboard",[],[370],"window.bootmodal_options",[372],"[bootmodal post=\"post\" buttonclass=\"\" buttontext=\"\" buttontype=\"\" buttoncloseclass=\"\" buttonclosetext=\"\" size=\"\" urlkey=\"\" urlvalue=\"\" animation=\"\" dismiss=\"yes\"]",{"error":374,"url":375,"statusCode":376,"statusMessage":377,"message":377},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fboot-modal\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":340,"versions":379},[380,388,396,404,412],{"version":381,"download_url":382,"svn_tag_url":383,"released_at":37,"has_diff":48,"diff_files_changed":384,"diff_lines":37,"trac_diff_url":385,"vulnerabilities":386,"is_current":48},"1.9.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fboot-modal.1.9.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fboot-modal\u002Ftags\u002F1.9.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fboot-modal%2Ftags%2F1.7&new_path=%2Fboot-modal%2Ftags%2F1.9.1",[387],{"id":33,"url_slug":34,"title":35,"severity":39,"cvss_score":40,"vuln_type":42,"patched_in_version":6},{"version":389,"download_url":390,"svn_tag_url":391,"released_at":37,"has_diff":48,"diff_files_changed":392,"diff_lines":37,"trac_diff_url":393,"vulnerabilities":394,"is_current":48},"1.7","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fboot-modal.1.7.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fboot-modal\u002Ftags\u002F1.7\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fboot-modal%2Ftags%2F1.6.1&new_path=%2Fboot-modal%2Ftags%2F1.7",[395],{"id":33,"url_slug":34,"title":35,"severity":39,"cvss_score":40,"vuln_type":42,"patched_in_version":6},{"version":397,"download_url":398,"svn_tag_url":399,"released_at":37,"has_diff":48,"diff_files_changed":400,"diff_lines":37,"trac_diff_url":401,"vulnerabilities":402,"is_current":48},"1.6.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fboot-modal.1.6.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fboot-modal\u002Ftags\u002F1.6.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fboot-modal%2Ftags%2F1.5&new_path=%2Fboot-modal%2Ftags%2F1.6.1",[403],{"id":33,"url_slug":34,"title":35,"severity":39,"cvss_score":40,"vuln_type":42,"patched_in_version":6},{"version":405,"download_url":406,"svn_tag_url":407,"released_at":37,"has_diff":48,"diff_files_changed":408,"diff_lines":37,"trac_diff_url":409,"vulnerabilities":410,"is_current":48},"1.5","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fboot-modal.1.5.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fboot-modal\u002Ftags\u002F1.5\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fboot-modal%2Ftags%2F1.1.5&new_path=%2Fboot-modal%2Ftags%2F1.5",[411],{"id":33,"url_slug":34,"title":35,"severity":39,"cvss_score":40,"vuln_type":42,"patched_in_version":6},{"version":413,"download_url":414,"svn_tag_url":415,"released_at":37,"has_diff":48,"diff_files_changed":416,"diff_lines":37,"trac_diff_url":37,"vulnerabilities":417,"is_current":48},"1.1.5","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fboot-modal.1.1.5.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fboot-modal\u002Ftags\u002F1.1.5\u002F",[],[418],{"id":33,"url_slug":34,"title":35,"severity":39,"cvss_score":40,"vuln_type":42,"patched_in_version":6}]