[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frVuroJlkfkc4O26euOf14fHoNg1TZPoYmHTn5q4NFVc":3},{"slug":4,"name":5,"version":6,"author":4,"author_profile":7,"description":8,"short_description":9,"active_installs":10,"downloaded":11,"rating":10,"num_ratings":12,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":34,"analysis":119,"fingerprints":195},"bramework","Bramework","1.0.0","https:\u002F\u002Fprofiles.wordpress.org\u002Fbramework\u002F","\u003Cp>Quickly integrate Bramework to your WordPress site and easily publish your post. Bramework’s AI-powered writing assistant helps you write engaging, SEO friendly, long-form content and blog posts that convert.\u003C\u002Fp>\n\u003Cp>If you want to maintain a high ranking on Google, you need to write SEO-friendly blog content on a regular basis. The process of brainstorming, researching, outlining, drafting, and optimizing can take a long time, but Bramework can help you write high-quality, long-form blog posts faster than ever.\u003C\u002Fp>\n\u003Ch4>How Does it Work?\u003C\u002Fh4>\n\u003Cp>To get started, enter your primary keyword or topic and include any other keywords or questions you want to cover in the post.\u003C\u002Fp>\n\u003Cp>Then click “create.” In seconds, the AI writer will generate original content for you that’s ready for your personal touch.\u003Cbr \u002F>\nTo make things even easier, the outline generator lets you create blog post outlines in a flash.\u003C\u002Fp>\n\u003Cp>Type in the topic, click “generate,” then get multiple options for blog post outlines including the introduction, sub-headings, and conclusion.\u003C\u002Fp>\n\u003Cp>With the outline in hand, you can get your writing done faster thanks to an AI-built roadmap that gives you a sense of direction.\u003C\u002Fp>\n\u003Ch4>Having a hard time coming up with catchy, click-worthy titles? Not anymore.\u003C\u002Fh4>\n\u003Cp>The Bramework Title Generator creates engaging blog post titles that capture your visitors’ attention and entices them to click and read more.\u003C\u002Fp>\n\u003Cp>Just enter your blog topic into the tool, and you’ll get a variety of relevant, catchy blog post titles in only a few seconds.\u003C\u002Fp>\n\u003Cp>Bramework provides the tools you need to research keywords, generate titles and outlines, and optimize your copy—quickly. This saves you time, so you can focus on other aspects of your business.\u003C\u002Fp>\n","Quickly integrate Bramework to your WordPress site and easily publish your post. Bramework's AI-powered writing assistant helps you write engagin …",100,3704,1,"2024-07-10T21:32:00.000Z","6.5.8","3.5.0","5.3",[18,19,20,21,22],"ai","blog","content","marketing","seo","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbramework.1.0.0.zip",92,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":4,"display_name":4,"profile_url":7,"plugin_count":12,"total_installs":10,"avg_security_score":25,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},30,88,"2026-04-04T04:15:27.771Z",[35,54,72,90,103],{"slug":36,"name":37,"version":38,"author":36,"author_profile":39,"description":40,"short_description":41,"active_installs":42,"downloaded":43,"rating":10,"num_ratings":12,"last_updated":44,"tested_up_to":45,"requires_at_least":46,"requires_php":47,"tags":48,"homepage":52,"download_link":53,"security_score":10,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"contentpen","ContentPen","1.0.11","https:\u002F\u002Fprofiles.wordpress.org\u002Fcontentpen\u002F","\u003Cp>ContentPen is an AI-powered content writing assistant designed to help businesses create, optimize, and publish SEO-friendly blog posts at scale. By combining deep research with your brand’s unique voice, ContentPen crafts high-impact articles that outperform your competition.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Brand Knowledge\u003C\u002Fstrong>: AI-powered analysis of your brand voice, unique selling points, target audience, and competitors.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Keyword and Title Selection\u003C\u002Fstrong>: Automated title suggestions and search intent alignment for SEO success.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Deep Topic Research\u003C\u002Fstrong>: In-depth SERP analysis and content gap identification.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Optimized Blog Outline\u003C\u002Fstrong>: Research-backed article structure with a semantic SEO approach.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>High-Quality First Draft\u003C\u002Fstrong>: Collaborative AI agents generating comprehensive content.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Quality Review and Optimization\u003C\u002Fstrong>: SEO optimization to enhance article performance.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Final Enhancements\u003C\u002Fstrong>: Strategic linking and automated images for appealing blogs.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Effortless Publishing\u003C\u002Fstrong>: Seamless integration with WordPress and other CMS platforms (coming soon).\u003C\u002Fli>\n\u003C\u002Ful>\n","AI-Powered SEO Content Writing Assistant",200,1692,"2026-02-18T09:29:00.000Z","6.9.4","5.8","7.4",[18,49,50,51,22],"blogging","content-marketing","content-writing","https:\u002F\u002Fcontentpen.ai","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcontentpen.1.0.11.zip",{"slug":55,"name":56,"version":57,"author":58,"author_profile":59,"description":60,"short_description":61,"active_installs":26,"downloaded":62,"rating":26,"num_ratings":26,"last_updated":63,"tested_up_to":64,"requires_at_least":65,"requires_php":47,"tags":66,"homepage":23,"download_link":71,"security_score":10,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"acme-bot-ai-seo-writer-content-generator","ACME.BOT – AI SEO Writer & Content Generator","1.0.2","ACME.BOT","https:\u002F\u002Fprofiles.wordpress.org\u002Facmebot\u002F","\u003Cp>ACME.BOT is a fully automated AI SEO writer for businesses that integrates seamlessly with WordPress to enable running your blog on auto-pilot. Unlike generic AI-generated content that risks diluting your credibility, ACME.BOT focuses on writing useful high-quality blogs that your audience will find valuable, while simultaneously helping your SEO and Answer Engine ranking.\u003Cbr \u002F>\nWhy choose ACME.BOT for your WordPress site?\u003C\u002Fp>\n\u003Ch4>Deep-Researched Articles\u003C\u002Fh4>\n\u003Cp>ACME.BOT ensures your blog features publish-ready articles that genuinely add value to your audience. With automated research capabilities, this AI SEO writer produces in-depth, authoritative content that resonates with readers and earns search engine rewards. This drives trust, boosts engagement, and expands organic traffic reach for your brand.\u003C\u002Fp>\n\u003Ch4>AI Diagram Generator\u003C\u002Fh4>\n\u003Cp>The unique AI diagram generator creates visuals that hook readers and convey information instantly. Going beyond basic AI images, ACME.BOT creates illustrations that weave into your narrative and amplify complex ideas. In a world where skimming is common, ACME.BOT ensures your content captures attention effortlessly with diagrams that actually help your audience understand concepts better.\u003C\u002Fp>\n\u003Ch4>Content Strategy and Planning\u003C\u002Fh4>\n\u003Cp>ACME.BOT transforms your WordPress content strategy by breaking down competition and dissecting market trends with ease. It targets keywords that matter and crafts tailored content plans with a single click. Staying ahead in SEO and Answer Engine Optimization becomes second nature with ACME.BOT working for you.\u003C\u002Fp>\n\u003Ch4>All-in-One Solution for Cost Efficiency\u003C\u002Fh4>\n\u003Cp>ACME.BOT replaces expensive, fragmented content tools that typically cost hundreds monthly. This comprehensive AI SEO writer functions as a bundle of built-in AI keyword planners, automatic competitor gap analysis, optimized article creation, custom illustrations, and auto-publishing features. With zero freelancer management or plugin errors, ACME.BOT cuts your marketing costs while increasing productivity.\u003C\u002Fp>\n\u003Ch4>WordPress Integration\u003C\u002Fh4>\n\u003Cp>ACME.BOT integrates smoothly with your existing WordPress setup, enabling true content automation. Schedule posts, maintain consistent publishing schedules, and keep your blog active without constant manual intervention.\u003C\u002Fp>\n\u003Ch3>Why ACME.BOT?\u003C\u002Fh3>\n\u003Cp>In today’s content-saturated digital landscape, standing out requires more than just quantity. ACME.BOT ensures your WordPress blog features high-quality, deep-researched content that actually helps your audience while improving your search rankings.\u003Cbr \u002F>\nThe best way to rank while retaining an audience is to write articles that are genuinely helpful – that’s why ACME.BOT focuses on creating valuable content, not AI-generated fluff. With features like the advanced AI diagram generator and strategic content planning, ACME.BOT ensures consistent branding, higher conversion rates, and stress-free reliability for your WordPress site.\u003Cbr \u002F>\nExperience the difference of a fully automated AI SEO writer that understands both search algorithms and human readers.\u003C\u002Fp>\n\u003Cp>The plugin creates a REST endpoint that’s used by ACME.BOT to publish articles on your WordPress website.\u003C\u002Fp>\n","Run your WordPress blog on auto-pilot with ACME.BOT - automated AI SEO writer that creates deep-researched, publish-ready content with AI diagrams.",462,"2025-08-07T08:55:00.000Z","6.8.5","5.0",[67,68,69,70,50],"ai-diagram-generator","ai-seo-writer","blog-autopilot","content-automation","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Facme-bot-ai-seo-writer-content-generator.1.0.2.zip",{"slug":73,"name":74,"version":75,"author":76,"author_profile":77,"description":78,"short_description":79,"active_installs":80,"downloaded":81,"rating":82,"num_ratings":83,"last_updated":84,"tested_up_to":64,"requires_at_least":65,"requires_php":23,"tags":85,"homepage":23,"download_link":87,"security_score":88,"vuln_count":12,"unpatched_count":26,"last_vuln_date":89,"fetched_at":28},"semrush-contentshake","Semrush Content Toolkit","1.1.33","SEMrush CY LTD","https:\u002F\u002Fprofiles.wordpress.org\u002Fsemrush\u002F","\u003Cp>The Semrush Content Toolkit is a smart AI writing tool that finds data-driven content for your website, creates SEO-ready briefs, and generates long-form content using real-time data.\u003C\u002Fp>\n\u003Cp>Use it to write articles for your blog, optimize your existing drafts, and guide the entire content creation process.\u003C\u002Fp>\n\u003Cp>It integrates with WordPress, allowing you to post articles created with the tool directly to your blog.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Find keyword and topic ideas for your website\u003C\u002Fli>\n\u003Cli>Create SEO content briefs\u003C\u002Fli>\n\u003Cli>Generate SEO-friendly long-form content\u003C\u002Fli>\n\u003Cli>Edit and optimize your drafts\u003C\u002Fli>\n\u003Cli>Generate AI images\u003C\u002Fli>\n\u003Cli>Post directly to WordPress\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>How does it work?\u003C\u002Fh4>\n\u003Cp>Using the Semrush Content Toolkit plugin, you can publish articles created with the tool straight to your WordPress website.\u003C\u002Fp>\n\u003Cp>To install the plugin, check this quick guide or follow the steps below:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Click “Download” at the top of this page. The plugin will automatically save as a .zip file. You can also head to WordPress and search for the Semrush Content Toolkit in the “Plugins” tab.\u003C\u002Fli>\n\u003Cli>Log in to the admin area of your WordPress account\u003C\u002Fli>\n\u003Cli>Find “Plugins” in the main menu, and click on “Add New”\u003C\u002Fli>\n\u003Cli>Find and click “Upload Plugin” at the top of the page and select the .zip file.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Once the plugin has been installed, go to “Settings”, find “Semrush Content Toolkit” and click the “Connect” button.\u003C\u002Fp>\n\u003Cp>Finally, log in to the Content Toolkit and allow the WordPress connection.\u003C\u002Fp>\n\u003Cp>To use WordPress integration once you have your article ready, click the “Share” button and choose the WordPress option.\u003C\u002Fp>\n\u003Cp>With just one click, you can publish your article directly to the WordPress site.\u003C\u002Fp>\n\u003Ch3>Limits\u003C\u002Fh3>\n\u003Cp>To use the Content Toolkit, you need to have a Semrush account and have a paid (or trial) account for the tool.\u003C\u002Fp>\n\u003Ch3>See also\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.semrush.com\u002Fcompany\u002Flegal\u002Fprivacy-policy\u002F\" rel=\"nofollow ugc\">Semrush Privacy Policy\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.semrush.com\u002Fcompany\u002Flegal\u002Fterms-of-service\u002F\" rel=\"nofollow ugc\">Semrush Terms of Service\u003C\u002Fa>\u003C\u002Fp>\n","Create SEO-friendly content that brings traffic.",2000,19900,52,5,"2026-01-14T15:25:00.000Z",[18,50,86,22],"semrush","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsemrush-contentshake.1.1.33.zip",99,"2025-12-15 00:00:00",{"slug":91,"name":92,"version":93,"author":92,"author_profile":94,"description":95,"short_description":96,"active_installs":97,"downloaded":98,"rating":10,"num_ratings":12,"last_updated":99,"tested_up_to":64,"requires_at_least":23,"requires_php":23,"tags":100,"homepage":23,"download_link":102,"security_score":10,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"koala-ai","Koala AI","1.0","https:\u002F\u002Fprofiles.wordpress.org\u002Fkoalaai\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fkoala.sh\u002Fwriter\" rel=\"nofollow ugc\">KoalaWriter\u003C\u002Fa> is an AI writing tool that creates SEO-optimized listicles, blog posts, Amazon affiliate articles, and more. Our users love the ability to do automatic internal linking, citing sources with real-time data, AI image generation, YouTube video embedding, and more!\u003C\u002Fp>\n\u003Cp>This is an official plugin by \u003Ca href=\"https:\u002F\u002Fkoala.sh\" rel=\"nofollow ugc\">Koala AI\u003C\u002Fa> that makes it easy to securely connect your account with your WordPress website to publish content from KoalaWriter in one click.\u003C\u002Fp>\n\u003Ch4>Key Features of KoalaWriter\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Automatic SEO Optimization\u003C\u002Fstrong>: Analyzes SERPs for your target keywords and includes relevant entities and semantic keywords to help your content rank higher\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Internal Linking Automation\u003C\u002Fstrong>: Automatically adds contextual internal links based on your site structure, improving SEO architecture and user experience\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Real-Time SERP Analysis\u003C\u002Fstrong>: Access up-to-date search data to create content that effectively meets search intent\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Superior to ChatGPT for SEO\u003C\u002Fstrong>: Proprietary SEO algorithm with SERP data integration produces content optimized for rankings\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Affiliate Content Optimization\u003C\u002Fstrong>: Generate high-converting affiliate content with built-in product research\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Bulk Content Creation\u003C\u002Fstrong>: Scale your SEO content strategy by creating multiple optimized articles simultaneously\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>External Services\u003C\u002Fh4>\n\u003Cp>This plugin connects to the Koala AI platform to enable content creation and publishing features. When you connect your WordPress site with Koala AI:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Your site URL and a secret token are shared with Koala AI for authentication purposes\u003C\u002Fli>\n\u003Cli>Content created on Koala AI platform can be published directly to your WordPress site\u003C\u002Fli>\n\u003Cli>Images from Koala AI services can be automatically imported to your WordPress media library\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For more information about how your data is handled, please review the Koala AI \u003Ca href=\"https:\u002F\u002Fkoala.sh\u002Fpages\u002Fprivacy-policy\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support, please visit \u003Ca href=\"https:\u002F\u002Fkoala.sh\" rel=\"nofollow ugc\">Koala AI\u003C\u002Fa>.\u003C\u002Fp>\n","Koala AI offers a platform of tools for SEOs and content creators.",1000,3052,"2025-05-08T11:06:00.000Z",[18,20,21,101,22],"posts","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkoala-ai.1.0.zip",{"slug":104,"name":105,"version":106,"author":104,"author_profile":107,"description":108,"short_description":109,"active_installs":97,"downloaded":110,"rating":26,"num_ratings":26,"last_updated":111,"tested_up_to":45,"requires_at_least":112,"requires_php":113,"tags":114,"homepage":117,"download_link":118,"security_score":10,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"outrank","Outrank","1.0.7","https:\u002F\u002Fprofiles.wordpress.org\u002Feugenezolo\u002F","\u003Cp>Grow Organic Traffic Without Lifting a Finger.\u003C\u002Fp>\n\u003Cp>Outrank is your behind-the-scenes content team powered by AI. It creates high-quality, SEO-optimized blog posts that drive traffic to your WordPress site – automatically. No brainstorming, no writing, no scheduling. Just pure growth on autopilot.\u003C\u002Fp>\n\u003Cp>Outrank plugin may embed external links or credits on the public site.\u003C\u002Fp>\n\u003Cp>The plugin provides secure API access to retrieve your published posts for content analysis and optimization within the Outrank app.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Fully automatic content creation and keyword research – find hidden keyword gems and publish optimized articles daily.\u003C\u002Fli>\n\u003Cli>Write in 150+ languages – speak to your audience wherever they are.\u003C\u002Fli>\n\u003Cli>One-click integration with WordPress – set it up once and your content gets published like magic.\u003C\u002Fli>\n\u003Cli>SEO-friendly, fact-checked articles with media – includes internal links, videos, images, and credible citations.\u003C\u002Fli>\n\u003Cli>Your voice, your tone – match your brand’s style with AI-tuned tone control.\u003C\u002Fli>\n\u003Cli>Up to 4000 words per article – long-form, evergreen content designed to rank and convert.\u003C\u002Fli>\n\u003Cli>Smart daily publishing plan – a tailored 30-day strategy to keep content flowing.\u003C\u002Fli>\n\u003Cli>Multi-user and multi-site support – manage teams and scale across sites easily.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>External services\u003C\u002Fh3>\n\u003Cp>This plugin connects to the Outrank API to fetch blog article content for your site. This is necessary to sync AI-generated content to your WordPress posts.\u003C\u002Fp>\n\u003Cp>Data sent:\u003Cbr \u002F>\n– API Key (stored by user in plugin settings)\u003C\u002Fp>\n\u003Cp>Data is sent when:\u003Cbr \u002F>\n– Articles are synced via the Outrank API.\u003C\u002Fp>\n\u003Cp>External Service:\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fwww.outrank.so\" rel=\"nofollow ugc\">Outrank API\u003C\u002Fa>\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fwww.outrank.so\u002Fprivacy-policy\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa>\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fwww.outrank.so\u002Fterms-of-use\" rel=\"nofollow ugc\">Terms of Use\u003C\u002Fa>\u003C\u002Fp>\n","Outrank automatically creates and publishes SEO-optimized articles to your WordPress site as blog posts or drafts.",6247,"2026-03-06T12:11:00.000Z","6.4","8.0",[115,116,70,22],"ai-blog","article-sync","https:\u002F\u002Foutrank.so","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Foutrank.1.0.7.zip",{"attackSurface":120,"codeSignals":167,"taintFlows":181,"riskAssessment":182,"analyzedAt":194},{"hooks":121,"ajaxHandlers":140,"restRoutes":141,"shortcodes":163,"cronEvents":164,"entryPointCount":165,"unprotectedCount":166},[122,128,132,136],{"type":123,"name":124,"callback":125,"file":126,"line":127},"action","admin_menu","create_settings_menu","bramework-integration.php",24,{"type":129,"name":130,"callback":130,"file":126,"line":131},"filter","determine_current_user",25,{"type":123,"name":133,"callback":134,"file":126,"line":135},"rest_api_init","register_api_endpoints",26,{"type":123,"name":137,"callback":138,"file":126,"line":139},"admin_enqueue_scripts","add_admin_scripts",27,[],[142,150,155,159],{"namespace":143,"route":144,"methods":145,"callback":147,"permissionCallback":148,"file":126,"line":149},"bramework\u002Fv2","\u002Fusers",[146],"GET","get_users","get_users_permissions_check",84,{"namespace":143,"route":151,"methods":152,"callback":153,"permissionCallback":154,"file":126,"line":25},"\u002Fcategories",[146],"get_categories","get_categories_permissions_check",{"namespace":143,"route":156,"methods":157,"callback":158,"permissionCallback":27,"file":126,"line":10},"\u002Fposts",[146],"anonymous",{"namespace":143,"route":160,"methods":161,"callback":158,"permissionCallback":27,"file":126,"line":162},"\u002Fmedia",[146],118,[],[],4,2,{"dangerousFunctions":168,"sqlUsage":169,"outputEscaping":171,"fileOperations":26,"externalRequests":12,"nonceChecks":26,"capabilityChecks":26,"bundledLibraries":180},[],{"prepared":26,"raw":26,"locations":170},[],{"escaped":172,"rawEcho":166,"locations":173},18,[174,178],{"file":175,"line":176,"context":177},"templates\\settings.php",57,"raw output",{"file":175,"line":179,"context":177},59,[],[],{"summary":183,"deductions":184},"The \"bramework\" plugin v1.0.0 exhibits a mixed security posture. On the positive side, the code analysis reveals no dangerous functions, no SQL queries utilizing raw SQL (all prepared statements), and a high rate of output escaping (90%).  Furthermore, there is no recorded vulnerability history, suggesting a lack of past exploitable issues. This indicates a developer who has implemented some good security practices regarding data handling and output.\n\nHowever, significant concerns arise from the attack surface and lack of authorization checks.  With 4 REST API routes, 2 of them are exposed without proper permission callbacks. This means any unauthenticated user could potentially interact with these endpoints, leading to an uncontrolled attack surface.  The absence of nonce checks and capability checks across the board, especially in conjunction with unprotected REST API endpoints, is a critical oversight.  While taint analysis showed no unsanitized paths, the presence of unprotected entry points is a substantial risk that could be exploited if malicious data were passed to them, even if current taint analysis doesn't immediately flag it.\n\nIn conclusion, while the plugin demonstrates strengths in SQL handling and output escaping, the lack of robust authorization on its REST API routes and the general absence of nonce\u002Fcapability checks represent a significant security weakness.  The clean vulnerability history is encouraging, but it doesn't negate the inherent risks presented by the exposed attack surface.  This plugin requires immediate attention to secure its entry points.",[185,188,190,192],{"reason":186,"points":187},"Unprotected REST API routes",10,{"reason":189,"points":83},"No capability checks",{"reason":191,"points":83},"No nonce checks",{"reason":193,"points":166},"External HTTP request","2026-03-16T20:58:06.419Z",{"wat":196,"direct":203},{"assetPaths":197,"generatorPatterns":199,"scriptPaths":200,"versionParams":201},[198],"\u002Fwp-content\u002Fplugins\u002Fbramework\u002Fassets\u002Fcss\u002Fstyle.css",[],[],[202],"style.css?v1.5",{"cssClasses":204,"htmlComments":205,"htmlAttributes":206,"restEndpoints":207,"jsGlobals":212,"shortcodeOutput":213},[],[],[],[208,209,210,211],"\u002Fwp-json\u002Fbramework\u002Fv2\u002Fusers","\u002Fwp-json\u002Fbramework\u002Fv2\u002Fcategories","\u002Fwp-json\u002Fbramework\u002Fv2\u002Fposts","\u002Fwp-json\u002Fbramework\u002Fv2\u002Fmedia",[],[]]