[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVZbt5Vib9-3HT4iGUSbObszJ1NTc0B7KxY3cyBmLBaE":3},{"slug":4,"name":5,"version":6,"author":5,"author_profile":7,"description":8,"short_description":9,"active_installs":10,"downloaded":11,"rating":12,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":109,"crawl_stats":36,"alternatives":117,"analysis":228,"fingerprints":766},"broadstreet","Broadstreet","1.52.2","https:\u002F\u002Fprofiles.wordpress.org\u002Fbroadstreetads\u002F","\u003Cp>For \u003Ca href=\"https:\u002F\u002Fbroadstreetads.com\u002F\" rel=\"nofollow ugc\">Broadstreet Ad Manager\u003C\u002Fa> users.\u003C\u002Fp>\n\u003Cp>Integrate Broadstreet’s Ad Manager for Hyperlocal News, Magazine, and Niche\u003Cbr \u002F>\nPublishers into your Broadstreet site.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Install Broadstreet configuration with best practices automatically\u003C\u002Fli>\n\u003Cli>Drop zones into widget areas or via shortcode\u003C\u002Fli>\n\u003Cli>Place zones in-story ad-hoc or after certain paragraphs\u003C\u002Fli>\n\u003Cli>Automatically send category names as keywords to the adserver\u003C\u002Fli>\n\u003Cli>Restrict ads from appearing on certain pages or categories\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>How to:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>Install the plugin\u003C\u002Fli>\n\u003Cli>Go to Settings->Broadstreet\u003C\u002Fli>\n\u003Cli>Enter your Access Token and confirm that it’s valid (we’ll check automatically)\u003C\u002Fli>\n\u003Cli>Go to Appearance->Widgets, and use the new ‘Broadstreet Ad Zone’ widget\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>To learn more about Broadstreet, and how it can help you as a local publisher,\u003Cbr \u002F>\nsend an email to \u003Ca href=\"frontdesk@broadstreetads.com\" rel=\"nofollow ugc\">frontdesk@broadstreetads.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>How can I report security bugs?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You can report security bugs through the Patchstack Vulnerability Disclosure\u003Cbr \u002F>\nProgram. The Patchstack team help validate, triage and handle any security\u003Cbr \u002F>\nvulnerabilities.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpatchstack.com\u002Fdatabase\u002Fvdp\u002Fbroadstreet\" rel=\"nofollow ugc\">Report a security vulnerability.\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Fix Log\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>1.2.3: Fixed image upload bug affecting minority of WP installations\u003C\u002Fli>\n\u003Cli>1.8.1: Fixed asset base URL making the settings page ugly\u003C\u002Fli>\n\u003Cli>1.8.1: Fixed excerpt filter (special thanks Justin)\u003C\u002Fli>\n\u003C\u002Ful>\n","Integrate Broadstreet adserving power into your site.",700,45891,100,2,"2025-12-16T18:52:00.000Z","6.9.4","3.0","",[4,19,20,21,22],"hyperlocal","independent","local","publishers","http:\u002F\u002Fbroadstreetads.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbroadstreet.1.52.2.zip",95,6,0,"2026-01-19 00:00:00","2026-03-15T15:16:48.613Z",[31,46,61,75,85,98],{"id":32,"url_slug":33,"title":34,"description":35,"plugin_slug":4,"theme_slug":36,"affected_versions":37,"patched_in_version":6,"severity":38,"cvss_score":39,"cvss_vector":40,"vuln_type":41,"published_date":28,"updated_date":42,"references":43,"days_to_patch":45},"CVE-2025-69311","broadstreet-ads-missing-authorization","Broadstreet Ads \u003C= 1.52.1 - Missing Authorization","The Broadstreet plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.52.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action.",null,"\u003C=1.52.1","medium",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Missing Authorization","2026-01-28 18:46:26",[44],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F10dbaf83-03c4-409d-b31a-198eab101dd1?source=api-prod",10,{"id":47,"url_slug":48,"title":49,"description":50,"plugin_slug":4,"theme_slug":36,"affected_versions":51,"patched_in_version":52,"severity":38,"cvss_score":53,"cvss_vector":54,"vuln_type":55,"published_date":56,"updated_date":57,"references":58,"days_to_patch":60},"CVE-2025-4652","broadstreet-ads-reflected-cross-site-scripting","Broadstreet Ads \u003C= 1.51.7 - Reflected Cross-Site Scripting","The Broadstreet plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.51.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.","\u003C=1.51.7","1.51.8",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-05-29 00:00:00","2025-06-17 14:59:15",[59],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fbc8ccaee-058b-476f-9d92-08db23df024b?source=api-prod",20,{"id":62,"url_slug":63,"title":64,"description":65,"plugin_slug":4,"theme_slug":36,"affected_versions":66,"patched_in_version":67,"severity":38,"cvss_score":68,"cvss_vector":69,"vuln_type":55,"published_date":70,"updated_date":71,"references":72,"days_to_patch":74},"CVE-2025-48113","broadstreet-authenticated-contributor-stored-cross-site-scripting","Broadstreet \u003C= 1.51.2 - Authenticated (Contributor+) Stored Cross-Site Scripting","The Broadstreet plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.51.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","\u003C=1.51.2","1.51.3",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","2025-05-16 00:00:00","2026-01-27 21:02:07",[73],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fb839c597-5230-4702-b4ac-b4c127d0b6d2?source=api-prod",257,{"id":76,"url_slug":77,"title":78,"description":79,"plugin_slug":4,"theme_slug":36,"affected_versions":37,"patched_in_version":6,"severity":38,"cvss_score":68,"cvss_vector":69,"vuln_type":55,"published_date":80,"updated_date":81,"references":82,"days_to_patch":84},"CVE-2025-32211","broadstreet-authenticated-subscriber-stored-cross-site-scripting","Broadstreet \u003C= 1.52.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting","The Broadstreet plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.52.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","2025-04-07 00:00:00","2026-01-27 21:01:28",[83],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fb6eea36b-e80a-4b21-8997-d828cc8da6a3?source=api-prod",296,{"id":86,"url_slug":87,"title":88,"description":89,"plugin_slug":4,"theme_slug":36,"affected_versions":90,"patched_in_version":6,"severity":38,"cvss_score":39,"cvss_vector":91,"vuln_type":92,"published_date":93,"updated_date":94,"references":95,"days_to_patch":97},"CVE-2025-32270","broadstreet-cross-site-request-forgery","Broadstreet \u003C= 1.51.1 - Cross-Site Request Forgery","The Broadstreet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.51.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site administrator into performing an action such as clicking on a link.","\u003C=1.51.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2025-04-04 00:00:00","2026-02-02 15:30:44",[96],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F8bb71f5d-a766-4f39-a2c6-78644cdd2882?source=api-prod",305,{"id":99,"url_slug":100,"title":101,"description":102,"plugin_slug":4,"theme_slug":36,"affected_versions":103,"patched_in_version":104,"severity":38,"cvss_score":68,"cvss_vector":69,"vuln_type":55,"published_date":105,"updated_date":106,"references":107,"days_to_patch":26},"CVE-2024-11825","broadstreet-authenticated-contributor-stored-cross-site-scripting-via-zone-parameter","Broadstreet \u003C= 1.51.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via zone Parameter","The Broadstreet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘zone’ parameter in all versions up to, and including, 1.51.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","\u003C=1.51.0","1.51.1","2025-01-24 18:41:57","2025-01-30 15:34:36",[108],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Faeda43bc-eeee-463d-80b7-dec7975b4d19?source=api-prod",{"slug":110,"display_name":5,"profile_url":7,"plugin_count":111,"total_installs":112,"avg_security_score":113,"avg_patch_time_days":114,"trust_score":115,"computed_at":116},"broadstreetads",5,2740,85,496,69,"2026-04-04T14:38:49.496Z",[118,136,162,183,206],{"slug":119,"name":120,"version":121,"author":122,"author_profile":123,"description":124,"short_description":125,"active_installs":60,"downloaded":126,"rating":27,"num_ratings":27,"last_updated":127,"tested_up_to":128,"requires_at_least":129,"requires_php":17,"tags":130,"homepage":17,"download_link":135,"security_score":113,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":29},"ping-news","Ping News","1.0.17","omnideveloper","https:\u002F\u002Fprofiles.wordpress.org\u002Fomnideveloper\u002F","\u003Cp>The Ping! WordPress plugin allows hyperlocal journalists to submit their news stories to the Ping! system and receive approval\u002Ffeedback on their stories.\u003C\u002Fp>\n","The Ping! WordPress plugin allows hyperlocal journalists to submit their news stories to the Ping! system and receive approval\u002Ffeedback on their stori …",2325,"2023-09-01T15:09:00.000Z","6.2.9","4.0",[131,132,133,119,134],"hyperlocal-journalism","news","ping","valuemynews","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fping-news.1.0.17.zip",{"slug":137,"name":138,"version":139,"author":140,"author_profile":141,"description":142,"short_description":143,"active_installs":144,"downloaded":145,"rating":146,"num_ratings":147,"last_updated":148,"tested_up_to":15,"requires_at_least":149,"requires_php":150,"tags":151,"homepage":157,"download_link":158,"security_score":159,"vuln_count":160,"unpatched_count":27,"last_vuln_date":161,"fetched_at":29},"polylang","Polylang","3.7.8","Chouby","https:\u002F\u002Fprofiles.wordpress.org\u002Fchouby\u002F","\u003Cp>With Polylang fully integrated to WordPress and using only its built-in core features (taxonomies), keep steady performances on your site and create a multilingual site featuring from just one extra language to 10 or more depending on your needs. There is no limit in the number of languages added and WordPress’ language packs are automatically downloaded when ready.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cp>Depending on the type of site you have built or are planning to build, a combination of plugins from the list below might be of interest.\u003Cbr \u002F>\nAll plugins include a wizard allowing to setup them in just a few clicks.\u003C\u002Fp>\n\u003Ch3>Polylang\u003C\u002Fh3>\n\u003Cp>Polylang and \u003Ca href=\"https:\u002F\u002Fpolylang.pro\" rel=\"nofollow ugc\">Polylang Pro\u003C\u002Fa> share the same core providing features such as:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Translating posts, pages, media, categories, post tags, custom post types and taxonomies, RSS feeds; RTL scripts are supported.\u003C\u002Fli>\n\u003Cli>The language is either set by the language code in URL, or you can use a different sub-domain or domain per language.\u003C\u002Fli>\n\u003Cli>Automatic copy of categories, post tags and other metas when creating a new post or page translation.\u003C\u002Fli>\n\u003Cli>Translating classic menus and classic widgets. Also accessible with \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ffse-classic\u002F\" rel=\"ugc\">Site Editor Classic Features\u003C\u002Fa> in block themes.\u003C\u002Fli>\n\u003Cli>Customizable language switcher available as a classic widget or a classic navigation menu item.\u003C\u002Fli>\n\u003Cli>Compatibility with Yoast SEO.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Polylang Pro\u003C\u002Fh3>\n\u003Cp>Helps optimizing the time spent translating your site with some very useful extra features such as:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Better integration in the new Block Editor.\u003C\u002Fli>\n\u003Cli>Language switcher available as a block.\u003C\u002Fli>\n\u003Cli>Language options available in the widget block editor.\u003C\u002Fli>\n\u003Cli>Template parts translatable in the site editor (FSE).\u003C\u002Fli>\n\u003Cli>Duplicate and\u002For synchronize content across post translations.\u003C\u002Fli>\n\u003Cli>Improved compatibility with other plugins such as \u003Ca href=\"https:\u002F\u002Fpolylang.pro\u002Fdoc\u002Fworking-with-acf-pro\u002F\" rel=\"nofollow ugc\">ACF Pro\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Share the same URL slug for posts or terms across languages.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fpolylang.pro\u002Fdoc\u002Ftranslating-urls-slugs\u002F\" rel=\"nofollow ugc\">Translate URL slugs\u003C\u002Fa> for categories, author bases, custom post types and more…\u003C\u002Fli>\n\u003Cli>Machine translation with DeepL.\u003C\u002Fli>\n\u003Cli>Export and import of content in XLIFF format for outsourced professional translation.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Access to a Premium Support for personalized assistance.\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Polylang for WooCommerce\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpolylang.pro\u002Fdownloads\u002Fpolylang-for-woocommerce\u002F\" rel=\"nofollow ugc\">Add-on\u003C\u002Fa> for the compatibility with WooCommerce which provides features such as:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Translating WooCommerce pages (shop, check-out, cart, my account), product categories and global attribute terms directly in the WooCommerce interface.\u003C\u002Fli>\n\u003Cli>Translating WooCommerce e-mails and sending them to customers in their language.\u003C\u002Fli>\n\u003Cli>Products metadata synchronization.\u003C\u002Fli>\n\u003Cli>Compatibility with the native WooCommerce CSV import & export tool.\u003C\u002Fli>\n\u003Cli>Compatibility with popular plugins such as WooCommerce Subscriptions, Product Bundles, WooCommerce Bookings, Shipment Tracking and more.\u003C\u002Fli>\n\u003Cli>Ability to use the WooCommerce REST API (available with Polylang Pro).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Access to a Premium Support for personalized assistance.\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Our other free plugins\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwpml-to-polylang\u002F\" rel=\"ugc\">WPML to Polylang\u003C\u002Fa> allows migrating from WPML to Polylang.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ffse-classic\u002F\" rel=\"ugc\">Site Editor Classic Features\u003C\u002Fa> allows to use classic widgets (including the Polylang language switcher) and menus in the site editor (FSE).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Credits\u003C\u002Fh4>\n\u003Cp>Thanks a lot to all translators who \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fpolylang\" rel=\"nofollow ugc\">help translating Polylang\u003C\u002Fa>.\u003Cbr \u002F>\nThanks a lot to \u003Ca href=\"http:\u002F\u002Fwww.alexlopez.rocks\u002F\" rel=\"nofollow ugc\">Alex Lopez\u003C\u002Fa> for the design of the logo.\u003Cbr \u002F>\nMost of the flags included with Polylang are coming from \u003Ca href=\"http:\u002F\u002Ffamfamfam.com\u002F\" rel=\"nofollow ugc\">famfamfam\u003C\u002Fa> and are public domain.\u003Cbr \u002F>\nWherever third party code has been used, credit has been given in the code’s comments.\u003C\u002Fp>\n","Go multilingual in a simple and efficient way. Keep writing posts and taxonomy terms as usual while defining their languages all at once.",800000,25784629,94,2921,"2026-02-23T09:13:00.000Z","6.2","7.2",[152,153,154,155,156],"language","localization","multilingual","translate","translation","https:\u002F\u002Fpolylang.pro","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpolylang.3.7.8.zip",93,3,"2025-10-28 00:00:00",{"slug":163,"name":164,"version":165,"author":166,"author_profile":167,"description":168,"short_description":169,"active_installs":170,"downloaded":171,"rating":172,"num_ratings":173,"last_updated":174,"tested_up_to":15,"requires_at_least":175,"requires_php":176,"tags":177,"homepage":181,"download_link":182,"security_score":12,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":29},"performant-translations","Performant Translations","1.2.0","Pascal Birchler","https:\u002F\u002Fprofiles.wordpress.org\u002Fswissspidy\u002F","\u003Cp>Making internationalization\u002Flocalization in WordPress faster than ever before.\u003C\u002Fp>\n\u003Ch3>Disclaimer about WordPress 6.5\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Attention:\u003C\u002Fstrong> most functionality of this plugin has been merged into WordPress 6.5! You might not need it anymore.\u003C\u002Fp>\n\u003Cp>\u003Cem>However\u003C\u002Fem>, this plugin is still relevant for cases where language packs are not downloaded from WordPress.org but somewhere else, for example if you are developing your own plugins or using commercial plugins.\u003C\u002Fp>\n\u003Cp>The Performant Translations plugin converts the translation files of those plugins to the new file format introduced in WordPress 6.5, to really optimize them for speed.\u003C\u002Fp>\n\u003Ch3>What this plugin does\u003C\u002Fh3>\n\u003Cp>This project uses a new approach to handle translation files in WordPress, making localization blazing fast.\u003C\u002Fp>\n\u003Cp>An \u003Ca href=\"https:\u002F\u002Fmake.wordpress.org\u002Fcore\u002F2023\u002F07\u002F24\u002Fi18n-performance-analysis\u002F\" rel=\"nofollow ugc\">in-depth i18n performance analysis\u003C\u002Fa> showed that localized WordPress sites load significantly slower than a site without translations.\u003C\u002Fp>\n\u003Cp>With this plugin’s new approach to localization, this overhead is massively reduced, making your site fast again. It does so by converting \u003Ccode>.mo\u003C\u002Fcode> translation files to \u003Ccode>.php\u003C\u002Fcode> files.\u003C\u002Fp>\n\u003Cp>If your site is using a language other than English (US), you should see immediate speed improvements simply by activating this plugin.\u003C\u002Fp>\n","Making internationalization\u002Flocalization in WordPress faster than ever before.",40000,192704,98,16,"2025-12-05T10:38:00.000Z","6.5","7.0",[178,179,153,180,156],"i18n","internationalization","performance","https:\u002F\u002Fgithub.com\u002Fswissspidy\u002Fperformant-translations","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fperformant-translations.1.2.0.zip",{"slug":184,"name":185,"version":186,"author":187,"author_profile":188,"description":189,"short_description":190,"active_installs":170,"downloaded":191,"rating":192,"num_ratings":193,"last_updated":194,"tested_up_to":195,"requires_at_least":17,"requires_php":176,"tags":196,"homepage":202,"download_link":203,"security_score":146,"vuln_count":204,"unpatched_count":27,"last_vuln_date":205,"fetched_at":29},"structured-content","Structured Content (JSON-LD) #wpsc","1.7.0","Gordon Böhme","https:\u002F\u002Fprofiles.wordpress.org\u002Fgorbo\u002F","\u003Cp>Add flexible content boxes with JSON-LD microdata output according to schema.org e.g. FAQPage, ProfilePage, Event, Course, LocalBusiness, JobPosting and Recipe.\u003C\u002Fp>\n\u003Ch3>What does it do\u003C\u002Fh3>\n\u003Cp>With this plugin you can insert structured data elements multiple times in any post or page.\u003C\u002Fp>\n\u003Cp>In simple dialogs, for example FAQ can be inserted. Because the the plugin renders the given information as JSON-LD according to schema.org, the bots of the search engines, like google, recognize this schema.\u003Cbr \u002F>\nNice option: you can decide if only the JSON-LD should be displayed in the source code or if the content should be preformatted and visible. Check or uncheck the “Render HTML” box to do this.\u003C\u002Fp>\n\u003Cp>You can test whether the information has been labeled correctly with the \u003Ca href=\"https:\u002F\u002Fvalidator.schema.org\u002F\" rel=\"nofollow ugc\">Markup Validator Tool\u003C\u002Fa>, for example.\u003C\u002Fp>\n\u003Cp>The basic goal is that your content can be better understood by the algorithms of different search engines.\u003Cbr \u002F>\nA special goal is, among other things, that your answers to questions from Google can be displayed as featured snippets in the SERPs (position 0) or extend your existing snippet in the SERPs.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>The plugin is optimized for the Gutenberg editor and future new structural elements will only be published as Gutenberg blocks. Actually most of the structured content elements also work with the TinyMCE!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Currently the plugin offers seven structured data elements:\u003Cbr \u002F>\n– FAQPage\u003Cbr \u002F>\n– ProfilePage\u003Cbr \u002F>\n– JobPosting\u003Cbr \u002F>\n– LocalBusiness\u003Cbr \u002F>\n– Event\u003Cbr \u002F>\n– Course\u003Cbr \u002F>\n– Recipe\u003Cbr \u002F>\n– Person (deprecated; use ProfilePage insted)\u003C\u002Fp>\n\u003Cp>Structure your content now and MAKE CONTENT GREAT AGAIN! #wpsc\u003C\u002Fp>\n\u003Ch3>How to use it\u003C\u002Fh3>\n\u003Cp>Once the the plugin is installed and activated, you’ll find a new icon in the titlebar of the WYSIWYG editor. Just click it, select your preferred structured content element you want to insert and a modal will open. Fill out the form, click the save button and your done.\u003C\u002Fp>\n\u003Cp>If you use \u003Cem>Gutenberg\u003C\u002Fem> you’ll find the new content blocks. Choose your preferred structured content element and fill out the form. If you want to answer more than one question, then simply add them by clicking on “Add one” \u003Cem>within\u003C\u002Fem> this Gutenberg block.\u003C\u002Fp>\n\u003Cp>Alternatively use these shortcodes in your TinyMCE:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>FAQPage\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Cem>Single FAQ\u003C\u002Fem>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>[sc_fs_faq sc_id=”fs_faqUniqueID” html=”true\u002Ffalse” headline=”p or h2-h6″ img=”img-id-231″ question=”your question” img_alt=”img-alt text” css_class=”your-class”]Your answer – you can format it as you want[\u002Fsc_fs_faq]\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Cem>Multi FAQ\u003C\u002Fem>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>[sc_fs_multi_faq headline-0=”h3″ question-0=”Your question 1″ answer-0=”Your answer 1″ image-0=”” headline-1=”h3″ question-1=”Your question 2″ answer-1=”Your answer 2″ image-1=”” headline-2=”h2″ question-2=”Your question 3″ answer-2=”Your answer 3″ image-2=”” count=”3″ html=”false” css_class=”your-class”]\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Cstrong>JobPosting\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>[sc_fs_job html=”true\u002Ffalse” title=”JobPosting Title” title_tag=”p or h2-h6″ description=”JobPosting Description” valid_through=”2022-11-08″ employment_type=”FULL_TIME” company_name=”Your Company” same_as=”https:\u002F\u002Fgorbo.de” logo_id=”309″ street_address=”anystreet 4″ address_locality=”Any City” address_region=”DE-ST” postal_code=”01234″ address_country=”DE” currency_code=”EUR” quantitative_value=”200″ base_salary=”HOUR” css_class=”your-class”]\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Cstrong>Event\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>[sc_fs_event html=”true\u002Ffalse” title=”Event title” title_tag=”p or h2-h6″ event_location=”Event location” status=”EventScheduled” event_attendance_mode=”OfflineEventAttendanceMode” start_date=”2022-08-22T10:25″ end_date=”2022-08-22T11:25″ street_address=”Any Street” address_locality=”Any City” address_region=”DE-ST” postal_code=”Any Postal Code” address_country=”US” image_id=”” performer=”PerformingGroup” performer_name=”John Doe” offer_availability=”InStock” offer_url=”https:\u002F\u002Fexample.com” currency_code=”EUR” price=”40.00″ offer_valid_from=”2022-08-20T10:25″ css_class=”your-class”]Event description – you can format it as you want[\u002Fsc_fs_event]\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Cstrong>Person\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>[sc_fs_person html=”true\u002Ffalse” person_name=”John Doe” job_title=”CEO of Something” image_id=”24″ street_address=”Any Street” address_locality=”Any City” address_region=”DE-ST” postal_code=”06114″ address_country=”DE” email=”john-doe@example.com” url=”https:\u002F\u002Fexample.com” telephone=”0049-123-45678″ css_class=”your-class” colleague=”https:\u002F\u002Furl.com\u002Fabout-colleague.html” works_for_name=”Company ABC” works_for_alt=”Cool Company ABC” works_for_url=”https:\u002F\u002Fcompany-abc.xyz” works_for_logo=”https:\u002F\u002Fcompany-abc.xyz\u002Flogo.jpg” same_as=”https:\u002F\u002Flinkedin.com\u002Fprofile\u002F”]\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch3>Updates\u003C\u002Fh3>\n\u003Cp>We will continuously offer new structured data elements and deliver them as updates. Please visit https:\u002F\u002Fwpsc-plugin.com\u002Fchangelog\u002F to get the latest information.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Fwpsc_plugin\" rel=\"nofollow ugc\">Follow us on twitter @wpsc_plugin\u003C\u002Fa> to be informed about updates & get the latest news!\u003C\u002Fp>\n\u003Ch3>Sponsoring\u003C\u002Fh3>\n\u003Cp>If you want a special structured data element, we can implement it especially for your needs. As a sponsor you will be mentioned on the website, the plugin description and the changelog. If you are interested, write us an e-mail \u003Cem>infoⒶwpsc-plugin.com\u003C\u002Fem>\u003C\u002Fp>\n","Add flexible content boxes with JSON-LD microdata output according to schema.org e.g. FAQPage, ProfilePage, Event, Course, LocalBusiness, JobPosting a …",366208,92,25,"2025-07-26T17:30:00.000Z","6.8.5",[197,198,199,200,201],"faqpage","jobposting","localbusiness","profilepage","recipe","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fstructured-content\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstructured-content.1.7.0.zip",9,"2025-07-24 00:00:00",{"slug":207,"name":208,"version":209,"author":210,"author_profile":211,"description":212,"short_description":213,"active_installs":214,"downloaded":215,"rating":216,"num_ratings":217,"last_updated":218,"tested_up_to":219,"requires_at_least":220,"requires_php":176,"tags":221,"homepage":226,"download_link":227,"security_score":113,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":29},"wp-user-avatars","WP User Avatars","1.4.1","John James Jacoby","https:\u002F\u002Fprofiles.wordpress.org\u002Fjohnjamesjacoby\u002F","\u003Cp>Allow registered users to upload & select their own avatars.\u003C\u002Fp>\n\u003Ch4>Recommended Plugins\u003C\u002Fh4>\n\u003Cp>If you like this plugin, you’ll probably like these!\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-user-profiles\u002F\" title=\"A sophisticated way to edit users in WordPress.\" rel=\"ugc\">WP User Profiles\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-user-activity\u002F\" title=\"The best way to log activity in WordPress.\" rel=\"ugc\">WP User Activity\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-user-avatars\u002F\" title=\"Allow users to upload avatars or choose them from your media library.\" rel=\"ugc\">WP User Avatars\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-user-groups\u002F\" title=\"Group users together with taxonomies & terms.\" rel=\"ugc\">WP User Groups\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-user-signups\u002F\" title=\"The best way to manage user & site sign-ups in WordPress.\" rel=\"ugc\">WP User Signups\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-term-authors\u002F\" title=\"Authors for categories, tags, and other taxonomy terms.\" rel=\"ugc\">WP Term Authors\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-term-colors\u002F\" title=\"Pretty colors for categories, tags, and other taxonomy terms.\" rel=\"ugc\">WP Term Colors\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-term-families\u002F\" title=\"Associate taxonomy terms with other taxonomy terms.\" rel=\"ugc\">WP Term Families\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-term-icons\u002F\" title=\"Pretty icons for categories, tags, and other taxonomy terms.\" rel=\"ugc\">WP Term Icons\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-term-images\u002F\" title=\"Pretty images for categories, tags, and other taxonomy terms.\" rel=\"ugc\">WP Term Images\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-term-locks\u002F\" title=\"Protect categories, tags, and other taxonomy terms from being edited or deleted.\" rel=\"ugc\">WP Term Locks\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-term-order\u002F\" title=\"Sort taxonomy terms, your way.\" rel=\"ugc\">WP Term Order\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-term-visibility\u002F\" title=\"Visibilities for categories, tags, and other taxonomy terms.\" rel=\"ugc\">WP Term Visibility\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-media-categories\u002F\" title=\"Add categories to media & attachments.\" rel=\"ugc\">WP Media Categories\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-pretty-filters\u002F\" title=\"Makes post filters better match what's already in Media & Attachments.\" rel=\"ugc\">WP Pretty Filters\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-chosen\u002F\" title=\"Make long, unwieldy select boxes much more user-friendly.\" rel=\"ugc\">WP Chosen\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Allow registered users to upload & select their own avatars.",20000,312818,90,29,"2021-06-01T15:55:00.000Z","5.8.13","5.2",[222,21,223,224,225],"avatar","media","profile","user","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-user-avatars\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-user-avatars.zip",{"attackSurface":229,"codeSignals":453,"taintFlows":747,"riskAssessment":748,"analyzedAt":765},{"hooks":230,"ajaxHandlers":395,"restRoutes":426,"shortcodes":442,"cronEvents":452,"entryPointCount":60,"unprotectedCount":173},[231,237,241,245,249,254,258,262,266,270,274,278,282,286,290,294,298,302,305,309,313,317,321,324,327,331,334,338,342,346,350,354,357,361,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394],{"type":232,"name":233,"callback":234,"file":235,"line":236},"action","admin_menu","adminCallback","Broadstreet\\Core.php",140,{"type":232,"name":238,"callback":239,"file":235,"line":240},"admin_enqueue_scripts","adminStyles",141,{"type":232,"name":242,"callback":243,"file":235,"line":244},"admin_init","adminInitCallback",142,{"type":232,"name":246,"callback":247,"file":235,"line":248},"wp_enqueue_scripts","addCDNScript",143,{"type":250,"name":251,"callback":252,"file":235,"line":253},"filter","script_loader_tag","finalizeZoneTag",144,{"type":232,"name":255,"callback":256,"file":235,"line":257},"init","businessIndexSidebar",145,{"type":232,"name":259,"callback":260,"file":235,"line":261},"admin_notices","adminWarningCallback",146,{"type":232,"name":263,"callback":264,"file":235,"line":265},"widgets_init","registerWidget",147,{"type":250,"name":267,"callback":268,"file":235,"line":269},"image_size_names_choose","addImageSizes",149,{"type":232,"name":271,"callback":272,"file":235,"line":273},"wp_footer","addPoweredBy",150,{"type":232,"name":275,"callback":276,"file":235,"line":277},"wp_body_open","addAdsPageTop",152,{"type":250,"name":279,"callback":280,"priority":60,"file":235,"line":281},"the_content","addAdsContent",153,{"type":250,"name":283,"callback":284,"priority":60,"file":235,"line":285},"the_content_feed","addRSSMacros",154,{"type":232,"name":287,"callback":288,"priority":60,"file":235,"line":289},"loop_end","addAdsLoopEnd",155,{"type":250,"name":291,"callback":292,"priority":60,"file":235,"line":293},"comments_template","addAdsBeforeComments",157,{"type":232,"name":295,"callback":296,"priority":60,"file":235,"line":297},"post_updated","saveSponsorPostMeta",160,{"type":232,"name":299,"callback":300,"priority":60,"file":235,"line":301},"transition_post_status","monitorForScheduledPostStatus",161,{"type":232,"name":295,"callback":303,"priority":60,"file":235,"line":304},"saveAdVisibilityMeta",164,{"type":232,"name":306,"callback":307,"file":235,"line":308},"get_template_part_template-parts\u002Fheader\u002Fentry","addNewspackAfterTitleAd",167,{"type":232,"name":310,"callback":311,"file":235,"line":312},"after_header","addNewspackHeaderAd",168,{"type":232,"name":314,"callback":315,"file":235,"line":316},"before_footer","addNewspackFooterAd",169,{"type":250,"name":318,"callback":319,"file":235,"line":320},"rest_pre_echo_response","addNewspackNewsletterMeta",170,{"type":232,"name":255,"callback":322,"file":235,"line":323},"createPostTypes",178,{"type":232,"name":246,"callback":325,"file":235,"line":326},"addPostStyles",179,{"type":232,"name":328,"callback":329,"file":235,"line":330},"pre_get_posts","modifyPostListing",180,{"type":250,"name":279,"callback":332,"priority":60,"file":235,"line":333},"postTemplate",181,{"type":250,"name":335,"callback":336,"file":235,"line":337},"the_posts","businessQuery",182,{"type":250,"name":339,"callback":340,"file":235,"line":341},"comment_form_defaults","commentForm",183,{"type":232,"name":343,"callback":344,"file":235,"line":345},"save_post","savePostMeta",184,{"type":232,"name":347,"callback":348,"file":235,"line":349},"add_meta_boxes","addMetaBoxes",189,{"type":232,"name":351,"callback":352,"file":235,"line":353},"rss2_item","addRSSZone",192,{"type":232,"name":355,"callback":352,"file":235,"line":356},"rss_item",193,{"type":232,"name":358,"callback":359,"file":235,"line":360},"rest_api_init","closure",205,{"type":232,"name":233,"callback":234,"file":362,"line":236},"trunk\\Broadstreet\\Core.php",{"type":232,"name":238,"callback":239,"file":362,"line":240},{"type":232,"name":242,"callback":243,"file":362,"line":244},{"type":232,"name":246,"callback":247,"file":362,"line":248},{"type":250,"name":251,"callback":252,"file":362,"line":253},{"type":232,"name":255,"callback":256,"file":362,"line":257},{"type":232,"name":259,"callback":260,"file":362,"line":261},{"type":232,"name":263,"callback":264,"file":362,"line":265},{"type":250,"name":267,"callback":268,"file":362,"line":269},{"type":232,"name":271,"callback":272,"file":362,"line":273},{"type":232,"name":275,"callback":276,"file":362,"line":277},{"type":250,"name":279,"callback":280,"priority":60,"file":362,"line":281},{"type":250,"name":283,"callback":284,"priority":60,"file":362,"line":285},{"type":232,"name":287,"callback":288,"priority":60,"file":362,"line":289},{"type":250,"name":291,"callback":292,"priority":60,"file":362,"line":293},{"type":232,"name":295,"callback":296,"priority":60,"file":362,"line":297},{"type":232,"name":299,"callback":300,"priority":60,"file":362,"line":301},{"type":232,"name":295,"callback":303,"priority":60,"file":362,"line":304},{"type":232,"name":306,"callback":307,"file":362,"line":308},{"type":232,"name":310,"callback":311,"file":362,"line":312},{"type":232,"name":314,"callback":315,"file":362,"line":316},{"type":250,"name":318,"callback":319,"file":362,"line":320},{"type":232,"name":255,"callback":322,"file":362,"line":323},{"type":232,"name":246,"callback":325,"file":362,"line":326},{"type":232,"name":328,"callback":329,"file":362,"line":330},{"type":250,"name":279,"callback":332,"priority":60,"file":362,"line":333},{"type":250,"name":335,"callback":336,"file":362,"line":337},{"type":250,"name":339,"callback":340,"file":362,"line":341},{"type":232,"name":343,"callback":344,"file":362,"line":345},{"type":232,"name":347,"callback":348,"file":362,"line":349},{"type":232,"name":351,"callback":352,"file":362,"line":353},{"type":232,"name":355,"callback":352,"file":362,"line":356},{"type":232,"name":358,"callback":359,"file":362,"line":360},[396,401,405,409,412,416,420,421,422,423,424,425],{"action":397,"nopriv":398,"callback":399,"hasNonce":398,"hasCapCheck":398,"file":235,"line":400},"bs_save_settings",false,"saveSettings",198,{"action":402,"nopriv":398,"callback":403,"hasNonce":398,"hasCapCheck":398,"file":235,"line":404},"create_advertiser","createAdvertiser",199,{"action":406,"nopriv":398,"callback":407,"hasNonce":398,"hasCapCheck":398,"file":235,"line":408},"import_facebook","importFacebook",200,{"action":410,"nopriv":398,"callback":410,"hasNonce":398,"hasCapCheck":398,"file":235,"line":411},"register",201,{"action":413,"nopriv":398,"callback":414,"hasNonce":398,"hasCapCheck":398,"file":235,"line":415},"save_zone_settings","saveZoneSettings",202,{"action":417,"nopriv":398,"callback":418,"hasNonce":398,"hasCapCheck":398,"file":235,"line":419},"get_sponsored_meta","getSponsorPostMeta",203,{"action":397,"nopriv":398,"callback":399,"hasNonce":398,"hasCapCheck":398,"file":362,"line":400},{"action":402,"nopriv":398,"callback":403,"hasNonce":398,"hasCapCheck":398,"file":362,"line":404},{"action":406,"nopriv":398,"callback":407,"hasNonce":398,"hasCapCheck":398,"file":362,"line":408},{"action":410,"nopriv":398,"callback":410,"hasNonce":398,"hasCapCheck":398,"file":362,"line":411},{"action":413,"nopriv":398,"callback":414,"hasNonce":398,"hasCapCheck":398,"file":362,"line":415},{"action":417,"nopriv":398,"callback":418,"hasNonce":398,"hasCapCheck":398,"file":362,"line":419},[427,434,438,440],{"namespace":428,"route":429,"methods":430,"callback":359,"permissionCallback":432,"file":235,"line":433},"broadstreet\u002Fv1","\u002Ftargets",[431],"GET","__return_true",207,{"namespace":428,"route":435,"methods":436,"callback":359,"permissionCallback":432,"file":235,"line":437},"\u002Frefresh",[431],216,{"namespace":428,"route":429,"methods":439,"callback":359,"permissionCallback":432,"file":362,"line":433},[431],{"namespace":428,"route":435,"methods":441,"callback":359,"permissionCallback":432,"file":362,"line":437},[431],[443,446,450,451],{"tag":4,"callback":444,"file":235,"line":445},"shortcode",148,{"tag":447,"callback":448,"file":235,"line":449},"businesses","businesses_shortcode",185,{"tag":4,"callback":444,"file":362,"line":445},{"tag":447,"callback":448,"file":362,"line":449},[],{"dangerousFunctions":454,"sqlUsage":455,"outputEscaping":458,"fileOperations":593,"externalRequests":26,"nonceChecks":26,"capabilityChecks":26,"bundledLibraries":746},[],{"prepared":456,"raw":27,"locations":457},4,[],{"escaped":459,"rawEcho":460,"locations":461},698,190,[462,465,467,469,471,473,475,477,479,481,483,485,488,489,491,493,495,498,501,503,505,507,509,511,512,513,515,517,518,519,521,522,524,526,528,530,533,535,536,538,540,542,544,545,547,548,549,551,553,555,557,560,562,565,567,568,570,572,573,575,576,578,579,581,582,583,584,586,587,590,591,594,596,597,600,601,603,605,607,609,611,612,613,614,615,617,619,621,623,625,627,629,631,633,635,637,638,639,640,641,642,643,644,645,646,647,648,650,651,652,654,655,657,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,676,677,679,681,682,683,684,686,687,688,689,690,691,692,693,694,695,697,698,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,717,718,720,721,722,724,725,726,727,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745],{"file":235,"line":463,"context":464},236,"raw output",{"file":235,"line":466,"context":464},256,{"file":235,"line":468,"context":464},260,{"file":235,"line":470,"context":464},278,{"file":235,"line":472,"context":464},289,{"file":235,"line":474,"context":464},300,{"file":235,"line":476,"context":464},307,{"file":235,"line":478,"context":464},311,{"file":235,"line":480,"context":464},390,{"file":235,"line":482,"context":464},401,{"file":235,"line":484,"context":464},530,{"file":486,"line":487,"context":464},"Broadstreet\\Views\\admin\\admin.php",60,{"file":486,"line":487,"context":464},{"file":486,"line":490,"context":464},106,{"file":492,"line":60,"context":464},"Broadstreet\\Views\\admin\\businesses.php",{"file":492,"line":494,"context":464},64,{"file":496,"line":497,"context":464},"Broadstreet\\Views\\admin\\businessMetaBox.php",252,{"file":499,"line":500,"context":464},"Broadstreet\\Views\\admin\\help.php",34,{"file":499,"line":502,"context":464},37,{"file":499,"line":504,"context":464},57,{"file":499,"line":506,"context":464},58,{"file":499,"line":508,"context":464},70,{"file":499,"line":510,"context":464},74,{"file":499,"line":113,"context":464},{"file":499,"line":192,"context":464},{"file":499,"line":514,"context":464},132,{"file":499,"line":516,"context":464},135,{"file":499,"line":273,"context":464},{"file":499,"line":297,"context":464},{"file":499,"line":520,"context":464},166,{"file":499,"line":308,"context":464},{"file":499,"line":523,"context":464},191,{"file":499,"line":525,"context":464},209,{"file":527,"line":173,"context":464},"Broadstreet\\Views\\admin\\infoBox.php",{"file":527,"line":529,"context":464},17,{"file":531,"line":532,"context":464},"Broadstreet\\Views\\admin\\layout.php",11,{"file":534,"line":45,"context":464},"Broadstreet\\Views\\admin\\zones.php",{"file":534,"line":217,"context":464},{"file":534,"line":537,"context":464},326,{"file":534,"line":539,"context":464},499,{"file":541,"line":13,"context":464},"Broadstreet\\Views\\admin.php",{"file":541,"line":543,"context":464},7,{"file":541,"line":529,"context":464},{"file":541,"line":546,"context":464},43,{"file":541,"line":487,"context":464},{"file":541,"line":487,"context":464},{"file":541,"line":550,"context":464},86,{"file":541,"line":552,"context":464},91,{"file":541,"line":554,"context":464},96,{"file":541,"line":556,"context":464},113,{"file":558,"line":559,"context":464},"Broadstreet\\Views\\infoBox.php",14,{"file":558,"line":561,"context":464},15,{"file":563,"line":564,"context":464},"Broadstreet\\Views\\listings\\archive\\default.php",48,{"file":563,"line":566,"context":464},53,{"file":563,"line":506,"context":464},{"file":563,"line":569,"context":464},61,{"file":563,"line":571,"context":464},66,{"file":563,"line":115,"context":464},{"file":563,"line":574,"context":464},71,{"file":563,"line":510,"context":464},{"file":563,"line":577,"context":464},79,{"file":563,"line":577,"context":464},{"file":563,"line":580,"context":464},82,{"file":563,"line":580,"context":464},{"file":563,"line":113,"context":464},{"file":563,"line":113,"context":464},{"file":563,"line":585,"context":464},88,{"file":563,"line":585,"context":464},{"file":588,"line":589,"context":464},"Broadstreet\\Views\\listings\\archive\\excerpt.php",22,{"file":588,"line":193,"context":464},{"file":592,"line":593,"context":464},"Broadstreet\\Views\\listings\\index.php",26,{"file":592,"line":595,"context":464},30,{"file":592,"line":595,"context":464},{"file":598,"line":599,"context":464},"Broadstreet\\Views\\listings\\single\\default.php",21,{"file":598,"line":193,"context":464},{"file":598,"line":602,"context":464},129,{"file":598,"line":604,"context":464},134,{"file":606,"line":502,"context":464},"Broadstreet\\Widget.php",{"file":606,"line":608,"context":464},40,{"file":606,"line":610,"context":464},46,{"file":606,"line":564,"context":464},{"file":606,"line":240,"context":464},{"file":606,"line":257,"context":464},{"file":606,"line":445,"context":464},{"file":606,"line":616,"context":464},259,{"file":606,"line":618,"context":464},411,{"file":606,"line":620,"context":464},414,{"file":606,"line":622,"context":464},424,{"file":606,"line":624,"context":464},555,{"file":606,"line":626,"context":464},562,{"file":606,"line":628,"context":464},564,{"file":606,"line":630,"context":464},610,{"file":606,"line":632,"context":464},726,{"file":606,"line":634,"context":464},729,{"file":606,"line":636,"context":464},740,{"file":362,"line":463,"context":464},{"file":362,"line":466,"context":464},{"file":362,"line":468,"context":464},{"file":362,"line":470,"context":464},{"file":362,"line":472,"context":464},{"file":362,"line":474,"context":464},{"file":362,"line":476,"context":464},{"file":362,"line":478,"context":464},{"file":362,"line":480,"context":464},{"file":362,"line":482,"context":464},{"file":362,"line":484,"context":464},{"file":649,"line":487,"context":464},"trunk\\Broadstreet\\Views\\admin\\admin.php",{"file":649,"line":487,"context":464},{"file":649,"line":490,"context":464},{"file":653,"line":60,"context":464},"trunk\\Broadstreet\\Views\\admin\\businesses.php",{"file":653,"line":494,"context":464},{"file":656,"line":497,"context":464},"trunk\\Broadstreet\\Views\\admin\\businessMetaBox.php",{"file":658,"line":500,"context":464},"trunk\\Broadstreet\\Views\\admin\\help.php",{"file":658,"line":502,"context":464},{"file":658,"line":504,"context":464},{"file":658,"line":506,"context":464},{"file":658,"line":508,"context":464},{"file":658,"line":510,"context":464},{"file":658,"line":113,"context":464},{"file":658,"line":192,"context":464},{"file":658,"line":514,"context":464},{"file":658,"line":516,"context":464},{"file":658,"line":273,"context":464},{"file":658,"line":297,"context":464},{"file":658,"line":520,"context":464},{"file":658,"line":308,"context":464},{"file":658,"line":523,"context":464},{"file":658,"line":525,"context":464},{"file":675,"line":173,"context":464},"trunk\\Broadstreet\\Views\\admin\\infoBox.php",{"file":675,"line":529,"context":464},{"file":678,"line":532,"context":464},"trunk\\Broadstreet\\Views\\admin\\layout.php",{"file":680,"line":45,"context":464},"trunk\\Broadstreet\\Views\\admin\\zones.php",{"file":680,"line":217,"context":464},{"file":680,"line":537,"context":464},{"file":680,"line":539,"context":464},{"file":685,"line":13,"context":464},"trunk\\Broadstreet\\Views\\admin.php",{"file":685,"line":543,"context":464},{"file":685,"line":529,"context":464},{"file":685,"line":546,"context":464},{"file":685,"line":487,"context":464},{"file":685,"line":487,"context":464},{"file":685,"line":550,"context":464},{"file":685,"line":552,"context":464},{"file":685,"line":554,"context":464},{"file":685,"line":556,"context":464},{"file":696,"line":559,"context":464},"trunk\\Broadstreet\\Views\\infoBox.php",{"file":696,"line":561,"context":464},{"file":699,"line":564,"context":464},"trunk\\Broadstreet\\Views\\listings\\archive\\default.php",{"file":699,"line":566,"context":464},{"file":699,"line":506,"context":464},{"file":699,"line":569,"context":464},{"file":699,"line":571,"context":464},{"file":699,"line":115,"context":464},{"file":699,"line":574,"context":464},{"file":699,"line":510,"context":464},{"file":699,"line":577,"context":464},{"file":699,"line":577,"context":464},{"file":699,"line":580,"context":464},{"file":699,"line":580,"context":464},{"file":699,"line":113,"context":464},{"file":699,"line":113,"context":464},{"file":699,"line":585,"context":464},{"file":699,"line":585,"context":464},{"file":716,"line":589,"context":464},"trunk\\Broadstreet\\Views\\listings\\archive\\excerpt.php",{"file":716,"line":193,"context":464},{"file":719,"line":593,"context":464},"trunk\\Broadstreet\\Views\\listings\\index.php",{"file":719,"line":595,"context":464},{"file":719,"line":595,"context":464},{"file":723,"line":599,"context":464},"trunk\\Broadstreet\\Views\\listings\\single\\default.php",{"file":723,"line":193,"context":464},{"file":723,"line":602,"context":464},{"file":723,"line":604,"context":464},{"file":728,"line":502,"context":464},"trunk\\Broadstreet\\Widget.php",{"file":728,"line":608,"context":464},{"file":728,"line":610,"context":464},{"file":728,"line":564,"context":464},{"file":728,"line":240,"context":464},{"file":728,"line":257,"context":464},{"file":728,"line":445,"context":464},{"file":728,"line":616,"context":464},{"file":728,"line":618,"context":464},{"file":728,"line":620,"context":464},{"file":728,"line":622,"context":464},{"file":728,"line":624,"context":464},{"file":728,"line":626,"context":464},{"file":728,"line":628,"context":464},{"file":728,"line":630,"context":464},{"file":728,"line":632,"context":464},{"file":728,"line":634,"context":464},{"file":728,"line":636,"context":464},[],[],{"summary":749,"deductions":750},"The \"broadstreet\" plugin version 1.52.2 presents a mixed security posture. While it demonstrates good practices like using prepared statements for all SQL queries and a high percentage of properly escaped output, significant concerns arise from its attack surface. A substantial number of entry points, specifically 16 out of 20, lack proper authentication or authorization checks, creating a large potential for unauthorized access and actions. The absence of any taint analysis results is positive, suggesting no critical flaws were detected in that specific area during the analysis. However, the plugin's history is marred by 6 known medium-severity CVEs, including past instances of missing authorization, CSRF, and XSS. The fact that there are currently no unpatched CVEs is a positive sign, but the recurring nature of these vulnerability types indicates a potential for similar weaknesses to be reintroduced or remain latent in the codebase. The most recent vulnerability was dated in the future (2026-01-19), which is an anomaly that warrants investigation and may indicate an error in the data itself or a projection that did not materialize. Overall, the plugin has strengths in secure database interactions and output handling, but its extensive unprotected entry points and past vulnerability patterns necessitate caution and vigilant monitoring.",[751,754,756,758,760,763],{"reason":752,"points":753},"Large attack surface without auth checks",8,{"reason":755,"points":26},"Unprotected REST API routes",{"reason":757,"points":26},"Unprotected AJAX handlers",{"reason":759,"points":111},"Missing nonce checks on AJAX",{"reason":761,"points":762},"Past medium severity CVEs (6 total)",18,{"reason":764,"points":456},"Percentage of output not properly escaped","2026-03-16T19:22:57.347Z",{"wat":767,"direct":780},{"assetPaths":768,"generatorPatterns":773,"scriptPaths":774,"versionParams":775},[769,770,771,772],"\u002Fwp-content\u002Fplugins\u002Fbroadstreet\u002Fcss\u002Fbroadstreet.css","\u002Fwp-content\u002Fplugins\u002Fbroadstreet\u002Fjs\u002Fbroadstreet.js","\u002Fwp-content\u002Fplugins\u002Fbroadstreet\u002Fjs\u002Fbroadstreet-admin.js","\u002Fwp-content\u002Fplugins\u002Fbroadstreet\u002Fcss\u002Fbroadstreet-admin.css",[],[770,771],[776,777,778,779],"broadstreet\u002Fcss\u002Fbroadstreet.css?ver=","broadstreet\u002Fjs\u002Fbroadstreet.js?ver=","broadstreet\u002Fjs\u002Fbroadstreet-admin.js?ver=","broadstreet\u002Fcss\u002Fbroadstreet-admin.css?ver=",{"cssClasses":781,"htmlComments":784,"htmlAttributes":786,"restEndpoints":789,"jsGlobals":791,"shortcodeOutput":793},[782,783],"broadstreet-widget","broadstreet-ad-wrapper",[785],"\u003C!-- Broadstreet Ad -->\u003C!-- End Broadstreet Ad -->",[787,788],"data-broadstreet-zone-id","data-broadstreet-placement-id",[790],"\u002Fwp-json\u002Fbroadstreet\u002Fv1\u002Fdata",[792],"window.broadstreet_config",[794,795],"[broadstreet]","[businesses]"]