[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fg6aHAr61IMkK0pUpi_eX42xWRJdyT2xClEUquEo8-NA":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":18,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":38,"analysis":102,"fingerprints":137},"catag","autometa's CATAG","2.2","JorgeAmVF","https:\u002F\u002Fprofiles.wordpress.org\u002Fjorgeamvf\u002F","\u003Cp>\u003Cstrong>autometa’s CATAG\u003C\u002Fstrong> is a simple plugin that uses the following shortcodes:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>[cats]\u003C\u002Fcode>  = to reproduce post categories;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[tags]\u003C\u002Fcode>  = to reproduce post tags;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[catag]\u003C\u002Fcode> = to generate a post taxonomies cloud. \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>autometa’s CATAG\u003C\u002Fstrong> is a standalone component of \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fautometa\u002F\" rel=\"ugc\">autometa\u003C\u002Fa>\u003C\u002Fstrong> shortcodes pack.\u003C\u002Fp>\n","It reproduces categories and tags in posts and it generates a cloud mixing categories and tags of posts simply via: [cats] and [tags] and [catag].",10,1535,100,2,"2018-01-18T06:56:00.000Z","4.9.29","2.5.0","",[20,21,22,23,24],"automation","cloud","metadata","shortcode","taxonomy","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcatag.zip",85,0,null,"2026-03-15T14:54:45.397Z",[],{"slug":32,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":34,"avg_security_score":26,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},"jorgeamvf",7,90,30,84,"2026-04-04T11:19:40.645Z",[39,49,67,79,90],{"slug":40,"name":41,"version":6,"author":7,"author_profile":8,"description":42,"short_description":43,"active_installs":11,"downloaded":44,"rating":27,"num_ratings":27,"last_updated":45,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":46,"homepage":18,"download_link":47,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":48},"folio","autometa's FOLIO","\u003Cp>\u003Cstrong>autometa’s FOLIO\u003C\u002Fstrong> is a simple plugin that uses the following shortcodes:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>[pfcats]\u003C\u002Fcode> = to reproduce portfolio categories;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[pfatts]\u003C\u002Fcode> = to reproduce portfolio attributes;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[folio]\u003C\u002Fcode>  = to generate a portfolio taxonomies cloud.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>autometa’s FOLIO\u003C\u002Fstrong> is a standalone component of \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fautometa\u002F\" rel=\"ugc\">autometa\u003C\u002Fa>\u003C\u002Fstrong> shortcodes pack.\u003C\u002Fp>\n","It reproduces portfolio categories and attributes in portfolios and it generates a cloud mixing categories and attributes of portfolios simply via: [p &hellip;",1306,"2018-01-18T06:55:00.000Z",[20,21,22,23,24],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffolio.zip","2026-03-15T15:16:48.613Z",{"slug":50,"name":51,"version":52,"author":53,"author_profile":54,"description":55,"short_description":56,"active_installs":13,"downloaded":57,"rating":34,"num_ratings":14,"last_updated":58,"tested_up_to":59,"requires_at_least":60,"requires_php":18,"tags":61,"homepage":64,"download_link":65,"security_score":66,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":48},"tags-all-in-one","Tags All In One","1.2.1","teastudio.pl","https:\u002F\u002Fprofiles.wordpress.org\u002Fteastudiopl\u002F","\u003Cp>\u003Cstrong>Tags All In One\u003C\u002Fstrong> is a powerful plugin that allows you to display a customizable tag cloud anywhere on your WordPress site.\u003Cbr \u002F>\nYou can select taxonomies, configure appearance, set the number of tags, and adjust sorting options.\u003C\u002Fp>\n\u003Cp>For more information, check out \u003Ca href=\"https:\u002F\u002Fteastudio.pl\u002Fproduct\u002Ftags-all-in-one\u002F\" rel=\"nofollow ugc\">PLUGIN HOMEPAGE\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Supports any taxonomy cointains ‘tag’ string in name \u003C\u002Fli>\n\u003Cli>Legacy widget\u003C\u002Fli>\n\u003Cli>Gutenberg block\u003C\u002Fli>\n\u003Cli>Shortcode \u003Ccode>[tags_all_in_one ...]\u003C\u002Fcode> for embedding the tag cloud anywhere  \u003C\u002Fli>\n\u003Cli>Configure tag count, counter brackets, font size, sorting \u003C\u002Fli>\n\u003Cli>Dynamic font size based on tag popularity  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>DEMO\u003C\u002Fh4>\n\u003Cp>You can see the plugin in action on \u003Ca href=\"https:\u002F\u002Fcoolcatideas.com\u002Fblog-software-house\u002Fsoftware-house-czym-jest-i-dlaczego-warto-skorzystac-z-jego-uslug\u002F\" rel=\"nofollow ugc\">DEMO PAGE\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Translations:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>English (en_EN) – by Marcin Gierada\u003C\u002Fli>\n\u003Cli>Polish (pl_PL) – by Marcin Gierada\u003C\u002Fli>\n\u003C\u002Ful>\n","Display a customizable tag cloud from selected taxonomies with various sorting and styling options.",5658,"2025-02-11T16:34:00.000Z","6.7.5","5.0.0",[21,23,62,24,63],"tags","widget","https:\u002F\u002Fteastudio.pl\u002Fproduct\u002Ftags-all-in-one\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftags-all-in-one.zip",92,{"slug":68,"name":68,"version":6,"author":7,"author_profile":8,"description":69,"short_description":70,"active_installs":71,"downloaded":72,"rating":27,"num_ratings":27,"last_updated":73,"tested_up_to":16,"requires_at_least":74,"requires_php":18,"tags":75,"homepage":18,"download_link":78,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":48},"autometa","\u003Cp>\u003Cstrong>autometa\u003C\u002Fstrong> is a complete plugin that uses the following shortcodes:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>[titul]\u003C\u002Fcode>      = to reproduce the publication title;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[titulink]\u003C\u002Fcode>   = to reproduce the publication link;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[autua]\u003C\u002Fcode>      = to reproduce the author name;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[autualink]\u003C\u002Fcode>  = to reproduce the author link;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[autuaguest]\u003C\u002Fcode> = to reproduce the guest link;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[dated]\u003C\u002Fcode>      = to reproduce the publication date;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[urlug]\u003C\u002Fcode>      = to reproduce the URL slug;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[urlink]\u003C\u002Fcode>     = to reproduce the URL permalink;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[urlinked]\u003C\u002Fcode>   = to reproduce the URL link;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[thumb]\u003C\u002Fcode>      = to reproduce the featured image;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[sumus]\u003C\u002Fcode>      = to reproduce the publication excerpt;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[cats]\u003C\u002Fcode>       = to reproduce post categories;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[tags]\u003C\u002Fcode>       = to reproduce post tags;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[catag]\u003C\u002Fcode>      = to generate a post taxonomies cloud;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[pfcats]\u003C\u002Fcode>     = to reproduce portfolio categories;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[pfatts]\u003C\u002Fcode>     = to reproduce portfolio attributes;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[folio]\u003C\u002Fcode>      = to generate a portfolio taxonomies cloud;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[woocats]\u003C\u002Fcode>    = to reproduce product categories;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[wootags]\u003C\u002Fcode>    = to reproduce product tags;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[woodo]\u003C\u002Fcode>      = to generate a product taxonomies cloud;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[tagcloud]\u003C\u002Fcode>   = to generate a full mixed taxonomies cloud;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[cloud]\u003C\u002Fcode>      = to generate a mixed taxonomies cloud;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[ments]\u003C\u002Fcode>      = to reproduce all comments;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[recents]\u003C\u002Fcode>    = to reproduce recents comments;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[forma]\u003C\u002Fcode>      = to generate a comment form;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[loupe]\u003C\u002Fcode>      = to generate a search form;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[nowon]\u003C\u002Fcode>      = to generate the current time;\u003C\u002Fli>\n\u003Cli>\u003Ccode>[nowadays]\u003C\u002Fcode>   = to generate the current date.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>autometa\u003C\u002Fstrong> is a shortcode pack composed by standalone components: \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftitul\u002F\" rel=\"ugc\">TITUL\u003C\u002Fa>\u003C\u002Fstrong>, \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fautua\u002F\" rel=\"ugc\">AUTUA\u003C\u002Fa>\u003C\u002Fstrong>, \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdated\u002F\" rel=\"ugc\">DATED\u003C\u002Fa>\u003C\u002Fstrong>, \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Furlug\u002F\" rel=\"ugc\">URLUG\u003C\u002Fa>\u003C\u002Fstrong>, \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fthumb\u002F\" rel=\"ugc\">THUMB\u003C\u002Fa>\u003C\u002Fstrong>, \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsumus\u002F\" rel=\"ugc\">SUMUS\u003C\u002Fa>\u003C\u002Fstrong>, \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcatag\u002F\" rel=\"ugc\">CATAG\u003C\u002Fa>\u003C\u002Fstrong>, \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ffolio\u002F\" rel=\"ugc\">FOLIO\u003C\u002Fa>\u003C\u002Fstrong>, \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoodo\u002F\" rel=\"ugc\">WOODO\u003C\u002Fa>\u003C\u002Fstrong>, \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fments\u002F\" rel=\"ugc\">MENTS\u003C\u002Fa>\u003C\u002Fstrong>, \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fforma\u002F\" rel=\"ugc\">FORMA\u003C\u002Fa>\u003C\u002Fstrong>, \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fnowon\u002F\" rel=\"ugc\">NOWON\u003C\u002Fa>\u003C\u002Fstrong>.\u003C\u002Fp>\n","It reproduces metadata information and it generates taxonomy clouds and comment and search forms to publications simply via shortcodes.",40,2490,"2018-01-18T10:12:00.000Z","4.4.0",[20,22,76,77,23],"pack","replication","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fautometa.zip",{"slug":80,"name":81,"version":6,"author":7,"author_profile":8,"description":82,"short_description":83,"active_installs":11,"downloaded":84,"rating":13,"num_ratings":85,"last_updated":15,"tested_up_to":16,"requires_at_least":86,"requires_php":18,"tags":87,"homepage":18,"download_link":89,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":48},"dated","autometa's DATED","\u003Cp>\u003Cstrong>autometa’s DATED\u003C\u002Fstrong> is a simple plugin that uses the following shortcode:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>[dated]\u003C\u002Fcode> = to reproduce the publication date.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>autometa’s DATED\u003C\u002Fstrong> is a standalone component of \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fautometa\u002F\" rel=\"ugc\">autometa\u003C\u002Fa>\u003C\u002Fstrong> shortcodes pack.\u003C\u002Fp>\n","It reproduces publication dates in pages, posts, portfolios or products simply via: [dated].",5076,1,"3.0.0",[20,88,22,23],"date","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdated.zip",{"slug":91,"name":92,"version":6,"author":7,"author_profile":8,"description":93,"short_description":94,"active_installs":11,"downloaded":95,"rating":27,"num_ratings":27,"last_updated":96,"tested_up_to":16,"requires_at_least":97,"requires_php":18,"tags":98,"homepage":18,"download_link":101,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":48},"thumb","autometa's THUMB","\u003Cp>\u003Cstrong>autometa’s THUMB\u003C\u002Fstrong> is a simple plugin that uses the following shortcode:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>[thumb]\u003C\u002Fcode> = to reproduce the featured image.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>autometa’s THUMB\u003C\u002Fstrong> is a standalone component of \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fautometa\u002F\" rel=\"ugc\">autometa\u003C\u002Fa>\u003C\u002Fstrong> shortcodes pack.\u003C\u002Fp>\n","It reproduces featured images in pages, posts, portfolios or products simply via: [thumb].",1164,"2018-01-18T06:52:00.000Z","2.9.0",[20,99,22,23,100],"featured-image","thumbnail","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fthumb.zip",{"attackSurface":103,"codeSignals":121,"taintFlows":128,"riskAssessment":129,"analyzedAt":136},{"hooks":104,"ajaxHandlers":105,"restRoutes":106,"shortcodes":107,"cronEvents":119,"entryPointCount":120,"unprotectedCount":27},[],[],[],[108,113,116],{"tag":109,"callback":110,"file":111,"line":112},"cats","autometa_post_categories","catag.php",34,{"tag":62,"callback":114,"file":111,"line":115},"autometa_post_tags",42,{"tag":4,"callback":117,"file":111,"line":118},"autometa_post_taxonomies",58,[],3,{"dangerousFunctions":122,"sqlUsage":123,"outputEscaping":125,"fileOperations":27,"externalRequests":27,"nonceChecks":27,"capabilityChecks":27,"bundledLibraries":127},[],{"prepared":27,"raw":27,"locations":124},[],{"escaped":27,"rawEcho":27,"locations":126},[],[],[],{"summary":130,"deductions":131},"The plugin \"catag\" v2.2 exhibits a strong security posture based on the provided static analysis and vulnerability history.  The absence of dangerous functions, file operations, external HTTP requests, and the complete use of prepared statements for SQL queries are excellent indicators of secure coding practices.  Furthermore, the 100% output escaping and the lack of any recorded vulnerabilities, including CVEs, suggest a mature and well-maintained plugin.  The limited attack surface, consisting solely of shortcodes, also contributes positively to its security profile.\n\nHowever, a significant concern arises from the complete absence of nonce checks and capability checks across all entry points. While the static analysis reported zero unprotected entry points, this is likely due to the assumption that shortcodes inherently have some level of authorization, which is not always the case. Without explicit checks, these shortcodes could be susceptible to CSRF attacks if they perform actions that modify data or trigger significant events.  The lack of any recorded vulnerabilities is positive, but the absence of security checks creates a potential blind spot that could lead to future vulnerabilities if not addressed. This is a weakness that, while not currently exploited, represents a notable security risk.",[132,134],{"reason":133,"points":11},"Missing nonce checks",{"reason":135,"points":11},"Missing capability checks","2026-03-16T23:38:50.951Z",{"wat":138,"direct":143},{"assetPaths":139,"generatorPatterns":140,"scriptPaths":141,"versionParams":142},[],[],[],[],{"cssClasses":144,"htmlComments":145,"htmlAttributes":146,"restEndpoints":150,"jsGlobals":151,"shortcodeOutput":152},[68],[],[147,148,149],"id=\"cats\"","id=\"tags\"","id=\"catag\"",[],[],[153,154,155],"\u003Cspan id=\"cats\" class=\"autometa\">","\u003Cspan id=\"tags\" class=\"autometa\">","\u003Cspan id=\"catag\" class=\"autometa\">"]