[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flavRZA--ceuWjVxYnhusTfbIL_3gSNE9GdD4GzuUWg8":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":16,"download_link":23,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":34,"analysis":145,"fingerprints":569},"cmc-hook","CMC Hook","1.0.6","Edem","https:\u002F\u002Fprofiles.wordpress.org\u002Flovnic\u002F","\u003Cp>a. Targeted at developers for quick test and development of plugins\u003Cbr \u002F>\na. Register php functions to hooks ( action and filter ) live from wordpress dashboard tools.\u003Cbr \u002F>\nb. Run php, html, css and javascript codes safely. php codes are enclosed between php tags eg. “”\u003Cbr \u002F>\nc. Hooks can be disabled from the url, so your system can recover from erroneous php codes\u003Cbr \u002F>\nd. create and quickly live test plugins from your website before deployment\u003Cbr \u002F>\ne. Easy to use with shortcodes\u003Cbr \u002F>\nf. Very extendable with other plugins as it has lots of filters and actions.\u003C\u002Fp>\n\u003Ch3>shortcode\u003C\u002Fh3>\n\u003Cp>[cmchksh id=”” slug=””]\u003C\u002Fp>\n","Register php functions to hooks(action and filter), run php codes safely, create and test plugins all from dashboard tools",0,1590,"2017-07-24T14:39:00.000Z","4.8.28","4.6.0","",[18,19,20,21,22],"css","custom-filters","javascript","php","shortcode-generator","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcmc-hook.1.0.6.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":29,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":11,"avg_security_score":24,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},"lovnic",2,30,84,"2026-04-04T05:03:13.454Z",[35,59,79,99,120],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":43,"downloaded":44,"rating":45,"num_ratings":46,"last_updated":47,"tested_up_to":48,"requires_at_least":16,"requires_php":49,"tags":50,"homepage":56,"download_link":57,"security_score":58,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26},"code-manager","Code Manager","1.0.45","Passionate Programmer Peter","https:\u002F\u002Fprofiles.wordpress.org\u002Fpeterschulznl\u002F","\u003Cp>The Code Manager allows WordPress users to write, test and deploy PHP, JavaScript, CSS and HTML code blocks from the WordPress dashboard.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Ch4>Code Management\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>List, edit, delete, copy, import and export code\u003C\u002Fli>\n\u003Cli>Open multiple code editors simultaneously in tab mode\u003C\u002Fli>\n\u003Cli>Enable\u002Fdisable code\u003C\u002Fli>\n\u003Cli>Enable\u002Fdisable preview mode\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Shortcode (FREE)\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>PHP code blocks from a shortcode\u003C\u002Fli>\n\u003Cli>JavaScript code blocks from a shortcode\u003C\u002Fli>\n\u003Cli>CSS from a shortcode\u003C\u002Fli>\n\u003Cli>HTML blocks from a shortcode\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Advanced code (PREMIUM)\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>PHP server code – no more need to edit functions.php\u003C\u002Fli>\n\u003Cli>Add CCS and JS resource files to back-end and front-end\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Visit the plugin website for downloadable demos and example code.\u003C\u002Fp>\n\u003Ch3>Plugin Links\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fcode-manager.com\u002F\" rel=\"nofollow ugc\">Plugin Website\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcode-manager\u002F\" rel=\"ugc\">Download Plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fcode-manager.com\u002Fblog\u002Fdocs\u002Findex\u002F\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fcode-manager.com\u002Fcode\u002F\" rel=\"nofollow ugc\">Code Examples\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Write, test and deploy PHP, JavaScript, CSS and HTML code blocks from the WordPress dashboard.",500,84963,98,8,"2025-12-02T11:45:00.000Z","6.9.4","7.0",[51,52,53,54,55],"code-blocks","code-snippets","css-editor","javascript-editor","php-editor","https:\u002F\u002Fcode-manager.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcode-manager.1.0.45.zip",100,{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":67,"downloaded":68,"rating":58,"num_ratings":69,"last_updated":70,"tested_up_to":71,"requires_at_least":72,"requires_php":16,"tags":73,"homepage":75,"download_link":76,"security_score":77,"vuln_count":30,"unpatched_count":11,"last_vuln_date":78,"fetched_at":26},"custom-css","Custom CSS, JS & PHP","2.4.3","WPFactory","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpcodefactory\u002F","\u003Cp>\u003Cstrong>Custom CSS, JS & PHP\u003C\u002Fstrong> is a lightweight plugin that lets you add:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>custom \u003Cstrong>CSS\u003C\u002Fstrong> (front-end and\u002For back-end),\u003C\u002Fli>\n\u003Cli>custom \u003Cstrong>JavaScript\u003C\u002Fstrong> (front-end and\u002For back-end), and\u003C\u002Fli>\n\u003Cli>custom \u003Cstrong>PHP\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🗘 Feedback\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>We are open to your suggestions and feedback. Thank you for using or trying out one of our plugins!\u003C\u002Fli>\n\u003C\u002Ful>\n","Just another custom CSS, JavaScript & PHP tool for WordPress.",400,9860,3,"2025-09-08T16:08:00.000Z","6.8.5","4.4",[18,20,74,21],"js","https:\u002F\u002Fwpfactory.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-css.2.4.3.zip",97,"2025-04-16 00:00:00",{"slug":80,"name":81,"version":82,"author":83,"author_profile":84,"description":85,"short_description":86,"active_installs":87,"downloaded":88,"rating":45,"num_ratings":89,"last_updated":90,"tested_up_to":48,"requires_at_least":91,"requires_php":49,"tags":92,"homepage":95,"download_link":96,"security_score":97,"vuln_count":69,"unpatched_count":11,"last_vuln_date":98,"fetched_at":26},"insert-headers-and-footers","WPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager","2.3.4","Syed Balkhi","https:\u002F\u002Fprofiles.wordpress.org\u002Fsmub\u002F","\u003Ch4>Insert Headers & Footers + Full WordPress Code Snippets Plugin\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpcode.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin\" rel=\"nofollow ugc\">WPCode\u003C\u002Fa> (formerly known as Insert Headers and Footers by WPBeginner) is the most popular code snippets plugin for WordPress used by over 2 million websites.\u003C\u002Fp>\n\u003Cp>We make it easy for you to add code snippets in WordPress without having to edit your theme’s functions.php file.\u003C\u002Fp>\n\u003Cp>Our simple insert headers and footers interface allows you to insert code like Google Analytics, custom CSS, Facebook Pixel, and more to your WordPress site’s header and footer as well other areas of your website. No need to edit your theme files!\u003C\u002Fp>\n\u003Cp>Aside from Header and Footer scripts, you can also use WPCode to insert custom PHP code snippets, JavaScript code snippets, CSS code snippets, HTML code snippets, and text snippets with full conditional logic support.\u003C\u002Fp>\n\u003Cp>We took the pain out of adding custom code snippets in WordPress and made it easy.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>I have been using Insert Headers and Footers and it is such a useful tool. Super helpful and the very best of its kind. Highly recommend\u003Cbr \u002F>\n  The_Gibble – WordPress user\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>Quick Overview of WPCode from WPBeginner\u003C\u002Fh4>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FFo-7MKRRUec?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Introducing New WPCode Pro\u003C\u002Fstrong>\u003Cbr \u002F>\n  While WPCode Lite offers tons of powerful features for free, we listened to user feedback and created WPCode Pro with even more amazing features to improve your workflow. This includes smart conditional logic, saving code snippets to cloud library, code revisions, page-specific snippets, deeper integration with popular plugins like WooCommerce, Easy Digital Downloads, and so much more. \u003Ca href=\"https:\u002F\u002Fwpcode.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin\" rel=\"nofollow ugc\">Click here to purchase the best premium WordPress code snippet plugin now!\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>Future Proof Code Snippet Management\u003C\u002Fh4>\n\u003Cp>Most \u003Ca href=\"https:\u002F\u002Fwww.wpbeginner.com\u002Fcategory\u002Fwp-tutorials\u002F\" rel=\"nofollow ugc\">WordPress tutorial websites\u003C\u002Fa> ask you to add code snippets to your theme’s functions.php file. This makes managing code snippets messy, and it also prevents you from updating your theme.\u003C\u002Fp>\n\u003Cp>If you ever update your theme or switch to another theme, then you will lose all custom code functions that you added in your functions.php file.\u003C\u002Fp>\n\u003Cp>WPCode solves this by providing you an easy way to insert header and footer scripts along with other code snippets directly from your WordPress dashboard. These code snippets actually run as if they were in your theme’s functions.php file.\u003C\u002Fp>\n\u003Cp>Our smart code snippet validation helps you prevent common code errors to ensure you never break your website when adding code snippets or header and footer scripts.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>New WPCode Cloud Library\u003C\u002Fstrong> even allows you to store all your custom code snippets in a cloud library, so you can easily re-use code snippets across multiple website projects and save time. You can keep your code snippets completely private or \u003Ca href=\"https:\u002F\u002Flibrary.wpcode.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin\" rel=\"nofollow ugc\">share it with the community\u003C\u002Fa> to give back while boosting your social profile.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>This plugin allows me to not only add things to my site whenever needed, but it takes me only seconds to accomplish it.\u003Cbr \u002F>\n  David Weber – WordPress user\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>Full Code Snippets Library and Code Generators\u003C\u002Fh4>\n\u003Cp>Ever wanted a central place to find all the most popular WordPress code snippets that are tested and proven to work?\u003C\u002Fp>\n\u003Cp>When we started Insert Headers and Footers plugin, we did too. So we built a WordPress code snippets library right inside the WPCode plugin.\u003C\u002Fp>\n\u003Cp>You will find verified PHP code snippets for popular feature requests like disable REST API, disable XML-RPC, disable comments, allow SVG file uploads, disable Gutenberg, add Classic Editor, and more without installing separate plugins for each.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>I was very hesitant to get into any of the code for my website. Your plugin made it easy for me to do.\u003Cbr \u002F>\n  Conbrio75 – WordPress user\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>We also built the ability to save your code snippets to \u003Ca href=\"https:\u002F\u002Flibrary.wpcode.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin\" rel=\"nofollow ugc\">WPCode Cloud Library\u003C\u002Fa>, so you can easily re-use it on your other websites, client projects, or even share it with the larger community.\u003C\u002Fp>\n\u003Cp>WPCode Cloud Library helps you better organize your code snippets in one central location, so you can save more time and speed up your workflow when managing websites. No more wasting time looking for custom notes or Github gists.\u003C\u002Fp>\n\u003Cp>Aside from our growing code snippets library, we also have WordPress code generators to help you quickly get ready-to-use custom code using the latest WordPress coding standards and API’s.\u003C\u002Fp>\n\u003Ch4>Conditional Logic for Code Snippets + Code Insertion Priority\u003C\u002Fh4>\n\u003Cp>Our goal with WPCode was to create a WordPress code snippets plugin that’s both EASY and POWERFUL.\u003C\u002Fp>\n\u003Cp>That’s why aside from our global header and footer scripts, we added advanced features like conditional logic for code snippets and made it easy.\u003C\u002Fp>\n\u003Cp>Instead of learning WordPress conditional logic queries, you can use our beginner-friendly conditional logic user interface to:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Load code snippets for logged in users only\u003C\u002Fli>\n\u003Cli>Load PHP code snippets for specific user roles\u003C\u002Fli>\n\u003Cli>Load PHP code snippets only on specific page URLs\u003C\u002Fli>\n\u003Cli>Insert header and footer pixel scripts on specific pages\u003C\u002Fli>\n\u003Cli>Show code snippets based on type of page\u003C\u002Fli>\n\u003Cli>Run code snippet only on certain post types\u003C\u002Fli>\n\u003Cli>Load header and footer code snippet based on referrer source\u003C\u002Fli>\n\u003Cli>and more…\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>We also added both automatic code insertion and manual code output using shortcodes.\u003C\u002Fp>\n\u003Cp>Our Auto Insert feature allows you to run the code snippet everywhere or choose from custom options like:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Run code snippet only on frontend\u003C\u002Fli>\n\u003Cli>Run code snippet only in WordPress admin area\u003C\u002Fli>\n\u003Cli>Add header and footer scripts sitewide\u003C\u002Fli>\n\u003Cli>Insert PHP code snippet before or after post content\u003C\u002Fli>\n\u003Cli>Insert code snippet before or after specific paragraph\u003C\u002Fli>\n\u003Cli>Insert code snippet on specific archive pages\u003C\u002Fli>\n\u003Cli>Insert code snippets after specific WooCommerce function (\u003Ca href=\"https:\u002F\u002Fwpcode.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin\" rel=\"nofollow ugc\">Pro Feature\u003C\u002Fa>)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Aside from that, we also added a visual code snippet priority system, so you can choose the order for your custom functions to avoid code conflict.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>This is such a useful plugin! It makes it so much easier to include things on your website!\u003Cbr \u002F>\n  Understoryliving – WordPress user\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>And for even more flexibility and customization, we have added the ability for you to add page-specific code snippets right from the WordPress classic editor as well as the Gutenberg editor. You can even load code snippets based on device type such as mobile only code snippets, desktop only code snippets, etc.\u003C\u002Fp>\n\u003Ch4>Import and Export Code Snippets\u003C\u002Fh4>\n\u003Cp>Managing multiple websites or developing in a staging environment?\u003C\u002Fp>\n\u003Cp>We offer an easy way to import and export your custom code snippets, functions, and header and footer scripts to help you save time.\u003C\u002Fp>\n\u003Cp>You can also save your code snippets to WPCode Cloud (Pro feature), so you can easily re-use the same code snippets across multiple websites. This also allows you to better organize your code snippets instead of wasting time searching for random Github gists.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>Simple plugin I use in quite every site. Very useful to insert scripts and tags.\u003Cbr \u002F>\n  tommasoperego – WordPress user\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>Full WPCode Feature List\u003C\u002Fh4>\n\u003Cp>The simple interface of WPCode plugin (formerly known as Insert Headers and Footers) gives you one place where you can insert header and footer scripts as well as custom code snippets rather than dealing with dozens of different plugins.\u003C\u002Fp>\n\u003Cp>Below is a full list of WPCode features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Quick to set up\u003C\u002Fli>\n\u003Cli>Unlimited code snippets\u003C\u002Fli>\n\u003Cli>Simple to insert header and footer scripts globally\u003C\u002Fli>\n\u003Cli>Beginner Friendly Code Editor with Syntax Highlighter for PHP, JavaScript, and HTML\u003C\u002Fli>\n\u003Cli>Smart Code Validation to Prevent PHP Errors\u003C\u002Fli>\n\u003Cli>Insert header code and\u002For footer code using Conditional Logic\u003C\u002Fli>\n\u003Cli>Add \u003Cstrong>Google Analytics\u003C\u002Fstrong> code to header and footer\u003C\u002Fli>\n\u003Cli>Add \u003Cstrong>custom CSS\u003C\u002Fstrong> code to any theme\u003C\u002Fli>\n\u003Cli>Insert \u003Cstrong>Facebook pixel\u003C\u002Fstrong> code in header and footer\u003C\u002Fli>\n\u003Cli>Insert any code or script, including HTML and Javascript\u003C\u002Fli>\n\u003Cli>Insert PHP Code Snippets\u003C\u002Fli>\n\u003Cli>Ready-made Code Snippet Library\u003C\u002Fli>\n\u003Cli>Custom WordPress Code Snippet Generator\u003C\u002Fli>\n\u003Cli>Show or Hide PHP Code Snippets based on conditional logic\u003C\u002Fli>\n\u003Cli>Run PHP code and custom code snippets everywhere or in select areas using smart auto-insert rules.\u003C\u002Fli>\n\u003Cli>Manually insert PHP code snippets using shortcodes anywhere on website\u003C\u002Fli>\n\u003Cli>Add Rich Text Ads and Content Snippets automatically on posts & pages.\u003C\u002Fli>\n\u003Cli>Export \u002F Import Code Snippets\u003C\u002Fli>\n\u003Cli>\u003Cstrong>New\u003C\u002Fstrong> Save snippets to Cloud Library – All your snippets stored in your private code snippet cloud.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>New\u003C\u002Fstrong> Deep integrations with Gutenberg, WooCommerce, and more.\u003C\u002Fli>\n\u003Cli>Device specific code snippets (such as load code snippets on mobile only, desktop only, etc)\u003C\u002Fli>\n\u003Cli>and more features coming soon.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Credits\u003C\u002Fh4>\n\u003Cp>Insert Headers and Footers plugin was first created by \u003Ca href=\"https:\u002F\u002Fsyedbalkhi.com\u002F\" rel=\"nofollow ugc\">Syed Balkhi\u003C\u002Fa> and the \u003Ca href=\"http:\u002F\u002Fwww.wpbeginner.com\u002F\" rel=\"nofollow ugc\">WPBeginner\u003C\u002Fa> team in 2011.\u003C\u002Fp>\n\u003Cp>It was later rebranded to WPCode in 2022 by Syed Balkhi to add powerful code snippets features that users were requesting for.\u003C\u002Fp>\n\u003Ch4>Branding Guideline\u003C\u002Fh4>\n\u003Cp>WPCode™ is a trademark of WPCode LLC. When writing about the Insert Headers and Footers – Code Snippets plugin by WPCode, please make sure to uppercase the initial 3 letters.\u003C\u002Fp>\n\u003Cp>WPCode (correct)\u003Cbr \u002F>\nWP Code (incorrect)\u003Cbr \u002F>\nwpcode (incorrect)\u003Cbr \u002F>\nwp code snippets (incorrect)\u003C\u002Fp>\n","Easily add code snippets in WordPress. Insert header & footer scripts, add PHP code snippets with conditional logic, insert ads pixel code, and more.",3000000,82822570,1761,"2026-02-12T15:19:00.000Z","5.0",[93,52,18,94,21],"code","header","https:\u002F\u002Fwww.wpcode.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Finsert-headers-and-footers.2.3.4.zip",99,"2023-07-17 00:00:00",{"slug":52,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":106,"downloaded":107,"rating":108,"num_ratings":109,"last_updated":110,"tested_up_to":48,"requires_at_least":91,"requires_php":111,"tags":112,"homepage":115,"download_link":116,"security_score":117,"vuln_count":118,"unpatched_count":11,"last_vuln_date":119,"fetched_at":26},"Code Snippets","3.9.5","Code Snippets Pro","https:\u002F\u002Fprofiles.wordpress.org\u002Fcodesnippetspro\u002F","\u003Cp>\u003Cstrong>✂ Code Snippets\u003C\u002Fstrong> provides an effortless way to enhance your WordPress site.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>🚀 Upgrade to Code Snippets Pro\u003C\u002Fstrong> for complete CSS, JavaScript, Gutenberg, Elementor and cloud synchronisation integrations. \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fcodesnippets.pro\u002Fpricing\" rel=\"nofollow ugc\">Elevate your snippets experience now!\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Say goodbye to the hassle of tweaking your theme’s \u003Ccode>functions.php\u003C\u002Fcode> file and downloading endless plugins – Code Snippets simplifies the process!\u003C\u002Fp>\n\u003Cp>A snippet is like a mini-plugin for your WordPress site, providing added functionality without the clutter.\u003C\u002Fp>\n\u003Cp>Unlike other solutions that involve dumping code into your \u003Ccode>functions.php\u003C\u002Fcode> file, Code Snippets offers an intuitive graphical interface for seamless integration and real-time execution. Managing snippets is as easy as activating and deactivating plugins, only without the bloat and overhead.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>🎥 Watch a quick overview by Imran Siddiq:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FuzND-wdSCMQ?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>☁️ Each copy of Code Snippets includes full integration with the community-powered \u003Ca href=\"https:\u002F\u002Fcodesnippets.cloud\u002F\" rel=\"nofollow ugc\">Code Snippets Cloud\u003C\u002Fa> platform, providing easy access to hundreds of tweaks and enhancements ready to power-up any WordPress site.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>🌐 Connect with us:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fcode-snippets\" rel=\"ugc\">Support Forum\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ffacebook.com\u002Fgroups\u002Fcodesnippetsplugin\" rel=\"nofollow ugc\">Facebook Community\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsnipco.de\u002Fdiscord\" rel=\"nofollow ugc\">Discord Community\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcodesnippetspro\u002Fcode-snippets\" rel=\"nofollow ugc\">GitHub Repository\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>🌟 Like our plugin? Find it useful? Please consider sharing your experience by \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fview\u002Fplugin-reviews\u002Fcode-snippets\" rel=\"ugc\">leaving a review on WordPress.org\u003C\u002Fa>. Your feedback is instrumental to shaping our future growth!\u003C\u002Fp>\n\u003Cp>🌍 We’d like to thank the wonderful people who have helped contribute translations to allow Code Snippets to be used in different languages. \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcodesnippetspro\u002Fcode-snippets\u002Fblob\u002Fcore\u002FCREDITS.md#translators\" rel=\"nofollow ugc\">You can find a full list here\u003C\u002Fa>.\u003C\u002Fp>\n","An easy, clean and simple way to enhance your site with code snippets.",1000000,19655832,94,494,"2026-02-05T11:03:00.000Z","7.4",[93,18,113,21,114],"multisite","snippets","https:\u002F\u002Fcodesnippets.pro","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcode-snippets.3.9.5.zip",89,7,"2026-02-05 19:33:02",{"slug":121,"name":122,"version":123,"author":124,"author_profile":125,"description":126,"short_description":127,"active_installs":128,"downloaded":129,"rating":45,"num_ratings":130,"last_updated":131,"tested_up_to":132,"requires_at_least":133,"requires_php":134,"tags":135,"homepage":141,"download_link":142,"security_score":117,"vuln_count":143,"unpatched_count":11,"last_vuln_date":144,"fetched_at":26},"wp-asset-clean-up","Asset CleanUp: Page Speed Booster","1.4.0.3","Gabe Livan","https:\u002F\u002Fprofiles.wordpress.org\u002Fgabelivan\u002F","\u003Cp>Don’t just minify & combine CSS\u002FJavaScript files ending up with large, bloated and slow loading pages: \u003Cstrong>Strip the “fat” first and get a faster website\u003C\u002Fstrong> 🙂\u003C\u002Fp>\n\u003Cp>Faster page load = Happier Visitors = More Conversions = More Revenue\u003C\u002Fp>\n\u003Cp>There are often times when you are using a theme and a number of plugins which are enabled and run on the same page. However, you don’t need to use all of them and to improve the speed of your website and make the HTML source code cleaner (convenient for debugging purposes), it’s better to prevent those styles and scripts from loading.\u003C\u002Fp>\n\u003Cp>For instance, you might use a plugin that generates contact forms and it loads its assets (.CSS and .JS files) in every page of your website instead of doing it only in the \u002Fcontact page (if that’s the only place where you need it).\u003C\u002Fp>\n\u003Cp>“Asset CleanUp” scans your page and detects all the assets that are loaded. All you have to do when editing a page\u002Fpost is just to select the CSS\u002FJS that are not necessary to load, this way reducing the bloat.\u003C\u002Fp>\n\u003Cp>The plugin works best in combination with a cache plugin (e.g. WP Rocket, WP Fastest Cache, W3 Total Cache), a hosting company that offers packages with server-level caching available (e.g. WP Engine, Kinsta) or a service like Cloudflare that has page caching enabled.\u003C\u002Fp>\n\u003Ch4>Main plugin’s benefits include\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Decreases the number of HTTP requests loaded and eliminate render-blocking resources (important for faster page load) by unloading useless CSS\u002FJS\u003C\u002Fli>\n\u003Cli>Preload CSS\u002FJS, Local Fonts & Google Fonts files to instruct the browser to download the chosen assets as soon as possible\u003C\u002Fli>\n\u003Cli>Minify CSS files (including inline code within STYLE tags)\u003C\u002Fli>\n\u003Cli>Minify JavaScript files (including inline code within SCRIPT tags)\u003C\u002Fli>\n\u003Cli>Combine remaining loaded CSS & JavaScript files\u003C\u002Fli>\n\u003Cli>Inline CSS Files (automatically & by specifying the path to the stylesheets)\u003C\u002Fli>\n\u003Cli>Defer combined JavaScript files by applying “defer” attribute to the SCRIPT tags\u003C\u002Fli>\n\u003Cli>Site-wide removal for Emojis, Dashicons for guest users and Comment Reply if they are not used\u003C\u002Fli>\n\u003Cli>Disable RSS Feeds\u003C\u002Fli>\n\u003Cli>Reduces the HTML code of the actual page (that’s even better if GZIP compression is enabled)\u003C\u002Fli>\n\u003Cli>Makes source code easier to scan in case you’re a developer and want to search for something\u003C\u002Fli>\n\u003Cli>Remove possible conflicts between plugins\u002Ftheme (e.g. 2 JavaScript files that are loading from different plugins and they interfere one with another)\u003C\u002Fli>\n\u003Cli>Better performance score if you test your URL on websites such as GTmetrix, PageSpeed Insights, Pingdom Website Speed Test\u003C\u002Fli>\n\u003Cli>Google will love your website more as it would be faster and fast page load is nowadays a factor in search ranking\u003C\u002Fli>\n\u003Cli>Your server access log files (e.g the Apache ones) will be easier to scan and would take less space on your server\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Google Fonts Optimization \u002F Removal\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Combine all Google Font requests into fewer (usually one) requests, saving one round trip to the server for each additional font requested\u003C\u002Fli>\n\u003Cli>Choose between three methods of delivery: Render-blocking, Asynchronous via Web Font Loader (webfont.js) or Asynchronous by preloading the CSS stylesheet\u003C\u002Fli>\n\u003Cli>Option to preload Google Font Files from fonts.gstatic.com (e.g. ending in .woff2)\u003C\u002Fli>\n\u003Cli>Apply “font-display” CSS property to all loaded Google Font requests\u003C\u002Fli>\n\u003Cli>Enable preconnect resource hint for fonts.gstatic.com in case you use Google Fonts; don’t let the browser wait until it fetches the CSS for loading the font files before it begins DNS\u002FTCP\u002FTLS\u003C\u002Fli>\n\u003Cli>Remove all Google Font requests including link\u002Ffont preloads, @import\u002F@font-face from CSS files & STYLE tags, resource hints\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Local Fonts Optimization\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Preload local font files (ending in .woff, .woff2, .ttf, etc.)\u003C\u002Fli>\n\u003Cli>Apply “font-display:” CSS property to @font-face from existing to LINK \u002F STYLE tags to improve the PageSpeed score for “Ensure text remains visible during webfont load”\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Critical CSS\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>You can add already generated critical CSS (e.g. via tools such as \u003Ca href=\"https:\u002F\u002Fwww.corewebvitals.io\u002Ftools\u002Fcritical-css-generator\" rel=\"nofollow ugc\">Advanced Critical CSS Generator\u003C\u002Fa> customly for the homepage, posts, pages, taxonomy pages (e.g. category), archive pages (e.g. date, author), search, 404 not found\u003C\u002Fli>\n\u003Cli>The critical CSS can be added within the Dashboard as well as via code \u002F \u003Ca href=\"https:\u002F\u002Fwww.assetcleanup.com\u002Fdocs\u002F?p=608\" rel=\"nofollow ugc\">Read More\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Remove useless links, meta tags and HTML comments within the HEAD and BODY (footer) tags of the website\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Really Simple Discovery (RSD) link tag\u003C\u002Fli>\n\u003Cli>REST API link tag\u003C\u002Fli>\n\u003Cli>Pages\u002FPosts Shortlink tag\u003C\u002Fli>\n\u003Cli>WordPress version meta tag (also good for security reasons)\u003C\u002Fli>\n\u003Cli>All “generator” meta tags (also good for security reasons)\u003C\u002Fli>\n\u003Cli>RSS Feed Link Tags (usually they are not needed if your website is not used for blogging purposes)\u003C\u002Fli>\n\u003Cli>oEmbeds, if you do not need to embed videos (e.g. YouTube), tweets and audios\u003C\u002Fli>\n\u003Cli>Valid HTML Comments (exceptions from stripping can be added and Internet Explorer conditional comments are preserved)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Each option can be turned on\u002Foff depending on your needs. Instructions about each of them are given in the plugin’s settings page.\u003C\u002Fp>\n\u003Ch4>Disable partially or completely XML-RPC protocol\u003C\u002Fh4>\n\u003Cp>This is an API service used by WordPress for 3rd party applications, such as mobile apps, communication between blogs and plugins such as Jetpack. If you use or are planning to use a remote system to post content to your website, you can keep this feature enabled (which it is by default). Many users do not use this function at all and if you’re one of them, you can disable it.\u003C\u002Fp>\n\u003Cp>Plugin works with WordPress Multisite Network enabled!\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Asset CleanUp Pro\u003C\u002Fstrong>\u003Cbr \u002F>\n  This plugin is the lite version of Asset CleanUp Pro that comes with more benefits including managing assets (CSS & JS files) on all WordPress pages, unloading plugins site-wide or via Regex(es), apply “async” and “defer” attributes on loaded JavaScript files which would boost the speed score even higher, move the loading location of CSS\u002FJS files (from HEAD to BODY to reduce render-blocking or vice-versa if you need specific files to trigger earlier) and premium support. \u003Ca href=\"https:\u002F\u002Fwww.gabelivan.com\u002Fitems\u002Fwp-asset-cleanup-pro\u002F?utm_source=wp_org_lite&utm_medium=inside_quote\" rel=\"nofollow ugc\">Click here to purchase Asset CleanUp Pro!\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>NOTES\u003C\u002Fh4>\n\u003Cp>People that have tested the plugin are so far happy with it and I want to keep a good reputation for it. In case something is not working for you or have any suggestions, please write to me on the forum and I will be happy to assist you. \u003Cstrong>BEFORE rating this plugin\u003C\u002Fstrong>, please check the following post http:\u002F\u002Fchrislema.com\u002Ftheres-wrong-way-give-plugin-feedback-wordpress-org\u002F and then use your common sense when writing the feedback 🙂\u003C\u002Fp>\n\u003Ch4>GO PRO\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Unload CSS\u002FJS files on all WordPress pages including Categories, Tags, Custom Taxonomy (e.g. WooCommerce product category), 404 Not Found, Date & Author Archives, Search Results)\u003C\u002Fli>\n\u003Cli>Unload plugins in the frontend view (for guest visitors) * This will not just unload the CSS\u002FJS files loaded from the plugins, but everything else related to them (e.g. slow database queries)\u003C\u002Fli>\n\u003Cli>Unload plugins within the Dashboard \u002Fwp-admin\u002F * Do you have any slow pages that are loading within the Dashboard? You can reduce seconds in page load for some bulky ones or fix plugin conflicts\u003C\u002Fli>\n\u003Cli>Instruct the browser to download a CSS\u002FJS file based on the visitor’s screen size (e.g. avoid downloading assets in mobile view when they are not needed, if the screen size is smaller than 768px)\u003C\u002Fli>\n\u003Cli>Defer CSS by appending it to the BODY to load it asynchronously (Render blocking CSS delays a web page from being visible in a timely manner)\u003C\u002Fli>\n\u003Cli>Move JavaScript files from HEAD to BODY and vice-versa (CSS files moved to the BODY are automatically deferred)\u003C\u002Fli>\n\u003Cli>Defer JavaScript loaded files (by applying “defer” attribute to any enqueued JS file)\u003C\u002Fli>\n\u003Cli>Async JavaScript loaded files (by applying “async” attribute to any enqueued JS file)\u003C\u002Fli>\n\u003Cli>Inline JavaScript files (automatically & by specifying the path to the stylesheets)\u003C\u002Fli>\n\u003Cli>Priority in releasing new features & other improvements (updates that are meant for both Lite and Pro plugins are first released to the Pro users)\u003C\u002Fli>\n\u003Cli>Premium support and updates within the Dashboard\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Give Asset CleanUp a try! If you want to unlock all features, you can \u003Ca href=\"https:\u002F\u002Fwww.gabelivan.com\u002Fitems\u002Fwp-asset-cleanup-pro\u002F?utm_source=wp_org_lite&utm_medium=go_pro\" rel=\"nofollow ugc\">Upgrade to the Pro version\u003C\u002Fa>.\u003C\u002Fp>\n","Make your website load FASTER by stopping specific styles (.CSS) & scripts (.JS) from loading. It works best with a page caching plugin \u002F service.",100000,4846454,1550,"2025-03-12T21:24:00.000Z","6.7.5","4.5","5.6",[136,137,138,139,140],"defer-css-javascript","dequeue","minify-css","minify-javascript","page-speed","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-asset-clean-up\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-asset-clean-up.1.4.0.3.zip",6,"2024-11-27 00:00:00",{"attackSurface":146,"codeSignals":187,"taintFlows":401,"riskAssessment":557,"analyzedAt":568},{"hooks":147,"ajaxHandlers":173,"restRoutes":179,"shortcodes":180,"cronEvents":185,"entryPointCount":30,"unprotectedCount":186},[148,154,160,163,167,169,171],{"type":149,"name":150,"callback":151,"file":152,"line":153},"action","plugins_loaded","init","cmc_hook.php",72,{"type":155,"name":156,"callback":157,"priority":158,"file":152,"line":159},"filter","set-screen-option","closure",10,132,{"type":149,"name":161,"callback":161,"file":152,"line":162},"admin_menu",135,{"type":149,"name":164,"callback":157,"file":165,"line":166},"admin_notices","include\\class-cmchk-actions.php",62,{"type":149,"name":164,"callback":157,"file":165,"line":168},71,{"type":149,"name":164,"callback":157,"file":165,"line":170},170,{"type":149,"name":164,"callback":157,"file":165,"line":172},179,[174],{"action":175,"nopriv":176,"callback":177,"hasNonce":176,"hasCapCheck":176,"file":152,"line":178},"cmchk_slug",false,"save_slug",114,[],[181],{"tag":182,"callback":183,"file":152,"line":184},"cmchksh","shortcode",73,[],1,{"dangerousFunctions":188,"sqlUsage":189,"outputEscaping":192,"fileOperations":143,"externalRequests":11,"nonceChecks":399,"capabilityChecks":30,"bundledLibraries":400},[],{"prepared":190,"raw":11,"locations":191},74,[],{"escaped":193,"rawEcho":194,"locations":195},69,123,[196,200,202,205,207,210,212,214,217,220,222,224,226,227,228,229,231,233,235,236,238,240,242,243,245,247,249,251,254,256,257,259,261,263,265,267,269,270,271,273,275,276,277,279,281,282,283,285,286,287,289,291,293,295,296,298,300,302,304,305,307,308,310,311,312,314,316,317,318,319,322,325,326,328,329,330,333,334,336,337,339,340,341,342,344,346,348,349,350,351,353,354,356,357,359,361,362,363,365,366,367,368,369,371,372,373,374,375,376,377,378,379,380,381,383,385,386,387,389,391,393,395,397],{"file":197,"line":198,"context":199},"include\\class-cmc-hook-project-table.php",226,"raw output",{"file":197,"line":201,"context":199},229,{"file":203,"line":204,"context":199},"include\\class-cmc-hook-table.php",243,{"file":203,"line":206,"context":199},246,{"file":208,"line":209,"context":199},"include\\class-cmchk-explorer.php",36,{"file":208,"line":211,"context":199},38,{"file":208,"line":213,"context":199},40,{"file":215,"line":216,"context":199},"include\\class-cmchk-functions.php",75,{"file":218,"line":219,"context":199},"pages\\admin.php",56,{"file":218,"line":221,"context":199},58,{"file":218,"line":223,"context":199},61,{"file":218,"line":225,"context":199},65,{"file":218,"line":193,"context":199},{"file":218,"line":153,"context":199},{"file":218,"line":184,"context":199},{"file":218,"line":230,"context":199},77,{"file":218,"line":232,"context":199},80,{"file":218,"line":234,"context":199},81,{"file":218,"line":32,"context":199},{"file":218,"line":237,"context":199},87,{"file":218,"line":239,"context":199},88,{"file":218,"line":241,"context":199},91,{"file":218,"line":108,"context":199},{"file":218,"line":244,"context":199},95,{"file":218,"line":246,"context":199},104,{"file":218,"line":248,"context":199},115,{"file":218,"line":250,"context":199},119,{"file":252,"line":253,"context":199},"pages\\sections\\hook_attributes.php",32,{"file":252,"line":255,"context":199},35,{"file":252,"line":211,"context":199},{"file":252,"line":258,"context":199},39,{"file":252,"line":260,"context":199},42,{"file":252,"line":262,"context":199},46,{"file":252,"line":264,"context":199},47,{"file":252,"line":266,"context":199},50,{"file":252,"line":268,"context":199},54,{"file":252,"line":223,"context":199},{"file":252,"line":166,"context":199},{"file":252,"line":272,"context":199},63,{"file":252,"line":274,"context":199},68,{"file":252,"line":193,"context":199},{"file":252,"line":190,"context":199},{"file":252,"line":278,"context":199},78,{"file":252,"line":280,"context":199},82,{"file":252,"line":237,"context":199},{"file":252,"line":244,"context":199},{"file":252,"line":284,"context":199},96,{"file":252,"line":45,"context":199},{"file":252,"line":97,"context":199},{"file":252,"line":288,"context":199},105,{"file":252,"line":290,"context":199},109,{"file":252,"line":292,"context":199},110,{"file":252,"line":294,"context":199},113,{"file":252,"line":178,"context":199},{"file":252,"line":297,"context":199},117,{"file":252,"line":299,"context":199},118,{"file":252,"line":301,"context":199},130,{"file":303,"line":262,"context":199},"pages\\sections\\hook_code.php",{"file":303,"line":264,"context":199},{"file":303,"line":306,"context":199},49,{"file":303,"line":219,"context":199},{"file":303,"line":309,"context":199},60,{"file":303,"line":193,"context":199},{"file":303,"line":184,"context":199},{"file":313,"line":266,"context":199},"pages\\sections\\hook_editor.php",{"file":313,"line":315,"context":199},51,{"file":313,"line":193,"context":199},{"file":313,"line":232,"context":199},{"file":313,"line":234,"context":199},{"file":320,"line":321,"context":199},"pages\\sections\\plugin_form.php",22,{"file":323,"line":324,"context":199},"pages\\sections\\project.php",28,{"file":323,"line":253,"context":199},{"file":323,"line":327,"context":199},48,{"file":323,"line":309,"context":199},{"file":323,"line":278,"context":199},{"file":331,"line":332,"context":199},"pages\\sections\\project_attributes.php",33,{"file":331,"line":209,"context":199},{"file":331,"line":335,"context":199},37,{"file":331,"line":260,"context":199},{"file":331,"line":338,"context":199},43,{"file":331,"line":262,"context":199},{"file":331,"line":264,"context":199},{"file":331,"line":327,"context":199},{"file":331,"line":343,"context":199},52,{"file":331,"line":345,"context":199},53,{"file":331,"line":347,"context":199},57,{"file":331,"line":223,"context":199},{"file":331,"line":225,"context":199},{"file":331,"line":280,"context":199},{"file":331,"line":352,"context":199},83,{"file":331,"line":24,"context":199},{"file":331,"line":355,"context":199},86,{"file":331,"line":244,"context":199},{"file":331,"line":358,"context":199},102,{"file":331,"line":360,"context":199},107,{"file":331,"line":360,"context":199},{"file":331,"line":299,"context":199},{"file":364,"line":255,"context":199},"pages\\sections\\settings.php",{"file":364,"line":260,"context":199},{"file":364,"line":338,"context":199},{"file":364,"line":345,"context":199},{"file":364,"line":268,"context":199},{"file":364,"line":370,"context":199},59,{"file":364,"line":309,"context":199},{"file":364,"line":223,"context":199},{"file":364,"line":166,"context":199},{"file":364,"line":274,"context":199},{"file":364,"line":193,"context":199},{"file":364,"line":216,"context":199},{"file":364,"line":216,"context":199},{"file":364,"line":232,"context":199},{"file":364,"line":234,"context":199},{"file":364,"line":241,"context":199},{"file":364,"line":382,"context":199},92,{"file":364,"line":384,"context":199},101,{"file":364,"line":290,"context":199},{"file":364,"line":292,"context":199},{"file":364,"line":388,"context":199},116,{"file":364,"line":390,"context":199},120,{"file":364,"line":392,"context":199},127,{"file":364,"line":394,"context":199},128,{"file":364,"line":396,"context":199},133,{"file":364,"line":398,"context":199},140,19,[],[402,428,455,475,483,491,499,514,527,539,548],{"entryPoint":403,"graph":404,"unsanitizedCount":11,"severity":427},"\u003Cclass-cmc-hook-project-table> (include\\class-cmc-hook-project-table.php:0)",{"nodes":405,"edges":423},[406,411,416,419],{"id":407,"type":408,"label":409,"file":197,"line":410},"n0","source","$_REQUEST (x3)",44,{"id":412,"type":413,"label":414,"file":197,"line":343,"wp_function":415},"n1","sink","get_results() [SQLi]","get_results",{"id":417,"type":408,"label":418,"file":197,"line":410},"n2","$_REQUEST (x4)",{"id":420,"type":413,"label":421,"file":197,"line":355,"wp_function":422},"n3","get_var() [SQLi]","get_var",[424,426],{"from":407,"to":412,"sanitized":425},true,{"from":417,"to":420,"sanitized":425},"low",{"entryPoint":429,"graph":430,"unsanitizedCount":11,"severity":427},"process_bulk_action (include\\class-cmc-hook-table.php:253)",{"nodes":431,"edges":451},[432,435,439,440,444,448],{"id":407,"type":408,"label":433,"file":203,"line":434},"$_REQUEST (x2)",257,{"id":412,"type":413,"label":436,"file":203,"line":437,"wp_function":438},"get_row() [SQLi]",265,"get_row",{"id":417,"type":408,"label":433,"file":203,"line":434},{"id":420,"type":413,"label":441,"file":203,"line":442,"wp_function":443},"wp_redirect() [Open Redirect]",269,"wp_redirect",{"id":445,"type":408,"label":446,"file":203,"line":447},"n4","$_REQUEST",285,{"id":449,"type":413,"label":414,"file":203,"line":450,"wp_function":415},"n5",361,[452,453,454],{"from":407,"to":412,"sanitized":425},{"from":417,"to":420,"sanitized":425},{"from":445,"to":449,"sanitized":425},{"entryPoint":456,"graph":457,"unsanitizedCount":11,"severity":427},"\u003Cclass-cmc-hook-table> (include\\class-cmc-hook-table.php:0)",{"nodes":458,"edges":470},[459,460,462,463,464,465,466,468],{"id":407,"type":408,"label":433,"file":203,"line":327},{"id":412,"type":413,"label":414,"file":203,"line":461,"wp_function":415},55,{"id":417,"type":408,"label":409,"file":203,"line":168},{"id":420,"type":413,"label":421,"file":203,"line":355,"wp_function":422},{"id":445,"type":408,"label":433,"file":203,"line":434},{"id":449,"type":413,"label":436,"file":203,"line":437,"wp_function":438},{"id":467,"type":408,"label":433,"file":203,"line":434},"n6",{"id":469,"type":413,"label":441,"file":203,"line":442,"wp_function":443},"n7",[471,472,473,474],{"from":407,"to":412,"sanitized":425},{"from":417,"to":420,"sanitized":425},{"from":445,"to":449,"sanitized":425},{"from":467,"to":469,"sanitized":425},{"entryPoint":476,"graph":477,"unsanitizedCount":11,"severity":427},"trash_hook (include\\class-cmchk-actions.php:94)",{"nodes":478,"edges":481},[479,480],{"id":407,"type":408,"label":433,"file":165,"line":58},{"id":412,"type":413,"label":421,"file":165,"line":358,"wp_function":422},[482],{"from":407,"to":412,"sanitized":425},{"entryPoint":484,"graph":485,"unsanitizedCount":11,"severity":427},"\u003Cclass-cmchk-actions> (include\\class-cmchk-actions.php:0)",{"nodes":486,"edges":489},[487,488],{"id":407,"type":408,"label":433,"file":165,"line":58},{"id":412,"type":413,"label":421,"file":165,"line":358,"wp_function":422},[490],{"from":407,"to":412,"sanitized":425},{"entryPoint":492,"graph":493,"unsanitizedCount":11,"severity":427},"\u003Cclass-cmchk-functions> (include\\class-cmchk-functions.php:0)",{"nodes":494,"edges":497},[495,496],{"id":407,"type":408,"label":433,"file":215,"line":97},{"id":412,"type":413,"label":421,"file":215,"line":250,"wp_function":422},[498],{"from":407,"to":412,"sanitized":425},{"entryPoint":500,"graph":501,"unsanitizedCount":513,"severity":427},"\u003Cadmin> (pages\\admin.php:0)",{"nodes":502,"edges":510},[503,505,508,509],{"id":407,"type":408,"label":504,"file":218,"line":230},"$_REQUEST['tab'] (x3)",{"id":412,"type":413,"label":506,"file":218,"line":230,"wp_function":507},"echo() [XSS]","echo",{"id":417,"type":408,"label":446,"file":218,"line":266},{"id":420,"type":413,"label":506,"file":218,"line":250,"wp_function":507},[511,512],{"from":407,"to":412,"sanitized":176},{"from":417,"to":420,"sanitized":176},4,{"entryPoint":515,"graph":516,"unsanitizedCount":30,"severity":427},"\u003Chook_editor> (pages\\sections\\hook_editor.php:0)",{"nodes":517,"edges":524},[518,520,522,523],{"id":407,"type":408,"label":433,"file":313,"line":519},14,{"id":412,"type":413,"label":436,"file":313,"line":521,"wp_function":438},17,{"id":417,"type":408,"label":433,"file":313,"line":519},{"id":420,"type":413,"label":506,"file":313,"line":266,"wp_function":507},[525,526],{"from":407,"to":412,"sanitized":425},{"from":417,"to":420,"sanitized":176},{"entryPoint":528,"graph":529,"unsanitizedCount":186,"severity":427},"\u003Cproject> (pages\\sections\\project.php:0)",{"nodes":530,"edges":536},[531,533,534,535],{"id":407,"type":408,"label":446,"file":323,"line":532},16,{"id":412,"type":413,"label":436,"file":323,"line":399,"wp_function":438},{"id":417,"type":408,"label":446,"file":323,"line":532},{"id":420,"type":413,"label":506,"file":323,"line":327,"wp_function":507},[537,538],{"from":407,"to":412,"sanitized":425},{"from":417,"to":420,"sanitized":176},{"entryPoint":540,"graph":541,"unsanitizedCount":186,"severity":547},"record_count (include\\class-cmc-hook-table.php:70)",{"nodes":542,"edges":545},[543,544],{"id":407,"type":408,"label":446,"file":203,"line":168},{"id":412,"type":413,"label":421,"file":203,"line":355,"wp_function":422},[546],{"from":407,"to":412,"sanitized":176},"high",{"entryPoint":549,"graph":550,"unsanitizedCount":30,"severity":547},"cmchk_get_counts (include\\class-cmc-hook-table.php:89)",{"nodes":551,"edges":555},[552,554],{"id":407,"type":408,"label":433,"file":203,"line":553},90,{"id":412,"type":413,"label":421,"file":203,"line":58,"wp_function":422},[556],{"from":407,"to":412,"sanitized":176},{"summary":558,"deductions":559},"The \"cmc-hook\" v1.0.6 plugin exhibits a mixed security posture. While it demonstrates good practices by utilizing prepared statements for all SQL queries and performing a reasonable number of nonce and capability checks, there are significant areas of concern. The presence of an unprotected AJAX handler represents a direct attack vector that could be exploited by unauthenticated users. Furthermore, the taint analysis reveals two high-severity flows with unsanitized data, indicating potential for cross-site scripting (XSS) or other injection vulnerabilities if these flows are not properly handled before output or further processing. The plugin has no recorded vulnerability history, which is a positive sign, but it does not negate the risks identified in the static analysis. The relatively low percentage of properly escaped output also contributes to a heightened risk profile, as it increases the likelihood of XSS vulnerabilities.",[560,562,565],{"reason":561,"points":118},"Unprotected AJAX handler",{"reason":563,"points":564},"High severity taint flows",12,{"reason":566,"points":567},"Low percentage of properly escaped output",5,"2026-03-17T06:12:28.754Z",{"wat":570,"direct":593},{"assetPaths":571,"generatorPatterns":581,"scriptPaths":582,"versionParams":583},[572,573,574,575,576,577,578,579,580],"\u002Fwp-content\u002Fplugins\u002Fcmc-hook\u002Fjs\u002Fmain.js","\u002Fwp-content\u002Fplugins\u002Fcmc-hook\u002Fjs\u002Fintro\u002Fintro.js","\u002Fwp-content\u002Fplugins\u002Fcmc-hook\u002Fjs\u002FTipTip\u002Fjquery.tipTip.js","\u002Fwp-content\u002Fplugins\u002Fcmc-hook\u002Fjs\u002FjqueryFileTree\u002FjqueryFileTree.js","\u002Fwp-content\u002Fplugins\u002Fcmc-hook\u002Fcss\u002Fjquery-ui\u002Fjquery-ui.css","\u002Fwp-content\u002Fplugins\u002Fcmc-hook\u002Fcss\u002Fintro\u002Fintrojs.css","\u002Fwp-content\u002Fplugins\u002Fcmc-hook\u002Fcss\u002Ffont-awesome\u002Fcss\u002Ffont-awesome.min.css","\u002Fwp-content\u002Fplugins\u002Fcmc-hook\u002Fjs\u002FTipTip\u002FtipTip.css","\u002Fwp-content\u002Fplugins\u002Fcmc-hook\u002Fjs\u002FjqueryFileTree\u002FjqueryFileTree.css",[],[572,573,574,575],[584,585,586,587,588,589,590,591,592],"cmc-hook\u002Fjs\u002Fmain.js?ver=","cmc-hook\u002Fjs\u002Fintro\u002Fintro.js?ver=","cmc-hook\u002Fjs\u002FTipTip\u002Fjquery.tipTip.js?ver=","cmc-hook\u002Fjs\u002FjqueryFileTree\u002FjqueryFileTree.js?ver=","cmc-hook\u002Fcss\u002Fjquery-ui\u002Fjquery-ui.css?ver=","cmc-hook\u002Fcss\u002Fintro\u002Fintrojs.css?ver=","cmc-hook\u002Fcss\u002Ffont-awesome\u002Fcss\u002Ffont-awesome.min.css?ver=","cmc-hook\u002Fjs\u002FTipTip\u002FtipTip.css?ver=","cmc-hook\u002Fjs\u002FjqueryFileTree\u002FjqueryFileTree.css?ver=",{"cssClasses":594,"htmlComments":597,"htmlAttributes":598,"restEndpoints":601,"jsGlobals":604,"shortcodeOutput":609},[595,596],"cmchk_neg","cmchksh-content",[],[599,600],"data-cmchk","data-cmchk-id",[602,603],"\u002Fwp-json\u002Fcmchk\u002Fv1\u002Fhooks","\u002Fwp-json\u002Fcmchk\u002Fv1\u002Fprojects",[605,606,607,608],"CMCHK_AJAX_URL","CMCHK_URL_JS","CMCHK_URL_CSS","CMCHK_URL_IMG",[610,611,612],"[cmchksh]","[cmchksh id='']","[cmchksh slug='']"]