[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frsmoridRkA54olN_RZwh8YIKVmD_hXYYrZbLePPE8S8":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":22,"download_link":23,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":33,"analysis":144,"fingerprints":276},"cmp","CaptureMyPage","1.0.0","lonalore","https:\u002F\u002Fprofiles.wordpress.org\u002Flonalore\u002F","\u003Cp>This plugin creates a website screenshot using only a website URL and save into your own wordpress media library.\u003C\u002Fp>\n\u003Cp>After creating the image, wordpress will prompt you either to “insert into post” or “change attributes” just like after you upload an image. Renaming is available.\u003C\u002Fp>\n\u003Cp>The plugin requires a free or paid account from CaptureMyPage (http:\u002F\u002Fcapturemypage.com), who is the service provider.\u003C\u002Fp>\n","This plugin creates a website screenshot using only a website URL and save into your own wordpress media library.",10,1825,0,"2015-08-06T08:45:00.000Z","4.2.39","3.5","",[19,20,21],"full-page-screenshot","screenshot","website","http:\u002F\u002Fcapturemypage.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcmp.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":29,"total_installs":11,"avg_security_score":24,"avg_patch_time_days":30,"trust_score":31,"computed_at":32},1,30,84,"2026-04-04T11:01:41.077Z",[34,58,82,102,125],{"slug":35,"name":36,"version":37,"author":36,"author_profile":38,"description":39,"short_description":40,"active_installs":41,"downloaded":42,"rating":43,"num_ratings":44,"last_updated":45,"tested_up_to":46,"requires_at_least":47,"requires_php":17,"tags":48,"homepage":54,"download_link":55,"security_score":56,"vuln_count":29,"unpatched_count":13,"last_vuln_date":57,"fetched_at":26},"usersnap","Usersnap","4.20","https:\u002F\u002Fprofiles.wordpress.org\u002Fusersnap\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fusersnap.com?utm_source=wordpress&utm_medium=referral&utm_campaign=wordpressplugin&utm_content=ongoing\" rel=\"nofollow ugc\">Usersnap\u003C\u002Fa> is a feedback platform that helps companies to collect, manage, analyze and share feedback along the product development lifecycle (QA, UAT, Customer Feedback, measuring CX). Some of our customers are the biggest brands in the world like Facebook, Microsoft, Canva, and Instacart.\u003C\u002Fp>\n\u003Cp>Enhance your website’s feedback process with the leading customer feedback software designed to streamline issue collection and micro survey delivery through convenient floating widgets. Seamlessly integrate Usersnap into your WordPress site with our optimized \u003Ca href=\"https:\u002F\u002Fusersnap.com\u002Fintegrations\u002Fwordpress?utm_source=wordpress&utm_medium=referral&utm_campaign=wordpressplugin&utm_content=ongoing\" rel=\"nofollow ugc\">plugin\u003C\u002Fa>, requiring minimal coding for quick implementation. After installation, effortlessly customize your widgets via the Usersnap project dashboard.\u003C\u002Fp>\n\u003Cp>Efficiently gather valuable feedback directly on your website with annotated screenshots and screen recordings, ensuring a smooth and insightful user experience. Automatically capture user details and technical context with each response, providing essential insights for prioritizing features and crafting effective solutions.\u003C\u002Fp>\n\u003Cp>Product and development teams utilize Usersnap visual feedback tools perfect in all stages of the product development lifecycle:\u003Cbr \u002F>\n* Collecting feature requests and polls to prioritize user needs\u003Cbr \u002F>\n* Quality assurance (QA) communication between designers and developers\u003Cbr \u002F>\n* User acceptance testing (UAT)  with an easy to use bug tracking widget\u003Cbr \u002F>\n* Evaluating user experience (UX) and customer experience (CX) through metrics like Net Promoter Score (NPS), Customer Satisfaction (CSAT), and Customer Effort Score (CES)\u003C\u002Fp>\n\u003Cp>Maximize the impact of feedback and enhance your product development process with Usersnap.\u003C\u002Fp>\n\u003Cp>Make feedback matter.\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FxQu6gM3uOV0?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>Usersnap empowers startups to enterprises in avoiding product development failures and building solutions that matter, all with the clarity of customer feedback.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Feedback button & menu: Easily integrate a dedicated feedback into your website or app, directing users to the right support and feedback options. Connect messenger chat, help page or other mediums for a streamlined process.\u003C\u002Fli>\n\u003Cli>Capture videos & screenshots: Allow users to annotate directly on their screens, providing valuable context with technical details automatically attached.\u003C\u002Fli>\n\u003Cli>Surveys with flexible targeting: Launch CSAT, NPS, polls and thumbs up\u002Fdown surveys by user events, URL paths or time on page. Follow up with qualitative questions for deeper insights into the customer experience.\u003C\u002Fli>\n\u003Cli>Omnichannel experience: Interactive inline raters and forms for websites and emails, and single page link to share to anywhere.\u003C\u002Fli>\n\u003Cli>AI features for faster user insights: Speed up feedback processing with AI-generated summaries, identifying urgent issues and common themes for faster response times.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>And more. Check out all of \u003Ca href=\"https:\u002F\u002Fusersnap.com\u002Ffeatures?utm_source=wordpress&utm_medium=referral&utm_campaign=wordpressplugin&utm_content=ongoing\" rel=\"nofollow ugc\">Usersnap’s features\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Benefits of Usersnap feedback platform\u003C\u002Fh3>\n\u003Cp>Experience a streamlined feedback process: Usersnap simplifies feedback collection with detailed bug reports featuring screen captures, annotations, voice feedback, and automated metadata.\u003C\u002Fp>\n\u003Cp>Seamlessly integrate first-hand user feedback into your daily workflows with over 5000+ integrations, including Jira, Zendesk, Slack, and Asana. Empower your teams with insights from the user’s perspective to effectively address key challenges.\u003C\u002Fp>\n\u003Cp>Gain valuable insights into user behaviors with targeted and segmented interactive micro-surveys, boosting response rates by up to 50%. Elevate your feedback strategy to drive higher user adoption rates and project success.\u003C\u002Fp>\n\u003Ch3>Integrate Usersnap into your daily workflow with ease\u003C\u002Fh3>\n\u003Cp>Unlock the full potential of your workflow by effortlessly connecting Usersnap with over \u003Ca href=\"https:\u002F\u002Fusersnap.com\u002Fintegrations?utm_source=wordpress&utm_medium=referral&utm_campaign=wordpressplugin&utm_content=ongoing\" rel=\"nofollow ugc\">5,000 existing software tools\u003C\u002Fa>. Streamline collaboration, enhance productivity, and accelerate your projects with seamless integration.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Jira Software & Product Discovery: Get your Usersnap screenshots and bug reports directly in Jira Software.\u003C\u002Fli>\n\u003Cli>Azure DevOps: Create work items in your Azure DevOps (TFS) projects with screenshots and bug reports from Usersnap.\u003C\u002Fli>\n\u003Cli>Trello: Create Trello cards with bug reports using Usersnap integration.\u003C\u002Fli>\n\u003Cli>Asana: Get visual feedback & bug reports from Usersnap attached to your Asana tasks.\u003C\u002Fli>\n\u003Cli>Slack: Get notifications in your Slack channel for every feedback and screenshot created with Usersnap.\u003C\u002Fli>\n\u003Cli>GitHub: Solve GitHub issues faster. Get screenshots and meta-information with every GitHub issue.\u003C\u002Fli>\n\u003Cli>HubSpot: Connect HubSpot CRM with Usersnap and send feedback to your lovely CRM.\u003C\u002Fli>\n\u003Cli>WordPress: Improve your WordPress website with screenshots & bug reports from Usersnap.\u003C\u002Fli>\n\u003Cli>Zendesk: Get screenshots from clients & improve your customer support.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>We at Usersnap are always here to help. Any questions unanswered? Check out our \u003Ca href=\"https:\u002F\u002Fhelp.usersnap.com\" rel=\"nofollow ugc\">Usersnap help center\u003C\u002Fa> or get in touch with us.\u003C\u002Fp>\n\u003Cp>Install and collect feedback with \u003Ca href=\"https:\u002F\u002Fusersnap.com\u002Fsignup?utm_source=wordpress&utm_medium=referral&utm_campaign=wordpressplugin&utm_content=ongoing\" rel=\"nofollow ugc\">Usersnap for free\u003C\u002Fa>.\u003C\u002Fp>\n","Usersnap: The feedback platform designed to capture, organize, and respond to user feedback seamlessly.",500,56757,82,7,"2024-06-26T07:38:00.000Z","6.5.8","3.0",[49,50,51,52,53],"browser-screenshot-tool","bug-tracking-tool","screen-recording-feedback","user-acceptance-testing-tool","website-feedback-tool","http:\u002F\u002Fwww.usersnap.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fusersnap.4.20.zip",92,"2023-02-02 00:00:00",{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":66,"downloaded":67,"rating":43,"num_ratings":68,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":17,"tags":72,"homepage":78,"download_link":79,"security_score":80,"vuln_count":29,"unpatched_count":29,"last_vuln_date":81,"fetched_at":26},"mopinion-feedback-form","Mopinion Feedback Form","1.1.1","keeswolters","https:\u002F\u002Fprofiles.wordpress.org\u002Fkeeswolters\u002F","\u003Cp>Let’s say that you want to capture user feedback on your WordPress website. This Feedback Form plugin makes that easy and is completely free.\u003C\u002Fp>\n\u003Cp>Simply go to Settings → Mopinion Feedback Form in your website admin dashboard, and activate the Mopinion feedback form on your website.\u003C\u002Fp>\n\u003Cp>A feedback button will be visible on your website. With the feedback form you can capture suggestions, bugs and compliments, and collect visual feedback (screenshots) about individual page elements. All feedback collected will be available on your personal Mopinion account, at https:\u002F\u002Fapp.mopinion.com, or it can be emailed straight in to your email inbox. The feedback form is completely customisable, so easily add or change feedback questions, add your own design and logo, setup your own language and use pro-active and exit-intent triggers to decide where you want to show or hide your feedback form.\u003C\u002Fp>\n\u003Cp>If you want to add the feedback form to specific  articles (post, page, custom post type), then you can use the deployment section within your Mopinion account: https:\u002F\u002Fapp.mopinion.com\u002Fsurvey\u002Fmanage#tab_deployment_pane.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Works or broken?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Please, consider to vote for this plugin. When you vote for broken, be so kind and tell in the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fmopinion-feedback-form\" rel=\"ugc\">Forum\u003C\u002Fa> what is broken. Maybe we might be able to fix it to make the plugin also work for you.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>We need your support\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>It is very hard to continue development and support for this free plugin without contributions from users like you. If you enjoy using our plugin and find it useful, please consider for registering a paid version in your Mopinion account: https:\u002F\u002Fapp.mopinion.com\u002Faccount\u002Fbilling. Your paid plan will help encourage and support the plugin’s continued development and better user support. Also it offers many additional features such as advanced dashboarding\u002Freporting and text analytics.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Feedback forms: Improve the performance and user experience of your website with fully customisable feedback forms.\u003C\u002Fli>\n\u003Cli>Visual user feedback: Collect visual feedback (screenshots) to understand what your visitors want and what’s preventing them from achieving it.\u003C\u002Fli>\n\u003Cli>Feedback form triggering: Ask the right questions at the right moment to truly understand why your visitors are not converting…\u003C\u002Fli>\n\u003Cli>Reporting & analysis: Take full control of your feedback data visualisations and analyses.\u003C\u002Fli>\n\u003Cli>Text and sentiment analytics: Our native text analysis technology helps you explore huge amounts of data.\u003C\u002Fli>\n\u003Cli>Collaborate & Engage: We bring you from insights to action.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>On plugin uninstall Mopinion options data is also deleted from your database.\u003C\u002Fp>\n","Easy add feedback buttons and feedback forms to your website with the Mopinion.com Wordpress Plugin. Easy install, fast user insights.",100,9032,12,"2020-12-14T08:47:00.000Z","5.6.17","3.9",[73,74,75,76,77],"customer-feedback","screenshot-feedback","user-feedback","visual-feedback","website-feedback","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmopinion-feedback-form\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmopinion-feedback-form.zip",63,"2026-01-27 00:00:00",{"slug":83,"name":84,"version":85,"author":86,"author_profile":87,"description":88,"short_description":89,"active_installs":90,"downloaded":91,"rating":43,"num_ratings":92,"last_updated":93,"tested_up_to":94,"requires_at_least":95,"requires_php":17,"tags":96,"homepage":100,"download_link":101,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"webphysiology-portfolio","WEBphysiology Portfolio","1.4.8","Jeff Lambert","https:\u002F\u002Fprofiles.wordpress.org\u002Flambje\u002F","\u003Cp>The WEBphysiology Portfolio plugin was built to provide a clean, current look in situations where an expanded list-style or grid-style portfolio layout is appropriate. The plugin is implemented via a [shortcode] that supports a variety of filtering options based upon Portfolio Type.  More than one shortcode can be used on a given page, allowing for grouping portfolio records by type.  And the shortcode also supports overriding many overall option settings on a case-by-case basis.\u003C\u002Fp>\n\u003Cp>The plugin utilizes a Custom Post Type as well as a Custom Taxonomy. It provides an Options page for specifying some customizable settings, like the number of entries to display per page. It also allows one to turn off the provided CSS in place of implementing your own.\u003C\u002Fp>\n\u003Cp>The Portfolio entry screen is customized to include just the items that make up a Portfolio entry. Attributes that aren’t populated will not be displayed on the end user interface as well as custom fields whose display has been turned off. Attaching an image to a Portfolio entry also has been made relatively painless.\u003C\u002Fp>\n\u003Cp>To enhance the design, and also reduce page weight, thumbnails of full-size imported images are generated.  Or, if you prefer, the ability to add automatic web site thumbnails utilizing ShrinkTheWeb.com or PagePeeker.com can be used.\u003C\u002Fp>\n\u003Cp>The end user interface can be adjusted using styling Portfolio Options or via your own CSS. Managing how things work within the end user interface is very customizable. Clicking thumbnail images can result in an image opening in a thickbox or it can take the visitor to the specified website URL….  The plugin also supports video media types, such that they can be played within a thickbox.  YouTube and Vimeo URLs will automagically generate thumbnails from the referenced video without the need to provide an image URL.\u003C\u002Fp>\n\u003Cp>A good many hours have been poured into this plugin, so, appreciation in the form of a donation always brightens our day.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>NOTE: SHORTCODE DEPRECATION ALERT: The [portfolio] shortcode was replaced with [webphysiology_portfolio] in version 1.3.0\u003C\u002Fp>\n\u003Cp>NOTE: CSS DEPRECATION ALERT: The “portfolios” element ID was be deprecated in version 1.2.7\u003C\u002Fp>\n\u003Cp>I will do my best to correct any reported defects as soon as I can make time, but please understand that this is side work. That said, I also use this plugin and am keen to ensure it provides the intended functionality. As to requests for enhancements, feel free to make these. I’ll do my best to respond to your requests and, for those requests that I feel would benefit the majority of users, I’ll get them on the enhancement list. I can’t say just how quickly these would be implemented but funding the request would definitely move it up in the queue.\u003C\u002Fp>\n","Allows for the creation of an expanded-list styled or a grid-styled page containing images and supporting detail, perfect for a portfolio presentation …",80,53422,9,"2013-03-24T02:17:00.000Z","3.5.2","3.1.0",[97,98,99,20,21],"gallery","image","portfolio","http:\u002F\u002Fwebphysiology.com\u002Fredir\u002Fwebphysiology-portfolio\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwebphysiology-portfolio.1.4.8.zip",{"slug":103,"name":104,"version":105,"author":106,"author_profile":107,"description":108,"short_description":109,"active_installs":110,"downloaded":111,"rating":112,"num_ratings":113,"last_updated":114,"tested_up_to":115,"requires_at_least":116,"requires_php":17,"tags":117,"homepage":122,"download_link":123,"security_score":80,"vuln_count":29,"unpatched_count":29,"last_vuln_date":124,"fetched_at":26},"shrinktheweb-website-preview-plugin","ShrinkTheWeb (STW) Website Previews Plugin","2.8.5","puravida1976","https:\u002F\u002Fprofiles.wordpress.org\u002Fpuravida1976\u002F","\u003Cp>This plugin allows any WordPress user to \u003Cstrong>easily add thumbnail previews\u003C\u002Fstrong> of websites right in the content of their posts using a simple \u003Ccode>[stwthumb]http:\u002F\u002Fwww.yourwebsite.com[\u002Fstwthumb]\u003C\u002Fcode> format. Loads of examples are available within the plugin documentation (you’ll see it when you activate the plugin).\u003C\u002Fp>\n\u003Cp>The plugin requires a free or paid account from the thumbnail provider service \u003Ca href=\"https:\u002F\u002Fshrinktheweb.com\u002F\" rel=\"nofollow ugc\">ShrinkTheWeb.com\u003C\u002Fa>. No purchase is required to use the plugin or the free service.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Cool Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easily embed web page screenshots anywhere using shortcode!\u003C\u002Fli>\n\u003Cli>So simple to use with TinyMCE shortcode helper!\u003C\u002Fli>\n\u003Cli>Supports caching screenshots locally\u003C\u002Fli>\n\u003Cli>Plenty of examples in the plugin documentation\u003C\u002Fli>\n\u003Cli>Custom screenshot image quality\u003C\u002Fli>\n\u003Cli>Enable mouseover (hover) screenshot previews\u003C\u002Fli>\n\u003Cli>Alt and Title attributes support via shortcodes\u003C\u002Fli>\n\u003Cli>Custom filename option support via shortcode for SEO purposes\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Supported ShrinkTheWeb PRO features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Display “Inside Pages” or full URLs (Upgrade required)\u003Cbr \u002F>\n…rather than just the homepage of a domain.\u003C\u002Fli>\n\u003Cli>Full-Length screenshot captures (Upgrade required)\u003C\u002Fli>\n\u003Cli>Custom Size screenshot captures (Upgrade required)\u003C\u002Fli>\n\u003Cli>Custom Browser Resolution (Upgrade required)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Take a look at ShrinkTheWeb for more information \u003Ca href=\"https:\u002F\u002Fshrinktheweb.com\u002F\" title=\"Automated Website Preview Provider\" rel=\"nofollow ugc\">Shrink The Web\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Donate\u003C\u002Fh4>\n\u003Cp>Did this plugin get you out of trouble? Please consider \u003Ca href=\"https:\u002F\u002Fwww.paypal.com\u002Fcgi-bin\u002Fwebscr?cmd=_donations&business=ZBNAT7HJACUAG&lc=US&item_name=ShrinkTheWeb&no_note=0&cn=Add%20special%20instructions%20to%20the%20seller%3a&no_shipping=1&currency_code=USD&bn=PP%2dDonationsBF%3abtn_donateCC_LG%2egif%3aNonHosted\" rel=\"nofollow ugc\">making a small donation\u003C\u002Fa> to thank the developer for their time.\u003C\u002Fp>\n","This plugin accesses the ShrinkTheWeb API to automatically replace special tags in posts with website screenshots, where desired.",70,19716,74,6,"2017-08-04T04:53:00.000Z","4.8.28","2.9",[118,20,119,120,121],"preview","snapshot","thumbnails","website-screenshots","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fshrinktheweb-website-preview-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshrinktheweb-website-preview-plugin.2.8.5.zip","2025-09-22 00:00:00",{"slug":126,"name":127,"version":128,"author":129,"author_profile":130,"description":131,"short_description":132,"active_installs":133,"downloaded":134,"rating":66,"num_ratings":135,"last_updated":136,"tested_up_to":137,"requires_at_least":17,"requires_php":17,"tags":138,"homepage":142,"download_link":143,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"open-link","Open Link 图链","2.1","Link","https:\u002F\u002Fprofiles.wordpress.org\u002Fplayes\u002F","\u003Cp>使用短代码 \u003Ccode>[wp-openlink]\u003C\u002Fcode> 将链接输出到一个页面，带网站缩略图（备注字段）和点击数（评分字段），不修改数据库也不需要专门存储图片。\u003C\u002Fp>\n\u003Cp>缩略图格式说明：长宽为 100px * 70px，保存格式为 Data URI 编码，读写实时，每张占用数据库大小约为 10k。\u003C\u002Fp>\n\u003Col>\n\u003Cli>可配置缩略图接口\u003C\u002Fli>\n\u003Cli>可自定义链接样式\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>More information: \u003Ca href=\"https:\u002F\u002Fwww.xiaomac.com\u002Fopen-link.html\" rel=\"nofollow ugc\">www.xiaomac.com\u003C\u002Fa>.\u003C\u002Fp>\n","Use [wp-openlink] to output all your Blogroll in a Page, with website screenshot thumbnail and clicks countable, no database altered or images storage …",60,4782,2,"2019-11-16T18:37:00.000Z","5.3.21",[139,140,141,20,21],"blogroll","link","links","https:\u002F\u002Fwww.xiaomac.com\u002Fopen-link.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fopen-link.zip",{"attackSurface":145,"codeSignals":174,"taintFlows":197,"riskAssessment":262,"analyzedAt":275},{"hooks":146,"ajaxHandlers":170,"restRoutes":171,"shortcodes":172,"cronEvents":173,"entryPointCount":13,"unprotectedCount":13},[147,153,158,162,166],{"type":148,"name":149,"callback":150,"file":151,"line":152},"filter","media_upload_tabs","build_tab","cmp.php",33,{"type":154,"name":155,"callback":156,"file":151,"line":157},"action","media_upload_captureMyPage","menu_handle",34,{"type":148,"name":159,"callback":160,"priority":11,"file":151,"line":161},"attachment_fields_to_edit","media_post_single_attachment_fields_to_edit",493,{"type":154,"name":163,"callback":164,"file":151,"line":165},"admin_menu","cmp_create_menu",865,{"type":154,"name":167,"callback":168,"file":151,"line":169},"admin_init","cmp_plugin_settings",871,[],[],[],[],{"dangerousFunctions":175,"sqlUsage":176,"outputEscaping":178,"fileOperations":135,"externalRequests":29,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":196},[],{"prepared":13,"raw":13,"locations":177},[],{"escaped":179,"rawEcho":44,"locations":180},4,[181,184,186,188,190,192,194],{"file":151,"line":182,"context":183},224,"raw output",{"file":151,"line":185,"context":183},226,{"file":151,"line":187,"context":183},229,{"file":151,"line":189,"context":183},436,{"file":151,"line":191,"context":183},505,{"file":151,"line":193,"context":183},881,{"file":151,"line":195,"context":183},889,[],[198,230],{"entryPoint":199,"graph":200,"unsanitizedCount":135,"severity":229},"media_process (cmp.php:68)",{"nodes":201,"edges":224},[202,207,213,216,220],{"id":203,"type":204,"label":205,"file":151,"line":206},"n0","source","$_POST",174,{"id":208,"type":209,"label":210,"file":151,"line":211,"wp_function":212},"n1","sink","file_put_contents() [File Write]",187,"file_put_contents",{"id":214,"type":204,"label":205,"file":151,"line":215},"n2",439,{"id":217,"type":218,"label":219,"file":151,"line":215},"n3","transform","→ media_upload_type_form()",{"id":221,"type":209,"label":222,"file":151,"line":191,"wp_function":223},"n4","echo() [XSS]","echo",[225,227,228],{"from":203,"to":208,"sanitized":226},false,{"from":214,"to":217,"sanitized":226},{"from":217,"to":221,"sanitized":226},"medium",{"entryPoint":231,"graph":232,"unsanitizedCount":179,"severity":229},"\u003Ccmp> (cmp.php:0)",{"nodes":233,"edges":255},[234,235,236,238,242,243,245,247,250,253],{"id":203,"type":204,"label":205,"file":151,"line":206},{"id":208,"type":209,"label":210,"file":151,"line":211,"wp_function":212},{"id":214,"type":204,"label":205,"file":151,"line":237},71,{"id":217,"type":209,"label":239,"file":151,"line":240,"wp_function":241},"file_get_contents() [SSRF\u002FLFI]",463,"file_get_contents",{"id":221,"type":204,"label":205,"file":151,"line":215},{"id":244,"type":218,"label":219,"file":151,"line":215},"n5",{"id":246,"type":209,"label":222,"file":151,"line":191,"wp_function":223},"n6",{"id":248,"type":204,"label":205,"file":151,"line":249},"n7",447,{"id":251,"type":218,"label":252,"file":151,"line":249},"n8","→ fopen_fetch_content()",{"id":254,"type":209,"label":239,"file":151,"line":240,"wp_function":241},"n9",[256,257,258,259,260,261],{"from":203,"to":208,"sanitized":226},{"from":214,"to":217,"sanitized":226},{"from":221,"to":244,"sanitized":226},{"from":244,"to":246,"sanitized":226},{"from":248,"to":251,"sanitized":226},{"from":251,"to":254,"sanitized":226},{"summary":263,"deductions":264},"The \"cmp\" v1.0.0 plugin exhibits a generally positive security posture due to the absence of known vulnerabilities and a seemingly controlled attack surface. The static analysis reveals no direct entry points like AJAX handlers, REST API routes, or shortcodes without authentication checks, which is a strong indicator of good initial design. Furthermore, the complete absence of dangerous functions and the use of prepared statements for all SQL queries are excellent security practices.\n\nHowever, several areas raise concerns. The low percentage of properly escaped output (36%) is a significant weakness, indicating a high potential for cross-site scripting (XSS) vulnerabilities. The taint analysis revealing two unsanitized path flows, even if not classified as critical or high severity, warrants attention as these can sometimes lead to path traversal or file inclusion issues depending on the context. The lack of nonce checks and capability checks for any potential entry points (though none are explicitly listed, this is a general concern for any plugin, especially if the attack surface is later expanded) are critical omissions in WordPress security best practices.\n\nGiven the clean vulnerability history, it suggests that either the plugin is new, has not been widely used, or has successfully avoided past security oversights. Nevertheless, the identified code signals, particularly the poor output escaping and unsanitized path flows, present immediate risks that need to be addressed to improve the plugin's overall security. While the plugin has strengths in its limited attack surface and SQL handling, the identified weaknesses in output sanitization and the absence of security checks require remediation.",[265,268,270,273],{"reason":266,"points":267},"Low percentage of properly escaped output",15,{"reason":269,"points":11},"Unsanitized paths in taint analysis",{"reason":271,"points":272},"No nonce checks",5,{"reason":274,"points":272},"No capability checks","2026-03-16T23:49:42.944Z",{"wat":277,"direct":286},{"assetPaths":278,"generatorPatterns":281,"scriptPaths":282,"versionParams":283},[279,280],"\u002Fwp-content\u002Fplugins\u002Fcmp\u002Fcss\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fcmp\u002Fjs\u002Fcmp.js",[],[280],[284,285],"cmp\u002Fstyle.css?ver=","cmp\u002Fjs\u002Fcmp.js?ver=",{"cssClasses":287,"htmlComments":289,"htmlAttributes":292,"restEndpoints":296,"jsGlobals":297,"shortcodeOutput":298},[288],"captureMyPage-wrap",[290,291],"\u003C!--START captureMyPage-->","\u003C!--END captureMyPage-->",[293,294,295],"data-capturemypage-url","data-capturemypage-predefined","data-capturemypage-cache",[],[4],[]]