[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fS8V7c1IBBTR9lAPJEi5w89VMbz2a_A9P9RaRNpSX7yQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":34,"analysis":131,"fingerprints":223},"code-snippets-in-comments","Code Snippets in Comments","0.9","yannyann","https:\u002F\u002Fprofiles.wordpress.org\u002Fyannyann\u002F","\u003Cp>Code Snippets in Comments plugin extends the Comments function by show code in highlighting without modifying the saving of comments in database.\u003C\u002Fp>\n\u003Cp>By default Code Snippets in Comments plugin using Prism JavaScript Library as the code highlighter for its fast and light property.\u003C\u002Fp>\n\u003Cp>Code Snippets in Comments plugin also support with two famous plugins, Prismatic and Code Syntax Block, automatically set the code highlighter with these two plugin setting.\u003C\u002Fp>\n\u003Cp>And I suggest just using one of these code highlighter plugin.\u003C\u002Fp>\n\u003Cp>One more function is that Code Snippets in Comments plugin add a new code input bar below comment textarea box, let visitor type their code with problem more easier.\u003C\u002Fp>\n\u003Cp>Primary development and issues tracked on Github at: \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fa2d8a4v\u002FCode-Snippets-in-Comments\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Fa2d8a4v\u002FCode-Snippets-in-Comments\u003C\u002Fa>\u003C\u002Fp>\n","Code Snippets in Comments plugin extends the Comments function by show code in highlighting without modifying the saving of comments in database.",0,1073,"2020-05-22T14:29:00.000Z","5.4.19","5.0","5.6.20",[18,19,20,21,22],"code","code-highlighting","code-syntax","comments","syntax-highlight","https:\u002F\u002Fwww.yannyann.com\u002Fplugin\u002Fcode-snippets-in-comments","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcode-snippets-in-comments.0.9.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},1,30,84,"2026-04-04T06:23:27.233Z",[35,55,73,93,110],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":43,"downloaded":44,"rating":45,"num_ratings":46,"last_updated":47,"tested_up_to":48,"requires_at_least":49,"requires_php":50,"tags":51,"homepage":53,"download_link":54,"security_score":45,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"syntax-highlighting-code-block","Syntax-highlighting Code Block (with Server-side Rendering)","1.5.1","Weston Ruter","https:\u002F\u002Fprofiles.wordpress.org\u002Fwestonruter\u002F","\u003Cp>This plugin extends the Code block in WordPress core to add syntax highlighting which is rendered on the server. Pre-existing Code blocks on a site are automatically extended to include syntax highlighting. Doing server-side syntax highlighting eliminates the need to enqueue any JavaScript on the frontend (e.g. Highlight.js or Prism.js) and this ensures there is no flash of unhighlighted code (FOUC?). Reducing script on the frontend improves frontend performance, and it also allows for the syntax highlighted code to appear properly in AMP pages as rendered by the \u003Ca href=\"https:\u002F\u002Famp-wp.org\" rel=\"nofollow ugc\">official AMP plugin\u003C\u002Fa> (see also \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fampproject\u002Famp-wp\u002Fissues\u002F972\" rel=\"nofollow ugc\">ampproject\u002Famp-wp#972\u003C\u002Fa>) or when JavaScript is turned off in the browser.\u003C\u002Fp>\n\u003Cp>This extended Code block uses language auto-detection to add syntax highlighting, but you can override the language in the block’s settings sidebar. (There is currently no syntax highlighting of the Code block in the editor, but see \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwestonruter\u002Fsyntax-highlighting-code-block\u002Fissues\u002F8\" rel=\"nofollow ugc\">#8\u003C\u002Fa>.) The plugin supports all \u003Ca href=\"https:\u002F\u002Fhighlightjs.org\u002Fstatic\u002Fdemo\u002F\" rel=\"nofollow ugc\">programming languages\u003C\u002Fa> that \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fscrivo\u002Fhighlight.php\" rel=\"nofollow ugc\">highlight.php\u003C\u002Fa> supports (being a port of \u003Ca href=\"https:\u002F\u002Fhighlightjs.org\u002F\" rel=\"nofollow ugc\">highlight.js\u003C\u002Fa>). The Code block also is extended to support specifying lines to highlight which get marked up with \u003Ccode>mark\u003C\u002Fcode> elements (including in RSS feeds). There is also a checkbox for whether to show line numbers on the frontend (with the numbers being non-selectable). Lastly, given inconsistencies across themes regarding whether lines in a Code block should be wrapped, this plugin adds styling to force them to no-wrap by default, with a checkbox to opt in to wrapping when desired.\u003C\u002Fp>\n\u003Cp>For advanced usage, please see the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwestonruter\u002Fsyntax-highlighting-code-block\u002Fwiki\" rel=\"nofollow ugc\">plugin wiki\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>This plugin is \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwestonruter\u002Fsyntax-highlighting-code-block\" rel=\"nofollow ugc\">developed on GitHub\u003C\u002Fa>. See \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwestonruter\u002Fsyntax-highlighting-code-block\u002Fissues\" rel=\"nofollow ugc\">list of current issues\u003C\u002Fa> with the plugin. Please feel free to file any additional issues or requests that you may come across. \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwestonruter\u002Fsyntax-highlighting-code-block\u002Fpulls\" rel=\"nofollow ugc\">Pull requests\u003C\u002Fa> are welcome. See \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwestonruter\u002Fsyntax-highlighting-code-block\u002Fwiki\u002FContributing\" rel=\"nofollow ugc\">contributing information\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Credits\u003C\u002Fh4>\n\u003Cp>This is a fork of \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmkaz\u002Fcode-syntax-block\" rel=\"nofollow ugc\">Code Syntax Block\u003C\u002Fa> by \u003Ca href=\"https:\u002F\u002Fmkaz.blog\u002F\" rel=\"nofollow ugc\">Marcus Kazmierczak\u003C\u002Fa> (mkaz), which is also \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcode-syntax-block\u002F\" rel=\"ugc\">available on WordPress.org\u003C\u002Fa>. Copyright (c) 2018 Marcus Kazmierczak. Licensed under GPL 2.0 or later.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fscrivo\u002Fhighlight.php\" rel=\"nofollow ugc\">highlight.php\u003C\u002Fa> is released under the BSD 3-Clause License. Copyright © 2006-2013, Ivan Sagalaev (maniac@softwaremaniacs.org), highlight.js (original author). Copyright © 2013, Geert Bergman (geert@scrivo.nl), highlight.php\u003C\u002Fp>\n","Extending the Code block with syntax highlighting rendered on the server, thus being AMP-compatible and having faster frontend performance.",1000,39598,100,26,"2025-11-30T05:50:00.000Z","6.9.4","6.6","7.4",[52,18,19,20,22],"block","https:\u002F\u002Fgithub.com\u002Fwestonruter\u002Fsyntax-highlighting-code-block","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsyntax-highlighting-code-block.1.5.1.zip",{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":63,"downloaded":64,"rating":45,"num_ratings":65,"last_updated":66,"tested_up_to":67,"requires_at_least":15,"requires_php":68,"tags":69,"homepage":71,"download_link":72,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"code-block-for-elementor","Code Block Syntax Highlighter for Elementor","1.0.3","netninja2202","https:\u002F\u002Fprofiles.wordpress.org\u002Fnetninja2202\u002F","\u003Cp>Code Block Syntax Highlighter for Elementor is an Elementor widget which adds code blocks with prism.js syntax highlighting to your website.\u003Cbr \u002F>\nAll languages and themes of Prism.js 1.22.0 are supported.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Elementor widget to highlight code snippets\u003C\u002Fli>\n\u003Cli>All prism.js languages are supported\u003C\u002Fli>\n\u003Cli>Use different Prism.js themes\u003C\u002Fli>\n\u003Cli>Show or hide line numberscopy to clipboardline numbers\u003C\u002Fli>\n\u003C\u002Ful>\n","This is an drag & drop widget for syntax highlighting of code blocks.",600,66432,8,"2023-09-14T08:11:00.000Z","6.3.8","5.6",[18,19,70,22],"elementor","https:\u002F\u002Fgithub.com\u002Fthorstenalpers\u002Fwp-plugin-code-block-for-elementor","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcode-block-for-elementor.1.0.3.zip",{"slug":74,"name":75,"version":76,"author":77,"author_profile":78,"description":79,"short_description":80,"active_installs":81,"downloaded":82,"rating":45,"num_ratings":30,"last_updated":83,"tested_up_to":84,"requires_at_least":85,"requires_php":86,"tags":87,"homepage":91,"download_link":92,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"ah-prism-syntax-highlighter","AH Code Highlighter","2.0.5","Andreas Hecht","https:\u002F\u002Fprofiles.wordpress.org\u002Fahecht\u002F","\u003Cp>Really simple to use and extrem lightweigt Code Highlighting with 8 different code highlighting themes. You can highlight your code with or without line numbers. It is based on Lea Verou’s \u003Ca href=\"http:\u002F\u002Fprismjs.com\u002F\" title=\"Prism.js\" rel=\"nofollow ugc\">Prism.js\u003C\u002Fa>. Prism is used on several big websites like the Smashing Magazine, A list Apart, CSS Tricks, SitePoint and Drupal, because it is fast, simple and lightweight.\u003C\u002Fp>\n\u003Cp>AH Code Highlighter supports PHP, HTML, CSS, JavaScript, Apache, HTTP, Sess, Lass, Markdown, Nginx, MySql, Xml, Mathml, JSON, Git, C, C# und C++ and more…\u003C\u002Fp>\n\u003Ch3>Demo\u003C\u002Fh3>\n\u003Cp>You can find a demo of the plugin on the plugin homepage: \u003Ca href=\"https:\u002F\u002Fandreas-hecht.com\u002Fprism-syntax-highlighter\u002F\" title=\"AH Code Highlighter\" rel=\"nofollow ugc\">Plugin Homepage\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Basic Usage\u003C\u002Fh4>\n\u003Cp>Install and activate the plugin. Select your favorite Highlight Theme on the Options page (Settings => AH Code Highlighter). When you write a new post, click on the Code button, choose the code language and insert your code. Click OK and you’re done.\u003C\u002Fp>\n","The easiest to use code highlighting ever. Choose between 8 different color themes to highlight your code snippets. Many programming languages are sup …",70,4480,"2018-08-27T12:39:00.000Z","5.0.0","4.5","",[18,88,19,89,90],"code-highlighter","prism","syntax-highlighter","https:\u002F\u002Fandreas-hecht.com\u002Fprism-syntax-highlighter\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fah-prism-syntax-highlighter.2.0.5.zip",{"slug":94,"name":95,"version":96,"author":97,"author_profile":98,"description":99,"short_description":100,"active_installs":101,"downloaded":102,"rating":11,"num_ratings":11,"last_updated":103,"tested_up_to":48,"requires_at_least":15,"requires_php":104,"tags":105,"homepage":108,"download_link":109,"security_score":45,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"easy-syntax-highlighter","Easy Syntax Highlighter","2.0.0","tiptinker","https:\u002F\u002Fprofiles.wordpress.org\u002Fsnowbedding\u002F","\u003Cp>Easy Syntax Highlighter is a powerful WordPress plugin that helps improve your website’s code presentation by providing beautiful syntax highlighting. Using the latest Highlight.js library, it supports over 20 programming languages with 80+ color themes, copy-to-clipboard functionality, and seamless integration with both classic and Gutenberg editors.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Modern Highlight.js Engine\u003C\u002Fstrong>: Uses the latest Highlight.js library for fast, accurate syntax highlighting\u003C\u002Fli>\n\u003Cli>\u003Cstrong>80+ Themes Included\u003C\u002Fstrong>: Over 80 themes for both light and dark modes, all stored locally for offline compatibility\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Unlimited Language Support\u003C\u002Fstrong>: Supports 20+ programming languages including JavaScript, PHP, Python, CSS, HTML, SQL, Bash, and more\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Modern JavaScript\u003C\u002Fstrong>: Promise-based loading with proper error handling and performance optimizations\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Performance Optimized\u003C\u002Fstrong>: Smart asset loading—only loads when code blocks are present on the page\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Security Focused\u003C\u002Fstrong>: Proper input sanitization and output escaping\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Admin Interface\u003C\u002Fstrong>: Clean, modern settings page with visual theme selector integrated with WordPress admin\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Localization Ready\u003C\u002Fstrong>: Translation-ready with proper text domains\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Backward Compatible\u003C\u002Fstrong>: Automatic migration from old plugin versions\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>How to Use\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\u003Cstrong>Gutenberg Block Editor\u003C\u002Fstrong>: Use the default WordPress “Code” block. The plugin automatically detects the language and highlights it. There is no language setting in the sidebar; detection is automatic. If you need to force a language, edit the block as HTML and add a class to the \u003Ccode>\u003Ccode>\u003C\u002Fcode> element (e.g., \u003Ccode>\u003Ccode class=\"language-php\">\u003C\u002Fcode>).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Classic Editor\u003C\u002Fstrong>: Use the TinyMCE button (code icon) with the modal dialog for easy code insertion.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Copy to Clipboard\u003C\u002Fstrong>: Double-click any code block to instantly copy its content with visual feedback.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Use Cases\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Technical blogs and tutorials\u003C\u002Fli>\n\u003Cli>Documentation websites\u003C\u002Fli>\n\u003Cli>Programming courses and educational content\u003C\u002Fli>\n\u003Cli>Developer portfolios\u003C\u002Fli>\n\u003Cli>API documentation\u003C\u002Fli>\n\u003Cli>Code examples and snippets\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support, bug reports, or feature requests, please visit: \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftiptinker\u002Feasy-syntax-highlighter\" rel=\"nofollow ugc\">Github\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Contributing\u003C\u002Fh3>\n\u003Cp>Contributions are welcome! Please feel free to submit pull requests or open issues on GitHub.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPLv2 or later.\u003Cbr \u002F>\nLicense URI: https:\u002F\u002Fwww.gnu.org\u002Flicenses\u002Fgpl-2.0.html\u003C\u002Fp>\n","Modern, lightweight syntax highlighter for WordPress using Highlight.js",10,1654,"2026-02-12T03:39:00.000Z","7.0",[106,19,107,90],"code-block","highlight-js","https:\u002F\u002Fgithub.com\u002Fsnowbedding\u002Feasy-syntax-highlighter","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-syntax-highlighter.2.0.0.zip",{"slug":111,"name":112,"version":113,"author":114,"author_profile":115,"description":116,"short_description":117,"active_installs":11,"downloaded":118,"rating":11,"num_ratings":11,"last_updated":119,"tested_up_to":120,"requires_at_least":121,"requires_php":122,"tags":123,"homepage":128,"download_link":129,"security_score":130,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"youbou-code-block","Youbou Code Block","1.0.0","Youssef Bouhlal","https:\u002F\u002Fprofiles.wordpress.org\u002Fyoussefbouhlal\u002F","\u003Cp>The Youbou Code Block is a Gutenberg block plugin for WordPress that allows users to easily add syntax-highlighted code snippets to their posts and pages. This plugin supports a wide range of programming languages and includes a convenient copy-to-clipboard functionality.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Syntax highlighting for various programming languages\u003C\u002Fli>\n\u003Cli>Supports the following languages:\n\u003Cul>\n\u003Cli>HTML\u003C\u002Fli>\n\u003Cli>CSS\u003C\u002Fli>\n\u003Cli>SCSS\u003C\u002Fli>\n\u003Cli>JavaScript\u003C\u002Fli>\n\u003Cli>TypeScript\u003C\u002Fli>\n\u003Cli>PHP\u003C\u002Fli>\n\u003Cli>Ruby\u003C\u002Fli>\n\u003Cli>Python\u003C\u002Fli>\n\u003Cli>Swift\u003C\u002Fli>\n\u003Cli>C\u003C\u002Fli>\n\u003Cli>C#\u003C\u002Fli>\n\u003Cli>C++\u003C\u002Fli>\n\u003Cli>Objective-C\u003C\u002Fli>\n\u003Cli>SQL\u003C\u002Fli>\n\u003Cli>JSON\u003C\u002Fli>\n\u003Cli>Bash\u003C\u002Fli>\n\u003Cli>Git\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Copy-to-clipboard functionality for code snippets\u003C\u002Fli>\n\u003Cli>Easy to use Gutenberg block interface\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPLv2 or later. For more information, see \u003Ca href=\"http:\u002F\u002Fwww.gnu.org\u002Flicenses\u002Fgpl-2.0.html\" rel=\"nofollow ugc\">http:\u002F\u002Fwww.gnu.org\u002Flicenses\u002Fgpl-2.0.html\u003C\u002Fa>.\u003C\u002Fp>\n","Code block with syntax highlighting for gutenberg editor.",1176,"2024-08-04T13:27:00.000Z","6.5.8","6.1","7.2",[19,124,125,126,127],"copy-to-clipboard","gutenberg-block","programming-languages","syntax-highlighting","https:\u002F\u002Fgithub.com\u002FYoussefBouhlal\u002Fyoubou-code-block","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fyoubou-code-block.zip",92,{"attackSurface":132,"codeSignals":187,"taintFlows":211,"riskAssessment":212,"analyzedAt":222},{"hooks":133,"ajaxHandlers":183,"restRoutes":184,"shortcodes":185,"cronEvents":186,"entryPointCount":11,"unprotectedCount":11},[134,140,143,147,150,153,159,163,167,171,174,177,179],{"type":135,"name":136,"callback":137,"file":138,"line":139},"action","admin_init","check_version","code-snippets-in-comments.php",59,{"type":135,"name":136,"callback":141,"file":138,"line":142},"check_php_version",60,{"type":135,"name":144,"callback":145,"file":138,"line":146},"admin_notices","YANN_check_only_one_highlighter",63,{"type":135,"name":144,"callback":148,"file":138,"line":149},"disabled_php_notice",128,{"type":135,"name":144,"callback":151,"file":138,"line":152},"disabled_notice",185,{"type":154,"name":155,"callback":156,"priority":101,"file":157,"line":158},"filter","comment_text","YANN_csic_comment_text","includes\\code-snippets-in-comments-core.php",12,{"type":135,"name":160,"callback":161,"file":157,"line":162},"comment_form_top","YANN_csic_comment_code_input",15,{"type":135,"name":164,"callback":165,"priority":101,"file":157,"line":166},"wp_footer","YANN_csic_comment_code_input_js",18,{"type":135,"name":168,"callback":169,"file":157,"line":170},"wp_head","YANN_csic_jquery_extend",21,{"type":135,"name":172,"callback":173,"file":157,"line":31},"wp_enqueue_scripts","YANN_csic_enqueue_default_code",{"type":135,"name":175,"callback":173,"file":157,"line":176},"enqueue_block_assets",35,{"type":135,"name":172,"callback":173,"file":157,"line":178},42,{"type":154,"name":180,"callback":181,"file":157,"line":182},"mkaz_code_syntax_force_loading","__return_true",78,[],[],[],[],{"dangerousFunctions":188,"sqlUsage":189,"outputEscaping":192,"fileOperations":11,"externalRequests":11,"nonceChecks":11,"capabilityChecks":11,"bundledLibraries":210},[],{"prepared":190,"raw":11,"locations":191},3,[],{"escaped":190,"rawEcho":193,"locations":194},7,[195,198,200,202,204,206,208],{"file":138,"line":196,"context":197},142,"raw output",{"file":138,"line":199,"context":197},201,{"file":138,"line":201,"context":197},238,{"file":157,"line":203,"context":197},191,{"file":157,"line":205,"context":197},196,{"file":157,"line":207,"context":197},203,{"file":157,"line":209,"context":197},210,[],[],{"summary":213,"deductions":214},"The 'code-snippets-in-comments' plugin v0.9 exhibits a generally strong security posture based on the provided static analysis. There are no identified dangerous functions, file operations, external HTTP requests, or vulnerabilities in the vulnerability history. The use of prepared statements for all SQL queries is a significant positive security practice.  However, the analysis does reveal a concerning weakness in output escaping, with only 30% of outputs being properly escaped. This could lead to cross-site scripting (XSS) vulnerabilities if user-supplied data is not sufficiently sanitized before being displayed. Furthermore, the complete absence of nonce checks and capability checks across all entry points, although the entry points themselves are reported as zero, suggests a potential for vulnerabilities if new entry points are introduced or if the attack surface reporting is incomplete. The lack of taint analysis results might indicate a limited scope of analysis or that the tool did not find any flows to analyze, which is positive but doesn't negate the existing concerns.\n\nWhile the plugin has no known historical vulnerabilities, the identified output escaping issue requires attention. The lack of authentication and authorization checks on potential entry points is a significant concern that could be exploited if the plugin's functionality were to expand or if an attacker found a way to trigger existing code paths in an unintended manner. The absence of these fundamental security mechanisms, even with a current zero attack surface, represents a latent risk.  Therefore, while the plugin is not exhibiting overt vulnerabilities from historical data or critical code signals, the unaddressed output escaping and potential lack of authentication\u002Fauthorization mechanisms present areas for improvement to ensure a more robust security profile.",[215,217,220],{"reason":216,"points":65},"Low percentage of properly escaped output",{"reason":218,"points":219},"Missing nonce checks on entry points",5,{"reason":221,"points":219},"Missing capability checks on entry points","2026-03-17T07:19:02.199Z",{"wat":224,"direct":233},{"assetPaths":225,"generatorPatterns":228,"scriptPaths":229,"versionParams":230},[226,227],"\u002Fwp-content\u002Fplugins\u002Fcode-snippets-in-comments\u002Fassets\u002Fcss\u002Fcustom.css","\u002Fwp-content\u002Fplugins\u002Fcode-snippets-in-comments\u002Fassets\u002Fjs\u002Fscripts.js",[],[227],[231,232],"code-snippets-in-comments\u002Fassets\u002Fcss\u002Fcustom.css?ver=","code-snippets-in-comments\u002Fassets\u002Fjs\u002Fscripts.js?ver=",{"cssClasses":234,"htmlComments":236,"htmlAttributes":237,"restEndpoints":239,"jsGlobals":240,"shortcodeOutput":242},[235],"yann-comment-snippet-wrapper",[],[238],"data-language",[],[241],"YANN_CODE_S_I_COMMENTS_VER",[243],"[code_snippet]"]