[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fW3bWZN_Q9pgTXJ770AYqJAI5t0aHE4I7R2Je43GXByA":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":17,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":35,"analysis":36,"fingerprints":122},"commentsafe","CommentSafe","1.2","Avinash Mishra","https:\u002F\u002Fprofiles.wordpress.org\u002Finviul\u002F","\u003Cp>CommentSafe plug-in helps to stop spam comments by giving time delay in posting comments. As seen many bloggers visits website and post generic comments so frequently without devoting their time to read the entire piece of content, which is not justifiable since writer give their precious time to develop good quality of content. The main goal of such commentators is to generate backlinks from comments.\u003Cbr \u002F>\nThis plugin will give time delay, thus ‘Post Comment’ button won’t be active for pre-determined time. Blog publisher can set custom time based on the length of the blog post. CommentSafe plugin allows publisher to enter custom time (in seconds) for individual articles in ‘Add Post’ section. It will also stop spam comments given by bots. Since it will give delay even anyone uses automated software to break captcha. Its subsequent version will be fully beneficial for SEO & Affiliate Marketing.\u003C\u002Fp>\n\u003Cp>Visit Author’s Blog for more information: \u003Ca href=\"http:\u002F\u002Fwww.inviul.com\" rel=\"nofollow ugc\">Inviul\u003C\u002Fa>\u003Cbr \u002F>\nVisit WordPress Idea Page: \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fideas\u002Ftopic\u002Fallow-time-spent-on-reading-content-in-comment-section\" rel=\"ugc\">Idea contribution by Avinash Mishra\u003C\u002Fa>\u003C\u002Fp>\n","CommentSafe plug-in helps to stop spam comments by giving time delay in posting comments. As seen many bloggers visits website and post generic commen &hellip;",10,1356,0,"2017-07-22T16:28:00.000Z","4.8.28","3.1","",[19,20,21,22,23],"engagements","improve-bounce-rate","seo-on-comments","spam-free-comments","stop-spam-comments","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcommentsafe.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},"inviul",1,30,84,"2026-04-04T07:22:54.407Z",[],{"attackSurface":37,"codeSignals":94,"taintFlows":115,"riskAssessment":116,"analyzedAt":121},{"hooks":38,"ajaxHandlers":90,"restRoutes":91,"shortcodes":92,"cronEvents":93,"entryPointCount":13,"unprotectedCount":13},[39,45,49,54,58,64,68,72,75,79,81,82,83,84,86,87,88,89],{"type":40,"name":41,"callback":42,"file":43,"line":44},"action","admin_menu","wpcar_add_menu","1.2\\comment-safe-admin.php",6,{"type":40,"name":46,"callback":47,"file":43,"line":48},"admin_init","display_options",18,{"type":40,"name":50,"callback":51,"priority":52,"file":43,"line":53},"add_meta_boxes","add_post_specific_box",2,19,{"type":40,"name":55,"callback":56,"file":43,"line":57},"save_post","save_post_specific_settings",20,{"type":59,"name":60,"callback":61,"file":62,"line":63},"filter","the_content","is_single_post","1.2\\comment-safe.php",26,{"type":59,"name":65,"callback":66,"file":62,"line":67},"comment_form_defaults","get_timers",31,{"type":40,"name":69,"callback":70,"file":62,"line":71},"comment_form_logged_in_after","init_timer_client_side",33,{"type":40,"name":73,"callback":70,"file":62,"line":74},"comment_form_after_fields",34,{"type":59,"name":76,"callback":77,"file":62,"line":78},"preprocess_comment","verify_timer_after_comment",35,{"type":40,"name":41,"callback":42,"file":80,"line":44},"comment-safe-admin.php",{"type":40,"name":46,"callback":47,"file":80,"line":48},{"type":40,"name":50,"callback":51,"priority":52,"file":80,"line":53},{"type":40,"name":55,"callback":56,"file":80,"line":57},{"type":59,"name":60,"callback":61,"file":85,"line":63},"comment-safe.php",{"type":59,"name":65,"callback":66,"file":85,"line":67},{"type":40,"name":69,"callback":70,"file":85,"line":71},{"type":40,"name":73,"callback":70,"file":85,"line":74},{"type":59,"name":76,"callback":77,"file":85,"line":78},[],[],[],[],{"dangerousFunctions":95,"sqlUsage":96,"outputEscaping":98,"fileOperations":13,"externalRequests":13,"nonceChecks":52,"capabilityChecks":52,"bundledLibraries":114},[],{"prepared":13,"raw":13,"locations":97},[],{"escaped":52,"rawEcho":99,"locations":100},8,[101,104,106,108,110,111,112,113],{"file":43,"line":102,"context":103},45,"raw output",{"file":43,"line":105,"context":103},87,{"file":62,"line":107,"context":103},40,{"file":62,"line":109,"context":103},58,{"file":80,"line":102,"context":103},{"file":80,"line":105,"context":103},{"file":85,"line":107,"context":103},{"file":85,"line":109,"context":103},[],[],{"summary":117,"deductions":118},"The commentsafe plugin v1.2 exhibits a strong security posture based on the provided static analysis and vulnerability history. The absence of any identified attack surface entry points, dangerous functions, raw SQL queries, file operations, or external HTTP requests is highly commendable. Furthermore, the presence of nonce and capability checks on the limited code signals indicates good practice in preventing unauthorized actions.  The lack of any recorded vulnerabilities in its history further reinforces this positive assessment, suggesting a well-maintained and secure codebase.\n\nHowever, a significant concern arises from the output escaping results. With 10 total outputs and only 20% properly escaped, there is a high probability of Cross-Site Scripting (XSS) vulnerabilities. This is the primary weakness identified in the code analysis. While the plugin has no known CVEs and a clean history, the unescaped output represents a tangible risk that needs immediate attention to ensure the overall security of WordPress sites using this plugin.",[119],{"reason":120,"points":99},"Low percentage of properly escaped output","2026-03-17T00:42:00.866Z",{"wat":123,"direct":130},{"assetPaths":124,"generatorPatterns":126,"scriptPaths":127,"versionParams":129},[125],"\u002Fwp-content\u002Fplugins\u002Fcommentsafe\u002Fwpcar.js",[],[128],"wpcar.js",[],{"cssClasses":131,"htmlComments":132,"htmlAttributes":133,"restEndpoints":138,"jsGlobals":139,"shortcodeOutput":140},[],[],[134,135,136,137],"data-name","_wpcar_init_timer","_wpcar_autotime_limit","_wpcar_maxtime_limit",[],[],[]]