[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJLIpb8IJT1bKOxx3oNh2cvZJlaKU9ycxyPgh582bAWs":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":14,"unpatched_count":14,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":44,"crawl_stats":35,"alternatives":48,"analysis":152,"fingerprints":192},"compact-admin","Compact Admin","1.3.3","reimund","https:\u002F\u002Fprofiles.wordpress.org\u002Freimund\u002F","\u003Cp>Compact Admin simply makes the posts and pages lists in the admin pages more\u003Cbr \u002F>\ncompact. Instead of taking up two lines of text, plus excessive margins, only\u003Cbr \u002F>\none line is used per post\u002Fpage. It also replaces the cluttery en dashes with\u003Cbr \u002F>\nwhitespace.\u003C\u002Fp>\n\u003Ch3>Plugin’s Official Site\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Flumens.se\u002Fcompact-admin\u002F\" rel=\"nofollow ugc\">Compact Admin\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Compact Admin is released as open source and can be used, modified and\u003Cbr \u002F>\nredistributed in any way possible.\u003C\u002Fp>\n","Compact Admin simply makes the posts and pages lists in the admin pages more compact.",80,4992,100,1,"2025-11-25T21:01:00.000Z","6.8.5","",[19,20,21,22,23],"admin","compact","pages","posts","theme","https:\u002F\u002Fgithub.com\u002Freimund\u002FCompact-Admin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcompact-admin.zip",78,"2025-09-05 00:00:00","2026-03-15T15:16:48.613Z",[30],{"id":31,"url_slug":32,"title":33,"description":34,"plugin_slug":4,"theme_slug":35,"affected_versions":36,"patched_in_version":35,"severity":37,"cvss_score":38,"cvss_vector":39,"vuln_type":40,"published_date":27,"updated_date":41,"references":42,"days_to_patch":35},"CVE-2025-58865","compact-admin-cross-site-request-forgery","Compact Admin \u003C= 1.3.0 - Cross-Site Request Forgery","The Compact Admin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site administrator into performing an action such as clicking on a link.",null,"\u003C=1.3.0","medium",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2025-09-09 22:08:01",[43],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F463181ae-1355-4aaf-bd8d-3194d72e0dfc?source=api-prod",{"slug":7,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":45,"trust_score":46,"computed_at":47},30,79,"2026-04-05T01:48:21.287Z",[49,71,92,114,135],{"slug":50,"name":51,"version":52,"author":53,"author_profile":54,"description":55,"short_description":56,"active_installs":57,"downloaded":58,"rating":59,"num_ratings":60,"last_updated":61,"tested_up_to":62,"requires_at_least":63,"requires_php":17,"tags":64,"homepage":67,"download_link":68,"security_score":69,"vuln_count":70,"unpatched_count":70,"last_vuln_date":35,"fetched_at":28},"lh-archived-post-status","LH Archived Post Status","3.11","shawfactor","https:\u002F\u002Fprofiles.wordpress.org\u002Fshawfactor\u002F","\u003Cp>This plugin allows you to archive your WordPress content similar to the way you archive your e-mail. Unlike other archiving solutions though this actually does it all and does it properly\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Makes a new post status available in the drop down called Archived\u003C\u002Fli>\n\u003Cli>Hides or removes your content without having to trash the content\u003C\u002Fli>\n\u003Cli>Content can either be hidden entirely from public view  or simply from the main loop and feed and pages, with other solutions you can only hide it from public view.\u003C\u002Fli>\n\u003Cli>Allows you to add a label to the title of those posts\u002Fpages etc that are archived\u003C\u002Fli>\n\u003Cli>Allows you to add a message to the top of the post\u002Fpage etc that the content is no longer up too date\u003C\u002Fli>\n\u003Cli>Allows you to set an archiving date after which content is automatically changed to having an archived status\u003C\u002Fli>\n\u003Cli>Compatible with posts, pages and custom post types\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plugin is ideal for sites where certain kinds of content is not meant to be evergreen\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Like this plugin? Please consider \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fview\u002Fplugin-reviews\u002Flh-archived-post-status\u002F\" rel=\"ugc\">leaving a 5-star review\u003C\u002Fa>.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Love this plugin or want to help the LocalHero Project? Please consider \u003Ca href=\"https:\u002F\u002Flhero.org\u002Fportfolio\u002Flh-archived-post-status\u002F\" rel=\"nofollow ugc\">making a donation\u003C\u002Fa>.\u003C\u002Fstrong>\u003C\u002Fp>\n","Allows posts and pages to be archived so you can remove content from the main loop and feed without having to trash it.",4000,50462,82,18,"2024-10-16T05:00:00.000Z","6.6.5","5.0",[19,21,22,65,66],"status","workflow","https:\u002F\u002Flhero.org\u002Fportfolio\u002Flh-archived-post-status\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flh-archived-post-status.zip",92,0,{"slug":72,"name":73,"version":74,"author":75,"author_profile":76,"description":77,"short_description":78,"active_installs":79,"downloaded":80,"rating":81,"num_ratings":82,"last_updated":83,"tested_up_to":84,"requires_at_least":85,"requires_php":86,"tags":87,"homepage":90,"download_link":91,"security_score":13,"vuln_count":70,"unpatched_count":70,"last_vuln_date":35,"fetched_at":28},"sortable-word-count-reloaded","Sortable Word Count Reloaded","1.0.3","apasionados","https:\u002F\u002Fprofiles.wordpress.org\u002Fapasionados\u002F","\u003Cp>Adds a sortable column to the posts and pages admin list with the word count of each page\u002Fpost.\u003C\u002Fp>\n\u003Cp>With this plugin you can see the word count for the posts and pages in the list view and sort them.\u003C\u002Fp>\n\u003Cp>This plugin is an enhanced version of the plugin \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsortable-word-count\u002F\" rel=\"ugc\">Sortable Word Count\u003C\u002Fa>. We decided to create this reloaded version of the plugin, because we wanted to be able to translate it and change the word count function so that it gets the correct word count by filtering comments and other page builder code.\u003C\u002Fp>\n\u003Ch4>What can I do with this plugin?\u003C\u002Fh4>\n\u003Cp>The plugin adds a sortable column to the posts and pages admin list with the word count of each page\u002Fpost.\u003C\u002Fp>\n\u003Ch4>System requirements\u003C\u002Fh4>\n\u003Cp>PHP version 5.6 or greater.\u003C\u002Fp>\n\u003Ch4>Sortable Word Count Reloaded Plugin in your Language!\u003C\u002Fh4>\n\u003Cp>This first release is avaliable in English and Spanish. In the “languages” folder we have included the necessary files to translate this plugin.\u003C\u002Fp>\n\u003Cp>If you would like the plugin in your language and you’re good at translating, please drop us a line at \u003Ca href=\"https:\u002F\u002Fapasionados.es\u002Fcontacto\u002Findex.php?desde=wordpress-org-sortable-word-count-reloaded-home\" rel=\"nofollow ugc\">Contact us\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Further Reading\u003C\u002Fh4>\n\u003Cp>You can access the description of the plugin in Spanish at: \u003Ca href=\"https:\u002F\u002Fapasionados.es\u002Fblog\u002F\" rel=\"nofollow ugc\">Columna palabras ordenable | WordPress Plugin\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Contact\u003C\u002Fh3>\n\u003Cp>For further information please send us an \u003Ca href=\"https:\u002F\u002Fapasionados.es\u002Fcontacto\u002Findex.php?desde=wordpress-org-sortable-word-count-reloaded\" rel=\"nofollow ugc\">email\u003C\u002Fa>.\u003C\u002Fp>\n","Adds a sortable column to the posts and pages admin list with the word count of each page\u002Fpost.",2000,12999,74,10,"2026-01-27T14:07:00.000Z","6.9.4","4.0.1","5.6",[19,88,21,22,89],"column","word-count","https:\u002F\u002Fapasionados.es\u002Fblog\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsortable-word-count-reloaded.zip",{"slug":93,"name":94,"version":95,"author":96,"author_profile":97,"description":98,"short_description":99,"active_installs":100,"downloaded":101,"rating":102,"num_ratings":103,"last_updated":104,"tested_up_to":105,"requires_at_least":106,"requires_php":17,"tags":107,"homepage":111,"download_link":112,"security_score":113,"vuln_count":70,"unpatched_count":70,"last_vuln_date":35,"fetched_at":28},"wp-sheet-editor-yoast-seo","Bulk Edit YOAST SEO fields in Spreadsheet","1.1.8","Jose Vega","https:\u002F\u002Fprofiles.wordpress.org\u002Fjosevega\u002F","\u003Cp>Edit YOAST SEO title, description, keyword, index status, and see SEO score when you are bulk editing Posts, Pages, and WooCommerce products using the spreadsheet.\u003C\u002Fp>\n\u003Cp>This plugin is perfect for you when:\u003C\u002Fp>\n\u003Col>\n\u003Cli>You need to Optimize Your Site SEO.\u003C\u002Fli>\n\u003Cli>You want to edit SEO title, description, and keywords quickly\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Installation steps\u003C\u002Fh4>\n\u003Col>\n\u003Cli>You need to install the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-sheet-editor-bulk-spreadsheet-editor-for-posts-and-pages\u002F\" rel=\"ugc\">free “wp sheet editor” plugin\u003C\u002Fa> to be able to use this plugin\u003C\u002Fli>\n\u003Cli>YOAST SEO plugin must be active\u003C\u002Fli>\n\u003Cli>Done. Now you will see the SEO columns on the spreadsheet automatically.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>What is WP Sheet Editor\u003C\u002Fh4>\n\u003Cp>WP Sheet Editor is a free plugin that allows you to bulk edit WordPress posts, pages, and WooCommerce products using a spreadsheet.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-sheet-editor-bulk-spreadsheet-editor-for-posts-and-pages\u002F\" rel=\"ugc\">Download “wp sheet editor” plugin\u003C\u002Fa>\u003C\u002Fp>\n","Bulk Edit posts, pages, and WooCommerce products YOAST SEO fields using a spreadsheet.",1000,24326,52,5,"2024-02-24T02:56:00.000Z","6.4.8","3.6",[19,108,21,109,110],"bulk-edit","posts-management","quick-edit","http:\u002F\u002Fwpsheeteditor.com\u002F?utm_source=wp-admin&utm_medium=plugins-list&utm_campaign=yoast","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-sheet-editor-yoast-seo.1.1.8.zip",85,{"slug":115,"name":116,"version":117,"author":118,"author_profile":119,"description":120,"short_description":121,"active_installs":122,"downloaded":123,"rating":124,"num_ratings":125,"last_updated":126,"tested_up_to":84,"requires_at_least":127,"requires_php":17,"tags":128,"homepage":133,"download_link":134,"security_score":13,"vuln_count":70,"unpatched_count":70,"last_vuln_date":35,"fetched_at":28},"filter-admin-published-default","Filter Admin Published Default","2.0.0","Chuck Reynolds","https:\u002F\u002Fprofiles.wordpress.org\u002Fryno267\u002F","\u003Cp>Enables all public post types (posts, pages, etc) in wp-admin to show the Published filter by default. This came out of a need as some clients of mine had a lot of pre-scheduled posts so a LOT of drafts are up top and I got tired of the extra click to filter by published. I tweeted out for ideas and @Norcross answered and quickly whipped up this; which we turned into a plugin for public release and here you go!\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>Once activated you don’t need to do anything.\u003C\u002Fp>\n","Enables all public post types (posts, pages, etc) in wp-admin to show the Published filter by default.",400,5971,88,7,"2026-03-10T05:03:00.000Z","5.2",[19,129,130,131,132],"edit-link","pages-edit","posts-edit","published","https:\u002F\u002Fgithub.com\u002Fchuckreynolds\u002Fwp-filter-admin-published-default","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffilter-admin-published-default.2.0.0.zip",{"slug":136,"name":137,"version":138,"author":139,"author_profile":140,"description":141,"short_description":142,"active_installs":13,"downloaded":143,"rating":13,"num_ratings":144,"last_updated":145,"tested_up_to":16,"requires_at_least":146,"requires_php":86,"tags":147,"homepage":150,"download_link":151,"security_score":13,"vuln_count":70,"unpatched_count":70,"last_vuln_date":35,"fetched_at":28},"post-descriptions","Post Descriptions","1.3.0","Tom de Visser","https:\u002F\u002Fprofiles.wordpress.org\u002Ftomdevisser\u002F","\u003Ch4>What does it do?\u003C\u002Fh4>\n\u003Cp>Post Descriptions lets you attach short notes or descriptions to posts and pages — ideal for internal reminders, content planning, or small to-do’s. Use it solo or with your team to stay organized directly in the WordPress admin.\u003C\u002Fp>\n\u003Ch4>How does it work?\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Adding Post Descriptions\u003C\u002Fstrong>\u003Cbr \u002F>\nYou can add a description in two ways:\u003Cbr \u002F>\n1. From the full Edit screen\u003Cbr \u002F>\n2. From the Quick Edit option on the posts\u002Fpages overview\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Viewing Post Descriptions\u003C\u002Fstrong>\u003Cbr \u002F>\nDescriptions are visible:\u003Cbr \u002F>\n1. In a dedicated column on the posts or pages overview — with a customizable column title\u003Cbr \u002F>\n2. As a post state — the small bold label next to the post title\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Post State Toggle\u003C\u002Fstrong>\u003Cbr \u002F>\nBy default, post descriptions are not shown as post states (the bold label next to your post title). You can enable this in Settings > Post Descriptions. If enabled, longer descriptions might clutter your view — you can toggle it off again in the settings.\u003C\u002Fp>\n","A lightweight WordPress plugin that lets you add quick descriptions or personal notes to your posts and pages — perfect for reminders, to-do's, o &hellip;",3924,6,"2025-06-26T13:20:00.000Z","4.9",[19,148,21,22,149],"organize","ui","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpost-descriptions\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpost-descriptions.1.3.0.zip",{"attackSurface":153,"codeSignals":173,"taintFlows":183,"riskAssessment":184,"analyzedAt":191},{"hooks":154,"ajaxHandlers":169,"restRoutes":170,"shortcodes":171,"cronEvents":172,"entryPointCount":70,"unprotectedCount":70},[155,162,166],{"type":156,"name":157,"callback":158,"priority":159,"file":160,"line":161},"action","admin_menu","ca_admin_menu",9,"compact-admin.php",98,{"type":156,"name":163,"callback":164,"priority":159,"file":160,"line":165},"admin_init","ca_register_settings",99,{"type":156,"name":167,"callback":168,"file":160,"line":13},"admin_print_scripts-edit.php","ca_admin_scripts",[],[],[],[],{"dangerousFunctions":174,"sqlUsage":175,"outputEscaping":177,"fileOperations":70,"externalRequests":70,"nonceChecks":70,"capabilityChecks":14,"bundledLibraries":182},[],{"prepared":70,"raw":70,"locations":176},[],{"escaped":70,"rawEcho":14,"locations":178},[179],{"file":160,"line":180,"context":181},41,"raw output",[],[],{"summary":185,"deductions":186},"The static analysis of the 'compact-admin' plugin v1.3.3 reveals a seemingly low attack surface with no identified AJAX handlers, REST API routes, shortcodes, or cron events that lack authentication.  The code signals indicate a positive adherence to secure SQL practices by exclusively using prepared statements and performing capability checks. However, a significant concern arises from the output escaping, where 100% of identified outputs are not properly escaped. This could lead to cross-site scripting (XSS) vulnerabilities if user-supplied data is reflected directly in the output without sanitization.\n\nThe vulnerability history is particularly concerning. The plugin has a known unpatched medium severity CVE, indicating a significant and persistent security risk. The common vulnerability type being Cross-Site Request Forgery (CSRF) suggests a pattern of insecure handling of user actions. While the current static analysis doesn't directly surface CSRF vectors, the historical data strongly implies a need for rigorous checks on all user-triggered actions. The overall security posture is mixed; while some fundamental security practices are present, the lack of output escaping and the presence of an unpatched CVE present substantial risks that outweigh the perceived low attack surface.",[187,189],{"reason":188,"points":60},"Unpatched CVE (Medium)",{"reason":190,"points":144},"100% of outputs not properly escaped","2026-03-16T21:30:48.468Z",{"wat":193,"direct":202},{"assetPaths":194,"generatorPatterns":197,"scriptPaths":198,"versionParams":199},[195,196],"\u002Fwp-content\u002Fplugins\u002Fcompact-admin\u002Fmedia\u002Fcss\u002Fcompact-admin.css","\u002Fwp-content\u002Fplugins\u002Fcompact-admin\u002Fmedia\u002Fjs\u002Fcompact-admin.js",[],[196],[200,201],"compact-admin\u002Fmedia\u002Fcss\u002Fcompact-admin.css?ver=","compact-admin\u002Fmedia\u002Fjs\u002Fcompact-admin.js?ver=",{"cssClasses":203,"htmlComments":204,"htmlAttributes":205,"restEndpoints":206,"jsGlobals":207,"shortcodeOutput":208},[],[],[],[],[],[]]