[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4Y6woudm54O66-oOAlXIA4szxL7VFIFlG_NZNH5ImOo":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":38,"analysis":143,"fingerprints":302},"content-randomizer","Content Randomizer","1.2.3","Dominykas","https:\u002F\u002Fprofiles.wordpress.org\u002Fdominykasgel\u002F","\u003Cp>Content Randomizer plugin allows you to create sets of short texts, images or even video and to show them on any widgetized area. You can make sets of quotes, phrases, jokes and other short texts separate from the other website content. Content Randomizer plugin uses its own custom type posts for the full control over the website content. Same custom type posts are used to add images or videos (embedded).\u003C\u002Fp>\n\u003Cp>The plugin is user-friendly and easy to use. Just install the plugin and activate it. Now you’ll be able to create categories for random content, each category will represent an individual set of content. Create random content posts and assign them to the preferred category. Now when you have at least one content set you can go to the Widget Manager (Appearance \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Widgets) and add one of the two available Content Randomizer plugin widgets.\u003C\u002Fp>\n\u003Cp>The main Content Randomizer widget reacts only when you browse from one page to another on your website, it will change content every time on load or refresh action. Second widget available with Content Randomizer plugin shows random content as slides, so there is no need to browse to another page or refresh the current page to see all content that was assigned to the active content set. The active content set is determined by random content category selection in widget settings (just a simple dropdown).\u003C\u002Fp>\n\u003Cp>There are shortcodes available for more advanced users. You can use these shortcodes to render random content at any selected location of your website. We hope you will enjoy this plugin.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.elementous.com\u002Fdocumentation\u002F#color-filters-for-woocommerce\" rel=\"nofollow ugc\">Content Randomizer Documentation\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>We also have a public \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Felementous\u002Fcontent-randomizer\" rel=\"nofollow ugc\">GIT repository\u003C\u002Fa> for this plugin and you’re welcome to contribute your patch.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Display sets of random texts, images or videos\u003C\u002Fli>\n\u003Cli>Display sets of random content like a slideshow\u003C\u002Fli>\n\u003Cli>Set the date range to control when your random content will be displayed\u003C\u002Fli>\n\u003Cli>Categories to define random sets of content\u003C\u002Fli>\n\u003Cli>Widgets and shortcodes to display random content\u003C\u002Fli>\n\u003Cli>Ability to change randomizer permalinks\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin allows you to add texts, images, videos and display them in a random order or slideshow.",200,8358,100,6,"2018-01-21T13:57:00.000Z","4.9.29","3.0.1","",[20,21,22,23,24],"featured","joke","quote","random","text","https:\u002F\u002Fwww.elementous.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcontent-randomizer.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},"dominykasgel",2,30,84,"2026-04-05T00:58:49.467Z",[39,61,83,105,125],{"slug":40,"name":41,"version":42,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":13,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":18,"tags":53,"homepage":59,"download_link":60,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wp-random-post-thumbnails","WP Random Post Thumbnails","2.6.3","Brianna Deleasa","https:\u002F\u002Fprofiles.wordpress.org\u002Fbdeleasa\u002F","\u003Cp>This plugin allows you to upload a set of images via a settings page to be shown for posts without images. The images will be chosen at random on page load for any posts without a featured image (meaning each time the page is reloaded another random image will be chosen). Useful if your theme shows thumbnails for the posts, and you don’t want any posts without thumbnails.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>UPDATE:\u003C\u002Fstrong> Now you can select images specifically for certain post types as well as taxonomy terms.\u003C\u002Fp>\n","Allows you to select images to be shown at random for posts without a featured image.",1000,37024,8,"2025-07-27T11:47:00.000Z","6.7.5","3.5",[54,55,56,57,58],"post-thumbnails","random-featured-images","random-images","random-post-thumbnail","random-thumbnails","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-random-post-thumbnails\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-random-post-thumbnails.2.6.3.zip",{"slug":62,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":68,"downloaded":69,"rating":70,"num_ratings":71,"last_updated":72,"tested_up_to":73,"requires_at_least":74,"requires_php":18,"tags":75,"homepage":81,"download_link":82,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wpuntexturize","2.3","Scott Reilly","https:\u002F\u002Fprofiles.wordpress.org\u002Fcoffee2code\u002F","\u003Cp>By default, WordPress converts single and double quotation marks into their curly alternatives. This plugin prevents that from happening, so you can enjoy your quotation marks in their non-curly glory. If your content happens to already have curly quotation marks in it, then this plugin can optionally also convert them to their non-curly alternatives.\u003C\u002Fp>\n\u003Cp>\u003Cem>Note:\u003C\u002Fem> Despite the unfortunately misleading name, this plugin is NOT the antithesis of WordPress’s \u003Ccode>wptexturize()\u003C\u002Fcode> function. This ONLY prevents WordPress from making HTML entity code substitutions of single and double quotation marks with their curly alternatives and does NOT prevent \u003Ccode>wptexturize()\u003C\u002Fcode> from making any other character and string substitutions. See the FAQ for details on the filters processed by the plugin.\u003C\u002Fp>\n\u003Cp>Links: \u003Ca href=\"https:\u002F\u002Fcoffee2code.com\u002Fwp-plugins\u002Fwpuntexturize\u002F\" rel=\"nofollow ugc\">Plugin Homepage\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwpuntexturize\u002F\" rel=\"ugc\">Plugin Directory Page\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcoffee2code\u002Fwpuntexturize\u002F\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fcoffee2code.com\" rel=\"nofollow ugc\">Author Homepage\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Developer Documentation\u003C\u002Fh3>\n\u003Cp>Developer documentation can be found in \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcoffee2code\u002Fwpuntexturize\u002Fblob\u002Fmaster\u002FDEVELOPER-DOCS.md\" rel=\"nofollow ugc\">DEVELOPER-DOCS.md\u003C\u002Fa>. That documentation covers the numerous hooks provided by the plugin. Those hooks are listed below to provide an overview of what’s available.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>c2c_wpuntexturize\u003C\u002Fcode> : An alternative approach to safely invoke \u003Ccode>c2c_wpuntexturize()\u003C\u002Fcode> in such a way that if the plugin were deactivated or deleted, then your calls to the function won’t cause errors in your site. This only applies if you use the function directly, which is not typical usage for most users.\u003C\u002Fli>\n\u003Cli>\u003Ccode>wpuntexturize_filters\u003C\u002Fcode> : customize what filters to hook to be filtered with wpuntexturize. See the Description section for a complete list of all filters that are filtered by default.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_wpuntexturize_replacements\u003C\u002Fcode> : Customize the character replacements handled by the plugin.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_wpuntexturize_convert_curly_quotes\u003C\u002Fcode> : Enable conversion of preexisting curly quotes into their non-curly alternatives.\u003C\u002Fli>\n\u003C\u002Ful>\n","Prevent WordPress from converting single and double quotation marks into their curly alternatives.",900,25406,92,12,"2025-04-08T22:17:00.000Z","6.8.5","5.5",[76,77,78,79,80],"formatting","post","quotes","substitutions","wptexturize","https:\u002F\u002Fcoffee2code.com\u002Fwp-plugins\u002Fwpuntexturize\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpuntexturize.2.3.zip",{"slug":84,"name":85,"version":86,"author":87,"author_profile":88,"description":89,"short_description":90,"active_installs":91,"downloaded":92,"rating":93,"num_ratings":14,"last_updated":94,"tested_up_to":95,"requires_at_least":96,"requires_php":97,"tags":98,"homepage":18,"download_link":102,"security_score":103,"vuln_count":34,"unpatched_count":28,"last_vuln_date":104,"fetched_at":30},"easy-quotes","Easy Quotes","1.3.7","Jürgen Müller","https:\u002F\u002Fprofiles.wordpress.org\u002Fjuergen74\u002F","\u003Cp>Easy Quotes let you collect and display your favorite Quotes \u002F Reviews \u002F Testimonials or any other short snippet of Text you want to present on your site.\u003C\u002Fp>\n\u003Cp>Main Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Custom Post Type “Quotes” with Quick Edit and Bulk Actions\u003C\u002Fli>\n\u003Cli>Add Custom Meta: Author, Date and Rating with Stars\u003C\u002Fli>\n\u003Cli>Gutenberg Block “Easy Quotes” to present your Collection all over your Site. (Block-Widget\u002FPages\u002FPosts etc.)\u003C\u002Fli>\n\u003Cli>Show Random or Daily “Quotes” by Category or choose a Specific Quote.\u003C\u002Fli>\n\u003Cli>Option to rotate Quotes by Category\u003C\u002Fli>\n\u003Cli>Option to show Quotes as a List by Category\u003C\u002Fli>\n\u003Cli>Use Google Fonts and other typographic features to style your Quote.\u003C\u002Fli>\n\u003Cli>Built to blend into any style, but customizable with CSS to fit your needs.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Try my new Plugin\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Feasy-architect\u002F\" rel=\"ugc\">Easy Architect\u003C\u002Fa>\u003C\u002Fp>\n","Collect and show your favorite Quotes \u002F Reviews \u002F Testimonials or any other short snippet of Text.",700,14366,94,"2026-01-07T13:03:00.000Z","6.9.4","6.7","7.4",[99,100,78,23,101],"daily","lyrics","testimonials","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-quotes.1.3.7.zip",97,"2025-09-22 00:00:00",{"slug":106,"name":107,"version":108,"author":109,"author_profile":110,"description":111,"short_description":112,"active_installs":113,"downloaded":114,"rating":115,"num_ratings":14,"last_updated":116,"tested_up_to":117,"requires_at_least":118,"requires_php":18,"tags":119,"homepage":123,"download_link":124,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"easy-random-quotes","Easy Random Quotes","1.8","Kailey (trepmal)","https:\u002F\u002Fprofiles.wordpress.org\u002Ftrepmal\u002F","\u003Cp>Insert quotes and pull them randomly into your pages and posts (via shortcodes) or your template (via template tags).\u003Cbr \u002F>\nCan refer to quote IDs to use specific quotes. Also widget-enabled\u003C\u002Fp>\n","Insert quotes and pull them randomly into your pages and posts (via shortcodes) or your template (via template tags).",500,21239,86,"2016-09-29T02:57:00.000Z","4.6.30","2.8",[120,121,122],"random-quotes","shortcodes","widget","http:\u002F\u002Ftrepmal.com\u002Fplugins\u002Feasy-random-quotes\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-random-quotes.1.8.zip",{"slug":126,"name":127,"version":108,"author":128,"author_profile":129,"description":130,"short_description":131,"active_installs":113,"downloaded":132,"rating":13,"num_ratings":133,"last_updated":134,"tested_up_to":73,"requires_at_least":135,"requires_php":136,"tags":137,"homepage":141,"download_link":142,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"simple-note","Simple Note","Webliberty","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebliberty\u002F","\u003Cp>Use the Simple Note plugin to write informative and warning notes, notes about errors or success, as well as quotes in colored blocks.\u003C\u002Fp>\n\u003Ch3>How to use\u003C\u002Fh3>\n\u003Cp>Search beautiful colored blocks in Common blocks category and insert into the content.\u003C\u002Fp>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cp>You can translate Simple Note on \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fsimple-note\" rel=\"nofollow ugc\">\u003Cstrong>translate.wordpress.org\u003C\u002Fstrong>\u003C\u002Fa>.\u003C\u002Fp>\n","The plugin allows you to create colored text notes in the new block editor.",6062,1,"2025-06-18T10:36:00.000Z","5.3","7.0",[138,139,140,22,24],"blocks","note","notes","https:\u002F\u002Fwebliberty.ru\u002Fblockquote\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-note.1.8.zip",{"attackSurface":144,"codeSignals":204,"taintFlows":289,"riskAssessment":290,"analyzedAt":301},{"hooks":145,"ajaxHandlers":185,"restRoutes":186,"shortcodes":187,"cronEvents":202,"entryPointCount":203,"unprotectedCount":28},[146,151,156,158,161,164,168,171,175,178,181],{"type":147,"name":148,"callback":148,"file":149,"line":150},"action","admin_init","includes\\permalink-settings.php",15,{"type":147,"name":152,"callback":153,"file":154,"line":155},"widgets_init","anonymous","includes\\widgets.php",233,{"type":147,"name":152,"callback":153,"file":154,"line":157},236,{"type":147,"name":159,"callback":159,"file":160,"line":14},"init","randomizer.php",{"type":147,"name":159,"callback":162,"file":160,"line":163},"update_check",7,{"type":147,"name":165,"callback":166,"file":160,"line":167},"add_meta_boxes","date_range",9,{"type":147,"name":169,"callback":169,"file":160,"line":170},"save_post",10,{"type":147,"name":172,"callback":173,"file":160,"line":174},"admin_enqueue_scripts","admin_css_js",11,{"type":147,"name":176,"callback":177,"file":160,"line":71},"wp_enqueue_scripts","enqueue_js_and_css",{"type":147,"name":179,"callback":179,"file":160,"line":180},"admin_footer",13,{"type":147,"name":182,"callback":183,"file":160,"line":184},"wp_footer","slideshow_js",14,[],[],[188,193,195,199],{"tag":189,"callback":190,"file":191,"line":192},"elm_random","elm_random_shortcode","includes\\shortcodes.php",23,{"tag":189,"callback":190,"file":191,"line":194},45,{"tag":196,"callback":197,"file":191,"line":198},"elm_slideshow","elm_slideshow_shortcode",46,{"tag":200,"callback":190,"file":191,"line":201},"elm_randomtext",49,[],4,{"dangerousFunctions":205,"sqlUsage":213,"outputEscaping":215,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":288},[206,210],{"fn":207,"file":154,"line":208,"context":209},"create_function",234,"create_function('', 'return register_widget(\"Randomizer_Widget\");')",{"fn":207,"file":154,"line":211,"context":212},237,"create_function('', 'return register_widget(\"RandomizerSlideshow_Widget\");')",{"prepared":28,"raw":28,"locations":214},[],{"escaped":170,"rawEcho":216,"locations":217},38,[218,221,223,225,227,229,231,233,235,237,238,240,242,243,245,247,249,250,252,254,256,258,260,262,264,266,267,269,271,272,274,276,278,279,281,283,284,286],{"file":149,"line":219,"context":220},56,"raw output",{"file":149,"line":222,"context":220},66,{"file":149,"line":224,"context":220},74,{"file":154,"line":226,"context":220},29,{"file":154,"line":228,"context":220},33,{"file":154,"line":230,"context":220},37,{"file":154,"line":232,"context":220},39,{"file":154,"line":234,"context":220},59,{"file":154,"line":236,"context":220},60,{"file":154,"line":236,"context":220},{"file":154,"line":239,"context":220},63,{"file":154,"line":241,"context":220},64,{"file":154,"line":241,"context":220},{"file":154,"line":244,"context":220},71,{"file":154,"line":246,"context":220},77,{"file":154,"line":248,"context":220},78,{"file":154,"line":248,"context":220},{"file":154,"line":251,"context":220},83,{"file":154,"line":253,"context":220},89,{"file":154,"line":255,"context":220},144,{"file":154,"line":257,"context":220},148,{"file":154,"line":259,"context":220},152,{"file":154,"line":261,"context":220},154,{"file":154,"line":263,"context":220},174,{"file":154,"line":265,"context":220},175,{"file":154,"line":265,"context":220},{"file":154,"line":268,"context":220},178,{"file":154,"line":270,"context":220},179,{"file":154,"line":270,"context":220},{"file":154,"line":273,"context":220},186,{"file":154,"line":275,"context":220},192,{"file":154,"line":277,"context":220},193,{"file":154,"line":277,"context":220},{"file":154,"line":280,"context":220},198,{"file":154,"line":282,"context":220},204,{"file":160,"line":13,"context":220},{"file":160,"line":285,"context":220},105,{"file":160,"line":287,"context":220},342,[],[],{"summary":291,"deductions":292},"The 'content-randomizer' plugin v1.2.3 exhibits a mixed security posture. On the positive side, it has a limited attack surface with no AJAX handlers or REST API routes exposed without authentication. The absence of known vulnerabilities in its history is also a strong indicator of good past security practices. Furthermore, all SQL queries utilize prepared statements, and there are no file operations or external HTTP requests, which are generally good security indicators.\n\nHowever, several significant concerns are present in the static analysis. The use of the `create_function` function is a critical security risk as it can lead to arbitrary code execution if user-supplied input is passed to it without proper sanitization. Additionally, the output escaping is significantly lacking, with only 21% of outputs properly escaped. This indicates a high risk of Cross-Site Scripting (XSS) vulnerabilities, allowing attackers to inject malicious scripts into the website.\n\nThe lack of nonce checks and capability checks on its entry points (shortcodes) is also a notable weakness. While the attack surface is small, the presence of 4 shortcodes without any authorization checks means that any authenticated user, or potentially even unauthenticated users depending on context, could trigger unintended actions or expose sensitive information. The limited taint analysis does not provide a full picture, but the presence of dangerous functions and poor output escaping are enough to warrant significant caution.",[293,295,297,299],{"reason":294,"points":150},"Use of dangerous function create_function",{"reason":296,"points":71},"Low percentage of properly escaped output",{"reason":298,"points":163},"No nonce checks on entry points",{"reason":300,"points":163},"No capability checks on entry points","2026-03-16T20:27:06.079Z",{"wat":303,"direct":318},{"assetPaths":304,"generatorPatterns":310,"scriptPaths":311,"versionParams":312},[305,306,307,308,309],"\u002Fwp-content\u002Fplugins\u002Fcontent-randomizer\u002Fcss\u002Frandomizer.css","\u002Fwp-content\u002Fplugins\u002Fcontent-randomizer\u002Fjs\u002Frandomizer.js","\u002Fwp-content\u002Fplugins\u002Fcontent-randomizer\u002Fcss\u002Fowl.carousel.min.css","\u002Fwp-content\u002Fplugins\u002Fcontent-randomizer\u002Fcss\u002Fowl.theme.default.min.css","\u002Fwp-content\u002Fplugins\u002Fcontent-randomizer\u002Fjs\u002Fowl.carousel.min.js",[],[306],[313,314,315,316,317],"content-randomizer\u002Fcss\u002Frandomizer.css?ver=","content-randomizer\u002Fjs\u002Frandomizer.js?ver=","content-randomizer\u002Fcss\u002Fowl.carousel.min.css?ver=","content-randomizer\u002Fcss\u002Fowl.theme.default.min.css?ver=","content-randomizer\u002Fjs\u002Fowl.carousel.min.js?ver=",{"cssClasses":319,"htmlComments":322,"htmlAttributes":324,"restEndpoints":327,"jsGlobals":328,"shortcodeOutput":330},[320,321],"randomizer-slideshow","date-input",[323],"\u003C!-- Date range -->",[325,326],"data-date-from","data-date-to",[],[329],"elm_rt_vars",[331,332,333,334],"[content_randomizer]","[random_content]","[random_image]","[random_video]"]