[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjahVdUNtiWBjx3EKi46csddY4sIu6puKWAL26fZjtb8":3,"$fVTh3Tb-4mkuYFJNHWLKp1FYrDVuZH9T8sj3sMVbo78M":197,"$fDBvvzGhvTPqdNHcnBQnN0PZn03eTjWmyx2oVYqCoDrs":202},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"discovery_status":29,"vulnerabilities":30,"developer":31,"crawl_stats":27,"alternatives":36,"analysis":137,"fingerprints":178},"current-post-shortcode","Current Post Shortcode","3.1.0","Md Forid Uddin","https:\u002F\u002Fprofiles.wordpress.org\u002Fmdforiduddin\u002F","\u003Cp>The “Current Post Shortcode” plugin allows you to display post titles and custom field values using simple shortcodes. You can display the current post’s title or meta information, or specify a post ID to retrieve data from a specific post.\u003C\u002Fp>\n\u003Ch4>Display Current Post Title and Meta Information:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Post Title:\u003C\u002Fstrong> \u003Ccode>[current_post]\u003C\u002Fcode>  \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Outputs the current post title, e.g., “Hello World”\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Post Meta\u003C\u002Fstrong> (Custom Field): \u003Ccode>[current_post meta=\"custom_field\"]\u003C\u002Fcode>  \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Outputs the value of the custom field\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Display Data from a Specific Post ID:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Post Title:\u003C\u002Fstrong> \u003Ccode>[current_post id=\"123\"]\u003C\u002Fcode>  \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Outputs the title of the post with ID “123”\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Post Meta\u003C\u002Fstrong> (Custom Field): \u003Ccode>[current_post id=\"123\" meta=\"custom_field\"]\u003C\u002Fcode>  \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Outputs the value of the custom field in the post with ID “123”\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Display Fallback Meta Value:\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>[current_post meta=\"custom_field\" default=\"Default Value\"]  \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Displays \"Default Value\" if the custom field is empty\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>Display Default Value for Zero Meta Value:\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>[current_post meta=\"custom_field\" default=\"Default Value\" skip=\"true\"]  \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Displays \"Default Value\" if the custom field value is zero\n\u003C\u002Fcode>\u003C\u002Fpre>\n","The Current Post Shortcode plugin allows you to display the current post's title and metadata using simple shortcodes.",30,604,0,"2026-01-13T19:05:00.000Z","6.9.4","6.7","7.4",[19,20,21,22,23],"current-post","custom-field","post-meta","post-title","shortcode","https:\u002F\u002Fgithub.com\u002Fmdforiduddin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcurrent-post-shortcode.3.1.0.zip",100,null,"2026-04-06T09:54:40.288Z","no_bundle",[],{"slug":32,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":11,"trust_score":34,"computed_at":35},"mdforiduddin",1,94,"2026-05-20T07:51:28.702Z",[37,61,83,103,122],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":26,"num_ratings":33,"last_updated":47,"tested_up_to":48,"requires_at_least":49,"requires_php":50,"tags":51,"homepage":57,"download_link":58,"security_score":59,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":60},"custom-shortcodes","Custom Shortcodes","1.0","marapper","https:\u002F\u002Fprofiles.wordpress.org\u002Fmarapper\u002F","\u003Cp>Manage \u003Cstrong>custom fields\u003C\u002Fstrong> using the insert \u003Cstrong>shortcodes\u003C\u002Fstrong> [custom name=”\u003Cem>field-name\u003C\u002Fem>” value=”\u003Cem>field-value\u003C\u002Fem>“] or HTML \u003Cstrong>conditional comments\u003C\u002Fstrong> \u003C!–custom name=”\u003Cem>field-name\u003C\u002Fem>” value=”\u003Cem>field-value\u003C\u002Fem>“–> in text of post. It’s a hook for desktop blog clients, which don’t support customfields natively.\u003C\u002Fp>\n\u003Cp>Простой хак Вордпресса, позволяющий управлять \u003Cstrong>произвольными полями\u003C\u002Fstrong> из любого внешнего клиента или при отправке через почту с помощью \u003Cstrong>шорткодов\u003C\u002Fstrong> [custom name=”\u003Cem>имя-произвольного-поля\u003C\u002Fem>” value=”\u003Cem>значение\u003C\u002Fem>“] или \u003Cstrong>условных комментариев\u003C\u002Fstrong> \u003C!–custom name=”\u003Cem>имя-произвольного-поля\u003C\u002Fem>” value=”\u003Cem>значение\u003C\u002Fem>“–> прямо в тексте поста.\u003C\u002Fp>\n","Manage custom fields using the insert shortcodes or HTML comment in text of post.",6000,5734,"2009-04-04T11:51:00.000Z","2.7","2.0.2","",[52,53,54,55,56],"custom","custom-fields","post","shortcodes","text","http:\u002F\u002Fiskariot.ru\u002Fwordpress\u002Fremix\u002F#custom-short","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-shortcodes.1.0.zip",85,"2026-04-16T10:56:18.058Z",{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":69,"downloaded":70,"rating":26,"num_ratings":71,"last_updated":72,"tested_up_to":73,"requires_at_least":74,"requires_php":50,"tags":75,"homepage":79,"download_link":80,"security_score":81,"vuln_count":71,"unpatched_count":13,"last_vuln_date":82,"fetched_at":60},"get-custom-field-values","Get Custom Field Values","4.1","Scott Reilly","https:\u002F\u002Fprofiles.wordpress.org\u002Fcoffee2code\u002F","\u003Cp>This plugin provides a powerful widget, shortcode (with shortcode builder tool), and template tags for easily retrieving and displaying custom field values for posts or pages.\u003C\u002Fp>\n\u003Cp>The power of custom fields gives this plugin the potential to be dozens of plugins all rolled into one.\u003C\u002Fp>\n\u003Cp>This plugin allows you to harness the power of custom fields\u002Fmeta data. Use the “Get Custom Field” widget, the \u003Ccode>[custom_field]\u003C\u002Fcode> shortcode (which has a post editor sidebar widget to help you build the shortcode), or one of six template tags to retrieve and display custom fields. Find a custom field for the current post, a specified post, a recent post, or randomly. And for the custom field values found by the plugin, you may optionally specify text or HTML to appear before and after the results. If nothing is found, then nothing is display (unless you define text to appear when no results are found). If multiple results are found, only the first will be displayed unless you specify a string to be used to join the results together (such as “,”), in which case all will be returned. Visit the Examples section to see how this plugin can be cast in dozens of different ways.\u003C\u002Fp>\n\u003Cp>There are six template tags provided by this plugin. Here they are, with an explanation of when they are appropriate for use:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>c2c_get_custom()\u003C\u002Fcode> : Use this inside “the loop” to retrieve a custom field value for a post\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_get_current_custom()\u003C\u002Fcode> : This is only available on the permalink post template (single.php) and page template (page.php). Can be used inside or outside “the loop”. Useful for using custom field to define text you want to include on a post or page’s header, footer, or sidebar.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_get_post_custom()\u003C\u002Fcode> : Useful when you know the ID of the post whose custom field value you want.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_get_random_custom()\u003C\u002Fcode> : Retrieve the value of a random instance of the specified custom field key, as long as the field is associated with a published posted, non-passworded post (you can modify a setting in the plugin file to search passworded posts as well).\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_get_random_post_custom()\u003C\u002Fcode> : Retrieves the value of random custom field(s) from a post when you know the ID of the post you’re interested in.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_get_recent_custom()\u003C\u002Fcode> : Retrieves the most recent (according to the associated post’s publish date) value of the specified custom field.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can filter the custom field values that the plugin would display. Add filters for ‘\u003Ccode>the_meta\u003C\u002Fcode>‘ to filter custom field data (see the end of the code file for commented out samples you may wish to include). You can also add per-meta filters by hooking ‘\u003Ccode>the_meta_$sanitized_field\u003C\u002Fcode>‘. \u003Ccode>$sanitized_field\u003C\u002Fcode> is a clean version of the value of \u003Ccode>$field\u003C\u002Fcode> where everything but alphanumeric and underscore characters have been removed. So to filter the value of the “Related Posts” custom field, you would need to add a filter for ‘\u003Ccode>the_meta_RelatedPosts\u003C\u002Fcode>‘.\u003C\u002Fp>\n\u003Cp>Links: \u003Ca href=\"https:\u002F\u002Fcoffee2code.com\u002Fwp-plugins\u002Fget-custom-field-values\u002F\" rel=\"nofollow ugc\">Plugin Homepage\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fget-custom-field-values\u002F\" rel=\"ugc\">Plugin Directory Page\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcoffee2code\u002Fget-custom-field-values\u002F\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fcoffee2code.com\" rel=\"nofollow ugc\">Author Homepage\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Developer Documentation\u003C\u002Fh3>\n\u003Cp>Developer documentation can be found in \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcoffee2code\u002Fget-custom-field-values\u002Fblob\u002Fmaster\u002FDEVELOPER-DOCS.md\" rel=\"nofollow ugc\">DEVELOPER-DOCS.md\u003C\u002Fa>. That documentation covers the numerous template tags, hooks, and shortcode provided by the plugin.\u003C\u002Fp>\n\u003Cp>As an overview, these are the template tags provided the plugin:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>c2c_get_custom()\u003C\u002Fcode>             : Template tag for use inside “the loop” and applies to the currently listed post.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_get_current_custom()\u003C\u002Fcode>     : Template tag for use on permalink (aka single) page templates for posts and pages.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_get_post_custom()\u003C\u002Fcode>        : Template tag for use when you know the ID of the post you’re interested in.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_get_random_custom()\u003C\u002Fcode>      : Template tag for use to retrieve a random custom field value.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_get_random_post_custom()\u003C\u002Fcode> : Template tag for use to retrieve random custom field value(s) from a post when you know the ID of the post you’re interested in.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_get_recent_custom()\u003C\u002Fcode>      : Template tag for use outside “the loop” and applies for custom fields regardless of post.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>These are the hooks provided by the plugin:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>c2c_get_custom_field_values_shortcode\u003C\u002Fcode>  : Filter to customize the name of the plugin’s shortcode.\u003C\u002Fli>\n\u003Cli>\u003Ccode>c2c_get_custom_field_values_post_types\u003C\u002Fcode> : Filter to customize the post types that should support the shortcode builder metabox.\u003C\u002Fli>\n\u003Cli>\u003Ccode>get_custom_field_values\u002Fcan_author_use_shortcodes\u003C\u002Fcode> : Filter to customize if post author can make use of the ‘custom_field’ shortcode.\u003C\u002Fli>\n\u003Cli>\u003Ccode>get_custom_field_values\u002Fshow_metabox\u003C\u002Fcode>   : Filter to customize if the shortcode builder metabox is shown.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The shortcode provided is \u003Ccode>[custom-field]\u003C\u002Fcode>, which has a number of attributes to customize its behavior and output.\u003C\u002Fp>\n","Use widgets, shortcodes, and\u002For template tags to easily retrieve and display custom field values for posts or pages.",1000,132290,4,"2023-10-10T04:37:00.000Z","6.3.8","3.6",[53,76,23,77,78],"meta","widget","widgets","https:\u002F\u002Fcoffee2code.com\u002Fwp-plugins\u002Fget-custom-field-values\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fget-custom-field-values.4.1.zip",84,"2023-10-11 00:00:00",{"slug":84,"name":85,"version":86,"author":87,"author_profile":88,"description":89,"short_description":90,"active_installs":91,"downloaded":92,"rating":26,"num_ratings":93,"last_updated":94,"tested_up_to":95,"requires_at_least":96,"requires_php":97,"tags":98,"homepage":101,"download_link":102,"security_score":59,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":60},"ultimate-fields","Ultimate Fields","3.0.2","Radoslav Georgiev","https:\u002F\u002Fprofiles.wordpress.org\u002Fradogeorgiev\u002F","\u003Cp>With Ultimate Fields you can easily create fields in the admin. Those fields can be displayed when you are editing a post or page (any post type actually) or in an options page (ex. Theme Options) anywhere in the admin.\u003C\u002Fp>\n\u003Cp>Please visit \u003Ca href=\"https:\u002F\u002Fwww.ultimate-fields.com\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.ultimate-fields.com\u002F\u003C\u002Fa> for more details.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Easy to use.\u003C\u002Fli>\n\u003Cli>Various field types (listed below)\u003C\u002Fli>\n\u003Cli>Support for Post Type and Options Page as locations for fields. All locations have advanced placement rules, in order to only show them when needed.\u003C\u002Fli>\n\u003Cli>WYSIWYG Field Creation\u003C\u002Fli>\n\u003Cli>Focused on developers: A clean object-oriented API allows you to cleanly define all of your fields through code.\u003C\u002Fli>\n\u003Cli>Perfected tabs, alignment and styles\u003C\u002Fli>\n\u003Cli>Import, Export and in-theme JSON Synchronization\u003C\u002Fli>\n\u003Cli>JavaScript-based interface\u003C\u002Fli>\n\u003Cli>Unlimited field nesting with the Repeater and Complex fields\u003C\u002Fli>\n\u003Cli>Conditional Logic between fields in the same container (and ones on upper levels)\u003C\u002Fli>\n\u003Cli>REST API Support\u003C\u002Fli>\n\u003Cli>Admin Columns\u003C\u002Fli>\n\u003Cli>Integration with WordPress SEO for automatic field content ratings\u003C\u002Fli>\n\u003Cli>Clean styles: Ultimate Fields follows WordPress’ built in styles as much as possible and provides a seamless experience. It’s even fully responsive.\u003C\u002Fli>\n\u003Cli>Full-featured interface for data loading\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Fields\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Text\u003C\u002Fli>\n\u003Cli>Textarea\u003C\u002Fli>\n\u003Cli>WYSIWYG Editor\u003C\u002Fli>\n\u003Cli>Password\u003C\u002Fli>\n\u003Cli>Number\u003C\u002Fli>\n\u003Cli>Checkbox\u003C\u002Fli>\n\u003Cli>Select\u003C\u002Fli>\n\u003Cli>Multiselect\u003C\u002Fli>\n\u003Cli>Image-Select (a visual select)\u003C\u002Fli>\n\u003Cli>File\u003C\u002Fli>\n\u003Cli>Image\u003C\u002Fli>\n\u003Cli>WP Object (for selection of an object among posts, terms and users)\u003C\u002Fli>\n\u003Cli>WP Objects (for multiple objects)\u003C\u002Fli>\n\u003Cli>Link\u003C\u002Fli>\n\u003Cli>Section\u003C\u002Fli>\n\u003Cli>Tab\u003C\u002Fli>\n\u003Cli>Complex\u003C\u002Fli>\n\u003Cli>Repeater\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Repeaters\u003C\u002Fh4>\n\u003Cp>Repeaters can be used to add repeatable groups of fields. You can combine a text and a file field into a Slide group and allow the user to add as many slides as he needs. The value is saved in a single field!\u003C\u002Fp>\n\u003Cp>Additionally you can add different types of groups into a single repeater. This way the user could add both Video Slides and Image Slides through the same place.\u003C\u002Fp>\n\u003Ch4>Embedding in themes and plugins\u003C\u002Fh4>\n\u003Cp>Ultimate Fields has all the necessary logic built in. Just place it wherever you need and include ultimate-fields.php\u003C\u002Fp>\n","Easy and powerful custom fields management: Post Meta, Options Pages, Repeaters and many field types!",900,14651,20,"2018-05-15T13:59:00.000Z","4.9.29","4.9","5.4",[53,76,21,99,100],"repeater","theme-options","https:\u002F\u002Fwww.ultimate-fields.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fultimate-fields.3.0.2.zip",{"slug":104,"name":105,"version":106,"author":107,"author_profile":108,"description":109,"short_description":110,"active_installs":111,"downloaded":112,"rating":113,"num_ratings":114,"last_updated":115,"tested_up_to":15,"requires_at_least":96,"requires_php":17,"tags":116,"homepage":120,"download_link":121,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":60},"wp-admin-search-meta","WP-Admin Search Post Meta","0.4","meloniq","https:\u002F\u002Fprofiles.wordpress.org\u002Fmeloniq\u002F","\u003Cp>Enhance the default WordPress admin search by including custom fields (post meta) in search results.\u003Cbr \u002F>\nThis plugin seamlessly extends the post listing (edit.php) search functionality, allowing administrators to quickly find content based on values stored in custom fields.\u003C\u002Fp>\n\u003Cp>It works out of the box with no configuration required—just activate and start searching.\u003Cbr \u002F>\nEspecially useful for sites that rely heavily on custom fields, such as those built with ACF or other meta-based data structures.\u003C\u002Fp>\n\u003Cp>Lightweight, efficient, and fully integrated with the native WordPress admin experience.\u003C\u002Fp>\n","Search WordPress admin posts by custom fields (post meta) directly from the default search.",300,6597,86,10,"2026-04-05T21:44:00.000Z",[53,21,117,118,119],"postmeta","search","wp-admin","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-admin-search-meta\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-admin-search-meta.0.4.zip",{"slug":123,"name":124,"version":125,"author":126,"author_profile":127,"description":128,"short_description":129,"active_installs":130,"downloaded":131,"rating":26,"num_ratings":33,"last_updated":132,"tested_up_to":133,"requires_at_least":134,"requires_php":50,"tags":135,"homepage":50,"download_link":136,"security_score":59,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":60},"advanced-custom-fields-shortcode-field","Advanced Custom Field: Shortcode Field","4.0","水野史土","https:\u002F\u002Fprofiles.wordpress.org\u002Founziw\u002F","\u003Cp>When you enter a shortcode, it will be executed and outputted, by using the_field(‘FIELD_NAME_HERE’) in your theme.\u003C\u002Fp>\n\u003Cp>You need Advanced Custom Fields plugin by Elliot Condon.\u003C\u002Fp>\n","When you enter a shortcode, it will be executed and outputted, by using the_field('FIELD_NAME_HERE') in your theme.",200,4732,"2013-06-29T09:42:00.000Z","3.5.2","3.4",[53,23],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadvanced-custom-fields-shortcode-field.zip",{"attackSurface":138,"codeSignals":160,"taintFlows":168,"riskAssessment":169,"analyzedAt":177},{"hooks":139,"ajaxHandlers":151,"restRoutes":152,"shortcodes":153,"cronEvents":159,"entryPointCount":33,"unprotectedCount":13},[140,146],{"type":141,"name":142,"callback":143,"file":144,"line":145},"action","plugins_loaded","init_plugin","current-post-shortcode.php",58,{"type":147,"name":148,"callback":148,"priority":114,"file":149,"line":150},"filter","plugin_row_meta","includes\u002Fadmin\u002Fplugin-link.php",17,[],[],[154],{"tag":155,"callback":156,"file":157,"line":158},"current_post","render_shortcode","includes\u002Ffrontend\u002Fshortcode.php",18,[],{"dangerousFunctions":161,"sqlUsage":162,"outputEscaping":164,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":167},[],{"prepared":13,"raw":13,"locations":163},[],{"escaped":165,"rawEcho":13,"locations":166},2,[],[],[],{"summary":170,"deductions":171},"The 'current-post-shortcode' v3.1.0 plugin exhibits a strong security posture based on the provided static analysis. The absence of dangerous functions, reliance on prepared statements for all SQL queries, and proper output escaping are excellent security practices. Furthermore, the plugin has no recorded vulnerabilities, which suggests a history of secure development and maintenance. The attack surface is minimal, consisting solely of a single shortcode, and critically, there are no unprotected entry points. Taint analysis also reveals no critical or high severity flows, reinforcing the impression of a secure plugin.\n\nWhile the plugin demonstrates good security hygiene, the lack of nonce checks and capability checks on its shortcode, even with a small attack surface and no immediate vulnerabilities, represents a potential, albeit low, risk. If the shortcode's functionality were to be extended or manipulated in the future, the absence of these checks could become a vector for privilege escalation or unwanted actions. However, given the current analysis and vulnerability history, the overall risk is very low. The plugin is well-coded and appears to be actively maintained with security in mind.",[172,175],{"reason":173,"points":174},"Missing nonce checks on shortcode",5,{"reason":176,"points":174},"Missing capability checks on shortcode","2026-04-16T11:17:14.453Z",{"wat":179,"direct":184},{"assetPaths":180,"generatorPatterns":181,"scriptPaths":182,"versionParams":183},[],[],[],[],{"cssClasses":185,"htmlComments":186,"htmlAttributes":188,"restEndpoints":189,"jsGlobals":190,"shortcodeOutput":191},[],[187],"\u003C!-- This Class Going to ====================== End -->",[],[],[],[192,193,194,195,196],"[current_post]","[current_post meta=\"\"]","[current_post id=\"\"]","[current_post default=\"\"]","[current_post skip=\"\"]",{"error":198,"url":199,"statusCode":200,"statusMessage":201,"message":201},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fcurrent-post-shortcode\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":203,"versions":204},7,[205,211,218,225,232,239,246],{"version":6,"download_url":25,"svn_tag_url":206,"released_at":27,"has_diff":207,"diff_files_changed":208,"diff_lines":27,"trac_diff_url":209,"vulnerabilities":210,"is_current":198},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fcurrent-post-shortcode\u002Ftags\u002F3.1.0\u002F",false,[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fcurrent-post-shortcode%2Ftags%2F3.0.0&new_path=%2Fcurrent-post-shortcode%2Ftags%2F3.1.0",[],{"version":212,"download_url":213,"svn_tag_url":214,"released_at":27,"has_diff":207,"diff_files_changed":215,"diff_lines":27,"trac_diff_url":216,"vulnerabilities":217,"is_current":207},"3.0.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcurrent-post-shortcode.3.0.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fcurrent-post-shortcode\u002Ftags\u002F3.0.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fcurrent-post-shortcode%2Ftags%2F2.0.0&new_path=%2Fcurrent-post-shortcode%2Ftags%2F3.0.0",[],{"version":219,"download_url":220,"svn_tag_url":221,"released_at":27,"has_diff":207,"diff_files_changed":222,"diff_lines":27,"trac_diff_url":223,"vulnerabilities":224,"is_current":207},"2.0.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcurrent-post-shortcode.2.0.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fcurrent-post-shortcode\u002Ftags\u002F2.0.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fcurrent-post-shortcode%2Ftags%2F1.2.2&new_path=%2Fcurrent-post-shortcode%2Ftags%2F2.0.0",[],{"version":226,"download_url":227,"svn_tag_url":228,"released_at":27,"has_diff":207,"diff_files_changed":229,"diff_lines":27,"trac_diff_url":230,"vulnerabilities":231,"is_current":207},"1.2.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcurrent-post-shortcode.1.2.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fcurrent-post-shortcode\u002Ftags\u002F1.2.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fcurrent-post-shortcode%2Ftags%2F1.2.0&new_path=%2Fcurrent-post-shortcode%2Ftags%2F1.2.2",[],{"version":233,"download_url":234,"svn_tag_url":235,"released_at":27,"has_diff":207,"diff_files_changed":236,"diff_lines":27,"trac_diff_url":237,"vulnerabilities":238,"is_current":207},"1.2.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcurrent-post-shortcode.1.2.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fcurrent-post-shortcode\u002Ftags\u002F1.2.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fcurrent-post-shortcode%2Ftags%2F1.0.2&new_path=%2Fcurrent-post-shortcode%2Ftags%2F1.2.0",[],{"version":240,"download_url":241,"svn_tag_url":242,"released_at":27,"has_diff":207,"diff_files_changed":243,"diff_lines":27,"trac_diff_url":244,"vulnerabilities":245,"is_current":207},"1.0.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcurrent-post-shortcode.1.0.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fcurrent-post-shortcode\u002Ftags\u002F1.0.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fcurrent-post-shortcode%2Ftags%2F1.0.0&new_path=%2Fcurrent-post-shortcode%2Ftags%2F1.0.2",[],{"version":247,"download_url":248,"svn_tag_url":249,"released_at":27,"has_diff":207,"diff_files_changed":250,"diff_lines":27,"trac_diff_url":27,"vulnerabilities":251,"is_current":207},"1.0.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcurrent-post-shortcode.1.0.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fcurrent-post-shortcode\u002Ftags\u002F1.0.0\u002F",[],[]]