[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ft6S6wHfcbWr84KZ6QjHZ6REKBIxblNHwHILPDDIUKeY":3,"$f870wQwky9bCPNmB9ecQtRx-ChEgdHsOgVeyw0VpdgBU":244,"$ff06tWemE1CFrEuWiD_DBSanwmXi9wGG1RJ0OM0Rqp9I":249},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":18,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"discovery_status":29,"vulnerabilities":30,"developer":31,"crawl_stats":27,"alternatives":37,"analysis":140,"fingerprints":198},"custom-post-list","Custom Post List","1.0.4","Satya Prakash","https:\u002F\u002Fprofiles.wordpress.org\u002Fsatya219\u002F","\u003Cp>Display a customizable list of custom post types with filtering options using the Custom Post List plugin.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Display a customizable list of posts.\u003C\u002Fli>\n\u003Cli>Filter posts based on post type.\u003C\u002Fli>\n\u003Cli>Easy-to-use shortcode for embedding the post list.\u003C\u002Fli>\n\u003Cli>Select specific post types from the dropdown list.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>After activating the plugin, you can use the following shortcode to display the post list on any page:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[custom_post_list]\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Display a customizable list of custom post types with filtering options using the Custom Post List plugin.",30,1271,100,1,"2025-01-02T08:33:00.000Z","6.7.5","4.5","",[20,21,22,23],"custom-post","filter","list","shortcode","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-post-list.1.0.4.zip",92,0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":32,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":34,"avg_security_score":25,"avg_patch_time_days":11,"trust_score":35,"computed_at":36},"satya219",2,50,88,"2026-05-20T06:54:51.947Z",[38,64,83,101,120],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":53,"tags":54,"homepage":59,"download_link":60,"security_score":61,"vuln_count":62,"unpatched_count":26,"last_vuln_date":63,"fetched_at":28},"w4-post-list","W4 Post List","2.5.5","Shazzad Hossain Khan","https:\u002F\u002Fprofiles.wordpress.org\u002Fsajib1223\u002F","\u003Cp>Display Posts (any custom post type), Terms (any custom taxonomy), Users (any role) on Content or Widget Areas by placing a shortcode. Select what to show and design how to show it. Using the plugin is really easy. You will find Tinymce button on post\u002Fpage editor to quickly inset a list. Also, there’s a separate page for creating or editing list.\u003C\u002Fp>\n\u003Ch4>List Types\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Posts\u003C\u002Fli>\n\u003Cli>Terms\u003C\u002Fli>\n\u003Cli>Users\u003C\u002Fli>\n\u003Cli>Terms & Posts\u003C\u002Fli>\n\u003Cli>Users & Posts\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Creating a list is just few steps. There are different sets option for different List Type, following options are available for List Type – \u003Ccode>posts\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Ch4>Posts\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>post type\u003C\u002Fli>\n\u003Cli>post mime type\u003C\u002Fli>\n\u003Cli>post status\u003C\u002Fli>\n\u003Cli>post search keyword\u003C\u002Fli>\n\u003Cli>include post by ids\u003C\u002Fli>\n\u003Cli>exclude post by ids\u003C\u002Fli>\n\u003Cli>exclude current post\u003C\u002Fli>\n\u003Cli>posts per page – while using pagination\u003C\u002Fli>\n\u003Cli>post by parent ids\u003C\u002Fli>\n\u003Cli>post by author ids\u003C\u002Fli>\n\u003Cli>post by terms ( tax_query )\u003C\u002Fli>\n\u003Cli>post by meta ( meta_query )\u003C\u002Fli>\n\u003Cli>post by year, month, day ( date_query )\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Group Results by\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>year\u003C\u002Fli>\n\u003Cli>month\u003C\u002Fli>\n\u003Cli>month year\u003C\u002Fli>\n\u003Cli>category, post tag or custom taxonomies\u003C\u002Fli>\n\u003Cli>authors\u003C\u002Fli>\n\u003Cli>parents\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Order Results by\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>post id\u003C\u002Fli>\n\u003Cli>post title\u003C\u002Fli>\n\u003Cli>post name\u003C\u002Fli>\n\u003Cli>post publish date\u003C\u002Fli>\n\u003Cli>post modified date\u003C\u002Fli>\n\u003Cli>menu order\u003C\u002Fli>\n\u003Cli>approved comment count\u003C\u002Fli>\n\u003Cli>meta value\u003C\u002Fli>\n\u003Cli>or random\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Multi-Page Pagination by\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Next \u002F Previous links\u003C\u002Fli>\n\u003Cli>Numeric navigation flat – Ex: 1, 2, 3.\u003C\u002Fli>\n\u003Cli>Numeric navigation showing in unordered list.\u003C\u002Fli>\n\u003Cli>Enable\u002FDisable pagination by ajax\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>To Create Template\u003C\u002Fh4>\n\u003Cp>Templates are designed using Shortcodes. You can create a simple list just showing post title and linked to the post page, or you can display complex list using any of the information relating to post. Some of the available shortcodes are –\u003C\u002Fp>\n\u003Cul>\n\u003Cli>post thumbnail\u003C\u002Fli>\n\u003Cli>post categories\u003C\u002Fli>\n\u003Cli>post tags\u003C\u002Fli>\n\u003Cli>post custom taxonomy terms\u003C\u002Fli>\n\u003Cli>post author name \u002F links \u002F avatar\u003C\u002Fli>\n\u003Cli>post publish time\u003C\u002Fli>\n\u003Cli>post modified time\u003C\u002Fli>\n\u003Cli>post excerpt\u003C\u002Fli>\n\u003Cli>post content\u003C\u002Fli>\n\u003Cli>post meta value (multiple times, with multiple meta keys)\u003C\u002Fli>\n\u003Cli>media thumbnail\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Check all of the \u003Ca href=\"https:\u002F\u002Fw4dev.com\u002Fdocs\u002Fw4-post-list\u002Ffaqs\u002Fwhat-are-the-available-template-tags\u002F\" rel=\"nofollow ugc\">available shortcodes\u003C\u002Fa> here.\u003C\u002Fp>\n\u003Ch4>Check Example\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fw4dev.com\u002Fwp\u002Fw4-post-list-examples\u002F#example-1\" rel=\"nofollow ugc\">Simple Posts List\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fw4dev.com\u002Fwp\u002Fw4-post-list-examples\u002F#example-2\" rel=\"nofollow ugc\">Media List\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fw4dev.com\u002Fwp\u002Fw4-post-list-examples\u002F#example-3\" rel=\"nofollow ugc\">Year\u002FMonth Archive\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fw4dev.com\u002Fwp\u002Fw4-post-list-examples\u002F#example-4\" rel=\"nofollow ugc\">List of Categories\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fw4dev.com\u002Fwp\u002Fw4-post-list-examples\u002F#example-5\" rel=\"nofollow ugc\">List of Terms\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Privacy Policy\u003C\u002Fh3>\n\u003Cp>W4 Post List uses \u003Ca href=\"https:\u002F\u002Fappsero.com\" rel=\"nofollow ugc\">Appsero\u003C\u002Fa> SDK to collect some telemetry data upon user’s confirmation. This helps us to troubleshoot problems faster & make product improvements.\u003C\u002Fp>\n\u003Cp>Appsero SDK \u003Cstrong>does not gather any data by default.\u003C\u002Fstrong> The SDK only starts gathering basic telemetry data \u003Cstrong>when a user allows it via the admin notice\u003C\u002Fstrong>. We collect the data to ensure a great user experience for all our users.\u003C\u002Fp>\n\u003Cp>Integrating Appsero SDK \u003Cstrong>DOES NOT IMMEDIATELY\u003C\u002Fstrong> start gathering data, \u003Cstrong>without confirmation from users in any case.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Learn more about how \u003Ca href=\"https:\u002F\u002Fappsero.com\u002Fprivacy-policy\u002F\" rel=\"nofollow ugc\">Appsero collects and uses this data\u003C\u002Fa>.\u003C\u002Fp>\n","W4 Post List lets you create a list of posts, terms, users or a combined one. Decorate output using shortcodes. It's just easy and fun.",3000,194585,94,93,"2026-02-16T07:12:00.000Z","6.9.4","5.8","7.4",[55,56,57,58,23],"custom-post-type","media","post","post-list","https:\u002F\u002Fw4dev.com\u002Fplugins\u002Fw4-post-list","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fw4-post-list.2.5.5.zip",99,5,"2023-03-22 00:00:00",{"slug":65,"name":66,"version":67,"author":68,"author_profile":69,"description":70,"short_description":71,"active_installs":13,"downloaded":72,"rating":25,"num_ratings":62,"last_updated":73,"tested_up_to":74,"requires_at_least":75,"requires_php":18,"tags":76,"homepage":79,"download_link":80,"security_score":81,"vuln_count":14,"unpatched_count":14,"last_vuln_date":82,"fetched_at":28},"custom-post-type-list-shortcode","Custom Post Type List Shortcode","1.4.4","Blackbird Interactive","https:\u002F\u002Fprofiles.wordpress.org\u002Fblackbird-interactive\u002F","\u003Cp>UPGRADE AT YOUR OWN RISK: We’ve added a legacy feature to the plugin which has been tested and is  working on our local WordPress install. However, every environment is different, if you run into problem please visit http:\u002F\u002Fblackbirdi.com\u002Fblog for support.\u003C\u002Fp>\n\u003Cp>When used with Custom Post Type UI plug-in (https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fcustom-post-type-ui\u002F) and Advanced Custom Fields plug-in (https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fadvanced-custom-fields\u002F), you can easily list all of the posts within a post-type and sort by regular or custom fields.\u003C\u002Fp>\n\u003Cp>Updated and tested on latest version of WordPress (4.0)\u003C\u002Fp>\n\u003Cp>Most updates are because of users responding with requests. If you feel there is something that you would like to see in the plugin visit our site and post a comment.\u003C\u002Fp>\n\u003Cp>Enjoy!\u003Cbr \u002F>\nYou can find documentation for the CPT_List @ (http:\u002F\u002Fblackbirdi.com\u002Fblog\u002F)\u003C\u002Fp>\n","A shortcode with which you can easily list all of the posts within a post-type and sort by regular or custom fields.",25781,"2014-12-10T02:16:00.000Z","4.0.38","3.0",[77,55,78,58,23],"cpt","custom-post-type-list","http:\u002F\u002Fblackbirdi.com\u002Fblog","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-post-type-list-shortcode.1.4.4.zip",64,"2023-04-17 00:00:00",{"slug":84,"name":85,"version":86,"author":87,"author_profile":88,"description":89,"short_description":90,"active_installs":91,"downloaded":92,"rating":26,"num_ratings":26,"last_updated":93,"tested_up_to":94,"requires_at_least":95,"requires_php":18,"tags":96,"homepage":98,"download_link":99,"security_score":100,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"advanced-custom-fields-w4-post-list-bridge","Advanced Custom Fields: W4 Post List Bridge","1.0.0","pmill","https:\u002F\u002Fprofiles.wordpress.org\u002Fpmill\u002F","\u003Cp>This plugin provides a [post_field field=”field-name”] shortcode connecting an Advanced Custom Fields field to your W4\u003Cbr \u002F>\nPost List list template.\u003C\u002Fp>\n","This plugin provides a [post_field field=\"field-name\"] shortcode connecting an Advanced Custom Fields field to your W4 Post List list templa …",70,2721,"2015-07-17T09:54:00.000Z","3.4.2","3.0.0",[97,4,58,23],"acf","http:\u002F\u002Fgithub.com\u002Fpmill\u002Facf-w4-post-list-bridge\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadvanced-custom-fields-w4-post-list-bridge.zip",85,{"slug":102,"name":103,"version":104,"author":105,"author_profile":106,"description":107,"short_description":108,"active_installs":11,"downloaded":109,"rating":26,"num_ratings":26,"last_updated":110,"tested_up_to":16,"requires_at_least":111,"requires_php":112,"tags":113,"homepage":118,"download_link":119,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"ac-custom-loop-shortcode","AC Custom Loop Shortcode","1.7.1","Richie Arnold","https:\u002F\u002Fprofiles.wordpress.org\u002Fambercouch\u002F","\u003Cp>Easily display posts, pages, custom post types or taxonomy terms in content areas using a customizable shortcode. Display your latest posts, group by taxonomies, display your post tags or categories, use custom templates with Timber for Twig support.\u003C\u002Fp>\n\u003Ch3>Shortcode Options and Examples\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Display a specific post type:\u003C\u002Fstrong>\u003Cbr \u002F>\n    [ac_custom_loop type=”foo”]\u003Cbr \u002F>\nThis displays posts from the \u003Ccode>foo\u003C\u002Fcode> custom post type.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Display a specific post type and use a timber template:\u003C\u002Fstrong>\u003Cbr \u002F>\n    [ac_custom_loop timber=’true’ type=”foo”]\u003Cbr \u002F>\nThis displays the same as the previous example but uses a nice timber template.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Display posts with specific tags:\u003C\u002Fstrong>\u003Cbr \u002F>\n    [ac_custom_loop type=”post” tax=”tag” term=”foo”]\u003Cbr \u002F>\nThis displays posts tagged with \u003Ccode>foo\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Group posts by taxonomy (e.g., categories and tags):\u003C\u002Fstrong>\u003Cbr \u002F>\n    [ac_custom_loop type=”post” subtax=”category,tag”]\u003Cbr \u002F>\nGroups posts by categories, then by tags within each category.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Exclude posts by specific tags:\u003C\u002Fstrong>\u003Cbr \u002F>\n    [ac_custom_loop type=”post” tax=”post_tag” term=”foo,bar” exclude=”baz”]\u003Cbr \u002F>\nThis displays posts tagged with \u003Ccode>foo\u003C\u002Fcode> and \u003Ccode>bar\u003C\u002Fcode>, but excludes those tagged with \u003Ccode>baz\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Display post tag terms:\u003C\u002Fstrong>\u003Cbr \u002F>\n    [ac_custom_loop type=”category” tax=”post_tag” ]\u003Cbr \u002F>\nThis displays all your category terms and link to those post.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Use a custom template for loop display:\u003C\u002Fstrong>\u003Cbr \u002F>\nTo use a custom template, copy \u003Ccode>loop-template.php\u003C\u002Fcode> from the plugin folder to the root of your theme folder and modify as desired. You can also create templates for specific post types (e.g., \u003Ccode>loop-template-post.php\u003C\u002Fcode>).\u003C\u002Fp>\n","A simple WordPress plugin that creates a shortcode to loop through posts, pages, or custom post types and display them anywhere on your site.",2766,"2025-01-15T14:58:00.000Z","5.2","5.2.4",[114,115,23,116,117],"list-custom-posts","list-post","timber","twig","https:\u002F\u002Fambercouch.co.uk","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fac-custom-loop-shortcode.1.7.1.zip",{"slug":121,"name":122,"version":123,"author":124,"author_profile":125,"description":126,"short_description":127,"active_installs":128,"downloaded":129,"rating":13,"num_ratings":33,"last_updated":130,"tested_up_to":131,"requires_at_least":132,"requires_php":18,"tags":133,"homepage":18,"download_link":138,"security_score":100,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":139},"custom-post-type-lister-cpt-lister","Custom Post Type Lister – CPT Lister","2.0","GeroNikolov","https:\u002F\u002Fprofiles.wordpress.org\u002Fgeronikolov\u002F","\u003Cp>Hello there!\u003Cbr \u002F>\nThis plugin will give you the possibility to list any of your custom post types (even a built in post types) to any of your posts or pages, with one simple shortcode \u003Cstrong>[cpt_show]\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>What it does ?\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Cbr \u002F>\nThis plugin makes a WP_Query and gets all posts from the custom post type that you’ve given to it.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>What are the parameters ?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n    type – Here you have to tell the plugin from which post type you would like to get your posts.\u003Cbr \u002F>\n    Example: type=”posts”\n    \u003C\u002Fli>\n\u003Cli>\n    post_status – This is the type of posts that should be listed.\u003Cbr \u002F>\n    Example: post_status=”published”\n    \u003C\u002Fli>\n\u003Cli>\n    order – This is how the results should be ordered ASC \u002F DESC.\u003Cbr \u002F>\n    Example: order=”ASC”\n    \u003C\u002Fli>\n\u003Cli>\n    order_by – This tells the plugin by what the results should be ordered.\u003Cbr \u002F>\n    Example: order_by=”publish_date”\n    \u003C\u002Fli>\n\u003Cli>\n    posts_per_page – With this you tell the plugin how much posts should be listed on the page.\u003Cbr \u002F>\n    Example: posts_per_page=”5″\n    \u003C\u002Fli>\n\u003Cli>\n    titles_as_links – This tells the shortcode if the titles of the listed posts should be links that are pointing to the specific page for every unique post. Possible values are 0 & 1. If the value is set to 0 it will print the title without wrapping it in HTML Link tag (), but if the value is set to 1 it will wrap the post title into HTML Link tag and it will point to the specific post page.\u003Cbr \u002F>\n    Example: titles_as_links=”1″\n    \u003C\u002Fli>\n\u003Cli>\n    show_post_content – This tells the shortcode if it should show the post content under their titles. Possible values are 0 & 1. If the value is 0 it won’t show the post content under its title, but if the value is set to 1 it will list the post content also.\u003Cbr \u002F>\n    Example: show_post_content=”0″\n    \u003C\u002Fli>\n\u003Cli>\n    cptl_title_link_class – This is used to tell the shortcode what class should be added to the Link Wrapper of the post title. By default it is cptl_title_link.\n    \u003C\u002Fli>\n\u003Cli>\n    cptl_title_class – This tells the shortcode what class should be added to the Title Wrapper of the post title. By default it is cptl_title.\n    \u003C\u002Fli>\n\u003Cli>\n    cptl_content_class – This is used to tell the shortcode what class should be added to the Content Wrapper of the post content. By default it is cptl_content\n    \u003C\u002Fli>\n\u003Cli>\n    cptl_content_wrapper – This is used to tell the shortcode how wrap the listed results. It can be \u003Cstrong>‘h1’, ‘h2’, ‘h3’, ‘h4’, ‘h4’, ‘h6’, ‘li’, ‘span’, ‘div’\u003C\u002Fstrong>\n    \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Why to use the plugin ?\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Cbr \u002F>\nThe need of quick listing of custom post type on some page or post ?\u003Cbr \u002F>\nWell this is your reason and this is your plugin.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Cbr \u002F>\nNote :\u003Cbr \u002F>\n\u003Cbr \u002F>\nYou can use the standart WordPress options for those parameters:\u003Cbr \u002F>\ntype, post_status, order, order_by, posts_per_page\u003Cbr \u002F>\n\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>You don’t find your functionality ?\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Cbr \u002F>\nCustom Post Type Lister is \u003Cstrong>Open Source\u003C\u002Fstrong> plugin, which means that you can contribute to it.\u003Cbr \u002F>\nYup that’s right! If you don’t find the needed functionality just add it.\u003Cbr \u002F>\nHere is the \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002FGero0Nikolov\u002Fcpt-lister.git\" rel=\"nofollow ugc\">repository\u003C\u002Fa>\u003C\u002Fstrong>.\u003Cbr \u002F>\nCheers!\u003C\u002Fp>\n","This plugin allows you to list a custom post type in your posts \u002F pages with one simple shortcode.",10,2199,"2020-05-22T09:30:00.000Z","5.4.19","3.0.1",[134,135,136,137,23],"custom-post-types","listing","open-contribution","open-source","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-post-type-lister-cpt-lister.2.0.zip","2026-03-15T15:16:48.613Z",{"attackSurface":141,"codeSignals":165,"taintFlows":187,"riskAssessment":188,"analyzedAt":197},{"hooks":142,"ajaxHandlers":157,"restRoutes":158,"shortcodes":159,"cronEvents":164,"entryPointCount":14,"unprotectedCount":26},[143,149,153],{"type":144,"name":145,"callback":146,"file":147,"line":148},"action","admin_menu","custom_post_list_menu","custom-post-list-plugin.php",24,{"type":144,"name":150,"callback":151,"file":147,"line":152},"admin_init","custom_post_list_settings",142,{"type":144,"name":154,"callback":155,"file":147,"line":156},"wp_enqueue_scripts","custom_post_list_enqueue_styles",233,[],[],[160],{"tag":161,"callback":162,"file":147,"line":163},"custom_post_list","custom_post_list_shortcode",226,[],{"dangerousFunctions":166,"sqlUsage":167,"outputEscaping":169,"fileOperations":26,"externalRequests":26,"nonceChecks":26,"capabilityChecks":26,"bundledLibraries":186},[],{"prepared":26,"raw":26,"locations":168},[],{"escaped":170,"rawEcho":171,"locations":172},14,6,[173,176,178,180,182,184],{"file":147,"line":174,"context":175},105,"raw output",{"file":147,"line":177,"context":175},115,{"file":147,"line":179,"context":175},122,{"file":147,"line":181,"context":175},126,{"file":147,"line":183,"context":175},130,{"file":147,"line":185,"context":175},134,[],[],{"summary":189,"deductions":190},"The \"custom-post-list\" plugin v1.0.4 exhibits a generally positive security posture based on the provided static analysis. The absence of known CVEs and a clean vulnerability history suggests good security practices have been maintained or that the plugin has not been a significant target.  The code analysis reveals no dangerous functions, SQL queries use prepared statements exclusively, and there are no file operations or external HTTP requests, all of which are strong security indicators.  However, a notable concern is the \"Output escaping\" metric, where only 70% of outputs are properly escaped. This leaves a portion of the plugin's output potentially vulnerable to cross-site scripting (XSS) attacks if user-controlled data is not adequately sanitized before being displayed.  While the attack surface is small and has no unprotected entry points, and taint analysis shows no critical or high severity issues, the unescaped output is the primary area of risk identified.  The lack of nonce checks and capability checks on the identified shortcode is also a point of concern, as it could potentially lead to unintended actions if the shortcode were to be abused in conjunction with other vulnerabilities or social engineering tactics.",[191,193,195],{"reason":192,"points":171},"Unescaped output (30% unsanitized)",{"reason":194,"points":62},"Missing nonce check on shortcode",{"reason":196,"points":62},"Missing capability check on shortcode","2026-03-16T22:33:42.296Z",{"wat":199,"direct":204},{"assetPaths":200,"generatorPatterns":201,"scriptPaths":202,"versionParams":203},[],[],[],[],{"cssClasses":205,"htmlComments":218,"htmlAttributes":220,"restEndpoints":227,"jsGlobals":228,"shortcodeOutput":229},[206,207,208,209,210,211,212,213,214,215,216,217],"content-wrapper","blog-index","post-item","post-body","blog-featured-img","post-list-content","post-heading","user-meta-section","post-date","post-author","more-link","blog-pagination",[219],"Pagination",[221,222,223,224,225,226],"data-custom_post_list_post_type","data-custom_post_list_show_date","data-custom_post_list_show_featured_image","data-custom_post_list_show_pagination","data-custom_post_list_display_author","data-custom_post_list_posts_per_page",[],[],[230,231,232,233,234,235,236,237,238,239,240,241,242,243],"\u003Cdiv class=\"content-wrapper\">","\u003Cdiv class=\"blog-index\">","\u003Cdiv class=\"post-item clearfix\">","\u003Cdiv class=\"post-body clearfix\">","\u003Cdiv class=\"blog-featured-img\">","\u003Cdiv class=\"post-list-content clearfix\">","\u003Cdiv class=\"post-heading\">","\u003Cdiv class=\"user-meta-section\">","\u003Cspan class=\"post-date\">","\u003Cspan class=\"post-author\">","\u003Ca href=\"","Read More","\u003C\u002Fdiv>","\u003Cdiv class=\"blog-pagination\">",{"error":245,"url":246,"statusCode":247,"statusMessage":248,"message":248},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fcustom-post-list\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":62,"versions":250},[251,257,264,271,278],{"version":6,"download_url":24,"svn_tag_url":252,"released_at":27,"has_diff":253,"diff_files_changed":254,"diff_lines":27,"trac_diff_url":255,"vulnerabilities":256,"is_current":245},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fcustom-post-list\u002Ftags\u002F1.0.4\u002F",false,[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fcustom-post-list%2Ftags%2F1.0.3&new_path=%2Fcustom-post-list%2Ftags%2F1.0.4",[],{"version":258,"download_url":259,"svn_tag_url":260,"released_at":27,"has_diff":253,"diff_files_changed":261,"diff_lines":27,"trac_diff_url":262,"vulnerabilities":263,"is_current":253},"1.0.3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-post-list.1.0.3.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fcustom-post-list\u002Ftags\u002F1.0.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fcustom-post-list%2Ftags%2F1.0.2&new_path=%2Fcustom-post-list%2Ftags%2F1.0.3",[],{"version":265,"download_url":266,"svn_tag_url":267,"released_at":27,"has_diff":253,"diff_files_changed":268,"diff_lines":27,"trac_diff_url":269,"vulnerabilities":270,"is_current":253},"1.0.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-post-list.1.0.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fcustom-post-list\u002Ftags\u002F1.0.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fcustom-post-list%2Ftags%2F1.0.1&new_path=%2Fcustom-post-list%2Ftags%2F1.0.2",[],{"version":272,"download_url":273,"svn_tag_url":274,"released_at":27,"has_diff":253,"diff_files_changed":275,"diff_lines":27,"trac_diff_url":276,"vulnerabilities":277,"is_current":253},"1.0.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-post-list.1.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fcustom-post-list\u002Ftags\u002F1.0.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fcustom-post-list%2Ftags%2F1.0.0&new_path=%2Fcustom-post-list%2Ftags%2F1.0.1",[],{"version":86,"download_url":279,"svn_tag_url":280,"released_at":27,"has_diff":253,"diff_files_changed":281,"diff_lines":27,"trac_diff_url":27,"vulnerabilities":282,"is_current":253},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-post-list.1.0.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fcustom-post-list\u002Ftags\u002F1.0.0\u002F",[],[]]