[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbukacvxyIFOOPX_IgPJgySjlgdsHG7SDFFsaQ6EJTHk":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":49,"crawl_stats":38,"alternatives":56,"analysis":151,"fingerprints":194},"cyr3lat","Cyr to Lat Enhanced","3.7.3","Ivijan-Stefan Stipic","https:\u002F\u002Fprofiles.wordpress.org\u002Fivijanstefan\u002F","\u003Cp>Cyr to Lat Enhanced automatically converts Cyrillic, European and Georgian characters in post slugs, term slugs and media file names into Latin characters.\u003Cbr \u002F>\nIt helps maintain clean, readable and consistent URLs on WordPress sites that use non-Latin scripts.\u003C\u002Fp>\n\u003Cp>The plugin integrates directly with WordPress core sanitization (\u003Ccode>sanitize_title\u003C\u002Fcode> and \u003Ccode>sanitize_file_name\u003C\u002Fcode>) and performs transliteration at the moment slugs and filenames are generated.\u003Cbr \u002F>\nIt does \u003Cstrong>not\u003C\u002Fstrong> modify post content, titles or front-end text. Its scope is strictly limited to URLs and file names.\u003C\u002Fp>\n\u003Cp>On activation, existing post and term slugs are converted in the background using safe, batch-based processing via WP-Cron.\u003Cbr \u002F>\nWordPress core APIs are used to preserve permalink integrity and existing redirects.\u003C\u002Fp>\n\u003Cp>Transliteration is based on an ISO 9-style mapping table with built-in support for:\u003Cbr \u002F>\n– Russian\u003Cbr \u002F>\n– Belarusian\u003Cbr \u002F>\n– Ukrainian\u003Cbr \u002F>\n– Bulgarian\u003Cbr \u002F>\n– Macedonian\u003Cbr \u002F>\n– Georgian\u003C\u002Fp>\n\u003Cp>Locale-specific adjustments are applied automatically, and the transliteration table can be customized using a public filter.\u003C\u002Fp>\n\u003Cp>Cyr to Lat Enhanced is intentionally lightweight and focused:\u003Cbr \u002F>\n– no admin interface\u003Cbr \u002F>\n– no settings pages\u003Cbr \u002F>\n– no bidirectional conversion\u003Cbr \u002F>\n– no data collection or tracking\u003C\u002Fp>\n\u003Cp>The plugin continues the cyr2lat \u002F cyr3lat lineage and remains compatible with the original approach introduced by Sergey Biryukov.\u003C\u002Fp>\n\u003Ch3>Advanced Transliteration\u003C\u002Fh3>\n\u003Cp>For advanced transliteration needs such as full content conversion, bidirectional processing, extended language rules and fine-grained control, consider the separate plugin:\u003Cbr \u002F>\nhttps:\u002F\u002Fwordpress.org\u002Fplugins\u002Fserbian-transliteration\u002F\u003C\u002Fp>\n\u003Cp>That plugin is designed for complex multilingual setups and broader language processing beyond slugs and file names.\u003C\u002Fp>\n\u003Ch3>Adoption Notice\u003C\u002Fh3>\n\u003Cp>This plugin represents the continued maintenance of the original “Cyr to Lat Enhanced” project from the cyr3lat lineage.\u003C\u002Fp>\n\u003Cp>The project has been revived to ensure long-term stability, modern WordPress compatibility and responsible maintenance, while preserving the original behavior and purpose.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>Original upstream concept: Rus-To-Lat by Anton Skorobogatov\u003Cbr \u002F>\ncyr2lat \u002F cyr3lat lineage contributors: karevn, Atrax, Sergey Biryukov, webvitaly\u003C\u002Fp>\n\u003Cp>Maintainer: Ivijan Stefan Stipic (INFINITUM FORM)\u003C\u002Fp>\n\u003Ch3>Legal Notice\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPLv2 or later license.\u003C\u002Fp>\n\u003Cp>All new contributions are released under the same license.\u003C\u002Fp>\n","Converts Cyrillic, European and Georgian characters in post, term slugs and media file names into Latin characters.",90000,658368,92,51,"2026-02-10T09:53:00.000Z","6.9.4","5.0","7.4",[20,21,22,23,24],"cyrillic","russian","slugs","transliteration","ukrainian","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcyr3lat\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcyr3lat.3.7.3.zip",99,1,0,"2023-04-13 00:00:00","2026-03-15T15:16:48.613Z",[33],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48},"CVE-2022-4290","cyr-to-lat-authenticated-sql-injection","Cyr to Lat \u003C= 3.5 - Authenticated SQL Injection","The Cyr to Lat plugin for WordPress is vulnerable to authenticated SQL Injection via the 'ctl_sanitize_title' function in versions up to, and including, 3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This potentially allows authenticated users with the ability to add or modify terms or tags to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. A partial patch became available in version 3.6 and the issue was fully patched in version 3.7.",null,"\u003C=3.5","3.7","high",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","2024-01-22 19:56:02",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fc9c29130-1b42-4edd-ad62-6f635e03ae31?source=api-prod",285,{"slug":50,"display_name":7,"profile_url":8,"plugin_count":51,"total_installs":52,"avg_security_score":53,"avg_patch_time_days":48,"trust_score":54,"computed_at":55},"ivijanstefan",7,95040,100,79,"2026-04-04T01:08:17.394Z",[57,76,96,116,134],{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":67,"num_ratings":68,"last_updated":69,"tested_up_to":16,"requires_at_least":70,"requires_php":71,"tags":72,"homepage":74,"download_link":75,"security_score":53,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"cyr2lat","Cyr-To-Lat","6.6.0","Sergey Biryukov","https:\u002F\u002Fprofiles.wordpress.org\u002Fsergeybiryukov\u002F","\u003Cp>Converts Cyrillic characters in post, page and term slugs to Latin characters. Useful for creating human-readable URLs.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>The only plugin with a fully editable transliteration table. Allows to add\u002Fremove and edit pairs like ‘Я’ => ‘Ya’, or even ‘Пиво’ => ‘Beer’\u003C\u002Fli>\n\u003Cli>Converts any number of existing post, page and term slugs in background processes\u003C\u002Fli>\n\u003Cli>Saves existing post and page permalinks integrity\u003C\u002Fli>\n\u003Cli>Performs transliteration of attachment file names\u003C\u002Fli>\n\u003Cli>The plugin supports Russian, Belorussian, Ukrainian, Bulgarian, Macedonian, Serbian, Greek, Armenian, Georgian, Kazakh, Hebrew, and Chinese characters\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fkagg.eu\u002Fen\u002Fthe-benefits-of-cyr-to-lat\u002F\" rel=\"nofollow ugc\">Has many advantages over similar plugins\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwpml.org\u002Fplugin\u002Fcyr-to-lat\u002F\" rel=\"nofollow ugc\">Officially compatible with WPML\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Based on the original Rus-To-Lat plugin by Anton Skorobogatov.\u003C\u002Fp>\n\u003Cp>Sponsored by \u003Ca href=\"https:\u002F\u002Fwww.blackfire.io\u002F\" rel=\"nofollow ugc\">Blackfire\u003C\u002Fa>.\u003C\u002Fp>\n\u003C\u002Fp>\n\u003Ch3>Plugin Support\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fcyr2lat\u002F\" rel=\"ugc\">Support Forum\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ft.me\u002Fcyr2lat\" rel=\"nofollow ugc\">Telegram Group\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Convert Non-Latin characters in post, page and term slugs to Latin characters.",300000,3066822,94,97,"2025-11-30T21:51:00.000Z","5.3","7.2",[20,22,73,23],"translation","https:\u002F\u002Fkagg.eu\u002Fcyr-to-lat\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcyr2lat.6.6.0.zip",{"slug":77,"name":78,"version":79,"author":80,"author_profile":81,"description":82,"short_description":83,"active_installs":84,"downloaded":85,"rating":53,"num_ratings":51,"last_updated":86,"tested_up_to":87,"requires_at_least":88,"requires_php":89,"tags":90,"homepage":93,"download_link":94,"security_score":95,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"bulglish-permalinks","Bulglish Permalinks","1.4.2","Boyan Raichev","https:\u002F\u002Fprofiles.wordpress.org\u002Fstudioreforma\u002F","\u003Cp>This plugin converts Bulgarian cyrillic characters in slugs and filenames to Latin characters, according to the official rules for transliteration. Cyrillic letters in URLs, while supported, are ugly and when copy\u002Fpasted around the internet are often encoded (converted to those ugly URLs looking like %DU^ED%…)\u003C\u002Fp>\n\u003Cp>The plugin automatically converts slugs when a post is created or updated. It also automatically will convert cyrillic characters in filenames, upon media upload. The filename conversion can be disabled through wp-config.php\u003C\u002Fp>\n\u003Cp>It will also work for Russian permalinks, as it matches all the letters in the Russian alphabet, although the user should have in mind that there are minor differences in the common transliterations rules in the two languages.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Automatically converts existing post, page and taxonomy slugs when you save them\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin converts Bulgarian cyrillic characters in slugs and filenames to Latin characters, according to the official rules for transliteration.",3000,8077,"2019-01-05T13:43:00.000Z","5.0.25","3.0.1","",[91,92,20,22,23],"bulgarian","bulgarian-permalink","https:\u002F\u002Fgithub.com\u002Ftalkingaboutthis\u002Fbulglish-permalinks","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbulglish-permalinks.1.4.2.zip",85,{"slug":97,"name":98,"version":99,"author":100,"author_profile":101,"description":102,"short_description":103,"active_installs":104,"downloaded":105,"rating":106,"num_ratings":107,"last_updated":108,"tested_up_to":109,"requires_at_least":110,"requires_php":89,"tags":111,"homepage":114,"download_link":115,"security_score":95,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"sp-rtl-rus-to-lat","SP RTL (RusToLat)","1.0.5","Alex Kuimov","https:\u002F\u002Fprofiles.wordpress.org\u002Fspoot1986\u002F","\u003Cp>This plugin converts Cyrillic characters in post, page slugs to Latin characters.\u003C\u002Fp>\n","This plugin converts Cyrillic characters in post, page slugs to Latin characters.",2000,25640,74,3,"2019-03-08T19:37:00.000Z","4.9.29","4.5.3",[21,112,22,113,23],"rustolat","translations","https:\u002F\u002Fcms3.ru\u002Fkirillicu-v-latinicu-wordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsp-rtl-rus-to-lat.zip",{"slug":117,"name":118,"version":119,"author":120,"author_profile":121,"description":122,"short_description":123,"active_installs":124,"downloaded":125,"rating":106,"num_ratings":107,"last_updated":126,"tested_up_to":127,"requires_at_least":128,"requires_php":129,"tags":130,"homepage":132,"download_link":133,"security_score":53,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"cyrillic-slugs","Cyrillic Permalinks","2.0.5","pbosakov","https:\u002F\u002Fprofiles.wordpress.org\u002Fpbosakov\u002F","\u003Cp>This plugin will automatically transliterate permalink URLs when you save a new page or post with a title in the Cyrillic script.\u003Cbr \u002F>\nRomanization presets are available for all the major languages using the Cyrillic script: Russian, Ukrainian, Kazakh, Belarussian, Serbian, Tajik, Bulgarian, Kyrgyz, Bosnian, Mongolian, and Macedonian.\u003Cbr \u002F>\nThe plugin can also romanize permalinks for any pre-existing posts, categories, products or other items with a title written in Cyrillic.\u003Cbr \u002F>\nOnly UTF-8 encoding is supported.\u003C\u002Fp>\n","Automatically transliterates Cyrillic letters in permalinks to their Latin phonetic equivalent. Multi-language. Can convert pre-existing permalinks.",300,15802,"2025-06-26T13:01:00.000Z","6.8.5","2.0.2","5.6",[91,20,131,21,22],"permalinks","http:\u002F\u002Fbossakov.eu\u002Fcyrillic-permalinks","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcyrillic-slugs.2.0.5.zip",{"slug":135,"name":136,"version":137,"author":138,"author_profile":139,"description":140,"short_description":141,"active_installs":142,"downloaded":143,"rating":53,"num_ratings":28,"last_updated":144,"tested_up_to":145,"requires_at_least":146,"requires_php":89,"tags":147,"homepage":149,"download_link":150,"security_score":95,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"rus-to-eng","Rus-to-Eng","1.3","marapper","https:\u002F\u002Fprofiles.wordpress.org\u002Fmarapper\u002F","\u003Cp>TRANSLATE russian words from post and term slugs to english, or, if Google service is anavaible convert cyrillic in latin. Useful for creating human-readable URLs.\u003C\u002Fp>\n\u003Cp>Work finely with \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fcyr2lat\u002F\" rel=\"ugc\">Cyr-To-Lat\u003C\u002Fa> (if Google service is anavaible convert cyrillic in latin).\u003C\u002Fp>\n\u003Cp>Based on idea \u003Ca href=\"http:\u002F\u002Fneverlex.com\u002Fcat\u002Fprogramming\u002Ffunction-generating-handsome-friendly-url\u002F\" rel=\"nofollow ugc\">NeverLex\u003C\u002Fa> and the original plugin Cyr-To-Lat by Atrax, SergeyBiryukov, Anton Skorobogatov. Thanks to Alexander Shilyaev for the idea. (regexp: \u003Ca href=\"http:\u002F\u002Fiskariot.ru\" rel=\"nofollow ugc\">Sergey M.\u003C\u002Fa> && \u003Ca href=\"http:\u002F\u002Fwp-kama.ru\" rel=\"nofollow ugc\">Kama\u003C\u002Fa>, first plugin: \u003Ca href=\"http:\u002F\u002F1-sites.info\" rel=\"nofollow ugc\">Pensioner\u003C\u002Fa>)\u003C\u002Fp>\n\u003Cp>В отличие от оригинального плагина Cyr-To-Lat, этот плагин не транслитерирует слаги постов и тегов, но переводит их с помощью Google Translate (если тот недоступен – тогда работает транслитерация). Рекомендуется использовать с \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fcyr2lat\u002F\" rel=\"ugc\">Cyr-To-Lat\u003C\u002Fa> – в случае недоступности сервиса будет обеспечена транслитерация слагов (а также транслитерация имен файлов), также это обеспечит доступность старых постов.\u003C\u002Fp>\n","Useful for creating human-readable URLs.",40,7075,"2010-10-29T10:41:00.000Z","3.0.5","2.3",[148,21,22,113,23],"l10n","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Frus-to-eng\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frus-to-eng.1.3.zip",{"attackSurface":152,"codeSignals":174,"taintFlows":182,"riskAssessment":183,"analyzedAt":193},{"hooks":153,"ajaxHandlers":170,"restRoutes":171,"shortcodes":172,"cronEvents":173,"entryPointCount":29,"unprotectedCount":29},[154,161,166],{"type":155,"name":156,"callback":157,"priority":158,"file":159,"line":160},"filter","plugin_row_meta","plugin_meta",10,"cyr-to-lat.php",70,{"type":155,"name":162,"callback":163,"priority":164,"file":159,"line":165},"sanitize_title","filter_sanitize_title",9,71,{"type":155,"name":167,"callback":168,"priority":158,"file":159,"line":169},"sanitize_file_name","filter_sanitize_file_name",72,[],[],[],[],{"dangerousFunctions":175,"sqlUsage":176,"outputEscaping":178,"fileOperations":29,"externalRequests":28,"nonceChecks":29,"capabilityChecks":29,"bundledLibraries":181},[],{"prepared":29,"raw":29,"locations":177},[],{"escaped":179,"rawEcho":29,"locations":180},4,[],[],[],{"summary":184,"deductions":185},"The static analysis of the 'cyr3lat' v3.7.3 plugin reveals a generally positive security posture, with no identified dangerous functions, no raw SQL queries, and all output properly escaped. The absence of identified taint flows and file operations further contributes to this strong foundation. However, a notable concern is the complete lack of nonce checks and capability checks across all identified entry points. While the current static analysis shows zero unprotected entry points, this absence of authentication and authorization checks is a significant weakness that could be exploited if any new entry points are introduced or if the existing ones have overlooked vulnerabilities.\n\nThe vulnerability history shows one past high-severity SQL injection vulnerability, which was fortunately patched. The fact that this was the last known vulnerability and is currently unpatched is a positive sign. However, the historical presence of an SQL injection highlights a past area of weakness, and while addressed, it suggests a need for continued vigilance in input validation and sanitization, especially considering the lack of robust authentication mechanisms noted in the static analysis.\n\nIn conclusion, the 'cyr3lat' plugin exhibits good practices regarding function usage, SQL query safety, and output escaping. Its vulnerability history is also encouraging with no currently unpatched CVEs. The primary areas for improvement lie in implementing comprehensive nonce and capability checks to ensure proper authentication and authorization, thereby bolstering its overall security against potential future threats.",[186,189,191],{"reason":187,"points":188},"No nonce checks found",15,{"reason":190,"points":188},"No capability checks found",{"reason":192,"points":158},"Past high severity SQL injection vulnerability","2026-03-16T17:10:54.517Z",{"wat":195,"direct":204},{"assetPaths":196,"generatorPatterns":199,"scriptPaths":200,"versionParams":201},[197,198],"\u002Fwp-content\u002Fplugins\u002Fcyr3lat\u002Fcss\u002Fmain.css","\u002Fwp-content\u002Fplugins\u002Fcyr3lat\u002Fjs\u002Fmain.js",[],[198],[202,203],"cyr3lat\u002Fcss\u002Fmain.css?ver=","cyr3lat\u002Fjs\u002Fmain.js?ver=",{"cssClasses":205,"htmlComments":206,"htmlAttributes":207,"restEndpoints":208,"jsGlobals":209,"shortcodeOutput":210},[],[],[],[],[],[]]