[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fiSVsR7tburQ7HSgWOUvJFZ5Vjv9mUw8QkD_BcPS52QA":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":123,"crawl_stats":36,"alternatives":130,"analysis":229,"fingerprints":425},"debug-log-manager","Debug Log Manager – Conveniently Monitor and Inspect Errors","2.4.3","Bowo","https:\u002F\u002Fprofiles.wordpress.org\u002Fqriouslad\u002F","\u003Cp>Debug Log Manager allows you to:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Enable \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Farticle\u002Fdebugging-in-wordpress\u002F\" rel=\"ugc\">WP_DEBUG\u003C\u002Fa> with one click to log PHP, database and JavaScript errors\u003C\u002Fstrong> when you need to, and disable it when you’re done. No need to manually edit wp-config.php file. \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Create the debug.log file for you\u003C\u002Fstrong> in a non-default location with a custom file name for enhanced security. \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Copy the content of the default \u002F existing debug.log file\u003C\u002Fstrong> into the custom debug.log file, and delete the default \u002F existing debug.log file. So there is continuation in logging and enhanced security going forward.\u003C\u002Fli>\n\u003Cli>Parse the debug.log file and \u003Cstrong>view distinct errors and when they last occurred\u003C\u002Fstrong>, which is better than looking at the raw log file (potentially) full of repetitive errors. \u003C\u002Fli>\n\u003Cli>\u003Cstrong>Quickly find and filter more specific errors\u003C\u002Fstrong> for your debugging work.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Make error details easier to read\u003C\u002Fstrong> by identifying error source (core \u002F plugin \u002F theme) and separating file path and line number.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Easily view files where PHP errors occurred\u003C\u002Fstrong>. This includes WordPress core, plugin and theme files.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Enable auto-refresh\u003C\u002Fstrong> to automatically load new log entries. No need to manually reload the browser tab, or to \u003Ccode>tail -f\u003C\u002Fcode> the log file on the command line.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Easily clear the debug.log file\u003C\u002Fstrong> to save disk space and more easily observe newly occurring errors on your site.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Show an indicator on the admin bar\u003C\u002Fstrong> when error logging is enabled.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Add a dashboard widget\u003C\u002Fstrong> showing the latest errors logged.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Use \u003Ccode>error_log()\u003C\u002Fcode>\u003C\u002Fstrong> to output error info into your debug log. e.g. \u003Ccode>error_log( $error_message )\u003C\u002Fcode> for simple, string-based error message, or \u003Ccode>error_log( json_encode( $error ) )\u003C\u002Fcode> when inspecting a more complex error info, e.g. array or object.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>A simpler and more compact version of Debug Log Manager is included as part of the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsystem-dashboard\u002F\" rel=\"ugc\">System Dashboard plugin\u003C\u002Fa>, should you prefer a single plugin that does more.\u003C\u002Fp>\n\u003Ch3>What Users Say\u003C\u002Fh3>\n\u003Cp>\u003Cem>“This is \u003Cstrong>a great plugin for dev\u003C\u002Fstrong> especially for people who tinker in the code.”\u003C\u002Fem> ~\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Ftopic\u002Fgreat-for-dev\u002F\" rel=\"ugc\">PK Son\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cem>“I have used a couple of other logger plugins and \u003Cstrong>this is by far the best one\u003C\u002Fstrong>.”\u003C\u002Fem> ~\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Ftopic\u002Fmust-have-plugin-485\u002F\" rel=\"ugc\">Brian Henry\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cem>“\u003Cstrong>Another massive time-saving tool.\u003C\u002Fstrong>“\u003C\u002Fem> ~\u003Ca href=\"https:\u002F\u002Fdigwp.com\u002F2023\u002F06\u002Fplugins-troubleshoot-debug-wordpress\u002F\" rel=\"nofollow ugc\">Jeff Starr\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Give Back\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbowo.io\u002Freview-dlm\" rel=\"nofollow ugc\">A nice review\u003C\u002Fa> would be great!\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbowo.io\u002Ffeedback-dlm\" rel=\"nofollow ugc\">Give feedback\u003C\u002Fa> and help improve future versions.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fdebug-log-manager\u002F\" rel=\"nofollow ugc\">Help translate\u003C\u002Fa> into your language.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbowo.io\u002Fgithub-dlm\" rel=\"nofollow ugc\">Github repo\u003C\u002Fa> to contribute code.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbowo.io\u002Fdotorg-sponsor-dlm\" rel=\"nofollow ugc\">Sponsor\u003C\u002Fa> my work.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Check These Out Too\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsystem-dashboard\u002F\" rel=\"ugc\">System Dashboard\u003C\u002Fa>: Central dashboard to monitor various WordPress components, processes and data, including the server.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fvariable-inspector\u002F\" rel=\"ugc\">Variable Inspector\u003C\u002Fa>: Inspect PHP variables on a central dashboard in wp-admin for convenient debugging.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fadmin-site-enhancements\u002F\" rel=\"ugc\">Admin and Site Enhancements\u003C\u002Fa> helps you to easily enhance various admin workflows and site aspects while replacing multiple plugins doing it.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wpnewsboard.com\u002F\" rel=\"nofollow ugc\">WordPress Newsboard\u003C\u002Fa>: The latest news, articles, podcasts and videos from 100+ WordPress-focused sources.\u003C\u002Fli>\n\u003C\u002Ful>\n","Log PHP, database and JavaScript errors via WP_DEBUG with one click. Conveniently create, view, filter and clear the debug.log file.",10000,116535,100,24,"2025-09-24T02:30:00.000Z","6.8.5","4.6","5.6",[20,21,22],"debug","developer","errors","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdebug-log-manager\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdebug-log-manager.2.4.3.zip",91,7,0,"2025-04-18 00:00:00","2026-03-15T15:16:48.613Z",[31,47,63,74,83,98,112],{"id":32,"url_slug":33,"title":34,"description":35,"plugin_slug":4,"theme_slug":36,"affected_versions":37,"patched_in_version":38,"severity":39,"cvss_score":40,"cvss_vector":41,"vuln_type":42,"published_date":28,"updated_date":43,"references":44,"days_to_patch":46},"CVE-2025-3809","debug-log-manager-unauthenticated-stored-cross-site-scripting-2","Debug Log Manager \u003C= 2.3.4 - Unauthenticated Stored Cross-Site Scripting","The Debug Log Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the auto-refresh debug log in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. CVE-2025-32613 is a duplicate of this CVE.",null,"\u003C=2.3.4","2.3.5","high",7.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-04-21 20:20:37",[45],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fcbc3210d-224e-4ed2-ada7-dc17deb17584?source=api-prod",4,{"id":48,"url_slug":49,"title":50,"description":51,"plugin_slug":4,"theme_slug":36,"affected_versions":52,"patched_in_version":53,"severity":54,"cvss_score":55,"cvss_vector":56,"vuln_type":57,"published_date":58,"updated_date":59,"references":60,"days_to_patch":62},"CVE-2024-35669","debug-log-manager-missing-authorization","Debug Log Manager \u003C= 2.3.1 - Missing Authorization","The Debug Log Manager plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the get_latest_entries and disable_wp_file_editor functions in versions up to, and including, 2.3.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to get entries and disable the wp file editor.","\u003C=2.3.1","2.3.2","medium",5.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N","Missing Authorization","2024-06-03 00:00:00","2024-06-11 18:39:09",[61],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F133a6fe8-e011-4749-b95d-e41a03a50aab?source=api-prod",9,{"id":64,"url_slug":65,"title":66,"description":67,"plugin_slug":4,"theme_slug":36,"affected_versions":52,"patched_in_version":53,"severity":54,"cvss_score":68,"cvss_vector":69,"vuln_type":57,"published_date":70,"updated_date":71,"references":72,"days_to_patch":62},"CVE-2024-33915","debug-log-manager-missing-authorization-via-toggledebugging","Debug Log Manager \u003C= 2.3.1 - Missing Authorization via toggle_debugging","The Debug Log Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the toggle_debugging function in versions up to, and including, 2.3.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to toggle debugging.",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N","2024-04-29 00:00:00","2024-05-07 14:10:59",[73],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F48cb5d7b-afbc-4387-ad32-13d2fcb19061?source=api-prod",{"id":75,"url_slug":76,"title":77,"description":78,"plugin_slug":4,"theme_slug":36,"affected_versions":52,"patched_in_version":53,"severity":39,"cvss_score":40,"cvss_vector":41,"vuln_type":42,"published_date":79,"updated_date":80,"references":81,"days_to_patch":62},"CVE-2024-32582","debug-log-manager-unauthenticated-stored-cross-site-scripting","Debug Log Manager \u003C= 2.3.1 - Unauthenticated Stored Cross-Site Scripting","The Debug Log Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","2024-04-16 00:00:00","2024-04-24 15:36:17",[82],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F16d1eb4a-c68a-43b9-a514-d8751687709a?source=api-prod",{"id":84,"url_slug":85,"title":86,"description":87,"plugin_slug":4,"theme_slug":36,"affected_versions":88,"patched_in_version":89,"severity":54,"cvss_score":90,"cvss_vector":91,"vuln_type":92,"published_date":93,"updated_date":94,"references":95,"days_to_patch":97},"CVE-2023-6383","debug-log-manager-directory-listing-to-sensitive-information-disclosure","Debug Log Manager \u003C= 2.2.2 - Directory Listing to Sensitive Information Disclosure","The Debug Log Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.2 due to directory listing allowed in the folder housing debug logs. This makes it possible for unauthenticated attackers to extract data from debug logs.","\u003C=2.2.2","2.3.0",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N","Exposure of Sensitive Information to an Unauthorized Actor","2023-12-13 00:00:00","2024-02-06 16:23:43",[96],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F53dfe8e5-5f13-4c8c-a62e-9da57379da7a?source=api-prod",56,{"id":99,"url_slug":100,"title":101,"description":102,"plugin_slug":4,"theme_slug":36,"affected_versions":103,"patched_in_version":104,"severity":54,"cvss_score":68,"cvss_vector":105,"vuln_type":106,"published_date":107,"updated_date":108,"references":109,"days_to_patch":111},"CVE-2023-5772","debug-log-manager-cross-site-request-forgery","Debug Log Manager \u003C= 2.2.0 - Cross-Site Request Forgery","The Debug Log Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.1. This is due to missing or incorrect nonce validation on the clear_log() function. This makes it possible for unauthenticated attackers to clear the debug log via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.","\u003C=2.2.1","2.2.2","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2023-11-29 00:00:00","2024-01-22 19:56:02",[110],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F7e539549-1125-4b0e-aa3c-c8844041c23a?source=api-prod",55,{"id":113,"url_slug":114,"title":115,"description":116,"plugin_slug":4,"theme_slug":36,"affected_versions":103,"patched_in_version":104,"severity":54,"cvss_score":68,"cvss_vector":117,"vuln_type":57,"published_date":118,"updated_date":119,"references":120,"days_to_patch":122},"CVE-2023-6136","debug-log-manager-missing-authorization-2","Debug Log Manager \u003C= 2.2.1 - Missing Authorization","The Debug Log Manager plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the clear_log() function hooked via AJAX in all versions up to, and including, 2.2.1. This makes it possible for attackers, with subscriber-level access and above, to clear the debug logs.","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L","2023-11-23 00:00:00","2024-01-24 19:23:25",[121],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F33a54cae-0fa3-4c25-bf81-8423f5e01e84?source=api-prod",63,{"slug":124,"display_name":7,"profile_url":8,"plugin_count":26,"total_installs":125,"avg_security_score":126,"avg_patch_time_days":127,"trust_score":128,"computed_at":129},"qriouslad",211220,89,35,80,"2026-04-05T16:32:09.611Z",[131,152,169,189,209],{"slug":132,"name":133,"version":134,"author":135,"author_profile":136,"description":137,"short_description":138,"active_installs":139,"downloaded":140,"rating":13,"num_ratings":141,"last_updated":142,"tested_up_to":143,"requires_at_least":144,"requires_php":145,"tags":146,"homepage":150,"download_link":151,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":29},"error-logs-emailer-for-woocommerce","Error Logs Emailer for WooCommerce","1.2.4","Michal Slepko","https:\u002F\u002Fprofiles.wordpress.org\u002Fmslepko\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frootscopeltd\u002Fwc-error-logs-emailer\" rel=\"nofollow ugc\">Error Logs Emailer for WooCommerce\u003C\u002Fa> is a free plugin to send fatal error logged by WooCommerce\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Know what errors are happening on your site without constantly checking the logs\u003C\u002Fli>\n\u003Cli>Set the email where error logs should be sent if it’s not a site admin\u003C\u002Fli>\n\u003Cli>Add multiple email addresses\u003C\u002Fli>\n\u003Cli>Emails are sent at 5AM\u003C\u002Fli>\n\u003C\u002Ful>\n","Sends the previous day's WooCommerce fatal error log to specified email(s) using Action Scheduler.",20,1254,1,"2026-01-22T00:01:00.000Z","6.9.4","6.0","7.4",[20,147,148,22,149],"developers","error-log","woocommerce","https:\u002F\u002Fgithub.com\u002Frootscopeltd\u002Fwc-error-logs-emailer","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ferror-logs-emailer-for-woocommerce.1.2.4.zip",{"slug":153,"name":154,"version":155,"author":156,"author_profile":157,"description":158,"short_description":159,"active_installs":27,"downloaded":160,"rating":27,"num_ratings":27,"last_updated":161,"tested_up_to":143,"requires_at_least":162,"requires_php":145,"tags":163,"homepage":166,"download_link":167,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":168},"logmate","LogMate","1.0.0","Yoyal Limbu","https:\u002F\u002Fprofiles.wordpress.org\u002Fy0000el\u002F","\u003Cp>LogMate provides a modern interface for managing and exporting WordPress error and PHP\u002FJS logs. Monitor, filter, purge, and export your logs efficiently.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Modern admin interface\u003C\u002Fli>\n\u003Cli>Real-time log viewing with auto-refresh\u003C\u002Fli>\n\u003Cli>Advanced filtering and search capabilities\u003C\u002Fli>\n\u003Cli>Group duplicate errors with occurrence counts\u003C\u002Fli>\n\u003Cli>Identify error sources (Core\u002FPlugin\u002FTheme)\u003C\u002Fli>\n\u003Cli>Log purging by date or keep last N days\u002Fweeks\u002Fmonths\u003C\u002Fli>\n\u003Cli>Export logs with date range filtering\u003C\u002Fli>\n\u003Cli>Toggle debug logging with one click\u003C\u002Fli>\n\u003Cli>JavaScript error logging support\u003C\u002Fli>\n\u003Cli>Secure log file location\u003C\u002Fli>\n\u003C\u002Ful>\n","Modern log management and export for WordPress with purging, filtering, and export. by BruteFort",136,"2026-02-16T05:00:00.000Z","5.0",[20,21,22,164,165],"export","logging","https:\u002F\u002Fbrutefort.com\u002F#\u002Fproducts\u002Flogmate","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flogmate.1.0.0.zip","2026-03-15T14:54:45.397Z",{"slug":170,"name":171,"version":172,"author":173,"author_profile":174,"description":175,"short_description":176,"active_installs":177,"downloaded":178,"rating":13,"num_ratings":179,"last_updated":180,"tested_up_to":16,"requires_at_least":18,"requires_php":18,"tags":181,"homepage":185,"download_link":186,"security_score":187,"vuln_count":141,"unpatched_count":27,"last_vuln_date":188,"fetched_at":29},"debug-log-config-tool","Debug Log – Manager Tool","2.0.1","Lukman Nakib","https:\u002F\u002Fprofiles.wordpress.org\u002Fpyrobd\u002F","\u003Cp>A comprehensive debugging toolkit for WordPress developers and site administrators. This plugin gives you complete control over WordPress debugging without editing wp-config.php files or using FTP.\u003C\u002Fp>\n\u003Ch4>Quick Demo\u003C\u002Fh4>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FD4K5zsLnILw?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>WP-CLI Style Terminal\u003C\u002Fstrong>: Execute WordPress commands directly from your browser with syntax highlighting and auto-completion\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Database Tools\u003C\u002Fstrong>: Run SQL queries, view table structures, and optimize your database (super admin only)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Debug Constants Manager\u003C\u002Fstrong>: Toggle all WordPress debug constants with a single click\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Log Viewer\u003C\u002Fstrong>: View, filter, and analyze debug logs with syntax highlighting and error categorization\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Query Inspector\u003C\u002Fstrong>: Examine database queries with SAVEQUERIES support\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Email Notifications\u003C\u002Fstrong>: Get alerts when new errors appear in your logs\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Safe Mode\u003C\u002Fstrong>: Quickly disable all plugins except selected ones for troubleshooting\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Log Paths\u003C\u002Fstrong>: Set custom log file locations with filter support\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Debug Constants Available\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>WP_DEBUG\u003C\u002Fstrong> – Default Value: true – Enables WordPress debug mode\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WP_DEBUG_LOG\u003C\u002Fstrong> – Default Value: true – Saves all errors to a debug.log file\u003C\u002Fli>\n\u003Cli>\u003Cstrong>SCRIPT_DEBUG\u003C\u002Fstrong> – Default Value: false – Uses development versions of core JS and CSS files\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WP_DEBUG_DISPLAY\u003C\u002Fstrong> – Default Value: false – Controls whether debug messages display on screen\u003C\u002Fli>\n\u003Cli>\u003Cstrong>SAVEQUERIES\u003C\u002Fstrong> – Default Value: false – Saves database queries for analysis\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Developer Tools\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Terminal Commands\u003C\u002Fstrong>: Use WP-CLI style commands like \u003Ccode>wp core version\u003C\u002Fcode> or \u003Ccode>wp plugin list\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Database Explorer\u003C\u002Fstrong>: Run SELECT queries and view results in a formatted table\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Stack Trace Analysis\u003C\u002Fstrong>: Visualize error stack traces for easier debugging\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Hook Inspector\u003C\u002Fstrong>: View all registered hooks and their callbacks\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Environment Detection\u003C\u002Fstrong>: Development features are automatically hidden in production\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Developer API\u003C\u002Fstrong>: Apply custom filters like \u003Ccode>apply_filters('wp_debuglog_log_file_path', $file);\u003C\u002Fcode> to extend functionality\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>Please note: Constant values will be restored on plugin deactivation as it was before activating the plugin.\u003C\u002Fp>\n","The \"Debug Log Config Tool\" simplifies debugging. Toggle logging,queries , view levels, clear logs from dashboard.",3000,56110,21,"2025-04-30T19:04:00.000Z",[20,21,182,183,184],"log","remote-debug","tools","https:\u002F\u002Fnkb-bd.github.io\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdebug-log-config-tool.2.0.1.zip",99,"2024-05-20 00:00:00",{"slug":190,"name":191,"version":192,"author":193,"author_profile":194,"description":195,"short_description":196,"active_installs":197,"downloaded":198,"rating":199,"num_ratings":200,"last_updated":201,"tested_up_to":16,"requires_at_least":202,"requires_php":18,"tags":203,"homepage":207,"download_link":208,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":29},"debug-this","Debug This","0.6.7","Razvan Aldea","https:\u002F\u002Fprofiles.wordpress.org\u002Fraldea89\u002F","\u003Cp>For admins, developers, and support staff, \u003Cstrong>Debug This\u003C\u002Fstrong> provides a ton of information about your WordPress installation, all from the front-end admin bar.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cem>The current WP_Query object\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>Blog info and options\u003C\u002Fli>\n\u003Cli>Embed providers\u003C\u002Fli>\n\u003Cli>Files in rendered HTML (CSS, images, JavaScript)\u003C\u002Fli>\n\u003Cli>Filters and actions\u003C\u002Fli>\n\u003Cli>Images sizes\u003C\u002Fli>\n\u003Cli>Globals and constants\u003C\u002Fli>\n\u003Cli>Menus\u003C\u002Fli>\n\u003Cli>Object cache stats\u003C\u002Fli>\n\u003Cli>Plugins, must-use plugins, and dropins\u003C\u002Fli>\n\u003Cli>Rewrite rules\u003C\u002Fli>\n\u003Cli>Queries\u003C\u002Fli>\n\u003Cli>PHP and server information\u003C\u002Fli>\n\u003Cli>Post attachments\u003C\u002Fli>\n\u003Cli>Post types\u003C\u002Fli>\n\u003Cli>Scripts and styles enqueued\u003C\u002Fli>\n\u003Cli>Shortcodes\u003C\u002Fli>\n\u003Cli>Sidebars and widgets\u003C\u002Fli>\n\u003Cli>Taxonomies and terms\u003C\u002Fli>\n\u003Cli>Themes\u003C\u002Fli>\n\u003Cli>Users\u003C\u002Fli>\n\u003Cli>WP cron schedules and jobs\u003C\u002Fli>\n\u003Cli>WP debug log\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Debug This\u003C\u002Fstrong> helps you save time and effort when trying to figure out what’s going on. Instead of hardcoding debug snippets or writing complex unit\u003Cbr \u002F>\ntests for small functionality, you can simply bring to the surface what you need right from the admin bar.\u003C\u002Fp>\n\u003Cp>For example, when viewing a single post, you can see:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>a list of post attachments,\u003C\u002Fli>\n\u003Cli>which menus and sidebars are being displayed,\u003C\u002Fli>\n\u003Cli>the post type, post fields, and meta data,\u003C\u002Fli>\n\u003Cli>the current query variables and query string,\u003C\u002Fli>\n\u003Cli>the rewrite rules applied,\u003C\u002Fli>\n\u003Cli>the author,\u003C\u002Fli>\n\u003Cli>the terms,\u003C\u002Fli>\n\u003Cli>and much more.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Extend\u003C\u002Fh3>\n\u003Ch4>Debug This Functions\u003C\u002Fh4>\n\u003Cp>New debug modes can be created easily:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_debug_extension(\n    $mode,\n    $menu_label,\n    $description,\n    $callback,\n    $group = 'General'\n);\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Example\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_debug_extension(\n    'actions',\n    __('Actions', 'debug-this'),\n    __('$wp_actions contains all active registered actions', 'debug-this'),\n    'foo_callback',\n    'Filters And Actions'\n);\nfunction foo_callback($buffer, $template){\n    global $wp_actions;\n    $debug = print_r($wp_actions, true);\n    return $debug;\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>You can add links to the header of a debug mode page. Place this code within your debug callback function.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_debug_header_link('http:\u002F\u002Furltolink', 'Link Label');\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Extensions can be removed as well using \u003Ccode>remove_debug_extension($mode);\u003C\u002Fcode>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>No PRE Tags\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>If you don’t want your debug output to be enclosed in PRE tags, simply set the following in your extension:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>Debug_This::$no_pre = true;\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Saved Queries and Execution Time\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Retrieve saved queries and execution time by using the following static properties:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>Debug_This::$execution_time\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>Debug_This::$queries\u003C\u002Fcode> – SAVEQUERIES must defined as true\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>URL Helpers\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>Debug_This::get_current_debug_url()\u003C\u002Fcode> – current URL with the debug query\u003C\u002Fli>\n\u003Cli>\u003Ccode>Debug_This::get_escape_url()\u003C\u002Fcode> – used for the debug escape link that links to original page URL\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>WP Actions\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ccode>debug_this\u003C\u002Fcode> – receives the $mode arg – outputs the debug code sent from the extension modes. The default action is set to priority 5. This allows you to prepend or append any output without conflict using less or greater priorities.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>WP Filters\u003C\u002Fh4>\n\u003Cp>There are a few filters you can use to customize Debug This to your needs:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>debug_this_template\u003C\u002Fcode> – receives $template arg – Use your own template\u003C\u002Fli>\n\u003Cli>\u003Ccode>debug_this_default_mode\u003C\u002Fcode>  – receives $mode arg – Alters the mode for the parent DT admin bar button link.\u003C\u002Fli>\n\u003Cli>\u003Ccode>debug_this_output\u003C\u002Fcode> – receives $output, $mode args – Filter debug content before it’s rendered\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>JavaScript\u003C\u002Fh4>\n\u003Cp>To access the built-in Debug This JS functionality, enqueue your custom script with the dependency set to \u003Ccode>debug-this\u003C\u002Fcode>. Your script will inherit a jQuery dependency.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Object: debugThis\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>debugThis.mode\u003C\u002Fcode> – current mode\u003C\u002Fli>\n\u003Cli>\u003Ccode>debugThis.defaultMode\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>debugThis.template\u003C\u002Fcode> – current included template\u003C\u002Fli>\n\u003Cli>\u003Ccode>debugThis.queryVar\u003C\u002Fcode> – the defined query string variable\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Functions:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>isDebug()\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>getDebugMode()\u003C\u002Fcode> – uses \u003Ccode>isDebug()\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Events:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>A jQuery \u003Ccode>debug-this\u003C\u002Fcode> event is fired from the footer. You can hook into this event with the following;\u003C\u002Fp>\n\u003Cpre>\u003Ccode>jQuery(document).bind('debug-this', function(event, debugThis){\n    console.log(debugThis);\n});\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>Helper Functions\u003C\u002Fh4>\n\u003Cp>There are three included functions to help you work with files.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>debug_this_get_file_ownership($file)\u003C\u002Fcode> – returns \u003Ccode>array('name' => $name, 'group' => $group)\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>debug_this_get_file_perms($file)\u003C\u002Fcode> – returns string – Example: 0775\u003C\u002Fli>\n\u003Cli>\u003Ccode>debug_this_convert_perms_to_rwx($perms)\u003C\u002Fcode> – returns string – converts permission number to RWX format – Example: 0755 folder becomes drwxr-xr-x\u003C\u002Fli>\n\u003C\u002Ful>\n","Peek under the hood with sixty debugging reports just one click away.",2000,158436,96,17,"2025-06-04T08:56:00.000Z","5.2",[20,204,21,205,206],"debugger","hooks","query","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdebug-this.0.6.7.zip",{"slug":210,"name":211,"version":212,"author":213,"author_profile":214,"description":215,"short_description":216,"active_installs":217,"downloaded":218,"rating":13,"num_ratings":219,"last_updated":220,"tested_up_to":221,"requires_at_least":222,"requires_php":207,"tags":223,"homepage":226,"download_link":227,"security_score":228,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":29},"debug-bar-console","Debug Bar Console","0.3.1","Drew Jaynes","https:\u002F\u002Fprofiles.wordpress.org\u002Fdrewapicture\u002F","\u003Cp>Adds a PHP\u002FSQL console to the debug bar. Requires the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fdebug-bar\u002F\" rel=\"ugc\">Debug Bar plugin\u003C\u002Fa> (v0.5 or later).\u003C\u002Fp>\n","Adds a PHP\u002FSQL console to the Debug Bar. Requires the Debug Bar plugin.",1000,211737,5,"2024-10-27T20:43:00.000Z","6.7.5","3.1",[224,225,21],"console","debugging","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fdebug-bar-console\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdebug-bar-console.0.3.1.zip",92,{"attackSurface":230,"codeSignals":318,"taintFlows":363,"riskAssessment":410,"analyzedAt":424},{"hooks":231,"ajaxHandlers":282,"restRoutes":314,"shortcodes":315,"cronEvents":316,"entryPointCount":317,"unprotectedCount":317},[232,238,242,246,251,255,259,262,265,269,273,276,279],{"type":233,"name":234,"callback":235,"file":236,"line":237},"action","admin_menu","register_admin_menu","bootstrap.php",47,{"type":233,"name":239,"callback":240,"priority":27,"file":236,"line":241},"admin_notices","suppress_admin_notices",50,{"type":233,"name":243,"callback":244,"priority":27,"file":236,"line":245},"all_admin_notices","suppress_generic_notices",51,{"type":247,"name":248,"callback":249,"file":236,"line":250},"filter","admin_footer_text","footer_text",61,{"type":247,"name":252,"callback":253,"priority":139,"file":236,"line":254},"update_footer","footer_version_text",64,{"type":233,"name":256,"callback":257,"file":236,"line":258},"admin_enqueue_scripts","admin_scripts",68,{"type":233,"name":256,"callback":260,"file":236,"line":261},"plugin_editor_scripts",76,{"type":233,"name":256,"callback":263,"file":236,"line":264},"theme_editor_scripts",81,{"type":233,"name":266,"callback":267,"priority":13,"file":236,"line":268},"admin_bar_menu","admin_bar_icon",97,{"type":233,"name":270,"callback":271,"file":236,"line":272},"wp_dashboard_setup","add_dashboard_widget",102,{"type":233,"name":256,"callback":274,"file":236,"line":275},"admin_bar_icon_css",105,{"type":233,"name":277,"callback":274,"file":236,"line":278},"wp_enqueue_scripts",106,{"type":233,"name":277,"callback":280,"file":236,"line":281},"public_scripts",109,[283,287,290,293,296,299,302,305,308,311],{"action":284,"nopriv":285,"callback":284,"hasNonce":285,"hasCapCheck":285,"file":236,"line":286},"toggle_debugging",false,114,{"action":288,"nopriv":285,"callback":288,"hasNonce":285,"hasCapCheck":285,"file":236,"line":289},"toggle_autorefresh",115,{"action":291,"nopriv":285,"callback":291,"hasNonce":285,"hasCapCheck":285,"file":236,"line":292},"get_latest_entries",116,{"action":294,"nopriv":285,"callback":294,"hasNonce":285,"hasCapCheck":285,"file":236,"line":295},"clear_log",117,{"action":297,"nopriv":285,"callback":297,"hasNonce":285,"hasCapCheck":285,"file":236,"line":298},"disable_wp_file_editor",118,{"action":300,"nopriv":285,"callback":300,"hasNonce":285,"hasCapCheck":285,"file":236,"line":301},"toggle_js_error_logging",119,{"action":303,"nopriv":285,"callback":303,"hasNonce":285,"hasCapCheck":285,"file":236,"line":304},"toggle_script_debug_modification_status",120,{"action":306,"nopriv":285,"callback":306,"hasNonce":285,"hasCapCheck":285,"file":236,"line":307},"toggle_process_non_utc_timezones_status",121,{"action":309,"nopriv":285,"callback":309,"hasNonce":285,"hasCapCheck":285,"file":236,"line":310},"log_js_errors",122,{"action":309,"nopriv":312,"callback":309,"hasNonce":285,"hasCapCheck":285,"file":236,"line":313},true,123,[],[],[],10,{"dangerousFunctions":319,"sqlUsage":320,"outputEscaping":322,"fileOperations":357,"externalRequests":27,"nonceChecks":62,"capabilityChecks":358,"bundledLibraries":359},[],{"prepared":27,"raw":27,"locations":321},[],{"escaped":111,"rawEcho":323,"locations":324},15,[325,328,330,332,335,337,339,341,343,345,347,349,351,353,355],{"file":236,"line":326,"context":327},287,"raw output",{"file":236,"line":329,"context":327},295,{"file":236,"line":331,"context":327},303,{"file":333,"line":334,"context":327},"classes\\class-debug-log.php",248,{"file":333,"line":336,"context":327},279,{"file":333,"line":338,"context":327},309,{"file":333,"line":340,"context":327},320,{"file":333,"line":342,"context":327},349,{"file":333,"line":344,"context":327},359,{"file":333,"line":346,"context":327},388,{"file":333,"line":348,"context":327},398,{"file":333,"line":350,"context":327},427,{"file":333,"line":352,"context":327},437,{"file":333,"line":354,"context":327},1648,{"file":333,"line":356,"context":327},1932,19,8,[360],{"name":361,"version":36,"knownCves":362},"DataTables",[],[364,382,390,402],{"entryPoint":365,"graph":366,"unsanitizedCount":27,"severity":381},"create_main_page (bootstrap.php:232)",{"nodes":367,"edges":379},[368,373],{"id":369,"type":370,"label":371,"file":236,"line":372},"n0","source","$_SERVER",235,{"id":374,"type":375,"label":376,"file":236,"line":377,"wp_function":378},"n1","sink","echo() [XSS]",274,"echo",[380],{"from":369,"to":374,"sanitized":312},"low",{"entryPoint":383,"graph":384,"unsanitizedCount":27,"severity":381},"\u003Cbootstrap> (bootstrap.php:0)",{"nodes":385,"edges":388},[386,387],{"id":369,"type":370,"label":371,"file":236,"line":372},{"id":374,"type":375,"label":376,"file":236,"line":377,"wp_function":378},[389],{"from":369,"to":374,"sanitized":312},{"entryPoint":391,"graph":392,"unsanitizedCount":141,"severity":381},"activate (classes\\class-activation.php:17)",{"nodes":393,"edges":400},[394,397],{"id":369,"type":370,"label":371,"file":395,"line":396},"classes\\class-activation.php",38,{"id":374,"type":375,"label":398,"file":395,"line":241,"wp_function":399},"update_option() [Settings Manipulation]","update_option",[401],{"from":369,"to":374,"sanitized":285},{"entryPoint":403,"graph":404,"unsanitizedCount":141,"severity":381},"\u003Cclass-activation> (classes\\class-activation.php:0)",{"nodes":405,"edges":408},[406,407],{"id":369,"type":370,"label":371,"file":395,"line":396},{"id":374,"type":375,"label":398,"file":395,"line":241,"wp_function":399},[409],{"from":369,"to":374,"sanitized":285},{"summary":411,"deductions":412},"The debug-log-manager plugin presents a mixed security posture. While it demonstrates good practices in SQL query handling, file operations, and a significant portion of output escaping, several significant concerns emerge. The most critical issue is the large attack surface composed of 10 AJAX handlers, all of which lack authorization checks. This makes it highly susceptible to unauthorized actions by unauthenticated users. Furthermore, the plugin's history of 7 known CVEs, including high-severity vulnerabilities like missing authorization, cross-site scripting, and information exposure, indicates a recurring pattern of security weaknesses. The recent vulnerability in 2025, even if currently patched, suggests that the plugin's development may not consistently prioritize security in its updates. While the absence of critical taint flows and raw SQL queries are positive, the extensive unprotected entry points and historical vulnerability record necessitate caution.",[413,415,417,419,421],{"reason":414,"points":317},"10 AJAX handlers without auth checks",{"reason":416,"points":317},"7 known CVEs (2 high, 5 medium)",{"reason":418,"points":219},"2 flows with unsanitized paths",{"reason":420,"points":219},"21% of outputs not properly escaped",{"reason":422,"points":423},"Bundled DataTables library",3,"2026-03-16T17:43:58.530Z",{"wat":426,"direct":441},{"assetPaths":427,"generatorPatterns":433,"scriptPaths":434,"versionParams":435},[428,429,430,431,432],"\u002Fwp-content\u002Fplugins\u002Fdebug-log-manager\u002Fassets\u002Fcss\u002Fdebug-log-manager.css","\u002Fwp-content\u002Fplugins\u002Fdebug-log-manager\u002Fassets\u002Fjs\u002Fdebug-log-manager.js","\u002Fwp-content\u002Fplugins\u002Fdebug-log-manager\u002Fassets\u002Fjs\u002Flog-viewer.js","\u002Fwp-content\u002Fplugins\u002Fdebug-log-manager\u002Fassets\u002Fjs\u002Fdist\u002Fdebug-log-manager.min.js","\u002Fwp-content\u002Fplugins\u002Fdebug-log-manager\u002Fassets\u002Fjs\u002Fdist\u002Flog-viewer.min.js",[],[429,430,431,432],[436,437,438,439,440],"debug-log-manager\u002Fassets\u002Fcss\u002Fdebug-log-manager.css?ver=","debug-log-manager\u002Fassets\u002Fjs\u002Fdebug-log-manager.js?ver=","debug-log-manager\u002Fassets\u002Fjs\u002Flog-viewer.js?ver=","debug-log-manager\u002Fassets\u002Fjs\u002Fdist\u002Fdebug-log-manager.min.js?ver=","debug-log-manager\u002Fassets\u002Fjs\u002Fdist\u002Flog-viewer.min.js?ver=",{"cssClasses":442,"htmlComments":445,"htmlAttributes":446,"restEndpoints":448,"jsGlobals":450,"shortcodeOutput":453},[443,444],"dlm-log-viewer","dlm-toolbar",[],[447],"data-dlm-ajax-url",[449],"\u002Fwp-json\u002Fdebug-log-manager\u002Fv1\u002Fsettings",[451,452],"dlm_ajax_object","DLM_LOG_VIEWER_CONFIG",[]]