[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZJgvvNblezP7lLV5BHw8WG0fv3bwtOcCr3fZQ3uNICo":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":45,"crawl_stats":36,"alternatives":53,"analysis":163,"fingerprints":223},"display-metadata","Display post meta, term meta, comment meta, and user meta","1.0.0","Manuel Canga","https:\u002F\u002Fprofiles.wordpress.org\u002Ftrasweb\u002F","\u003Cp>Displays metadata in a metabox on the creation\u002Fediting pages for posts (any CPT), terms (any taxonomy), and users.\u003Cbr \u002F>\nThe metadata is shown in a human-readable format, organized and unserialized. This metabox will only be visible to administrator\u003Cbr \u002F>\nusers or users with the \u003Ccode>display_metadata_metabox\u003C\u002Fcode> capability.\u003C\u002Fp>\n\u003Cp>As a developer, you often need to access and review the values of metadata (or properties) attached to posts, terms,\u003Cbr \u002F>\nusers, or comments. Whether it’s for debugging or optimizing custom functionalities, having a clear view of this data\u003Cbr \u002F>\nis essential for ensuring your code interacts correctly with the underlying WordPress objects.\u003C\u002Fp>\n\u003Cp>As a sysadmin, managing and cleaning up unnecessary meta fields is crucial for keeping the database lean and efficient.\u003Cbr \u002F>\nBy understanding which meta fields are currently in use across posts, terms, comments, and users, you can make informed\u003Cbr \u002F>\ndecisions about which metadata to remove, optimizing performance and preventing clutter in your system.\u003C\u002Fp>\n\u003Cp>As a plugin author, it’s important to verify that your plugin is creating and managing meta fields properly.\u003Cbr \u002F>\nThe Display Meta plugin allows you to inspect whether your plugin is adding the correct metadata and helps ensure\u003Cbr \u002F>\ncompatibility with other plugins that may also modify metadata.\u003C\u002Fp>\n\u003Cp>As a theme author, knowing which meta fields are available is key to leveraging them effectively in your theme designs.\u003Cbr \u002F>\nWhether you want to display custom fields in a template or use metadata for styling purposes, having direct access to\u003Cbr \u002F>\nthis information will enable you to create more dynamic and responsive themes.\u003C\u002Fp>\n\u003Cp>In all of these cases (and many more), the Display Meta plugin simplifies the process by displaying all relevant metadata\u003Cbr \u002F>\nin a human-readable format, right within the WordPress admin interface. With this tool, you can easily view, organize,\u003Cbr \u002F>\nand manage metadata without having to dig through the database or write custom queries.\u003C\u002Fp>\n\u003Ch3>Thanks\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Codection for \u003Ca href=\"https:\u002F\u002Fcodection.com\u002Fplugin-para-visualizar-metadatos-en-wordpress\u002F\" rel=\"nofollow ugc\">reviewing\u003C\u002Fa> this plugin.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Send me bugs or improvements\u003C\u002Fh3>\n\u003Cp>If you’re interested in contributing to Display Metadata, head to the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmanuelcanga\u002FDisplayMetadata\u002F\" rel=\"nofollow ugc\">Display Metadata GitHub Repository\u003C\u002Fa>.\u003C\u002Fp>\n","Displays metadata in a metabox on the creation\u002Fediting pages for posts (any CPT), terms (any taxonomy), and users. The metadata is shown in a human-re …",80,2834,0,"2024-11-16T17:00:00.000Z","6.7.0","4.9.0","8.1",[19,20,21,22,23],"custom-post-types","debug","metabox","metadata","taxonomy","https:\u002F\u002Fgithub.com\u002Fmanuelcanga\u002FDisplayMetadata","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdisplay-metadata.1.0.0.zip",71,1,"2023-05-30 00:00:00","2026-03-15T15:16:48.613Z",[31],{"id":32,"url_slug":33,"title":34,"description":35,"plugin_slug":4,"theme_slug":36,"affected_versions":37,"patched_in_version":36,"severity":38,"cvss_score":39,"cvss_vector":40,"vuln_type":41,"published_date":28,"updated_date":42,"references":43,"days_to_patch":36},"CVE-2023-1661","display-post-meta-term-meta-comment-meta-and-user-meta-authenticated-contributor-stored-cross-site-scripting","Display post meta, term meta, comment meta, and user meta \u003C= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting","The Display post meta, term meta, comment meta, and user meta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post metadata in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=1.0.0","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-11-19 23:48:57",[44],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F6f90c0d8-ede6-4f24-870f-19e888238e93?source=api-prod",{"slug":46,"display_name":7,"profile_url":8,"plugin_count":47,"total_installs":48,"avg_security_score":49,"avg_patch_time_days":50,"trust_score":51,"computed_at":52},"trasweb",3,100,90,30,87,"2026-04-04T08:45:32.694Z",[54,77,102,122,145],{"slug":55,"name":56,"version":57,"author":58,"author_profile":59,"description":60,"short_description":61,"active_installs":62,"downloaded":63,"rating":48,"num_ratings":27,"last_updated":64,"tested_up_to":65,"requires_at_least":66,"requires_php":64,"tags":67,"homepage":72,"download_link":73,"security_score":74,"vuln_count":27,"unpatched_count":27,"last_vuln_date":75,"fetched_at":76},"debug-meta-data","Debug Meta Data","1.1.2","Ahmad Awais","https:\u002F\u002Fprofiles.wordpress.org\u002Fmrahmadawais\u002F","\u003Cp>Creates a meta-box with meta-data information of a post for all post types. Information with meta key, meta value and its var_dump\u003C\u002Fp>\n\u003Cp>Install and activate the plugin and you’ll have the meta box for all post types (even the custom post types).\u003C\u002Fp>\n\u003Ch3>License & Conduct\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>MIT © \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002FMrAhmadAwais\u002F\" rel=\"nofollow ugc\">Ahmad Awais\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fahmadawais\u002Fdebug-meta-data\u002Fblob\u002Fmaster\u002Fcode-of-conduct.md\" rel=\"nofollow ugc\">Code of Conduct\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003C\u002Fp>\n","Creates a meta-box with meta-data information of a post for all post types. Information with meta key, meta value and its var_dump",40,5456,"","5.4.0","4.0.0",[20,68,69,70,71],"debug-meta","debug-metabox","meta-data","meta-data-custom-post-types","https:\u002F\u002Fgithub.com\u002FAhmadAwais\u002Fdebug-meta-data","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdebug-meta-data.1.1.2.zip",79,"2020-10-20 00:00:00","2026-03-15T10:48:56.248Z",{"slug":78,"name":79,"version":80,"author":81,"author_profile":82,"description":83,"short_description":84,"active_installs":85,"downloaded":86,"rating":87,"num_ratings":88,"last_updated":89,"tested_up_to":90,"requires_at_least":91,"requires_php":92,"tags":93,"homepage":97,"download_link":98,"security_score":99,"vuln_count":100,"unpatched_count":13,"last_vuln_date":101,"fetched_at":29},"custom-post-type-ui","Custom Post Type UI","1.18.3","webdevstudios","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebdevstudios\u002F","\u003Cp>Custom Post Type UI provides an easy-to-use interface for registering and managing custom post types and taxonomies for your website.\u003C\u002Fp>\n\u003Ch4>Custom Post Type UI Extended\u003C\u002Fh4>\n\u003Cp>CPTUI helps create custom content types, but displaying that content can be a whole new challenge. \u003Ca href=\"https:\u002F\u002Fpluginize.com\u002Fplugins\u002Fcustom-post-type-ui-extended\u002F?utm_source=cptui-desription&utm_medium=text&utm_campaign=wporg\" rel=\"nofollow ugc\">Custom Post Type UI Extended\u003C\u002Fa> was created to help with displaying your crafted content. \u003Ca href=\"https:\u002F\u002Fpluginize.com\u002Fcpt-ui-extended-features\u002F?utm_source=cptui-description-examples&utm_medium=text&utm_campaign=wporg\" rel=\"nofollow ugc\">View our Layouts page\u003C\u002Fa> to see available layout examples with Custom Post Type UI Extended.\u003C\u002Fp>\n\u003Ch4>Plugin development\u003C\u002Fh4>\n\u003Cp>Custom Post Type UI development is managed on GitHub, with official releases published on WordPress.org. The GitHub repo can be found at \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FWebDevStudios\u002Fcustom-post-type-ui\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002FWebDevStudios\u002Fcustom-post-type-ui\u003C\u002Fa>. Please use the WordPress.org support tab for potential bugs, issues, or enhancement ideas.\u003C\u002Fp>\n","Admin UI for creating custom content types like post types and taxonomies",1000000,22529808,92,273,"2026-01-08T20:43:00.000Z","6.9.4","6.6","7.4",[94,19,95,23,96],"content-types","post-type","types","https:\u002F\u002Fgithub.com\u002FWebDevStudios\u002Fcustom-post-type-ui\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-post-type-ui.1.18.3.zip",93,4,"2025-12-12 00:00:00",{"slug":103,"name":104,"version":105,"author":106,"author_profile":107,"description":108,"short_description":109,"active_installs":110,"downloaded":111,"rating":112,"num_ratings":113,"last_updated":114,"tested_up_to":115,"requires_at_least":116,"requires_php":64,"tags":117,"homepage":120,"download_link":121,"security_score":48,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":29},"essential-content-types","Essential Content Types","2.3","Catch Themes","https:\u002F\u002Fprofiles.wordpress.org\u002Fcatchthemes\u002F","\u003Cp>\u003Cstrong>Essential Content Types\u003C\u002Fstrong> allows you to feature the impressive content through different content\u002Fpost types on your website just the way you want it. These content\u002Fpost types are missed by the themes in WordPress Theme Directory as the feature falls more towards the plugins’ territory.\u003C\u002Fp>\n\u003Cp>Content is at the forefront of any website. Changing the layout of your important content changes the way your website looks, which may not be a plus point if your current website layout is loved by your users.\u003C\u002Fp>\n\u003Cp>Additionally, switching themes changes your website layout completely. Therefore, to keep things looking spic-and- span in your website, we bring you Essential Content.\u003C\u002Fp>\n\u003Cp>Essential Content allows you to add up to three content\u002Fpost types:\u003Cbr \u002F>\n* Portfolio – Create and display your portfolio on your website\u003Cbr \u002F>\n* Testimonials – Add customer testimonials to your website\u003Cbr \u002F>\n* Featured Content – Display the content you want as featured content on your website to attract visitors’ attention\u003Cbr \u002F>\n* Services – Add your services on your website\u003C\u002Fp>\n\u003Cp>Features of Essential Content:\u003Cbr \u002F>\n* Enable\u002FDisable any content\u002Fpost type as needed\u003Cbr \u002F>\n* Light-weight\u003Cbr \u002F>\n* Supports all themes on WordPress\u003C\u002Fp>\n\u003Cp>Essential Content is inspired by \u003Cem>Jetpack’s Custom Content Types feature\u003C\u002Fem>.\u003C\u002Fp>\n\u003Cp>However, not everyone wants to have a plugin that “does-it- all”. Some may want plugins to be niche focused and concentrate on smaller areas.\u003C\u002Fp>\n\u003Cp>That is precisely what we have done with Essential Content. Essential content, true to its name, has only the essential elements. We have added the features that WordPressers use most. We have ruled out all other elements to make it non-bloated and clean. It takes up lesser space and does the job well.\u003C\u002Fp>\n\u003Cp>If you think we have missed any essential content\u002Fpost types, please let us know. We’ll review the frequency of usage and add your suggestions.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Cem>Portfolio Shortcode\u003C\u002Fem>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You can use shortcodes to embed portfolio projects on posts and pages.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Embedding Portfolio Projects\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>To embed portfolio projects on posts and pages, first activate the Portfolio custom content type on your site and add some projects to your portfolio.\u003C\u002Fp>\n\u003Cp>Next, add the \u003Ccode>[portfolio]\u003C\u002Fcode> shortcode to a post or page. The shortcode will display projects in different ways, depending on how you use the optional attributes to customize the portfolio layout.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Attributes\u003C\u002Fstrong>\u003Cbr \u002F>\n* display_types: display Project Types. (true\u002Ffalse)\u003Cbr \u002F>\n* display_tags: display Project Tags. (true\u002Ffalse)\u003Cbr \u002F>\n* display_content: display project content. (true\u002Ffalse)\u003Cbr \u002F>\n* include_type: display specific Project Types. Defaults to all. (comma-separated list of Project Type slugs)\u003Cbr \u002F>\n* include_tag: display specific Project Tags. Defaults to all. (comma-separated list of Project Tag slugs)\u003Cbr \u002F>\n* columns: number of columns in shortcode. Defaults to 2. (number, 1-6)\u003Cbr \u002F>\n* showposts: number of projects to display. Defaults to all. (number)\u003Cbr \u002F>\n* order: display projects in ascending or descending order. Defaults to ASC for sorting in ascending order, but you can reverse the order by using DESC to display projects in descending order instead. (ASC\u002FDESC)\u003Cbr \u002F>\n* orderby: sort projects by different criteria, including author name, project title, and even rand to display in a random order. Defaults to sorting by date. (author, date, title, rand)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Example\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[portfolio display_types=\"true\" display_tags=\"false\" include_type=\"grooming-tips,best-kitties\" columns=\"2\" showposts=\"10\" orderby=\"title\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>The example will display up to ten portfolio projects in two columns, in ascending alphabetical order by project title. It will display Project Types, hide Project Tags, and only display projects that are assigned the “Grooming Tips” or “Best Kitties” Project Types.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Cem>Featured Content Shortcode\u003C\u002Fem>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You can use shortcodes to embed featured content on posts and pages.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Embedding Featured Content Projects\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>To embed featured content on posts and pages, first activate the Featured Content content type on your site and add some projects to your featured content.\u003C\u002Fp>\n\u003Cp>Next, add the \u003Ccode>[featured_content]\u003C\u002Fcode> shortcode to a post or page. The shortcode will display projects in different ways, depending on how you use the optional attributes to customize the featured content layout.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Attributes\u003C\u002Fstrong>\u003Cbr \u002F>\n* display_types: display Content Types. (true\u002Ffalse)\u003Cbr \u002F>\n* display_tags: display Content Tags. (true\u002Ffalse)\u003Cbr \u002F>\n* display_content: display project content. (true\u002Ffalse)\u003Cbr \u002F>\n* include_type: display specific Content Types. Defaults to all. (comma-separated list of Content Type slugs)\u003Cbr \u002F>\n* include_tag: display specific Content Tags. Defaults to all. (comma-separated list of Content Tag slugs)\u003Cbr \u002F>\n* columns: number of columns in shortcode. Defaults to 2. (number, 1-6)\u003Cbr \u002F>\n* showposts: number of projects to display. Defaults to all. (number)\u003Cbr \u002F>\n* order: display projects in ascending or descending order. Defaults to ASC for sorting in ascending order, but you can reverse the order by using DESC to display projects in descending order instead. (ASC\u002FDESC)\u003Cbr \u002F>\n* orderby: sort projects by different criteria, including author name, project title, and even rand to display in a random order. Defaults to sorting by date. (author, date, title, rand)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Example\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[featured_content display_types=\"true\" display_tags=\"false\" include_type=\"grooming-tips,best-kitties\" columns=\"2\" showposts=\"10\" orderby=\"title\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>The example will display up to ten featured content in two columns, in ascending alphabetical order by project title. It will display Content Types, hide Content Tags, and only display projects that are assigned the “Grooming Tips” or “Best Kitties” Content Types.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Cem>Testimonials Shortcode\u003C\u002Fem>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You can use shortcodes to embed testimonials on posts and pages.\u003Cbr \u002F>\nEmbedding Testimonials\u003C\u002Fp>\n\u003Cp>To embed testimonials on posts and pages, first activate the Testimonial custom content type on your site and add some testimonials.\u003C\u002Fp>\n\u003Cp>Next, add the \u003Ccode>[testimonials]\u003C\u002Fcode> shortcode to a post or page. The shortcode will display testimonials in different ways, depending on how you use the optional attributes to customize the testimonials layout.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Attributes\u003C\u002Fstrong>\u003Cbr \u002F>\n* display_content: display testimonial content. (full\u002Ftrue\u002Ffalse)\u003Cbr \u002F>\n* image: display the featured image. (true\u002Ffalse)  Defaults to true.\u003Cbr \u002F>\n* columns: number of columns in shortcode. Defaults to 1. (number, 1-6)\u003Cbr \u002F>\n* showposts: number of testimonials to display. Defaults to all. (number)\u003Cbr \u002F>\n* order: display testimonials in ascending or descending chronological order. Defaults to ASC for sorting in ascending order, but you can reverse the order by using DESC to display testimonials in descending order instead. (ASC\u002FDESC)\u003Cbr \u002F>\n* orderby: sort testimonials by different criteria, including author name, testimonial title, and even rand to display in a random order. Defaults to sorting by date. (author, date, title, rand)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Example\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[testimonials columns=\"2\" showposts=\"10\" orderby=\"title\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>The example will display up to ten testimonials in two columns, in ascending alphabetical order by testimonial title.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Cem>Service Shortcode\u003C\u002Fem>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You can use shortcodes to embed service on posts and pages.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Embedding Service Projects\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>To embed service on posts and pages, first activate the Service content type on your site and add some projects to your Service.\u003C\u002Fp>\n\u003Cp>Next, add the \u003Ccode>[services]\u003C\u002Fcode> shortcode to a post or page. The shortcode will display projects in different ways, depending on how you use the optional attributes to customize the featured content layout.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Attributes\u003C\u002Fstrong>\u003Cbr \u002F>\n* display_types: display Content Types. (true\u002Ffalse)\u003Cbr \u002F>\n* display_tags: display Content Tags. (true\u002Ffalse)\u003Cbr \u002F>\n* display_content: display project content. (true\u002Ffalse)\u003Cbr \u002F>\n* include_type: display specific Content Types. Defaults to all. (comma-separated list of Content Type slugs)\u003Cbr \u002F>\n* include_tag: display specific Content Tags. Defaults to all. (comma-separated list of Content Tag slugs)\u003Cbr \u002F>\n* columns: number of columns in shortcode. Defaults to 2. (number, 1-6)\u003Cbr \u002F>\n* showposts: number of projects to display. Defaults to all. (number)\u003Cbr \u002F>\n* order: display projects in ascending or descending order. Defaults to ASC for sorting in ascending order, but you can reverse the order by using DESC to display projects in descending order instead. (ASC\u002FDESC)\u003Cbr \u002F>\n* orderby: sort projects by different criteria, including author name, project title, and even rand to display in a random order. Defaults to sorting by date. (author, date, title, rand)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Example\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[services display_types=\"true\" display_tags=\"false\" include_type=\"grooming-tips,best-kitties\" columns=\"2\" showposts=\"10\" orderby=\"title\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>The example will display up to ten featured content in two columns, in ascending alphabetical order by project title. It will display Content Types, hide Content Tags, and only display projects that are assigned the “Grooming Tips” or “Best Kitties” Content Types.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Cem>Food Menu Shortcode\u003C\u002Fem>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You can use shortcodes to embed Food Menu on posts and pages.\u003Cbr \u002F>\nEmbedding Food Menu\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Embedding Food Menu\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>To embed food menus on posts and pages, first activate the Food Menu custom content type on your site and add some food menus.\u003C\u002Fp>\n\u003Cp>Next, add the \u003Ccode>[food_menu]\u003C\u002Fcode> shortcode to a post or page. The shortcode will display food menu in the selected post or page.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Attributes\u003C\u002Fstrong>\u003Cbr \u002F>\n* showposts: number of menu items to display. Defaults to all. (number)\u003Cbr \u002F>\n* include_type: display specific Content Types. Defaults to all. (comma-separated list of Content Type slugs)\u003Cbr \u002F>\n* include_tag: display specific Content Tags. Defaults to all. (comma-separated list of Content Tag slugs)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Example\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[food_menu showposts=\"10\" include_type=\"pizza,burger,breakfast\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>The example will display up to ten menu items. It will only display menu items in “Pizza”, “Burger” or “Breakfast” sections.\u003C\u002Fp>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cp>To translate the plugin, use translate.wordpress.org (GlotPress). You only need your WordPress.org account to join the collaborative translation project.\u003C\u002Fp>\n\u003Cp>You can translate Essential Widgets on \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fessential-content-types\u002F\" rel=\"nofollow ugc\">translate.wordpress.org\u003C\u002Fa>.\u003C\u002Fp>\n","Essential Content Types allows you to feature the impressive content through different content\u002Fpost types on your website just the way you want it.",20000,878924,60,2,"2025-05-13T13:25:00.000Z","6.8.5","5.9",[94,118,19,119,23],"custom-content-types","post-types","https:\u002F\u002Fcatchplugins.com\u002Fplugins\u002Fessential-content-types\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fessential-content-types.zip",{"slug":123,"name":124,"version":125,"author":126,"author_profile":127,"description":128,"short_description":129,"active_installs":130,"downloaded":131,"rating":132,"num_ratings":133,"last_updated":134,"tested_up_to":135,"requires_at_least":136,"requires_php":64,"tags":137,"homepage":141,"download_link":142,"security_score":143,"vuln_count":27,"unpatched_count":13,"last_vuln_date":144,"fetched_at":29},"posts-in-page","Posts in Page","1.4.4","ivycat","https:\u002F\u002Fprofiles.wordpress.org\u002Fivycat\u002F","\u003Cp>Easily add one or more posts to any page using simple shortcodes.\u003C\u002Fp>\n\u003Cp>Supports categories, tags, custom post types, custom taxonomies, date ranges, post status, and much more.\u003C\u002Fp>\n\u003Cp>You can get all of the same functionality provided by this plugin by modifying your theme’s template files; this plugin just makes it easy for anyone to \u003Cem>pull\u003C\u002Fem> posts into other areas of the site without having to get their hands dirty with code.\u003C\u002Fp>\n\u003Cp>Plugin is depending upon your theme’s styling; version 1.x of this plugin \u003Cem>does not\u003C\u002Fem> contain native styles.\u003C\u002Fp>\n\u003Cp>This is a minimal plugin, function over form. Give us feedback, suggestions, bug reports, and any other contributions on the in the plugin’s \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fivycat\u002Fposts-in-page\" rel=\"nofollow ugc\">GitHub repository\u003C\u002Fa>.\u003C\u002Fp>\n","Easily add one or more posts to any page using simple shortcodes.",10000,377586,88,86,"2019-05-13T16:13:00.000Z","5.2.24","3.0",[19,138,139,140,23],"pages","posts","shortcode","https:\u002F\u002Fivycat.com\u002Fwordpress\u002Fwordpress-plugins\u002Fposts-in-page\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fposts-in-page.1.4.4.zip",84,"2017-02-13 00:00:00",{"slug":146,"name":147,"version":148,"author":149,"author_profile":150,"description":151,"short_description":152,"active_installs":153,"downloaded":154,"rating":87,"num_ratings":155,"last_updated":156,"tested_up_to":157,"requires_at_least":136,"requires_php":64,"tags":158,"homepage":64,"download_link":161,"security_score":162,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":29},"taxonomy-metadata","Taxonomy Metadata","0.5","mitcho (Michael Yoshitaka Erlewine)","https:\u002F\u002Fprofiles.wordpress.org\u002Fmitchoyoshitaka\u002F","\u003Cp>This plugin implements the metadata infrastructure for taxonomy terms, so you can add custom metadata (by key) to tags, categories, and other taxonomies. The majority of the code is from \u003Ca href=\"https:\u002F\u002Fcore.trac.wordpress.org\u002Fticket\u002F10142\" rel=\"nofollow ugc\">sirzooro’s submission\u003C\u002Fa> to the WordPress Core Trac. The rest of the plugin is simply some hacky glue to make this work without modifying the Core. It \u003Cem>does not\u003C\u002Fem> implement any UI for taxonomy term metadata.\u003C\u002Fp>\n\u003Cp>The plugin implements the following functions, from which you can build your own custom UI and display code:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_term_meta($term_id, $meta_key, $meta_value, $unique): Add meta data field to a term.\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cul>\n\u003Cli>@param int $term_id Post ID.\u003C\u002Fli>\n\u003Cli>@param string $key Metadata name.\u003C\u002Fli>\n\u003Cli>@param mixed $value Metadata value.\u003C\u002Fli>\n\u003Cli>@param bool $unique Optional, default is false. Whether the same key should not be added.\u003C\u002Fli>\n\u003Cli>\n\u003Cp>@return bool False for failure. True for success.\u003C\u002Fp>\n\u003Cp>delete_term_meta($term_id, $meta_key, $meta_value): Remove metadata matching criteria from a term. You can match based on the key, or key and value. Removing based on key and value, will keep from removing duplicate metadata with the same key. It also allows removing all metadata matching key, if needed.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>@param int $term_id term ID\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>@param string $meta_key Metadata name.\u003C\u002Fli>\n\u003Cli>@param mixed $meta_value Optional. Metadata value.\u003C\u002Fli>\n\u003Cli>\n\u003Cp>@return bool False for failure. True for success.\u003C\u002Fp>\n\u003Cp>get_term_meta($term_id, $key, $single): Retrieve term meta field for a term.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>@param int $term_id Term ID.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>@param string $key The meta key to retrieve.\u003C\u002Fli>\n\u003Cli>@param bool $single Whether to return a single value.\u003C\u002Fli>\n\u003Cli>\n\u003Cp>@return mixed Will be an array if $single is false. Will be value of meta data field if $single is true.\u003C\u002Fp>\n\u003Cp>update_term_meta($term_id, $meta_key, $meta_value, $prev_value): Update term meta field based on term ID. Use the $prev_value parameter to differentiate between meta fields with the same key and term ID. If the meta field for the term does not exist, it will be added.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>@param int $term_id Term ID.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>@param string $key Metadata key.\u003C\u002Fli>\n\u003Cli>@param mixed $value Metadata value.\u003C\u002Fli>\n\u003Cli>@param mixed $prev_value Optional. Previous value to check before removing.\u003C\u002Fli>\n\u003Cli>@return bool False on failure, true if success.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Development of this plugin was supported by the \u003Ca href=\"http:\u002F\u002Fglobalshakespeares.org\u002F\" rel=\"nofollow ugc\">Massachusetts Institute of Technology Shakespeare Project\u003C\u002Fa>.\u003C\u002Fp>\n","Infrastructure plugin which implements metadata functionality for taxonomy terms, including for tags and categories.",5000,224935,9,"2017-11-28T08:04:00.000Z","4.3.34",[159,160,22,23],"api","infrastructure","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftaxonomy-metadata.zip",85,{"attackSurface":164,"codeSignals":187,"taintFlows":213,"riskAssessment":214,"analyzedAt":222},{"hooks":165,"ajaxHandlers":183,"restRoutes":184,"shortcodes":185,"cronEvents":186,"entryPointCount":13,"unprotectedCount":13},[166,172,177,180],{"type":167,"name":168,"callback":169,"file":170,"line":171},"action","admin_init","closure","display-metadata.php",27,{"type":167,"name":173,"callback":174,"file":175,"line":176},"add_meta_boxes_comment","anonymous","src\\Type\\class-comment.php",18,{"type":167,"name":178,"callback":174,"file":179,"line":176},"edit_user_profile","src\\Type\\class-user.php",{"type":167,"name":181,"callback":174,"file":179,"line":182},"show_user_profile",19,[],[],[],[],{"dangerousFunctions":188,"sqlUsage":189,"outputEscaping":191,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":113,"bundledLibraries":212},[],{"prepared":27,"raw":13,"locations":190},[],{"escaped":47,"rawEcho":192,"locations":193},8,[194,197,200,202,204,207,208,210],{"file":195,"line":112,"context":196},"src\\Helper\\class-metabox-view.php","raw output",{"file":198,"line":199,"context":196},"views\\header.php",6,{"file":198,"line":201,"context":196},10,{"file":203,"line":201,"context":196},"views\\metabox.php",{"file":205,"line":206,"context":196},"views\\meta_list.php",5,{"file":205,"line":199,"context":196},{"file":205,"line":209,"context":196},7,{"file":211,"line":199,"context":196},"views\\simple-metabox.php",[],[],{"summary":215,"deductions":216},"The plugin \"display-metadata\" v1.0.0 exhibits a mixed security posture. On the positive side, the static analysis reveals a very small attack surface with no apparent direct entry points like AJAX handlers, REST API routes, or shortcodes that are unprotected. The code also demonstrates good practices by using prepared statements for all SQL queries and performing capability checks, which are crucial for access control. File operations and external HTTP requests are absent, reducing potential attack vectors. However, a significant concern is the low percentage (27%) of properly escaped output. This indicates a risk of Cross-Site Scripting (XSS) vulnerabilities where unsanitized user-supplied data could be rendered directly in the browser.\n\nThe vulnerability history is particularly concerning. The plugin has one known CVE, which is currently unpatched and classified as medium severity. The common vulnerability type listed is Cross-site Scripting, directly correlating with the findings from the output escaping analysis. The fact that this vulnerability is unpatched suggests a lack of ongoing maintenance or a failure to address known security flaws in a timely manner, making users susceptible to this exploit. While the current version might not have critical taint flows or unprotected entry points, the historical pattern of XSS vulnerabilities and the presence of an unpatched medium-severity flaw warrant caution.\n\nIn conclusion, while \"display-metadata\" v1.0.0 has strengths in its limited attack surface and secure SQL handling, the insufficient output escaping and the unpatched XSS vulnerability present a notable risk. Users should be aware that the plugin is susceptible to XSS attacks due to improper output handling and that a previously discovered vulnerability remains unaddressed. Continued use of this plugin without patching the known CVE is not recommended.",[217,220],{"reason":218,"points":219},"Unpatched medium severity CVE",15,{"reason":221,"points":199},"Low percentage of properly escaped output","2026-03-16T21:29:07.303Z",{"wat":224,"direct":231},{"assetPaths":225,"generatorPatterns":227,"scriptPaths":228,"versionParams":229},[226],"\u002Fwp-content\u002Fplugins\u002Fdisplay-metadata\u002Fassets\u002Fcss\u002Fstyle.css",[],[],[230],"display-metadata\u002Fassets\u002Fcss\u002Fstyle.css?ver=",{"cssClasses":232,"htmlComments":233,"htmlAttributes":234,"restEndpoints":235,"jsGlobals":236,"shortcodeOutput":237},[],[],[],[],[],[]]