[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjbaHCnSz5DZvAdIwUmDAFEp6e9_8yxnPXUOi_LGYgPE":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":71,"crawl_stats":38,"alternatives":76,"analysis":172,"fingerprints":447},"dynamic-url-seo","Dynamic URL SEO","1.2","brainvireinfo","https:\u002F\u002Fprofiles.wordpress.org\u002Fbrainvireinfo\u002F","\u003Cp>Dynamic URL SEO plugin provides you the facility to add Meta title, keywords and description for those URLs which are generating dynamically in your website.\u003C\u002Fp>\n\u003Cp>Nowadays SEO is the most important part of a website for marketing. Sometimes to achieve the batter functionality on our website we need to write custom code and in few cases, we are not able to add the meta title, keywords  and description to dynamic pages\u002Fposts\u002Fcustom post types using SEO plugins like Yoast SEO, All in One SEO etc.\u003C\u002Fp>\n\u003Cp>At that time using Dynamic URL SEO plugin you can add all the meta details like title, keywords,  description, robots. Also by using Dynamic URL SEO, you can update schema for the website, organization, local business and many more.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>What is Schema markup?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Schema markup is code (semantic vocabulary) that you put on your website to help the search engines return more informative results for users.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Why are Schemas Important?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Schemas allow search engines and other applications to better understand entities, relationships and actions. Schema.org is actually sponsored by the world’s leading search engines, Google, Microsoft, Yahoo and Yandex. If you’re in the search business or run a website and are interested in improving your organic search performance, schema should be peaking your interest.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Schema Key Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easy to use, with minimal settings.\u003C\u002Fli>\n\u003Cli>Valid markup, test it in Google Structured Data Testing Tool.\u003C\u002Fli>\n\u003Cli>Output JSON-LD format, the most recommended by Google.\u003C\u002Fli>\n\u003Cli>Supported Google\u002FSchema Markups\n\u003Cul>\n\u003Cli>WebSite Markup\u003C\u002Fli>\n\u003Cli>Organization Markup\u003C\u002Fli>\n\u003Cli>Local Business Markup\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin is used to add meta title, keywords and description for dynamic URLs which are not available in database.",70,3012,100,1,"2024-12-05T12:59:00.000Z","6.7.5","6.2","5.2.4",[20,21,22,23,24],"keywords","meta-tags","metadata","seo","title","https:\u002F\u002Fbrainvire.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdynamic-url-seo.1.2.zip",90,3,0,"2025-02-03 00:00:00","2026-03-15T15:16:48.613Z",[33,48,61],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":6,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":30,"updated_date":44,"references":45,"days_to_patch":47},"CVE-2025-23984","dynamic-url-seo-reflected-cross-site-scripting","Dynamic URL SEO \u003C= 1.0 - Reflected Cross-Site Scripting","The Dynamic URL SEO plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",null,"\u003C=1.0","medium",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-02-12 18:16:27",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F68a87e74-597d-4d2c-9900-9c46dffe334f?source=api-prod",10,{"id":49,"url_slug":50,"title":51,"description":52,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":6,"severity":40,"cvss_score":53,"cvss_vector":54,"vuln_type":55,"published_date":56,"updated_date":57,"references":58,"days_to_patch":60},"CVE-2025-23985","dynamic-url-seo-cross-site-request-forgery","Dynamic URL SEO \u003C= 1.0 - Cross-Site Request Forgery","The Dynamic URL SEO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2025-01-27 00:00:00","2025-02-03 14:29:00",[59],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F82d725a7-f4a8-4473-874b-496852a352cc?source=api-prod",8,{"id":62,"url_slug":63,"title":64,"description":65,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":6,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":66,"updated_date":67,"references":68,"days_to_patch":70},"CVE-2024-52470","dynamic-url-seo-unauthenticated-cross-site-scripting","Dynamic URL SEO \u003C= 1.0 - Unauthenticated Cross-Site Scripting","The Dynamic URL SEO plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","2024-11-18 00:00:00","2024-12-10 14:20:16",[69],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F713aff2e-2e61-400d-9454-a61fad5e374b?source=api-prod",23,{"slug":7,"display_name":7,"profile_url":8,"plugin_count":72,"total_installs":73,"avg_security_score":27,"avg_patch_time_days":72,"trust_score":74,"computed_at":75},14,6900,87,"2026-04-03T19:22:11.833Z",[77,96,110,136,154],{"slug":78,"name":79,"version":80,"author":81,"author_profile":82,"description":83,"short_description":84,"active_installs":85,"downloaded":86,"rating":13,"num_ratings":28,"last_updated":87,"tested_up_to":88,"requires_at_least":89,"requires_php":90,"tags":91,"homepage":93,"download_link":94,"security_score":95,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"basic-seo-pack","Basic SEO Pack","1.1.4","auastyle","https:\u002F\u002Fprofiles.wordpress.org\u002Fauastyle\u002F","\u003Cp>Simple but complete SEO Pack to make your site SEO Friendly. Quick way to add meta tags to your post and pages using WP custom fields.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Something that you can do with Basic SEO plugin:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>You can optimized your site in search engine result page (SERP).\u003C\u002Fli>\n\u003Cli>You can manage the “keywords” and “description” meta tags in each post and page using the standard WordPress metabox interface\u003C\u002Fli>\n\u003Cli>You can also set your default meta tag on your home page with easily\u003C\u002Fli>\n\u003Cli>You can configure Search engine webmaster (Google, Bing, Alexa) by simple way\u003C\u002Fli>\n\u003Cli>You can configure google analytics too with simple way\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Coming soon:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Showing google analytics graph\u003C\u002Fli>\n\u003Cli>Social network integration\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>About BSEOP Plugin\u003C\u002Fh3>\n\u003Cp>This is my first plugin that i made. Actually, i made this because i need a simple plugin that can manage my contents (post, page, main page) meta tags. Finally, i create this plugin that can manage all of my contents meta tags, adding webmaster’s verification code, and analytics code with easy way. I love my first plugin.\u003C\u002Fp>\n\u003Cp>If you have suggestions for a new feature, feel free to email me at ah.ulil.albab@gmail.com\u003C\u002Fp>\n\u003Cp>Want regular updates? Subscribe to my sites!\u003Cbr \u002F>\nhttp:\u002F\u002Fadf.ly\u002F2826432\u002Fbasic-seo-pack\u003C\u002Fp>\n\u003Cp>Or follow my sites on Twitter!\u003Cbr \u002F>\nhttp:\u002F\u002Ftwitter.com\u002Fauastyle\u003C\u002Fp>\n","Simple but complete SEO Pack to make your site SEO Friendly. Quick way to add meta tags to your post and pages using WP custom fields.",800,44916,"2017-11-28T21:23:00.000Z","3.5.2","2.5","",[20,21,22,23,92],"seo-pack","http:\u002F\u002Fproject.ulil-albab.info\u002Fbasic-seo-pack\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbasic-seo-pack.1.1.4.zip",85,{"slug":97,"name":98,"version":99,"author":100,"author_profile":101,"description":102,"short_description":103,"active_installs":13,"downloaded":104,"rating":29,"num_ratings":29,"last_updated":105,"tested_up_to":106,"requires_at_least":89,"requires_php":90,"tags":107,"homepage":108,"download_link":109,"security_score":95,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"simple-seo-pack","Simple SEO Pack","1.1.3.8","Vito Tardia","https:\u002F\u002Fprofiles.wordpress.org\u002Fvtardia\u002F","\u003Cp>With Simple SEO you can set your custom content for the “keywords” and “description” meta tags in each post or page using the standard WordPress metabox interface.\u003C\u002Fp>\n\u003Cp>You can also set default values for each meta tag which will be displayed in all your pages, although this is not a SEO best practice.\u003C\u002Fp>\n\u003Ch4>Available languages\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>English\u003C\u002Fli>\n\u003Cli>Italian\u003C\u002Fli>\n\u003Cli>Romanian by Web Geek Science (\u003Ca href=\"http:\u002F\u002Fwebhostinggeeks.com\u002F\" rel=\"nofollow ugc\">Web Hosting Geeks\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>Serbo-Croatian by Borisa Djuraskovic (\u003Ca href=\"http:\u002F\u002Fwww.webhostinghub.com\u002F\" rel=\"nofollow ugc\">Webhostinghub\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>Ukrainian by Michael Yunat (\u003Ca href=\"\u002F\u002Fgetvoip.com\u002Fblog\" rel=\"nofollow ugc\">http:\u002F\u002Fgetvoip.com\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>Indonesian by Jordan Silaen (\u003Ca href=\"\u002F\u002Fchameleonjohn.com\" rel=\"nofollow ugc\">http:\u002F\u002Fchameleonjohn.com\u003C\u002Fa>)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Manual Database Update\u003C\u002Fh3>\n\u003Cp>In order to update your database you can run the following queries using your favorite MySQL admin tool, changing your table prefix if needed (a backup is strongly recomended).\u003C\u002Fp>\n\u003Cpre>\u003Ccode>UPDATE wp_postmeta SET meta_key = '_sseo_meta_keywords' WHERE meta_key = 'meta_keywords';\n\nUPDATE wp_postmeta SET meta_key = '_sseo_meta_description' WHERE meta_key = 'meta_description';\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Simple SEO is a quick way to add HTML meta tags to your site and pages using WP integrated custom fields feature.",14150,"2017-04-17T19:28:00.000Z","4.5.33",[20,21,22,23],"http:\u002F\u002Fwww.vtardia.com\u002Fsimple-seo-pack\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-seo-pack.1.1.3.8.zip",{"slug":111,"name":112,"version":113,"author":114,"author_profile":115,"description":116,"short_description":117,"active_installs":118,"downloaded":119,"rating":120,"num_ratings":121,"last_updated":122,"tested_up_to":123,"requires_at_least":124,"requires_php":125,"tags":126,"homepage":131,"download_link":132,"security_score":133,"vuln_count":134,"unpatched_count":29,"last_vuln_date":135,"fetched_at":31},"cds-simple-seo","Simple SEO","2.0.33","David Cole","https:\u002F\u002Fprofiles.wordpress.org\u002Fcoleds\u002F","\u003Cul>\n\u003Cli>Nonce Security!\u003C\u002Fli>\n\u003Cli>Generates META tags automatically.\u003C\u002Fli>\n\u003Cli>Works out-of-the-box. Just install!\u003C\u002Fli>\n\u003Cli>You can override any title and set any META description and any META keywords you want!\u003C\u002Fli>\n\u003Cli>Google Analytic 4!\u003C\u002Fli>\n\u003Cli>Google Webmaster Tools!\u003C\u002Fli>\n\u003Cli>Bing verification & Yandex verification!\u003C\u002Fli>\n\u003Cli>Twitter and Facebook customization!\u003C\u002Fli>\n\u003Cli>Quickedit SEO titles and descriptions!\u003C\u002Fli>\n\u003Cli>Import Yoast SEO data!\u003C\u002Fli>\n\u003Cli>Import Rank Math SEO data!\u003C\u002Fli>\n\u003Cli>Import All In One SEO data!\u003C\u002Fli>\n\u003Cli>Sitemaps!\u003C\u002Fli>\n\u003Cli>Supports custom post types!\u003C\u002Fli>\n\u003C\u002Ful>\n","Allows the modification of META titles, descriptions and keywords for all pages and posts. Also allows for default setting for of META title, descript …",10000,181226,94,31,"2025-12-01T15:14:00.000Z","6.9.4","4.6.2","7.4",[127,128,129,130,23],"mera-description","meta","meta-keywords","meta-title","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcds-simple-seo\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcds-simple-seo.zip",91,6,"2025-09-23 00:00:00",{"slug":137,"name":138,"version":139,"author":140,"author_profile":141,"description":142,"short_description":143,"active_installs":144,"downloaded":145,"rating":13,"num_ratings":146,"last_updated":147,"tested_up_to":148,"requires_at_least":149,"requires_php":90,"tags":150,"homepage":90,"download_link":153,"security_score":95,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"add-meta-tag-keywords","Add Meta Tag Keywords","1.0.3","epiphanyit321","https:\u002F\u002Fprofiles.wordpress.org\u002Fepiphanyit321\u002F","\u003Cp>The plugin allows you to add Meta Tag keywords for posts, pages or basically any custom post type. The Meta Keywords are important words or phrases that people are likely to search for to find your content. IT is used by search engines, and it is considered good practice to have it in your HTML head section. Some SEO plugins and articles suggest that Meta Keywords are irrelevant in today’s times. However, it’s still good practice to have them.\u003C\u002Fp>\n\u003Cp>Meta keywords may also improve your website’s SEO ranking. This means more traffic, leads, and sales for your business.\u003C\u002Fp>\n\u003Cp>We also provide full SEO and Digital Marketing services. Request a Free Quote for your website by visiting: https:\u002F\u002Fwww.epiphanyinfotech.com\u002F\u003C\u002Fp>\n\u003Cp>You may add any other famous SEO plugin and install this as well alongside it. If the other plugin already provides the feature to add Meta Keywords, then you don’t need this plugin.\u003C\u002Fp>\n\u003Cp>Add Meta Tag Keywords Features:\u003Cbr \u002F>\n*Enter different keywords for each page or post.\u003Cbr \u002F>\n*Add multiple keywords for each page. Add as many as you’d like.\u003Cbr \u002F>\n*Press “Enter” or “Return”, or the “comma” key on your keyword before saving the post and it will be saved as the post’s meta keyword\u003Cbr \u002F>\n*Add keywords in any language.\u003C\u002Fp>\n\u003Cp>Get your free website hompage SEO audit report of your website and to learn more about our SEO Packages Prices visit: https:\u002F\u002Fwww.epiphanyinfotech.com\u002Fseo-services-price\u002F\u003C\u002Fp>\n\u003Ch3>Short Description\u003C\u002Fh3>\n\u003Cp>Add Meta Tag keywords for posts, pages and any custom post type. Metadata tag name = “keywords” is used by search engines for SEO. Some SEO plugins consider it as irrelevant but its good practice to have keywords mentioned in your webpages’ Metadata regardless.\u003C\u002Fp>\n\u003Ch3>Languages\u003C\u002Fh3>\n\u003Cp>Supporting Languages:-\u003Cbr \u002F>\n1.English\u003Cbr \u002F>\n2.Hindi\u003Cbr \u002F>\n3.French\u003Cbr \u002F>\n4.Korean\u003Cbr \u002F>\n5.Chinese\u003Cbr \u002F>\nEtc.\u003C\u002Fp>\n\u003Cp>That is, all major languages are supported.\u003C\u002Fp>\n\u003Cp>Redirect any query or report any bug you may find at: \u003Ca href=\"https:\u002F\u002Fepiphanyinfotech.com\u002F\" title=\"Your Reliable Tech Team\" rel=\"nofollow ugc\">Epiphany Infotech\u003C\u002Fa>\u003C\u002Fp>\n","The plugin allows you to add Meta Tag keywords for posts, pages or basically any custom post type. The Meta Keywords are important words or phrases th …",1000,9008,2,"2023-02-23T12:11:00.000Z","6.1.10","3.0.1",[129,151,22,23,152],"meta-tag","seo-improvement","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadd-meta-tag-keywords.zip",{"slug":155,"name":156,"version":157,"author":158,"author_profile":159,"description":160,"short_description":161,"active_installs":85,"downloaded":162,"rating":29,"num_ratings":29,"last_updated":163,"tested_up_to":164,"requires_at_least":165,"requires_php":90,"tags":166,"homepage":90,"download_link":169,"security_score":170,"vuln_count":14,"unpatched_count":14,"last_vuln_date":171,"fetched_at":31},"simple-meta-tags","Simple Meta Tags","1.5","DaganLev","https:\u002F\u002Fprofiles.wordpress.org\u002Fdaganlev\u002F","\u003Cp>Allows you to set global meta tags and customize on each individual page\u002Fpost.\u003C\u002Fp>\n\u003Cp>The plugin will generate the blog title and page title as default title tags if not specified otherwise.\u003C\u002Fp>\n","Allows you to set global meta tags and customize on each individual page\u002Fpost. Please Note: Does not support custom post types",37540,"2021-05-14T10:15:00.000Z","5.7.15","3.1",[167,168,20,21,23],"description","hotscot","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-meta-tags.zip",63,"2025-09-26 00:00:00",{"attackSurface":173,"codeSignals":213,"taintFlows":262,"riskAssessment":437,"analyzedAt":446},{"hooks":174,"ajaxHandlers":209,"restRoutes":210,"shortcodes":211,"cronEvents":212,"entryPointCount":29,"unprotectedCount":29},[175,181,185,190,192,196,202,205],{"type":176,"name":177,"callback":178,"file":179,"line":180},"action","admin_menu","dus_admin_menu","dynamic-url-listing-page.php",224,{"type":176,"name":182,"callback":183,"file":179,"line":184},"admin_init","dus_delete_single_url",305,{"type":176,"name":186,"callback":187,"file":188,"line":189},"admin_enqueue_scripts","dus_admin_enqueue_scripts","dynamic-url-seo.php",27,{"type":176,"name":177,"callback":191,"file":188,"line":133},"dus_admin_add_new_menu",{"type":176,"name":193,"callback":194,"priority":146,"file":188,"line":195},"wp_head","dus_print_head_block",1046,{"type":197,"name":198,"callback":199,"priority":200,"file":188,"line":201},"filter","pre_get_document_title","dus_print_title_head_block",15,1056,{"type":197,"name":203,"callback":199,"priority":200,"file":188,"line":204},"wp_title",1057,{"type":176,"name":206,"callback":207,"file":188,"line":208},"dus_admin_notices","dus_admin_updated_message",1063,[],[],[],[],{"dangerousFunctions":214,"sqlUsage":215,"outputEscaping":217,"fileOperations":29,"externalRequests":29,"nonceChecks":260,"capabilityChecks":260,"bundledLibraries":261},[],{"prepared":189,"raw":29,"locations":216},[],{"escaped":218,"rawEcho":219,"locations":220},147,19,[221,225,227,229,231,233,235,237,239,240,242,244,246,248,250,252,254,256,258],{"file":222,"line":223,"context":224},"dynamic-url-schema-markup-page.php",166,"raw output",{"file":222,"line":226,"context":224},228,{"file":222,"line":228,"context":224},264,{"file":188,"line":230,"context":224},287,{"file":188,"line":232,"context":224},290,{"file":188,"line":234,"context":224},295,{"file":188,"line":236,"context":224},297,{"file":188,"line":238,"context":224},301,{"file":188,"line":184,"context":224},{"file":188,"line":241,"context":224},307,{"file":188,"line":243,"context":224},312,{"file":188,"line":245,"context":224},318,{"file":188,"line":247,"context":224},325,{"file":188,"line":249,"context":224},329,{"file":188,"line":251,"context":224},340,{"file":188,"line":253,"context":224},347,{"file":188,"line":255,"context":224},350,{"file":188,"line":257,"context":224},355,{"file":188,"line":259,"context":224},1075,5,[],[263,289,301,326,336,388,399],{"entryPoint":264,"graph":265,"unsanitizedCount":29,"severity":288},"dus_list_page (dynamic-url-listing-page.php:226)",{"nodes":266,"edges":284},[267,272,277,281],{"id":268,"type":269,"label":270,"file":179,"line":271},"n0","source","$_REQUEST['page']",253,{"id":273,"type":274,"label":275,"file":179,"line":271,"wp_function":276},"n1","sink","echo() [XSS]","echo",{"id":278,"type":269,"label":279,"file":179,"line":280},"n2","$_REQUEST",233,{"id":282,"type":274,"label":275,"file":179,"line":283,"wp_function":276},"n3",263,[285,287],{"from":268,"to":273,"sanitized":286},true,{"from":278,"to":282,"sanitized":286},"low",{"entryPoint":290,"graph":291,"unsanitizedCount":29,"severity":288},"dus_delete_single_url (dynamic-url-listing-page.php:272)",{"nodes":292,"edges":299},[293,295],{"id":268,"type":269,"label":279,"file":179,"line":294},281,{"id":273,"type":274,"label":296,"file":179,"line":297,"wp_function":298},"query() [SQLi]",289,"query",[300],{"from":268,"to":273,"sanitized":286},{"entryPoint":302,"graph":303,"unsanitizedCount":29,"severity":288},"\u003Cdynamic-url-listing-page> (dynamic-url-listing-page.php:0)",{"nodes":304,"edges":321},[305,307,311,312,313,315,317,319],{"id":268,"type":269,"label":279,"file":179,"line":306},207,{"id":273,"type":274,"label":308,"file":179,"line":309,"wp_function":310},"get_results() [SQLi]",210,"get_results",{"id":278,"type":269,"label":270,"file":179,"line":271},{"id":282,"type":274,"label":275,"file":179,"line":271,"wp_function":276},{"id":314,"type":269,"label":279,"file":179,"line":280},"n4",{"id":316,"type":274,"label":275,"file":179,"line":283,"wp_function":276},"n5",{"id":318,"type":269,"label":279,"file":179,"line":294},"n6",{"id":320,"type":274,"label":296,"file":179,"line":297,"wp_function":298},"n7",[322,323,324,325],{"from":268,"to":273,"sanitized":286},{"from":278,"to":282,"sanitized":286},{"from":314,"to":316,"sanitized":286},{"from":318,"to":320,"sanitized":286},{"entryPoint":327,"graph":328,"unsanitizedCount":14,"severity":335},"prepare_items (dynamic-url-listing-page.php:166)",{"nodes":329,"edges":332},[330,331],{"id":268,"type":269,"label":279,"file":179,"line":306},{"id":273,"type":274,"label":308,"file":179,"line":309,"wp_function":310},[333],{"from":268,"to":273,"sanitized":334},false,"high",{"entryPoint":337,"graph":338,"unsanitizedCount":146,"severity":335},"dus_add_new_callback (dynamic-url-seo.php:121)",{"nodes":339,"edges":379},[340,343,347,348,350,353,354,357,359,363,367,370,373,376],{"id":268,"type":269,"label":341,"file":188,"line":342},"$_POST",132,{"id":273,"type":274,"label":344,"file":188,"line":345,"wp_function":346},"get_row() [SQLi]",157,"get_row",{"id":278,"type":269,"label":341,"file":188,"line":342},{"id":282,"type":274,"label":275,"file":188,"line":349,"wp_function":276},173,{"id":314,"type":269,"label":351,"file":188,"line":352},"$_GET['id']",240,{"id":316,"type":274,"label":344,"file":188,"line":352,"wp_function":346},{"id":318,"type":269,"label":355,"file":188,"line":356},"$_GET (x2)",197,{"id":320,"type":274,"label":275,"file":188,"line":358,"wp_function":276},273,{"id":360,"type":269,"label":361,"file":188,"line":362},"n8","$_GET",230,{"id":364,"type":365,"label":366,"file":188,"line":362},"n9","transform","→ dus_check_id_already_exist_or_not()",{"id":368,"type":274,"label":344,"file":188,"line":369,"wp_function":346},"n10",557,{"id":371,"type":269,"label":341,"file":188,"line":372},"n11",235,{"id":374,"type":365,"label":375,"file":188,"line":372},"n12","→ dus_update_custom_url()",{"id":377,"type":274,"label":296,"file":188,"line":378,"wp_function":298},"n13",586,[380,381,382,383,384,385,386,387],{"from":268,"to":273,"sanitized":286},{"from":278,"to":282,"sanitized":286},{"from":314,"to":316,"sanitized":286},{"from":318,"to":320,"sanitized":286},{"from":360,"to":364,"sanitized":334},{"from":364,"to":368,"sanitized":334},{"from":371,"to":374,"sanitized":334},{"from":374,"to":377,"sanitized":334},{"entryPoint":389,"graph":390,"unsanitizedCount":14,"severity":335},"dus_check_current_url (dynamic-url-seo.php:649)",{"nodes":391,"edges":397},[392,395],{"id":268,"type":269,"label":393,"file":188,"line":394},"$_SERVER",660,{"id":273,"type":274,"label":344,"file":188,"line":396,"wp_function":346},669,[398],{"from":268,"to":273,"sanitized":334},{"entryPoint":400,"graph":401,"unsanitizedCount":146,"severity":335},"\u003Cdynamic-url-seo> (dynamic-url-seo.php:0)",{"nodes":402,"edges":426},[403,404,405,406,407,408,409,410,411,413,414,415,416,417,418,420,422,424],{"id":268,"type":269,"label":341,"file":188,"line":342},{"id":273,"type":274,"label":344,"file":188,"line":345,"wp_function":346},{"id":278,"type":269,"label":341,"file":188,"line":342},{"id":282,"type":274,"label":275,"file":188,"line":349,"wp_function":276},{"id":314,"type":269,"label":351,"file":188,"line":352},{"id":316,"type":274,"label":344,"file":188,"line":352,"wp_function":346},{"id":318,"type":269,"label":355,"file":188,"line":356},{"id":320,"type":274,"label":275,"file":188,"line":358,"wp_function":276},{"id":360,"type":269,"label":341,"file":188,"line":412},201,{"id":364,"type":274,"label":296,"file":188,"line":378,"wp_function":298},{"id":368,"type":269,"label":393,"file":188,"line":394},{"id":371,"type":274,"label":344,"file":188,"line":396,"wp_function":346},{"id":374,"type":269,"label":361,"file":188,"line":362},{"id":377,"type":365,"label":366,"file":188,"line":362},{"id":419,"type":274,"label":344,"file":188,"line":369,"wp_function":346},"n14",{"id":421,"type":269,"label":341,"file":188,"line":372},"n15",{"id":423,"type":365,"label":375,"file":188,"line":372},"n16",{"id":425,"type":274,"label":296,"file":188,"line":378,"wp_function":298},"n17",[427,428,429,430,431,432,433,434,435,436],{"from":268,"to":273,"sanitized":286},{"from":278,"to":282,"sanitized":286},{"from":314,"to":316,"sanitized":286},{"from":318,"to":320,"sanitized":286},{"from":360,"to":364,"sanitized":286},{"from":368,"to":371,"sanitized":286},{"from":374,"to":377,"sanitized":334},{"from":377,"to":419,"sanitized":334},{"from":421,"to":423,"sanitized":334},{"from":423,"to":425,"sanitized":334},{"summary":438,"deductions":439},"The 'dynamic-url-seo' plugin v1.2 presents a mixed security picture. On the positive side, it demonstrates strong adherence to secure coding practices, with all SQL queries utilizing prepared statements and a high percentage of output being properly escaped. The absence of direct file operations and external HTTP requests further reduces its attack surface. Nonce and capability checks are present, which is a good indicator of security consciousness. However, the taint analysis reveals a significant concern with four high-severity flows involving unsanitized paths. This suggests potential vulnerabilities where user-supplied data might be used in file operations or other path-related contexts without adequate sanitization, which could lead to serious security breaches.\n\nThe plugin's vulnerability history is also a point of concern. Despite currently having no unpatched vulnerabilities, the past record shows three medium-severity CVEs, specifically related to Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF). This historical pattern indicates recurring issues with input validation and output encoding, even if those specific instances have been addressed. The recentness of the last vulnerability (early 2025) suggests that the development team has been actively involved in security patching, which is commendable, but the recurring nature of these vulnerability types warrants careful consideration.\n\nIn conclusion, while 'dynamic-url-seo' v1.2 implements several robust security measures, the presence of high-severity taint flows and the historical pattern of XSS\u002FCSRF vulnerabilities necessitate caution. The development team should prioritize addressing the identified unsanitized paths in the taint analysis. The plugin is not inherently insecure, but these specific findings require immediate attention to mitigate potential risks, especially given the past occurrences of common web vulnerabilities.",[440,443],{"reason":441,"points":442},"High severity taint flows with unsanitized paths",12,{"reason":444,"points":445},"Medium severity historical CVEs (3 total)",9,"2026-03-16T21:34:19.885Z",{"wat":448,"direct":459},{"assetPaths":449,"generatorPatterns":453,"scriptPaths":454,"versionParams":455},[450,451,452],"\u002Fwp-content\u002Fplugins\u002Fdynamic-url-seo\u002Fcss\u002Fadmin.css","\u002Fwp-content\u002Fplugins\u002Fdynamic-url-seo\u002Fcss\u002Fjquery-ui.min.css","\u002Fwp-content\u002Fplugins\u002Fdynamic-url-seo\u002Fjs\u002Fadmin.js",[],[452],[456,457,458],"dynamic-url-seo\u002Fcss\u002Fadmin.css?ver=","dynamic-url-seo\u002Fcss\u002Fjquery-ui.min.css?ver=","dynamic-url-seo\u002Fjs\u002Fadmin.js?ver=",{"cssClasses":460,"htmlComments":462,"htmlAttributes":463,"restEndpoints":465,"jsGlobals":466,"shortcodeOutput":468},[461],"notice-error",[],[464],"data-toggle",[],[467],"dus_admin_js",[]]