[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fTRAoMjJlFxQWOWSFGLOY07OPE3dX0n7fYel6DPiuwx0":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":44,"crawl_stats":35,"alternatives":48,"analysis":162,"fingerprints":331},"ec-stars-rating","EC Stars Rating","1.0.11","ecoal95","https:\u002F\u002Fprofiles.wordpress.org\u002Fecoal95\u002F","\u003Cp>A \u003Cstrong>super fast\u003C\u002Fstrong> \u003Cstrong>WordPress star rating plugin\u003C\u002Fstrong>, optimized for SEO, and with a really low impact on page load (just CSS + a bit of HTML, plus the strictly required JS for working).\u003C\u002Fp>\n\u003Ch3>Developers\u003C\u002Fh3>\n\u003Cp>The svn repo has been recently synchronized with \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fecoal95\u002Fec-stars-rating\" rel=\"nofollow ugc\">a github one\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Contributions are more than welcome, so feel free to submit a PR there if you wish 🙂\u003C\u002Fp>\n\u003Ch3>How it works\u003C\u002Fh3>\n\u003Cp>Basically we create a new table called \u003Ccode>(prefix)ec_stars_votes\u003C\u002Fcode>, where we store the votes of the people (to prevent duplicate votes).\u003C\u002Fp>\n\u003Cp>The number of votes and the sum of the total votes are stored in the \u003Ccode>(prefix)options\u003C\u002Fcode> table in form of custom meta fields, one for the count, and another for the sum. Both fields get updated when someone votes.\u003C\u002Fp>\n","A lightweigt, blazing fast star rating plugin for WordPress",400,18491,84,16,"2015-11-04T11:55:00.000Z","4.3.34","3.0","",[20,21,22],"posts-rating","rating","stars","http:\u002F\u002Femiliocobos.net\u002Fec-stars-rating-wordpress-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fec-stars-rating.1.0.11.zip",63,1,"2025-06-27 00:00:00","2026-03-15T15:16:48.613Z",[30],{"id":31,"url_slug":32,"title":33,"description":34,"plugin_slug":4,"theme_slug":35,"affected_versions":36,"patched_in_version":35,"severity":37,"cvss_score":38,"cvss_vector":39,"vuln_type":40,"published_date":27,"updated_date":41,"references":42,"days_to_patch":35},"CVE-2025-53296","ec-stars-rating-authenticated-administrator-stored-cross-site-scripting","EC Stars Rating \u003C= 1.0.11 - Authenticated (Administrator+) Stored Cross-Site Scripting","The EC Stars Rating plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only impacts multi-site installations and installations where unfiltered_html has been disabled.",null,"\u003C=1.0.11","medium",4.4,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-07-02 19:34:10",[43],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F9e8346a4-4077-469f-9182-d6cf12f60776?source=api-prod",{"slug":7,"display_name":7,"profile_url":8,"plugin_count":26,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":45,"trust_score":46,"computed_at":47},30,68,"2026-04-04T07:08:43.946Z",[49,75,97,118,139],{"slug":50,"name":51,"version":52,"author":53,"author_profile":54,"description":55,"short_description":56,"active_installs":57,"downloaded":58,"rating":59,"num_ratings":60,"last_updated":61,"tested_up_to":62,"requires_at_least":63,"requires_php":64,"tags":65,"homepage":69,"download_link":70,"security_score":71,"vuln_count":72,"unpatched_count":73,"last_vuln_date":74,"fetched_at":28},"gd-rating-system","GD Rating System","3.6.2","Milan Petrovic","https:\u002F\u002Fprofiles.wordpress.org\u002Fgdragon\u002F","\u003Cp>GD Rating System is the successor to GD Star Rating plugin, but it has nothing in common with the old plugin. GD Rating System uses modular structure with most features split into addons and rating methods. For front end display plugin uses templates similar to WordPress theme templates and allows you to override existing templates or add new ones.\u003C\u002Fp>\n\u003Ch4>Overview of plugin features\u003C\u002Fh4>\n\u003Cp>With GD Rating System you can rate anything. The Plugin supports several basic rating entities, and for each one you can have more than one rating type. This includes posts with all default and custom post types, comments, users, terms for default or custom taxonomies.\u003C\u002Fp>\n\u003Cp>Here is the list of most important plugin features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Rating Method: Stars Rating\u003C\u002Fli>\n\u003Cli>Rating Method: Like This (3.0)\u003C\u002Fli>\n\u003Cli>Addon: Shortcodes Builder (3.1)\u003C\u002Fli>\n\u003Cli>Addon: Rich Snippets Support\u003C\u002Fli>\n\u003Cli>Addon: Posts Integration\u003C\u002Fli>\n\u003Cli>Addon: Comments Integration\u003C\u002Fli>\n\u003Cli>Addon: Dynamic Load\u003C\u002Fli>\n\u003Cli>Addon: Feeds Support (v1.3)\u003C\u002Fli>\n\u003Cli>Widget: Rating block\u003C\u002Fli>\n\u003Cli>Widget: Rating list\u003C\u002Fli>\n\u003Cli>Shortcodes: Rating block and list\u003C\u002Fli>\n\u003Cli>Shortcodes: Rating values\u003C\u002Fli>\n\u003Cli>Shortcodes: Rating conditions\u003C\u002Fli>\n\u003Cli>Presentation: Default set of templates\u003C\u002Fli>\n\u003Cli>Posts Addon: Sort by rating (v1.2)\u003C\u002Fli>\n\u003Cli>Posts Addon: Auto sort by rating (v3.0)\u003C\u002Fli>\n\u003Cli>Comments Addon: Sort by rating (v1.2)\u003C\u002Fli>\n\u003Cli>Stars Rating: 20 icons in a font\u003C\u002Fli>\n\u003Cli>Stars Rating: 6 image based sets\u003C\u002Fli>\n\u003Cli>Like This Rating: 2 font icons sets in a font\u003C\u002Fli>\n\u003Cli>Like This Rating: 1 image based set\u003C\u002Fli>\n\u003Cli>Administration: Rating objects log\u003C\u002Fli>\n\u003Cli>Administration: Votes log\u003C\u002Fli>\n\u003Cli>Administration: Custom rating rules\u003C\u002Fli>\n\u003Cli>List Shortcodes and Widgets: additional object filters (v3.0)\u003C\u002Fli>\n\u003Cli>Data Transfer: Import from GD Star Rating\u003C\u002Fli>\n\u003Cli>Data Transfer: Import from WP PostRatings\u003C\u002Fli>\n\u003Cli>Data Transfer: Import from Yet Another Stars Rating\u003C\u002Fli>\n\u003Cli>Data Transfer: Import from KK Star Ratings (v1.3)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Upgrade to GD Rating System Pro\u003C\u002Fh4>\n\u003Cp>The Pro version contains many more great features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Rating Method: Slider Rating (v3.0)\u003C\u002Fli>\n\u003Cli>Rating Method: Slider Review (v3.0)\u003C\u002Fli>\n\u003Cli>Rating Method: Emote This (v1.4)\u003C\u002Fli>\n\u003Cli>Rating Method: Stars Review\u003C\u002Fli>\n\u003Cli>Rating Method: Thumbs Rating\u003C\u002Fli>\n\u003Cli>Addon: Sync To Meta (v3.1)\u003C\u002Fli>\n\u003Cli>Addon: Instant Notifications (v3.0)\u003C\u002Fli>\n\u003Cli>Addon: BuddyPress Integration (v2.0)\u003C\u002Fli>\n\u003Cli>Addon: BuddyPress Notifications (v3.5)\u003C\u002Fli>\n\u003Cli>Addon: BuddyPress Activities (v3.5)\u003C\u002Fli>\n\u003Cli>Addon: Tooltip (v2.0)\u003C\u002Fli>\n\u003Cli>Addon: Client Detection (v1.3)\u003C\u002Fli>\n\u003Cli>Addon: bbPress Integration (v1.1)\u003C\u002Fli>\n\u003Cli>Addon: Bayesian Calculation (v1.1)\u003C\u002Fli>\n\u003Cli>Addon: WP REST API Plugin Support\u003C\u002Fli>\n\u003Cli>Addon: Dummy Ratings\u003C\u002Fli>\n\u003Cli>Addon: Edit Rating Votes\u003C\u002Fli>\n\u003Cli>Addon: GEO Location for Votes\u003C\u002Fli>\n\u003Cli>Addon: Admin Enhancer\u003C\u002Fli>\n\u003Cli>Published date can be used in queries (v3.0)\u003C\u002Fli>\n\u003Cli>Date based period queries (v2.2)\u003C\u002Fli>\n\u003Cli>Date based voting limiters (v4.0)\u003C\u002Fli>\n\u003Cli>Aggregate ratings (v2.2)\u003C\u002Fli>\n\u003Cli>Posts Addon: Auto sort by rating (v1.2)\u003C\u002Fli>\n\u003Cli>bbPress Addon: Rating topics views (v1.2)\u003C\u002Fli>\n\u003Cli>Font Icons: FontAwesome 4.7 support (v1.3)\u003C\u002Fli>\n\u003Cli>Presentation: Additional Templates\u003C\u002Fli>\n\u003Cli>Presentation: Additional Widgets\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>With more features on the roadmap exclusively for Pro version.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>More information about \u003Ca href=\"https:\u002F\u002Fplugins.dev4press.com\u002Fgd-rating-system\u002F\" rel=\"nofollow ugc\">GD Rating System Pro\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Premium addons for \u003Ca href=\"https:\u002F\u002Fplugins.dev4press.com\u002Fgd-rating-system\u002Faddons\u002F\" rel=\"nofollow ugc\">GD Rating System Pro\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Compare \u003Ca href=\"https:\u002F\u002Fplugins.dev4press.com\u002Fgd-rating-system\u002Farticles\u002Flite-vs-pro\u002F\" rel=\"nofollow ugc\">Free vs. Pro Plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Premium addons:\u003Cbr \u002F>\n* Multi Rating Addon (4 new rating methods)\u003Cbr \u002F>\n* User Reviews Addon\u003Cbr \u002F>\n* Analytics Addon\u003Cbr \u002F>\n* myCRED Integration Addon\u003Cbr \u002F>\n* myCRED Simple Integration Addon (free with GD Rating System Pro license)\u003Cbr \u002F>\n* Recipe Rich Snippet Addon (free with GD Rating System Pro license)\u003Cbr \u002F>\n* Book Rich Snippet Addon (free with GD Rating System Pro license)\u003Cbr \u002F>\n* Code Builder Addon (free with GD Rating System Pro license)\u003Cbr \u002F>\n* Comments Form Addon (free with GD Rating System Pro license)\u003C\u002Fp>\n\u003Cp>Premium graphics packs:\u003Cbr \u002F>\n* Halloween Pack (free with GD Rating System Pro license)\u003Cbr \u002F>\n* Christmas Pack (free with GD Rating System Pro license)\u003Cbr \u002F>\n* Emoji Pack (free with GD Rating System Pro license)\u003C\u002Fp>\n\u003Ch4>Documentation and Support\u003C\u002Fh4>\n\u003Cp>You need to register for a free account on \u003Ca href=\"https:\u002F\u002Fwww.dev4press.com\u002F\" rel=\"nofollow ugc\">Dev4Press\u003C\u002Fa>:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsupport.dev4press.com\u002Fkb\u002Fproduct\u002Fgd-rating-system\u002Ffaqs\u002F\" rel=\"nofollow ugc\">Frequently Asked Questions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsupport.dev4press.com\u002Fkb\u002Fproduct\u002Fgd-rating-system\u002Farticles\u002F\" rel=\"nofollow ugc\">Knowledge Base Articles\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Support Forum: \u003Ca href=\"https:\u002F\u002Fsupport.dev4press.com\u002Fforums\u002Fforum\u002Fplugins-lite\u002Fgd-rating-system-lite\u002F\" rel=\"nofollow ugc\">Free\u003C\u002Fa> & \u003Ca href=\"https:\u002F\u002Fsupport.dev4press.com\u002Fforums\u002Fforum\u002Fplugins\u002Fgd-rating-system\u002F\" rel=\"nofollow ugc\">Pro\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>English\u003C\u002Fli>\n\u003C\u002Ful>\n","Powerful, highly customizable and versatile ratings plugin to allow your users to vote for anything you want.",1000,127397,86,24,"2024-11-15T14:12:00.000Z","6.7.5","5.5","7.4",[66,67,21,22,68],"dev4press","like","vote","https:\u002F\u002Fplugins.dev4press.com\u002Fgd-rating-system\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgd-rating-system.zip",85,12,0,"2024-11-19 00:05:15",{"slug":76,"name":77,"version":78,"author":79,"author_profile":80,"description":81,"short_description":82,"active_installs":57,"downloaded":83,"rating":84,"num_ratings":85,"last_updated":86,"tested_up_to":62,"requires_at_least":18,"requires_php":64,"tags":87,"homepage":93,"download_link":94,"security_score":95,"vuln_count":26,"unpatched_count":73,"last_vuln_date":96,"fetched_at":28},"reviewscouk-for-woocommerce","REVIEWS.io for WooCommerce","1.5.5","reviewscouk","https:\u002F\u002Fprofiles.wordpress.org\u002Freviewscouk\u002F","\u003Cp>REVIEWS.io, helps eCommerce merchants to collect & display verified product and company reviews. As a Google Licensed partner, they can \u003Ca href=\"https:\u002F\u002Fwww.reviews.io\u002Ffront\u002Fgoogle-seller-ratings#:~:text=REVIEWS.io%20is%20an%20official,each%20country%20you%20operate%20in.&text=Meet%20the%20requirements%20sooner%20by,with%20our%20Review%20Booster%20feature.\" rel=\"nofollow ugc\">get stars displayed in Google Ads and Google Shopping\u003C\u002Fa> to help merchants stand out against competitors by displaying authentic review content on browsers’ first point of contact: Google.\u003C\u002Fp>\n\u003Cp>They \u003Ca href=\"https:\u002F\u002Fwww.reviews.io\u002Ffront\u002Fintegration-library\" rel=\"nofollow ugc\">integrate with 1000s of tech & eCommerce platforms\u003C\u002Fa>, meaning that merchants can combine their existing MarTech stack with REVIEWS.io to offer a seamless customer experience. \u003C\u002Fp>\n\u003Cp>The REVIEWS.io WooCommerce plugin seamlessly integrates reviews into WordPress online stores. Our user-centric approach enables merchants to add their product catalog to REVIEWS.io Data Feeds and conveniently access REVIEWS.io widgets within their WordPress accounts.\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FlRwHFJ8rXi8?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>\u003Cstrong>Watch Platform Demonstration\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=lRwHFJ8rXi8\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=lRwHFJ8rXi8\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>REVIEWS.io: A Feature-rich Review Solution: \u003C\u002Fh3>\n\u003Cp>\u003Cstrong>User-Generated Content (UGC) –\u003C\u002Fstrong> Enhance your UGC collection by requesting photo or video reviews in your review invites. \u003Ca href=\"https:\u002F\u002Fblog.reviews.io\u002Fpost\u002Fcombine-manage-ugc-into-shoppable-galleries\" rel=\"nofollow ugc\">Make your UGC Shoppable\u003C\u002Fa> by adding your Product Catalog to the DataFeed within the WooCommerce Plugin. This allows your review content to convert by tagging the product mentioned in the review to direct them to the Product Page.   \u003C\u002Fp>\n\u003Cp>\u003Cstrong>Reputation Manager –\u003C\u002Fstrong> To ensure a consistent reputation across different third-party review platforms, utilize REVIEWS.io’s \u003Ca href=\"https:\u002F\u002Fwww.reviews.io\u002Ffront\u002Freputation-management\" rel=\"nofollow ugc\">Reputation Manager Tool\u003C\u002Fa> to send a portion of review invitations specifically to these platforms. This approach enables you to manage your online presence by maintaining a uniform review rating across platforms like Trustpilot, Facebook, and Google Local.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Review Attributes –\u003C\u002Fstrong> Create strong customer profiles and help browsers make more informed purchasing decisions by \u003Ca href=\"https:\u002F\u002Fblog.reviews.io\u002Fpost\u002Fhow-to-make-review-attributes-work-for-your-brand-with-our-6-top-use-case-examples\" rel=\"nofollow ugc\">displaying attributes\u003C\u002Fa> next to the product reviews. For example, a clothing company may showcase whether the item was ‘true-to-fit’ to help to convert browsers into buyers. Simply connect your Product Catalog to the data feed within your WordPress dashboard at the settings for the REVIEWS.io WooCommerce plugin.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Influence.io –\u003C\u002Fstrong> A REVIEWS.io company, which is a platform that allows eCommerce merchants to add a \u003Ca href=\"https:\u002F\u002Fwww.influence.io\u002F\" rel=\"nofollow ugc\">loyalty program\u003C\u002Fa> to their website. Influence.io offers an earn & rewards points system, a referrals program, loyalty tiers, and create an affiliate marketing program.\u003C\u002Fp>\n\u003Ch3>PRICING OUTLINE\u003C\u002Fh3>\n\u003Cp>Our contracts are on a monthly basis meaning you are not tied into any long-term commitments. You can upgrade or downgrade our plan tiers to suit your business needs. Check out our \u003Ca href=\"https:\u002F\u002Fwww.reviews.io\u002Ffront\u002Fpricingplans\" rel=\"nofollow ugc\">pricing plans\u003C\u002Fa>. \u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.reviews.io\u002Ffront\u002Ftrustpilot-alternative-new\" rel=\"nofollow ugc\">Switching from an existing review provider\u003C\u002Fa>? No problem. Easily import your existing reviews onto REVIEWS.io. \u003C\u002Fp>\n\u003Ch3>INSTALLATION\u003C\u002Fh3>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Fe0zNrqDQRC8?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>\u003Cstrong>Watch Installation Demonstration\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=e0zNrqDQRC8\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=e0zNrqDQRC8\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Need more support? Our article outlines how simple it is to install the WooCommerce X REVIEWS.io plugin.\u003C\u002Fp>\n\u003Cp>Read more about our WooCommerce Plugin here: \u003Ca href=\"https:\u002F\u002Fsupport.reviews.io\u002Fen\u002Farticles\u002F3203716-woocommerce-plugin\" rel=\"nofollow ugc\">https:\u002F\u002Fsupport.reviews.io\u002Fen\u002Farticles\u002F3203716-woocommerce-plugin\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>DEVELOPMENT \u003C\u002Fh3>\n\u003Cp>Checkout the REVIEWS.io Changelog which outlines all of the feature updates & releases in one space \u003Ca href=\"https:\u002F\u002Fwww.reviews.io\u002Fupdates\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.reviews.io\u002Fupdates\u003C\u002Fa>\u003C\u002Fp>\n","REVIEWS.io, helps eCommerce merchants to collect & display verified product and company reviews. A Google Licensed partner.",57543,60,2,"2025-09-18T11:03:00.000Z",[88,89,90,91,92],"company-reviews","google-reviews","reviews","seller-ratings","stars-in-adwords","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Freviewscouk-for-woocommerce\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Freviewscouk-for-woocommerce.1.5.5.zip",99,"2024-07-10 00:00:00",{"slug":98,"name":99,"version":100,"author":101,"author_profile":102,"description":103,"short_description":104,"active_installs":57,"downloaded":105,"rating":106,"num_ratings":107,"last_updated":108,"tested_up_to":109,"requires_at_least":110,"requires_php":111,"tags":112,"homepage":115,"download_link":116,"security_score":95,"vuln_count":26,"unpatched_count":73,"last_vuln_date":117,"fetched_at":28},"stars-rating","Stars Rating","4.0.7","Fahid Javid","https:\u002F\u002Fprofiles.wordpress.org\u002Ffahidjavid\u002F","\u003Cp>A simple and easy to use plugin that turns post, pages and custom post types comments into reviews.\u003C\u002Fp>\n\u003Cp>Its main features are as follows:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Turns post, pages and custom post types comments into reviews.\u003C\u002Fli>\n\u003Cli>Allows you to choose post types on which you want to enable Stars Rating feature.\u003C\u002Fli>\n\u003Cli>An option to require rating selection to leave a review.\u003C\u002Fli>\n\u003Cli>Also, allows you to enable\u002Fdisable stars rating feature for the posts and pages individually.\u003C\u002Fli>\n\u003Cli>An option to display stars rating in Google search results.\u003C\u002Fli>\n\u003Cli>Choose from two different rating stars styles according to your site look.\u003C\u002Fli>\n\u003Cli>Offers a shortcode \u003Cstrong>[stars_rating_avg]\u003C\u002Fstrong> to display average rating anywhere in the post\u002Fpage\u002FCPTs detail or listing pages.\u003C\u002Fli>\n\u003Cli>Hide average rating text \u003Cstrong>[stars_rating_avg show_text=”no”]\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>Hide empty average rating \u003Cstrong>[stars_rating_avg show_empty_rating=”no”]\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>See each review stars rating on the comments page (backend).\u003C\u002Fli>\n\u003Cli>Enhanced SEO with structured data for standout reviews in Google with “Google Review Schema” integration.\u003C\u002Fli>\n\u003Cli>Preempt negativity with the “Negative Rating Alert” feature, promoting issue resolution before reviews are posted.\u003C\u002Fli>\n\u003C\u002Ful>\n","A plugin to turn comments into reviews by adding rating feature.",33150,94,23,"2025-12-04T10:00:00.000Z","6.9.4","6.0","8.3",[113,21,90,114,22],"comments","shortcode","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fstars-rating\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstars-rating.4.0.7.zip","2021-12-06 00:00:00",{"slug":119,"name":120,"version":121,"author":122,"author_profile":123,"description":124,"short_description":125,"active_installs":126,"downloaded":127,"rating":13,"num_ratings":128,"last_updated":129,"tested_up_to":109,"requires_at_least":130,"requires_php":131,"tags":132,"homepage":136,"download_link":137,"security_score":138,"vuln_count":73,"unpatched_count":73,"last_vuln_date":35,"fetched_at":28},"five-star-ratings-shortcode","Five-Star Ratings Shortcode","1.2.61","Chris J. Zähller","https:\u002F\u002Fprofiles.wordpress.org\u002Fseezee\u002F","\u003Cp>Add accessible, attractive 5-star ratings anywhere on your site with a simple shortcode. The plugin uses Font Awesome icons via their SVG + JavaScript method.\u003C\u002Fp>\n\u003Ch3>Acknowledgement\u003C\u002Fh3>\n\u003Cp>This plugin is based on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fhlashbrooke\u002FWordPress-Plugin-Template\" rel=\"nofollow ugc\">Hugh Lashbrooke’s Starter Plugin\u003C\u002Fa>, a robust and GPL-licensed code template for creating a standards-compliant WordPress plugin.\u003C\u002Fp>\n\u003Ch3>PRO only features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Google Rich Snippets for Products, Restaurants, & Recipes\u003C\u002Fli>\n\u003Cli>Custom icon sizes\u003C\u002Fli>\n\u003Cli>Custom icon and text colors\u003C\u002Fli>\n\u003Cli>Choice of HTML \u003Ccode>\u003Ci>\u003C\u002Fcode> or \u003Ccode>\u003Cspan>\u003C\u002Fcode> elements in HTML output\u003C\u002Fli>\n\u003Cli>Change maximum rating (from 3 – 10)\u003C\u002Fli>\n\u003Cli>Change minimum rating (0.0, 0.5, or 1.0)\u003C\u002Fli>\n\u003Cli>Shortcode generator\u003C\u002Fli>\n\u003Cli>Show\u002Fhide numeric text\u003C\u002Fli>\n\u003Cli>Locale aware decimal separator\u003C\u002Fli>\n\u003Cli>Options reset button\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Usage Examples\u003C\u002Fh3>\n\u003Cp>[rating stars=\"3.0\"] (Displays 3 stars out of 5)\u003Cbr \u002F>\n[rating stars=\"2.5\"] (Displays 2½ stars out of 5)\u003Cbr \u002F>\n[rating stars=\"4.0\"] (Displays 4 stars out of 5)\u003Cbr \u002F>\n[rating stars=\"5.5\"] (Incorrect usage but will display 5 stars out of 5)\u003C\u002Fp>\n\u003Cp>In the 2nd example, the raw output will be like this before processing:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Cspan class=\"fsrs\">\n  \u003Cspan class=\"fsrs-stars\">\n    \u003Ci class=\"fsrs-fas fa-fw fa-star\">\u003C\u002Fi>\n    \u003Ci class=\"fsrs-fas fa-fw fa-star\">\u003C\u002Fi>\n    \u003Ci class=\"fsrs-fas fa-fw fa-star-half-alt\">\u003C\u002Fi>\n    \u003Ci class=\"fsrs-far fa-fw fa-star\">\u003C\u002Fi>\n    \u003Ci class=\"fsrs-far fa-fw fa-star\">\u003C\u002Fi>\n  \u003C\u002Fspan>\n  \u003Cspan class=\"hide fsrs-text fsrs-text__hidden\" aria-hidden=\"false\">2.5 out of 5\u003C\u002Fspan>\n  \u003Cspan class=\"lining fsrs-text fsrs-text__visible\" aria-hidden=\"true\">2.5\u003C\u002Fspan>\n\u003C\u002Fspan>\u003Ch3>Translations\u003C\u002Fh3>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>* English: Default language, always included\u003C\u002Fp>\n\u003Cp>Would you like to help translate Five-Star Ratings Shortcode into your own language? \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Ffive-star-ratings-shortcode\" rel=\"nofollow ugc\">You can do that here!\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Dependencies\u003C\u002Fh3>\n\u003Cp>This plugin includes these third-party libraries in its package.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002FFortAwesome\u002FFont-Awesome\" rel=\"nofollow ugc\">Font Awesome 5\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Simple lightweight shortcode to add 5-star ratings anywhere.",700,26622,5,"2026-02-02T17:40:00.000Z","4.6.1","7.0",[133,134,135,114,22],"accessible","icon","ratings","https:\u002F\u002Fmessengerwebdesign.com\u002Fplugins\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffive-star-ratings-shortcode.1.2.61.zip",100,{"slug":140,"name":141,"version":142,"author":143,"author_profile":144,"description":145,"short_description":146,"active_installs":147,"downloaded":148,"rating":106,"num_ratings":149,"last_updated":150,"tested_up_to":151,"requires_at_least":152,"requires_php":18,"tags":153,"homepage":157,"download_link":158,"security_score":159,"vuln_count":160,"unpatched_count":26,"last_vuln_date":161,"fetched_at":28},"rating-bws","Rating by BestWebSoft","1.7","bestweblayout","https:\u002F\u002Fprofiles.wordpress.org\u002Fbestweblayout\u002F","\u003Cp>Simple plugin which adds 5 stars rating to your WordPress website posts, pages, and widgets. Customize the appearance, choose where you want to display rating statistic, and enjoy your customer’s reviews.\u003C\u002Fp>\n\u003Cp>Show rating from other people to increase conversions!\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fdemo-rating-by-bestwebsoft\u002F?ref=readme\" rel=\"nofollow ugc\">View Demo\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Automatically add star rating to:\n\u003Cul>\n\u003Cli>Post\u003C\u002Fli>\n\u003Cli>Pages\u003C\u002Fli>\n\u003Cli>Media\u003C\u002Fli>\n\u003Cli>Testimonials\u003C\u002Fli>\n\u003Cli>Custom post types\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Add rating via shortcode\u003C\u002Fli>\n\u003Cli>Select the user roles that can submit ratings\u003C\u002Fli>\n\u003Cli>Allow non-logged in users to submit ratings\u003C\u002Fli>\n\u003Cli>Choose average rating position:\n\u003Cul>\n\u003Cli>Before the content\u003C\u002Fli>\n\u003Cli>After the content\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Combine average rating with a rate option\u003C\u002Fli>\n\u003Cli>Choose rate option position:\n\u003Cul>\n\u003Cli>Before the content\u003C\u002Fli>\n\u003Cli>After the content\u003C\u002Fli>\n\u003Cli>In comments\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Customize rating styles:\n\u003Cul>\n\u003Cli>Star color\u003C\u002Fli>\n\u003Cli>Star color on mouseover\u003C\u002Fli>\n\u003Cli>Text color\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Set the size for:\n\u003Cul>\n\u003Cli>Stars\u003C\u002Fli>\n\u003Cli>Text\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Include JSON-LD schema\u003C\u002Fli>\n\u003Cli>Customize message:\n\u003Cul>\n\u003Cli>Total number of stars\u003C\u002Fli>\n\u003Cli>Guest users that submit a review\u003C\u002Fli>\n\u003Cli>When rating is submitted successfully\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Exclude JSON-LD schema per post\u003C\u002Fli>\n\u003Cli>Add custom code via plugin settings page\u003C\u002Fli>\n\u003Cli>Compatible with latest WordPress version\u003C\u002Fli>\n\u003Cli>Incredibly simple settings for fast setup without modifying code\u003C\u002Fli>\n\u003Cli>Detailed step-by-step documentation and videos\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Pro Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>All features from Free version included plus:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Customize the number of stars\u003C\u002Fli>\n\u003Cli>Display average rating in the list with pages\u002Fposts\u003C\u002Fli>\n\u003Cli>Get answer to your support question within one business day (\u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fsupport-policy\u002F\" rel=\"nofollow ugc\">Support Policy\u003C\u002Fa>)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fproducts\u002Fwordpress\u002Fplugins\u002Frating\u002F?k=4808d50a7d9757de9577e1ce29ea07f6\" rel=\"nofollow ugc\">Upgrade to Pro Now\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>If you have a feature suggestion or idea you’d like to see in the plugin, we’d love to hear about it! \u003Ca href=\"https:\u002F\u002Fsupport.bestwebsoft.com\u002Fhc\u002Fen-us\u002Frequests\u002Fnew\" rel=\"nofollow ugc\">Suggest a Feature\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Documentation & Videos\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdocs.google.com\u002Fdocument\u002Fd\u002F1-hvn6WRvWnOqj5v5pLUk7Awyu87lq5B_dO-Tv-MC9JQ\u002F\" rel=\"nofollow ugc\">[Doc] Installation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdocs.google.com\u002Fdocument\u002Fd\u002F1EUdBVvnm7IHZ6y0DNyldZypUQKpB8UVPToSc_LdOYQI\u002Fedit\" rel=\"nofollow ugc\">[Doc] Purchase\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fdocumentation\u002Frating\u002Frating-user-guide\u002F\" rel=\"nofollow ugc\">[Doc] User Guide\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Help & Support\u003C\u002Fh4>\n\u003Cp>Visit our Help Center if you have any questions, our friendly Support Team is happy to help — \u003Ca href=\"https:\u002F\u002Fsupport.bestwebsoft.com\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fsupport.bestwebsoft.com\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Translation\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Russian (ru_RU)\u003C\u002Fli>\n\u003Cli>Spanish (es_ES) (thanks to \u003Ca href=\"mailto:jmbescos@ibidemgroup.com\" rel=\"nofollow ugc\">Jose Bescos\u003C\u002Fa>, www.ibidemgroup.com)\u003C\u002Fli>\n\u003Cli>Ukrainian (uk)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Some of these translations are not complete. We are constantly adding new features which should be translated. If you would like to create your own language pack or update the existing one, you can send \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FTranslating_WordPress\" rel=\"nofollow ugc\">the text of PO and MO files\u003C\u002Fa> to \u003Ca href=\"https:\u002F\u002Fsupport.bestwebsoft.com\u002Fhc\u002Fen-us\u002Frequests\u002Fnew\" rel=\"nofollow ugc\">BestWebSoft\u003C\u002Fa> and we’ll add it to the plugin. You can download the latest version of the program for work with PO and MO \u003Ca href=\"http:\u002F\u002Fwww.poedit.net\u002Fdownload.php\" rel=\"nofollow ugc\">files Poedit\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Recommended Plugins\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fproducts\u002Fwordpress\u002Fplugins\u002Fupdater\u002F?k=c7ce6f79072aa3d73d66318b2370b719\" rel=\"nofollow ugc\">Updater\u003C\u002Fa> – Automatically check and update WordPress website core with all installed plugins and themes to the latest versions.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fproducts\u002Fwordpress\u002Fplugins\u002Ftestimonials\u002F\" rel=\"nofollow ugc\">Testimonials\u003C\u002Fa> – Add testimonials and feedbacks from your customers to WordPress website posts, pages, and widgets.\u003C\u002Fli>\n\u003C\u002Ful>\n","Add rating plugin to your WordPress website to receive feedback from your customers.",500,12313,7,"2025-06-06T10:27:00.000Z","6.8.5","5.6",[154,155,21,156,22],"5-stars","add-rating","rating-plugin","https:\u002F\u002Fbestwebsoft.com\u002Fproducts\u002Fwordpress\u002Fplugins\u002Frating\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frating-bws.1.7.zip",73,3,"2025-04-17 00:00:00",{"attackSurface":163,"codeSignals":201,"taintFlows":269,"riskAssessment":312,"analyzedAt":330},{"hooks":164,"ajaxHandlers":186,"restRoutes":195,"shortcodes":196,"cronEvents":200,"entryPointCount":160,"unprotectedCount":85},[165,171,175,179,183],{"type":166,"name":167,"callback":168,"file":169,"line":170},"action","plugins_loaded","_load_textdomain","ec-stars-rating.php",53,{"type":166,"name":172,"callback":173,"file":169,"line":174},"wp_head","head",55,{"type":166,"name":176,"callback":177,"file":169,"line":178},"widgets_init","_register_widgets",58,{"type":166,"name":180,"callback":181,"file":169,"line":182},"admin_init","_register_settings",67,{"type":166,"name":184,"callback":185,"file":169,"line":46},"admin_menu","_add_menu_page",[187,192],{"action":188,"nopriv":189,"callback":190,"hasNonce":189,"hasCapCheck":189,"file":169,"line":191},"ec_stars_rating",false,"_handle_vote",71,{"action":188,"nopriv":193,"callback":190,"hasNonce":189,"hasCapCheck":189,"file":169,"line":194},true,72,[],[197],{"tag":188,"callback":198,"file":169,"line":199},"_shortcode",61,[],{"dangerousFunctions":202,"sqlUsage":203,"outputEscaping":205,"fileOperations":73,"externalRequests":73,"nonceChecks":73,"capabilityChecks":73,"bundledLibraries":268},[],{"prepared":160,"raw":73,"locations":204},[],{"escaped":206,"rawEcho":207,"locations":208},10,32,[209,213,215,217,219,221,223,225,227,229,231,233,235,237,239,241,243,244,245,247,248,250,251,252,254,255,257,258,260,262,264,266],{"file":210,"line":211,"context":212},"ec-stars-rating-widget.php",40,"raw output",{"file":210,"line":214,"context":212},42,{"file":210,"line":216,"context":212},45,{"file":210,"line":218,"context":212},83,{"file":210,"line":220,"context":212},87,{"file":210,"line":222,"context":212},88,{"file":210,"line":224,"context":212},93,{"file":210,"line":226,"context":212},97,{"file":210,"line":228,"context":212},98,{"file":210,"line":230,"context":212},131,{"file":169,"line":232,"context":212},176,{"file":169,"line":234,"context":212},177,{"file":169,"line":236,"context":212},182,{"file":169,"line":238,"context":212},185,{"file":169,"line":240,"context":212},188,{"file":169,"line":242,"context":212},482,{"file":169,"line":242,"context":212},{"file":169,"line":242,"context":212},{"file":169,"line":246,"context":212},483,{"file":169,"line":246,"context":212},{"file":169,"line":249,"context":212},494,{"file":169,"line":249,"context":212},{"file":169,"line":249,"context":212},{"file":169,"line":253,"context":212},495,{"file":169,"line":253,"context":212},{"file":169,"line":256,"context":212},506,{"file":169,"line":256,"context":212},{"file":169,"line":259,"context":212},568,{"file":169,"line":261,"context":212},569,{"file":169,"line":263,"context":212},586,{"file":169,"line":265,"context":212},589,{"file":169,"line":267,"context":212},590,[],[270,293],{"entryPoint":271,"graph":272,"unsanitizedCount":26,"severity":292},"_handle_vote (ec-stars-rating.php:388)",{"nodes":273,"edges":289},[274,279,283],{"id":275,"type":276,"label":277,"file":169,"line":278},"n0","source","$_SERVER",410,{"id":280,"type":281,"label":282,"file":169,"line":278},"n1","transform","→ getVote()",{"id":284,"type":285,"label":286,"file":169,"line":287,"wp_function":288},"n2","sink","get_row() [SQLi]",382,"get_row",[290,291],{"from":275,"to":280,"sanitized":189},{"from":280,"to":284,"sanitized":189},"high",{"entryPoint":294,"graph":295,"unsanitizedCount":26,"severity":292},"\u003Cec-stars-rating> (ec-stars-rating.php:0)",{"nodes":296,"edges":308},[297,300,303,304,306],{"id":275,"type":276,"label":298,"file":169,"line":299},"$_POST (x2)",402,{"id":280,"type":285,"label":301,"file":169,"line":261,"wp_function":302},"echo() [XSS]","echo",{"id":284,"type":276,"label":277,"file":169,"line":278},{"id":305,"type":281,"label":282,"file":169,"line":278},"n3",{"id":307,"type":285,"label":286,"file":169,"line":287,"wp_function":288},"n4",[309,310,311],{"from":275,"to":280,"sanitized":193},{"from":284,"to":305,"sanitized":189},{"from":305,"to":307,"sanitized":189},{"summary":313,"deductions":314},"The \"ec-stars-rating\" plugin v1.0.11 presents a mixed security posture. While it demonstrates good practices in its handling of SQL queries, utilizing prepared statements exclusively, and avoiding file operations and external HTTP requests, significant concerns arise from its attack surface and code analysis. The presence of two unprotected AJAX handlers represents a considerable risk, as these are direct entry points that could be exploited without proper authentication. Furthermore, the taint analysis reveals two flows with unsanitized paths, both flagged as high severity, indicating potential vulnerabilities where user-controlled input could lead to unintended consequences.\n\nThe plugin's vulnerability history is also a point of concern. It has a known medium severity CVE that is currently unpatched, dating from June 2025. The common vulnerability type being Cross-site Scripting (XSS) and the fact that a medium-severity vulnerability remains unaddressed suggest a pattern of neglecting security updates or potentially a lack of rigorous security testing before releases.\n\nIn conclusion, the plugin exhibits strengths in database interaction and operational security, but the unprotected entry points, high-severity taint flows, and the unpatched historical vulnerability significantly detract from its overall security. Organizations using this plugin should be aware of the potential for XSS and unauthorized actions via its AJAX endpoints and prioritize updating to a version that addresses the known CVE.",[315,317,320,323,325,328],{"reason":316,"points":206},"Unprotected AJAX handlers",{"reason":318,"points":319},"High severity unsanitized taint flows",14,{"reason":321,"points":322},"Unpatched medium CVE",17,{"reason":324,"points":149},"Low percentage of properly escaped output",{"reason":326,"points":327},"Missing nonce checks on AJAX",8,{"reason":329,"points":128},"Missing capability checks","2026-03-16T19:48:43.911Z",{"wat":332,"direct":341},{"assetPaths":333,"generatorPatterns":336,"scriptPaths":337,"versionParams":338},[334,335],"\u002Fwp-content\u002Fplugins\u002Fec-stars-rating\u002Fjs\u002Fec-stars-rating.js","\u002Fwp-content\u002Fplugins\u002Fec-stars-rating\u002Fjs\u002Fec-stars-rating-nojq.js",[],[334,335],[339,340],"ec-stars-rating\u002Fjs\u002Fec-stars-rating.js?ver=","ec-stars-rating\u002Fjs\u002Fec-stars-rating-nojq.js?ver=",{"cssClasses":342,"htmlComments":345,"htmlAttributes":346,"restEndpoints":348,"jsGlobals":349,"shortcodeOutput":351},[343,344],"ec-stars-wrapper","ec-stars-overlay",[],[347],"data-tooltip",[],[350],"ec_ajax_data",[352],"[ec_stars_rating]"]