[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwBPXMG0yIpQPJuDXWorOjXKkoqXoEm6cPu_c9uKJK7A":3},{"slug":4,"name":5,"version":6,"author":5,"author_profile":7,"description":8,"short_description":9,"active_installs":10,"downloaded":11,"rating":12,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":36,"analysis":133,"fingerprints":220},"embedly","Embedly","4.9.3","https:\u002F\u002Fprofiles.wordpress.org\u002Fembedly\u002F","\u003Cp>Enhance the default WordPress embedding to get previews for any article,\u003Cbr \u002F>\nincluding your own blog posts. You also get embeds for YouTube, Vimeo, Twitch,\u003Cbr \u002F>\nGoogle Maps, and Embedly’s growing list of \u003Ca href=\"https:\u002F\u002Fembed.ly\u002Fproviders\" rel=\"nofollow ugc\">1000+ supported\u003Cbr \u002F>\nproviders\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>You can customize the style of the embeds, to optimize for darker WP themes,\u003Cbr \u002F>\nalignment, and width. In addition, social buttons can be added around the embeds\u003Cbr \u002F>\nto make it easier to share content from your blog posts.\u003C\u002Fp>\n\u003Cp>If you have an Embedly Cards account, you can link it to the plugin with your Embedly API key. Not only does this remove branding from the cards, it also gives you access to analytics and viewer behaviors for most popular music and video player embeds (YouTube, Vimeo, Instagram, SoundCloud). Find out how many people viewed your embeds for how long. To learn more about Embedly Cards please visit \u003Ca href=\"https:\u002F\u002Fembed.ly\u002Fcards\" rel=\"nofollow ugc\">our website\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Using it is as simple as the default WordPress embedding. Embed media by pasting its URL in a single line when writing a post.\u003C\u002Fp>\n\u003Cp>The plugin automatically displays an embed of the media in the WordPress post editor.\u003C\u002Fp>\n\u003Cp>Fair Warning: This plugin generates static HTML content for your posts.  After you deactivate\u003Cbr \u002F>\nthe plugin, that HTML will still remain behind in all posts where the plugin was used to create\u003Cbr \u002F>\nembeds.\u003C\u002Fp>\n","The Embedly Plugin extends WordPress's auto-embed feature to give your blog more media types and style options.",2000,203815,70,20,"2026-02-20T06:02:00.000Z","6.9.4","5.0","7.4",[19,20,21,22,23],"embed","image","oembed","pdf","video","https:\u002F\u002Fembed.ly\u002Fwordpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fembedly.4.9.3.zip",100,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":4,"display_name":5,"profile_url":7,"plugin_count":32,"total_installs":10,"avg_security_score":26,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},1,30,94,"2026-04-04T04:59:09.484Z",[37,57,79,96,116],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":26,"downloaded":45,"rating":27,"num_ratings":27,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":49,"tags":50,"homepage":54,"download_link":55,"security_score":56,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"gabfire-media-module","Gabfire Media Module","0.4","Gabfire","https:\u002F\u002Fprofiles.wordpress.org\u002Fgabfire\u002F","\u003Cp>Videos and pictures don’t have to be difficult. Gabfire themes include a media module that makes embedding media simple.\u003C\u002Fp>\n\u003Cp>This plugin is maintained by the folks over at http:\u002F\u002Fwww.gabfirethemes.com\u003C\u002Fp>\n\u003Cp>We strongly suggest you to use this plugin together with\u003Cbr \u002F>\nhttps:\u002F\u002Fwordpress.org\u002Fplugins\u002Fotf-regenerate-thumbnails\u002F\u003C\u002Fp>\n\u003Ch4>Sample Code\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>\u003C?php \ngabfire_media(array(\n    'name' => 'figure', \n    'imgtag' => 1,\n    'link' => 1,\n    'enable_thumb' => 1,\n    'enable_video' => 0, \n    'resize_type' => 'c', \n    'media_width' => 415, \n    'media_height' => 284, \n    'thumb_align' => 'alignnone',\n    'enable_default' => 1,\n    'default_name' => 'defaultimage.png'\n)); \n?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>name -> Name of post thumbnail to be used thats going to be resized to display featured image\u003C\u002Fp>\n\u003Cp>imgtag -> 1 or 0. Using this option you can add\u002Fremove ‘\u003Cimg src’ tag to image.\u003C\u002Fp>\n\u003Cp>link -> 1 or 0. If set 1, the image will have a link to post\u003C\u002Fp>\n\u003Cp>enable_thumb -> 1 or 0. You may want to use this option function just to get featured post thumbnails\u003C\u002Fp>\n\u003Cp>enable_video -> 1 or 0. You may want to use this option function just to get videos\u003C\u002Fp>\n\u003Cp>resize_type -> c, w, or h. C will crop image to exact size. w resizes the width and calculates height in proportion. h resizes the height and calculates width in proportion.\u003C\u002Fp>\n\u003Cp>thumb_align -> adds a class to media\u003C\u002Fp>\n\u003Cp>enable_default -> 1 or 0. You can set a default image to display if post has no media\u003C\u002Fp>\n\u003Cp>default_name -> name of image to display. The image path is yourtheme\u002Fimages\u002Fthumbs directory.\u003C\u002Fp>\n\u003Ch4>How to Add a Video\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>If you are going to use Youtube\u002FVimeo\u002FDailymotion -> copy video URL from browser bar -> add it via custom field to your post using key name \u003Cem>iframe\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>If you’d like to display a self hosted MP4, WEBM or OGV file, add them as below\u003C\u002Fli>\n\u003Cli>Custom field key name \u003Cem>video-mp4\u003C\u002Fem> and enter full file url into value field\u003C\u002Fli>\n\u003Cli>Custom field key name \u003Cem>video-webm\u003C\u002Fem> and enter full file url into value field\u003C\u002Fli>\n\u003Cli>Custom field key name \u003Cem>video-ogv\u003C\u002Fem> and enter full file url into value field\u003C\u002Fli>\n\u003Cli>To add a caption (SRT or VTT format) to the video, use custom field name \u003Cem>caption-url-1\u003C\u002Fem> and full file url into value field\u003C\u002Fli>\n\u003C\u002Ful>\n","Gabfire Media Module extends the functionality of WordPress Featured Image to support Videos and Default Post Images.",6717,"2015-10-26T15:17:00.000Z","4.3.34","3.8","",[51,52,21,23,53],"featured-image","html5-video","videojs","http:\u002F\u002Fwww.gabfirethemes.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgabfire-media-module.zip",85,{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":34,"num_ratings":67,"last_updated":68,"tested_up_to":69,"requires_at_least":70,"requires_php":17,"tags":71,"homepage":74,"download_link":75,"security_score":76,"vuln_count":77,"unpatched_count":27,"last_vuln_date":78,"fetched_at":29},"embed-pdf-viewer","Embed PDF Viewer","2.4.8","Andy Fragen","https:\u002F\u002Fprofiles.wordpress.org\u002Fafragen\u002F","\u003Cp>Embed a PDF from the Media Library or elsewhere via oEmbed or as a block into an \u003Ccode>iframe\u003C\u002Fcode> tag. The URL only has to be world reachable link. Chrome uses Google Doc Viewer as Chrome seems to automatically rendered embedded JS in PDFs automatically. Uses Google Doc Viewer with mobile.\u003C\u002Fp>\n\u003Cp>Inspired by \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdirtysuds-embed-pdf\u002F\" rel=\"ugc\">Embed PDF\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Frv-embed-pdf\u002F\" rel=\"ugc\">RV Embed PDF\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Many thanks to \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fakirk\" rel=\"nofollow ugc\">Alex Kirk\u003C\u002Fa> for making Embed PDF Viewer compatible with the new block editor.\u003C\u002Fp>\n\u003Cp>Development on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fafragen\u002Fembed-pdf-viewer\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>. Pull requests are welcome against the \u003Ccode>develop\u003C\u002Fcode> branch.\u003C\u002Fp>\n\u003Ch3>Known Issues\u003C\u002Fh3>\n\u003Cp>Occasionally Google Doc Viewer will not correctly load the PDF. Reloading the page should correct the issue, though this may need to be done several times.\u003C\u002Fp>\n","Embed a PDF from the Media Library or elsewhere via oEmbed or as a block into an iframe tag.",20000,307147,19,"2026-02-21T16:59:00.000Z","7.0","6.0",[72,19,21,22,73],"block","viewer","https:\u002F\u002Fgithub.com\u002Fafragen\u002Fembed-pdf-viewer","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fembed-pdf-viewer.2.4.8.zip",99,2,"2024-12-19 00:00:00",{"slug":80,"name":81,"version":82,"author":83,"author_profile":84,"description":85,"short_description":86,"active_installs":10,"downloaded":87,"rating":88,"num_ratings":89,"last_updated":90,"tested_up_to":91,"requires_at_least":92,"requires_php":49,"tags":93,"homepage":94,"download_link":95,"security_score":56,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"wistia-wordpress-oembed-plugin","Wistia WordPress Plugin","0.10","wistia","https:\u002F\u002Fprofiles.wordpress.org\u002Fwistia\u002F","\u003Cp>Wistia’s embed codes are designed to be very durable, but WordPress has a\u003Cbr \u002F>\nhistory of being particularly troublesome. This plugin adds oEmbed support so\u003Cbr \u002F>\nthat pasting a link to the video’s page in Wistia will embed the video. The\u003Cbr \u002F>\nvideo’s URL must be by itself on its own line for this to work.\u003C\u002Fp>\n\u003Cp>As of version 0.6 of this plugin, it is recommended that you check\u003Cbr \u002F>\n“Use oEmbed?” under Advanced Options when generating your embed code.\u003C\u002Fp>\n\u003Cp>As of version 0.8 of this plugin, the legacy “Anti-Mangler” feature is an\u003Cbr \u002F>\noption that is turned off by default.\u003C\u002Fp>\n\u003Cp>See the Wistia documentation for more:\u003Cbr \u002F>\nhttp:\u002F\u002Fwistia.com\u002Fdoc\u002Fwordpress#using_the_oembed_embed_code\u003C\u002Fp>\n\u003Ch3>Automatic Installation\u003C\u002Fh3>\n\u003Col>\n\u003Cli>In Admin Dashboard, go to Plugins > Add New.\u003C\u002Fli>\n\u003Cli>Search for “Wistia WordPress Plugin”.\u003C\u002Fli>\n\u003Cli>Find the plugin and click “Install”.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Manual Installation\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Make a ‘wistia-wordpress-oembed-plugin’ directory in ‘\u002Fwp-content\u002Fplugins\u002F’.\u003C\u002Fli>\n\u003Cli>Upload all files in the repository to the\u003Cbr \u002F>\n‘\u002Fwp-content\u002Fplugins\u002Fwistia-wordpress-oembed-plugin\u002F’ directory.\u003C\u002Fli>\n\u003Cli>Activate the plugin through the ‘Plugins’ menu in WordPress.\u003C\u002Fli>\n\u003C\u002Fol>\n","Enables all Wistia embed types to be used in your WordPress blog.",110002,62,8,"2023-03-16T19:34:00.000Z","5.1.22","2.9.1",[19,21,23,83],"https:\u002F\u002Fgithub.com\u002Fwistia\u002Fwistia-wordpress-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwistia-wordpress-oembed-plugin.0.10.zip",{"slug":97,"name":98,"version":99,"author":100,"author_profile":101,"description":102,"short_description":103,"active_installs":104,"downloaded":105,"rating":106,"num_ratings":107,"last_updated":108,"tested_up_to":109,"requires_at_least":110,"requires_php":49,"tags":111,"homepage":114,"download_link":115,"security_score":56,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"hide-related-video-youtube","Hide Related Video Youtube","1.0","TranHoangQuoc","https:\u002F\u002Fprofiles.wordpress.org\u002Ftranhoangquoc\u002F","\u003Cp>Hide related video youtube is a plugin remove related video other chanel when you use YouTube oEmbed.\u003C\u002Fp>\n\u003Cp>On activation, the plugin clears the oEmbed cache so that the videos can be successfully re-cached with the new setting. If you are upgrading the plugin, you may need to manually deactivate, then reactivate it to clear the cache.\u003C\u002Fp>\n","Hide related video youtube is a plugin remove related video other chanel when you use YouTube oEmbed.",1000,10720,82,9,"2019-01-17T15:31:00.000Z","5.0.25","2.9",[21,112,23,113],"related","youtube","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhide-related-video-youtube\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhide-related-video-youtube.1.0.zip",{"slug":117,"name":118,"version":119,"author":120,"author_profile":121,"description":122,"short_description":123,"active_installs":104,"downloaded":124,"rating":27,"num_ratings":27,"last_updated":125,"tested_up_to":47,"requires_at_least":126,"requires_php":49,"tags":127,"homepage":131,"download_link":132,"security_score":56,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"magyar-video-embed","Magyar Video Embed","0.3","DjZoNe","https:\u002F\u002Fprofiles.wordpress.org\u002Fdjzone\u002F","\u003Cp>This plugin helps different hungarian online video service provider videos to be embeded just like youtube links.\u003C\u002Fp>\n\u003Cp>Ez a bővítmény a különböző magyar tartalomszolgáltatók videó és audió anyagait segít úgy beágyazni a weboldalakba, mintha csak egy youtube link lenne.\u003C\u002Fp>\n","This plugin helps different hungarian online video service provider videos to be embeded just like youtube links. So, this is not intresting to you un &hellip;",9061,"2015-08-26T09:22:00.000Z","4.1",[128,129,21,130,23],"audio","magyar","post","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmagyar-video-embed","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmagyar-video-embed.zip",{"attackSurface":134,"codeSignals":179,"taintFlows":211,"riskAssessment":212,"analyzedAt":219},{"hooks":135,"ajaxHandlers":162,"restRoutes":175,"shortcodes":176,"cronEvents":177,"entryPointCount":178,"unprotectedCount":27},[136,142,146,150,153,157],{"type":137,"name":138,"callback":139,"file":140,"line":141},"action","init","i18n","embedly.php",83,{"type":137,"name":143,"callback":144,"file":140,"line":145},"admin_menu","embedly_add_settings_page",101,{"type":137,"name":147,"callback":148,"file":140,"line":149},"admin_enqueue_scripts","embedly_enqueue_admin",106,{"type":137,"name":147,"callback":151,"file":140,"line":152},"embedly_localize_config",111,{"type":137,"name":154,"callback":155,"file":140,"line":156},"plugins_loaded","add_embedly_providers",146,{"type":158,"name":159,"callback":160,"file":140,"line":161},"filter","oembed_providers","__return_empty_array",410,[163,169,172],{"action":164,"nopriv":165,"callback":166,"hasNonce":167,"hasCapCheck":167,"file":140,"line":168},"embedly_update_option",false,"embedly_ajax_update_option",true,122,{"action":170,"nopriv":165,"callback":170,"hasNonce":167,"hasCapCheck":167,"file":140,"line":171},"embedly_save_account",126,{"action":173,"nopriv":165,"callback":173,"hasNonce":167,"hasCapCheck":167,"file":140,"line":174},"embedly_save_api_key",130,[],[],[],3,{"dangerousFunctions":180,"sqlUsage":181,"outputEscaping":183,"fileOperations":27,"externalRequests":32,"nonceChecks":178,"capabilityChecks":184,"bundledLibraries":210},[],{"prepared":27,"raw":27,"locations":182},[],{"escaped":184,"rawEcho":185,"locations":186},6,11,[187,190,192,194,196,198,200,202,204,206,208],{"file":140,"line":188,"context":189},274,"raw output",{"file":140,"line":191,"context":189},626,{"file":140,"line":193,"context":189},639,{"file":140,"line":195,"context":189},661,{"file":140,"line":197,"context":189},677,{"file":140,"line":199,"context":189},687,{"file":140,"line":201,"context":189},689,{"file":140,"line":203,"context":189},691,{"file":140,"line":205,"context":189},786,{"file":140,"line":207,"context":189},792,{"file":140,"line":209,"context":189},798,[],[],{"summary":213,"deductions":214},"The Embedly plugin version 4.9.3 presents a generally good security posture based on the provided static analysis and vulnerability history. The plugin demonstrates strong adherence to secure coding practices by implementing nonce checks for all identified AJAX handlers and performing capability checks for most interactions. The absence of raw SQL queries, file operations, and critical taint flows further enhances its security.  However, a notable concern is the relatively low percentage of properly escaped output (35%). This could potentially lead to cross-site scripting (XSS) vulnerabilities if user-supplied data is not handled carefully when displayed. The plugin also makes an external HTTP request, which, while not inherently insecure, can be a vector for other types of attacks if the external service is compromised or if the request is not properly authenticated or validated. The lack of any recorded vulnerabilities in its history is a positive indicator, suggesting a consistent effort towards maintaining security. Overall, while Embedly 4.9.3 is well-protected against common attack vectors like SQL injection and unauthorized access, the unescaped output warrants attention for potential XSS risks.",[215,217],{"reason":216,"points":89},"Low percentage of properly escaped output",{"reason":218,"points":178},"External HTTP request without explicit validation mentioned","2026-03-16T18:27:14.931Z",{"wat":221,"direct":235},{"assetPaths":222,"generatorPatterns":227,"scriptPaths":228,"versionParams":230},[223,224,225,226],"\u002Fwp-content\u002Fplugins\u002Fembedly\u002Fjs\u002Fembedly.js","\u002Fwp-content\u002Fplugins\u002Fembedly\u002Fcss\u002Fembedly.css","\u002Fwp-content\u002Fplugins\u002Fembedly\u002Fjs\u002Fadmin.js","\u002Fwp-content\u002Fplugins\u002Fembedly\u002Fjs\u002Foptions.js",[],[229],"https:\u002F\u002Fcdn.embedly.com\u002Fwidgets\u002Fplatform.js",[231,232,233,234],"embedly\u002Fjs\u002Fembedly.js?ver=","embedly\u002Fcss\u002Fembedly.css?ver=","embedly\u002Fjs\u002Fadmin.js?ver=","embedly\u002Fjs\u002Foptions.js?ver=",{"cssClasses":236,"htmlComments":237,"htmlAttributes":241,"restEndpoints":243,"jsGlobals":244,"shortcodeOutput":246},[],[238,239,240],"\u003C!-- embedly_nonce_start -->","\u003C!-- embedly_nonce_end -->","\u003C!-- embedly-settings-template -->",[242],"data-embedly-nonce",[],[245],"embedly_platform_options",[]]