[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBkE3KYWb3vl98kkAMyzS-1DdNQUZLDINnw0iVJqHIRs":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":15,"tags":18,"homepage":24,"download_link":25,"security_score":13,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":38,"analysis":136,"fingerprints":369},"enqueue-me","Enqueue Me","0.5","MagicStick","https:\u002F\u002Fprofiles.wordpress.org\u002Fmagicstick\u002F","\u003Cp>Easily enqueue your favourite javascript and CSS libraries from an open-source package library. Designed specifically for WordPress theme developers.\u003C\u002Fp>\n\u003Cp>\u003Ciframe loading=\"lazy\" title=\"Enqueue Me Walkthrough\" src=\"https:\u002F\u002Fplayer.vimeo.com\u002Fvideo\u002F215253163?dnt=1&app_id=122963\" width=\"750\" height=\"469\" frameborder=\"0\" allow=\"autoplay; fullscreen; picture-in-picture; clipboard-write\">\u003C\u002Fiframe>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Enqueue jQuery and CSS packages from a library of popular packages\u003C\u002Fli>\n\u003Cli>Save your favourite packages to access easily across all your projects\u003C\u002Fli>\n\u003Cli>Drag an drop packages to change package dependancies\u003C\u002Fli>\n\u003Cli>Add your own custom packages to our public library or make them visible for your use only\u003C\u002Fli>\n\u003Cli>Export and Import your Enqueue configuration across all your projects\u003C\u002Fli>\n\u003Cli>Save and edit your favourite lists for use across all your projects\u003C\u002Fli>\n\u003C\u002Ful>\n","Easily enqueue your favourite javascript and CSS libraries from an open-source package library. Designed specifically for WordPress theme developers.",10,2076,100,1,"","4.7.32","3.1",[19,20,21,22,23],"enqueue","library","package","script","style","http:\u002F\u002Fwww.wpmaz.uk","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fenqueue-me.zip",0,null,"2026-03-15T10:48:56.248Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":34,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},"magicstick",2,410,82,30,81,"2026-04-04T21:10:06.165Z",[39,62,83,97,115],{"slug":40,"name":41,"version":42,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":13,"num_ratings":49,"last_updated":50,"tested_up_to":16,"requires_at_least":51,"requires_php":15,"tags":52,"homepage":58,"download_link":59,"security_score":60,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":61},"debug-bar-list-dependencies","Debug Bar List Script & Style Dependencies","1.1","Per Søderlind","https:\u002F\u002Fprofiles.wordpress.org\u002Fpers\u002F","\u003Cp>We all know that when we’re add a script or style to WordPress, we should use \u003Ccode>wp_enqueue_script( $handle, $src, $deps, $ver, $in_footer )\u003C\u002Fcode> and \u003Ccode>wp_enqueue_style( $handle, $src, $deps, $ver, $media )\u003C\u002Fcode> as in:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>function themeslug_enqueue_style() {\n    wp_enqueue_style( 'core', 'style.css', array('twentytwelve-style') );\n}\n\nfunction themeslug_enqueue_script() {\n    wp_enqueue_script( 'my-js', 'filename.js', array('jquery') );\n}\n\nadd_action( 'wp_enqueue_scripts', 'themeslug_enqueue_style' );\nadd_action( 'wp_enqueue_scripts', 'themeslug_enqueue_script' )\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>$deps (dependencies), the handle name and an optional parameter, lets you control when\u002Fwhere your script or style should be added. If $deps is \u003Ccode>array('jquery')\u003C\u002Fcode>, your script will be loaded after jquery is loaded.\u003C\u002Fp>\n\u003Cp>The problem is, which one exists and in which order are they loaded ?\u003C\u002Fp>\n\u003Cp>Debug Bar List Script & Style Dependencies, an add-on to \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdebug-bar\u002F\" rel=\"ugc\">Debug Bar\u003C\u002Fa>, will list the dependencies.\u003C\u002Fp>\n\u003Ch4>Use\u003C\u002Fh4>\n\u003Cp>To view the loaded scripts and styles\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Front-end: Go to the front-end, and on the admin bar choose Debug and view Script & Style Dependencies\u003C\u002Fli>\n\u003Cli>Back-end: Go to the back-end, on the admin bar choose Debug and view Script & Style Dependencies\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Note, the front-end and back-end loads different scripts and styles. Also, different pages on the front-end and back-end can load different scripts and styles.\u003C\u002Fp>\n","Debug Bar List Script & Style Dependencies is an add-on to WordPress Debug Bar",200,86242,3,"2016-12-12T20:11:00.000Z","3.4",[53,54,55,56,57],"debug","debug-bar","development","wp_enqueue_script","wp_enqueue_style","http:\u002F\u002Fsoderlind.no\u002Fdebug-bar-list-script-and-style-dependencies\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdebug-bar-list-dependencies.1.1.2.zip",85,"2026-03-15T15:16:48.613Z",{"slug":63,"name":64,"version":65,"author":66,"author_profile":67,"description":68,"short_description":69,"active_installs":70,"downloaded":71,"rating":13,"num_ratings":72,"last_updated":73,"tested_up_to":74,"requires_at_least":75,"requires_php":15,"tags":76,"homepage":15,"download_link":82,"security_score":60,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":61},"context-manager","Context Manager","1.2.0","Phill Brown","https:\u002F\u002Fprofiles.wordpress.org\u002Fphill_brown\u002F","\u003Cp>Context Manager makes your site behave differently depending on the current user’s context. Using the simple point-and-click admin pages, there are four different ways your site can react:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Include and exclude CSS and JavaScript files\u003C\u002Fli>\n\u003Cli>Changing the behaviour of menu items\u003C\u002Fli>\n\u003Cli>Hiding widgets in sidebars\u003C\u002Fli>\n\u003Cli>Adding extra classes to the \u003Ccode>\u003Cbody>\u003C\u002Fcode> tag.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>The plugin supersedes \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fmenu-rules\u002F\" rel=\"ugc\">Menu Rules\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Example usage\u003C\u002Fh4>\n\u003Cp>A website has e-commerce shopping functionality driven by a custom post type called ‘products’. There’s an archive page called ‘shop’ that lists products and is linked to in the main navigation menu.\u003C\u002Fp>\n\u003Cp>A user visits ‘shop’ and the menu item becomes ‘active’, but when they click through to an individual product, the menu item loses its state. The user becomes lost.\u003C\u002Fp>\n\u003Col>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fcontext-manager\u002Finstallation\u002F\" rel=\"ugc\">Install\u003C\u002Fa> the Context Manager plugin\u003C\u002Fli>\n\u003Cli>Add a new context rule\u003C\u002Fli>\n\u003Cli>Give it a meaningful name in the title field. This is just for administration purposes\u003C\u002Fli>\n\u003Cli>In the \u003Cem>conditions\u003C\u002Fem> field enter \u003Ccode>is_singular( 'product' )\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Choose \u003Cem>Emulate current page as a child but do not create a menu item.\u003C\u002Fem> as the menu rule\u003C\u002Fli>\n\u003Cli>Find your products page in the menu dropdown\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>On the product page, there are irrelevant widgets that distract the user from making a purchase.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Hide irrelevant widgets under the \u003Cem>widgets\u003C\u002Fem> reaction\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The whole shop section requires its own colour scheme, but there’s no common class that ties all the pages together.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Enter \u003Ccode>shop-section\u003C\u002Fcode> class name in the \u003Cem>body class\u003C\u002Fem> reaction. Or alternatively, register another stylesheet using \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FFunction_Reference\u002Fwp_register_style\" rel=\"nofollow ugc\">\u003Ccode>wp_register_style()\u003C\u002Fcode>\u003C\u002Fa> in you theme’s \u003Ccode>functions.php\u003C\u002Fcode>.\u003C\u002Fli>\n\u003Cli>Create \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Remember to click publish when you’re ready to save.\u003C\u002Fp>\n\u003Cp>Have a look at \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fcontext-manager\u002Fscreenshots\u002F\" rel=\"ugc\">screenshots\u003C\u002Fa> to see the above setup in action.\u003C\u002Fp>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cp>If you’re stuck, ask me for help on \u003Ca href=\"http:\u002F\u002Ftwitter.com\u002Fphill_brown\" rel=\"nofollow ugc\">Twitter\u003C\u002Fa>.\u003C\u002Fp>\n","Make your site react to users' context by changing your theme's CSS and JavaScript files, navigation menus, sidebars and the HTML body tag.",20,4624,5,"2013-11-13T16:21:00.000Z","3.7.41","3.2",[77,78,79,80,81],"context","rules","widget-logic","wp_enqueue_scripts","wp_enqueue_styles","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcontext-manager.1.2.0.zip",{"slug":84,"name":85,"version":86,"author":87,"author_profile":88,"description":89,"short_description":90,"active_installs":11,"downloaded":91,"rating":26,"num_ratings":26,"last_updated":15,"tested_up_to":92,"requires_at_least":15,"requires_php":15,"tags":93,"homepage":15,"download_link":96,"security_score":13,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"post-head-includes","Post Head Includes","0.2.1","Rick Buczynski","https:\u002F\u002Fprofiles.wordpress.org\u002Frbuczynski\u002F","\u003Cp>Easily add scripts and stylesheets per post. This is a great tool for developers creating custom pages for their clients, but also useful for the blogger who wants to separate inline CSS & JS from their post content.\u003C\u002Fp>\n\u003Cp>This plugin provides an interface for wp_enqueue_script and wp_enqueue_style functions, so all of the functionality that a developer would find there is available in this plugin.\u003C\u002Fp>\n\u003Cp>However, script localization differs from wp_localize_script in that with this plugin you are allowed to input raw JavaScript code for localization, library initialization, and more.\u003C\u002Fp>\n\u003Cp>This plugin may also help to alleviate modern browser XSS detection from blocking potentially unsafe JavaScript.\u003C\u002Fp>\n","Easily add scripts and stylesheets to the HEAD of your posts, keeping your HTML cleaner without inline scripts or styles.",1856,"3.5.2",[94,95,84,56,57],"css","javascript","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpost-head-includes.zip",{"slug":98,"name":99,"version":100,"author":101,"author_profile":102,"description":103,"short_description":104,"active_installs":26,"downloaded":105,"rating":26,"num_ratings":26,"last_updated":106,"tested_up_to":107,"requires_at_least":108,"requires_php":109,"tags":110,"homepage":113,"download_link":114,"security_score":60,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":61},"asset-finder","Asset Finder","1.0.0","Charles Jaimet","https:\u002F\u002Fprofiles.wordpress.org\u002Fcmjaimet\u002F","\u003Cp>This plugin creates a settings page where the scripts and styles from the site’s homepage are listed. You can then choose to keep, remove, or late-load each.\u003C\u002Fp>\n","Finds and allows late-loading and removal of the scripts and styles enqueued on your website.",1097,"2018-08-27T20:17:00.000Z","4.9.29","4.6","5.2.4",[19,111,112],"scripts","styles","https:\u002F\u002Fdeveloper.wordpress.org\u002Fplugins\u002Fasset-finder\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fasset-finder.zip",{"slug":116,"name":117,"version":118,"author":119,"author_profile":120,"description":121,"short_description":122,"active_installs":123,"downloaded":124,"rating":125,"num_ratings":126,"last_updated":127,"tested_up_to":128,"requires_at_least":129,"requires_php":15,"tags":130,"homepage":15,"download_link":134,"security_score":135,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":61},"custom-css-and-javascript","Custom CSS and JavaScript","2.0.16","WP Zone","https:\u002F\u002Fprofiles.wordpress.org\u002Faspengrovestudios\u002F","\u003Cp>This plugin allows you to add custom site-wide CSS styles and JavaScript code to your WordPress site. Useful for overriding your theme’s styles and adding client-side functionality.\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Code editor with syntax highlighting and AJAX saving to avoid reloading the editor at each save.\u003C\u002Fli>\n\u003Cli>Save and preview your CSS and JavaScript as a draft that is only applied to logged-in users with the necessary permissions until you are ready to publish your changes to the public.\u003C\u002Fli>\n\u003Cli>View and restore past revisions of your CSS and JavaScript.\u003C\u002Fli>\n\u003Cli>Automatically minify your custom CSS and JavaScript code to reduce file size.\u003C\u002Fli>\n\u003Cli>For the public, custom CSS and JavaScript code is served from the filesystem instead of the database for optimal performance.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Now available! \u003Ca href=\"https:\u002F\u002Fwpzone.co\u002Fproduct\u002Fcustom-css-and-javascript-developer-edition\u002F?utm_source=custom-css-and-javascript&utm_medium=link&utm_campaign=wp-repo-upgrade-link\" rel=\"nofollow ugc\">Custom CSS and JavaScript Developer Edition\u003C\u002Fa>:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Divide your CSS and JavaScript into multiple virtual files to keep your code organized (the code is still served as one CSS and one JS file on the front-end for efficiency).\u003C\u002Fli>\n\u003Cli>Supports Sassy CSS (SCSS)!\u003C\u002Fli>\n\u003Cli>Live preview for CSS!\u003C\u002Fli>\n\u003Cli>Upload and download CSS and JavaScript files, individually or in ZIP files.\u003C\u002Fli>\n\u003Cli>The developer logo and review\u002Fdonation links are removed from the editor page in the WordPress admin.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpzone.co\u002Fproduct\u002Fcustom-css-and-javascript-developer-edition\u002F?utm_source=custom-css-and-javascript&utm_medium=link&utm_campaign=wp-repo-upgrade-link\" rel=\"nofollow ugc\">Click here\u003C\u002Fa> to purchase!\u003C\u002Fp>\n\u003Cp>Alternatively, you can manually upload the plugin to your wp-content\u002Fplugins directory.\u003C\u002Fp>\n\u003Cp>If you like this plugin, please consider leaving a comment or review.\u003C\u002Fp>\n\u003Ch3>User Access Control\u003C\u002Fh3>\n\u003Cp>In the Custom CSS and JavaScript WordPress plugin, access to plugin features is determined by user capabilities. Users with the \u003Ccode>edit_theme_options\u003C\u002Fcode> capability will enjoy full access to all the plugin’s features.\u003C\u002Fp>\n\u003Cp>By default, the “Administrator” and “Editor” roles come equipped with the \u003Ccode>edit_theme_options\u003C\u002Fcode> capability. However, site administrators have the flexibility to customize these capabilities and assign them to other roles or individual users through plugins or custom code.\u003C\u002Fp>\n\u003Cp>Furthermore, to provide users with enhanced control, we’ve introduced a custom capability known as \u003Ccode>wpz_custom_css_js\u003C\u002Fcode>. Users possessing both the \u003Ccode>wpz_custom_css_js\u003C\u002Fcode> and \u003Ccode>edit_posts\u003C\u002Fcode> capabilities can be granted access to the plugin’s features.\u003C\u002Fp>\n\u003Ch3>You may also like these plugins\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpzone.co\u002F\" rel=\"nofollow ugc\">WP Zone\u003C\u002Fa> has built a bunch of plugins, add-ons, and themes. Check out other favorites here on the repository and don’t forget to leave a 5-star review to help others in the community decide.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fproduct-sales-report-for-woocommerce\u002F\" rel=\"ugc\">Product Sales Report for WooCommerce\u003C\u002Fa> – set up a custom sales report for the products in your WooCommerce store with toggle sorting options. Including or excluding items based on date range, sale status, product category and id, define display order, choose what fields to include, and generate your report with a click.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fexport-order-items-for-woocommerce\u002F\" rel=\"ugc\">Export Order Items for WooCommerce\u003C\u002Fa> – export the order details for each sale in your WooCommerce store. Simplify order fulfillment, generate accounting reports in a few clicks, and download into CSV format for readability and universal compatibility with Export Order Items.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Freplace-image\u002F\" rel=\"ugc\">Replace Image\u003C\u002Fa> – keep the same URL when uploading to the WordPress media library\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fforce-update-check-for-plugins-and-themes\u002F\" rel=\"ugc\">Force Update Check for Plugins and Themes\u003C\u002Fa> -force Update Check for Plugins and Themes forces WordPress to run a theme and plugin update check whenever you visit the WordPress updates page\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fconnect-sendgrid-for-emails\u002F\" rel=\"ugc\">Connect SendGrid for Emails\u003C\u002Fa> –  connect SendGrid for Emails is a third-party fork of (and a drop-in replacement for) the official SendGrid plugin\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcustom-css-and-javascript\u002F\" rel=\"ugc\">Custom CSS and JavaScript\u003C\u002Fa> – allows you to add custom site-wide CSS styles and JavaScript code to your WordPress site. Useful for overriding your theme’s styles and adding client-side functionality.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdisable-user-registration-notification-emails\u002F\" rel=\"ugc\">Disable User Registration Notification Emails\u003C\u002Fa> – when this plugin is activated, it disables the notification sent to the admin email when a new user account is registered.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fimage-upload-for-bbpress\u002F\" rel=\"ugc\">Inline Image Upload for BBPress\u003C\u002Fa> – enables the TinyMCE WYSIWYG editor for BBPress forum topics and replies and adds a button to the editor’s “Insert\u002Fedit image” dialog that allows forum users to upload images from their computer and insert them inline into their posts.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpassword-strength-for-woocommerce\u002F\" rel=\"ugc\">Password Strength for WooCommerce\u003C\u002Fa> – disables password strength enforcement in WooCommerce.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdonations-for-woocommerce\u002F\" rel=\"ugc\">Potent Donations for WooCommerce\u003C\u002Fa> – acceptance donations through your WooCommerce store\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fshortcodes-for-divi\u002F\" rel=\"ugc\">Shortcodes for Divi\u003C\u002Fa> – allows to use Divi Library layouts as shortcodes everywhere where text comes.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fstock-export-and-import-for-woocommerce\u002F\" rel=\"ugc\">Stock Export and Import for WooCommerce\u003C\u002Fa> – generates reports on the stock status (in stock \u002F out of stock) and quantity of individual WooCommerce products.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Frandom-quiz-addon-for-lifterlms\u002F\" rel=\"ugc\">Random Quiz Generator for LifterLMS\u003C\u002Fa> – pull a random set of questions from your quiz so users never get the same question twice when retaking or setting up a practice quiz.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-and-divi-icons\u002F\" rel=\"ugc\">WP and Divi Icons\u003C\u002Fa> – adds over 660 custom outline SVG icons to your website. SVG icons are vector icons, so they are sharp and look good on any screen at any size.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-layouts\u002F\" rel=\"ugc\">WP Layouts\u003C\u002Fa> – the best way to organize, import, and export your layouts, especially if you have multiple websites.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-squish\u002F\" rel=\"ugc\">WP Squish\u003C\u002Fa> – reduce the amount of storage space consumed by your WordPress installation through the application of user-definable JPEG compression levels and image resolution limits to uploaded images.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>To view WP Zone’s premium WordPress plugins and themes, visit our \u003Ca href=\"https:\u002F\u002Fwpzone.co\u002Fproduct\u002F\" rel=\"nofollow ugc\">WordPress products catalog page\u003C\u002Fa>.\u003C\u002Fp>\n","Easily add custom CSS and JavaScript code to your WordPress site, with draft previewing, revisions, and minification!",10000,176501,94,60,"2024-08-12T18:03:00.000Z","6.6.5","3.5",[131,132,95,112,133],"custom-css","custom-javascript","stylesheet","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-css-and-javascript.2.0.16.zip",92,{"attackSurface":137,"codeSignals":206,"taintFlows":262,"riskAssessment":353,"analyzedAt":368},{"hooks":138,"ajaxHandlers":182,"restRoutes":203,"shortcodes":204,"cronEvents":205,"entryPointCount":72,"unprotectedCount":72},[139,145,149,154,158,163,167,172,176,178],{"type":140,"name":141,"callback":142,"file":143,"line":144},"action","plugins_loaded","enq_me_load_textdomain","enqueue-me.php",32,{"type":140,"name":146,"callback":147,"file":143,"line":148},"admin_menu","enq_me_admin_page",47,{"type":140,"name":150,"callback":151,"file":152,"line":153},"admin_init","enq_me_settings_init","inc\\admin.php",54,{"type":140,"name":80,"callback":155,"file":156,"line":157},"enq_me_do_enqueue_script","inc\\core.php",58,{"type":140,"name":159,"callback":160,"file":161,"line":162},"enq_me_in_wrap","enq_me_favourite_list_ui","inc\\fav-lists.php",34,{"type":140,"name":164,"callback":165,"file":161,"line":166},"admin_enqueue_scripts","enq_me_load_fav_lists_scripts",72,{"type":140,"name":168,"callback":169,"file":170,"line":171},"enq_me_after_core_settings","enq_me_import_export_buttons","inc\\import-export.php",27,{"type":140,"name":173,"callback":174,"file":170,"line":175},"enq_me_before_core_settings","enq_me_alert_import_success",36,{"type":140,"name":164,"callback":177,"file":170,"line":148},"enq_me_load_import_export_scripts",{"type":140,"name":164,"callback":179,"file":180,"line":181},"enq_me_load_admin_scripts","inc\\load-scripts.php",86,[183,188,192,195,199],{"action":184,"nopriv":185,"callback":186,"hasNonce":185,"hasCapCheck":185,"file":152,"line":187},"enq_me_update_timestamp",false,"enq_me_update_sync_id_ajax",422,{"action":189,"nopriv":185,"callback":190,"hasNonce":185,"hasCapCheck":185,"file":152,"line":191},"enq_me_update_enqueue_list","enq_me_update_enqueue_list_ajax",442,{"action":193,"nopriv":185,"callback":193,"hasNonce":185,"hasCapCheck":185,"file":152,"line":194},"enq_me_save_licence_details",465,{"action":196,"nopriv":185,"callback":197,"hasNonce":185,"hasCapCheck":185,"file":170,"line":198},"enq_me_get_options","enq_me_get_enq_me_options_for_export",69,{"action":200,"nopriv":185,"callback":201,"hasNonce":185,"hasCapCheck":185,"file":170,"line":202},"enq_me_set_options","enq_me_set_enq_me_options_on_import",105,[],[],[],{"dangerousFunctions":207,"sqlUsage":208,"outputEscaping":210,"fileOperations":26,"externalRequests":26,"nonceChecks":26,"capabilityChecks":26,"bundledLibraries":258},[],{"prepared":26,"raw":26,"locations":209},[],{"escaped":211,"rawEcho":212,"locations":213},35,24,[214,217,219,220,221,223,225,227,228,230,232,234,236,238,240,242,243,244,246,248,250,252,254,256],{"file":152,"line":215,"context":216},101,"raw output",{"file":152,"line":218,"context":216},145,{"file":152,"line":218,"context":216},{"file":152,"line":218,"context":216},{"file":152,"line":222,"context":216},167,{"file":152,"line":224,"context":216},230,{"file":152,"line":226,"context":216},270,{"file":152,"line":226,"context":216},{"file":152,"line":229,"context":216},276,{"file":152,"line":231,"context":216},279,{"file":152,"line":233,"context":216},287,{"file":152,"line":235,"context":216},289,{"file":152,"line":237,"context":216},301,{"file":152,"line":239,"context":216},304,{"file":152,"line":241,"context":216},324,{"file":152,"line":241,"context":216},{"file":152,"line":241,"context":216},{"file":152,"line":245,"context":216},328,{"file":152,"line":247,"context":216},330,{"file":152,"line":249,"context":216},417,{"file":152,"line":251,"context":216},437,{"file":152,"line":253,"context":216},520,{"file":161,"line":255,"context":216},14,{"file":170,"line":257,"context":216},64,[259],{"name":260,"version":27,"knownCves":261},"Select2",[],[263,280,303,314,335,345],{"entryPoint":264,"graph":265,"unsanitizedCount":14,"severity":279},"enq_me_update_sync_id_ajax (inc\\admin.php:410)",{"nodes":266,"edges":277},[267,272],{"id":268,"type":269,"label":270,"file":152,"line":271},"n0","source","$_POST",412,{"id":273,"type":274,"label":275,"file":152,"line":249,"wp_function":276},"n1","sink","echo() [XSS]","echo",[278],{"from":268,"to":273,"sanitized":185},"medium",{"entryPoint":281,"graph":282,"unsanitizedCount":32,"severity":279},"enq_me_update_enqueue_list_ajax (inc\\admin.php:431)",{"nodes":283,"edges":299},[284,286,287,290,294],{"id":268,"type":269,"label":270,"file":152,"line":285},433,{"id":273,"type":274,"label":275,"file":152,"line":251,"wp_function":276},{"id":288,"type":269,"label":270,"file":152,"line":289},"n2",435,{"id":291,"type":292,"label":293,"file":152,"line":289},"n3","transform","→ enq_me_update_enqueue_list()",{"id":295,"type":274,"label":296,"file":152,"line":297,"wp_function":298},"n4","update_option() [Settings Manipulation]",483,"update_option",[300,301,302],{"from":268,"to":273,"sanitized":185},{"from":288,"to":291,"sanitized":185},{"from":291,"to":295,"sanitized":185},{"entryPoint":304,"graph":305,"unsanitizedCount":14,"severity":313},"enq_me_save_licence_details (inc\\admin.php:451)",{"nodes":306,"edges":311},[307,309],{"id":268,"type":269,"label":270,"file":152,"line":308},456,{"id":273,"type":274,"label":296,"file":152,"line":310,"wp_function":298},460,[312],{"from":268,"to":273,"sanitized":185},"low",{"entryPoint":315,"graph":316,"unsanitizedCount":334,"severity":313},"\u003Cadmin> (inc\\admin.php:0)",{"nodes":317,"edges":329},[318,320,321,323,324,325,327],{"id":268,"type":269,"label":319,"file":152,"line":271},"$_POST (x2)",{"id":273,"type":274,"label":275,"file":152,"line":249,"wp_function":276},{"id":288,"type":269,"label":322,"file":152,"line":308},"$_POST (x3)",{"id":291,"type":274,"label":296,"file":152,"line":310,"wp_function":298},{"id":295,"type":269,"label":270,"file":152,"line":289},{"id":326,"type":292,"label":293,"file":152,"line":289},"n5",{"id":328,"type":274,"label":296,"file":152,"line":297,"wp_function":298},"n6",[330,331,332,333],{"from":268,"to":273,"sanitized":185},{"from":288,"to":291,"sanitized":185},{"from":295,"to":326,"sanitized":185},{"from":326,"to":328,"sanitized":185},6,{"entryPoint":336,"graph":337,"unsanitizedCount":49,"severity":313},"enq_me_set_enq_me_options_on_import (inc\\import-export.php:72)",{"nodes":338,"edges":343},[339,341],{"id":268,"type":269,"label":322,"file":170,"line":340},74,{"id":273,"type":274,"label":296,"file":170,"line":342,"wp_function":298},90,[344],{"from":268,"to":273,"sanitized":185},{"entryPoint":346,"graph":347,"unsanitizedCount":49,"severity":313},"\u003Cimport-export> (inc\\import-export.php:0)",{"nodes":348,"edges":351},[349,350],{"id":268,"type":269,"label":322,"file":170,"line":340},{"id":273,"type":274,"label":296,"file":170,"line":342,"wp_function":298},[352],{"from":268,"to":273,"sanitized":185},{"summary":354,"deductions":355},"The \"enqueue-me\" plugin v0.5 presents a significant security risk due to its unprotected AJAX handlers.  All five identified AJAX entry points lack authentication checks, meaning any unauthenticated user could potentially trigger these actions. While the plugin demonstrates good practices by not using dangerous functions and employing prepared statements for SQL, the complete absence of capability checks and nonce verification on these critical entry points leaves it highly vulnerable to unauthorized execution of plugin functionalities.  The absence of any recorded vulnerabilities in its history is positive, but it does not mitigate the severe risks identified in the static analysis. The plugin's security posture is concerning primarily because the identified attack surface is completely exposed.",[356,359,361,363,365],{"reason":357,"points":358},"Unprotected AJAX handlers",15,{"reason":360,"points":11},"Missing nonce checks on AJAX handlers",{"reason":362,"points":11},"Missing capability checks on AJAX handlers",{"reason":364,"points":72},"Taint analysis shows unsanitized paths",{"reason":366,"points":367},"Output escaping is not fully proper",4,"2026-03-16T23:15:02.997Z",{"wat":370,"direct":380},{"assetPaths":371,"generatorPatterns":377,"scriptPaths":378,"versionParams":379},[372,373,374,375,376],"\u002Fwp-content\u002Fplugins\u002Fenqueue-me\u002Finc\u002Fcore.php","\u002Fwp-content\u002Fplugins\u002Fenqueue-me\u002Finc\u002Fadmin.php","\u002Fwp-content\u002Fplugins\u002Fenqueue-me\u002Finc\u002Fload-scripts.php","\u002Fwp-content\u002Fplugins\u002Fenqueue-me\u002Finc\u002Fimport-export.php","\u002Fwp-content\u002Fplugins\u002Fenqueue-me\u002Finc\u002Ffav-lists.php",[],[],[],{"cssClasses":381,"htmlComments":387,"htmlAttributes":388,"restEndpoints":393,"jsGlobals":394,"shortcodeOutput":396},[382,383,384,385,386],"forbidden-fruit","enqueueme-settings","em-packages-select","my-enqueue-wrap","my-enqueue-head",[],[389,390,391,392],"id=\"root-dep-box\"","id=\"licenece-box\"","id=\"licenece-email-box\"","id=\"update-licence\"",[],[395],"plugins_url",[]]