[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwBGDM5PR1AI5PYJ3m3cMUOgbVgAa8Kkkwjwi-CzV35I":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":49,"crawl_stats":38,"alternatives":56,"analysis":164,"fingerprints":686},"external-url-as-post-featured-image-thumbnail","External url as post Featured Image (thumbnail)","2.08","Puvox Software","https:\u002F\u002Fprofiles.wordpress.org\u002Fpuvoxsoftware\u002F","\u003Ch4>[ ✅ 𝐒𝐄𝐂𝐔𝐑𝐄 𝐏𝐋𝐔𝐆𝐈𝐍𝐒 b𝓎 𝒫𝓊𝓋𝑜𝓍] :\u003C\u002Fh4>\n\u003Cblockquote>\n\u003Cp>• Revised for security to be reliable and free of vulnerability holes.\u003Cbr \u002F>\n  • Efficient, not to add any extra load\u002Fslowness to site.\u003Cbr \u002F>\n  • Don’t collect private data.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>Plugin Description\u003C\u002Fh4>\n\u003Cp>Set External-URL as post thumbnail url.\u003Cbr \u002F>\n    (For developers: you can also use a filter-hook to programatically set\u002Fget external url as post’s thumbnail. Read more in plugin’s dashboard page)\u003C\u002Fp>\n\u003Cp>\u003Ccode>Gutenberg not supported yet.\u003C\u002Fcode>\u003C\u002Fp>\n\u003Ch3>Feature: Youtube Thumbnails\u003C\u002Fh3>\n\u003Cp>This plugin has an additional option You can set youtube’s thumbnails as post’s featured image automatically ( Read more in plugin’s dashboard page) .\u003C\u002Fp>\n\u003Ch4>Available Options\u003C\u002Fh4>\n\u003Cp>See all available options and their description on plugin’s settings page.\u003C\u002Fp>\n","[ ✅ 𝐒𝐄𝐂𝐔𝐑𝐄 𝐏𝐋𝐔𝐆𝐈𝐍𝐒 b𝓎 𝒫𝓊𝓋𝑜𝓍]  Set External-URL as post thumbnail url.",300,6033,100,2,"2024-10-30T11:24:00.000Z","6.5.8","6.0","",[20,21,22,23,24],"external","feature","post","thumbnail","url","https:\u002F\u002Fpuvox.software\u002Fsoftware\u002Fwordpress-plugins\u002F?plugin=external-url-as-post-featured-image-thumbnail","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fexternal-url-as-post-featured-image-thumbnail.zip",92,1,0,"2022-08-01 00:00:00","2026-03-15T15:16:48.613Z",[33],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48},"WF-e012d7a0-46f9-4f3b-a178-2d06655fd441-external-url-as-post-featured-image-thumbnail","external-url-as-post-featured-image-reflected-cross-site-scripting","External url as post Featured Image \u003C= 2.02 - Reflected Cross-Site Scripting","The plugin External url as post Featured Image plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.02 due to the use of add_query_arg\u002Fremove_query_arg with insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages via a URL that executes if they can successfully trick a user into performing an action such as clicking on a link.",null,"\u003C=2.02","2.03","medium",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-01-22 19:56:02",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fe012d7a0-46f9-4f3b-a178-2d06655fd441?source=api-prod",540,{"slug":50,"display_name":7,"profile_url":8,"plugin_count":51,"total_installs":52,"avg_security_score":53,"avg_patch_time_days":48,"trust_score":54,"computed_at":55},"puvoxsoftware",16,51190,94,75,"2026-04-04T05:59:01.535Z",[57,77,101,124,146],{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":13,"num_ratings":14,"last_updated":67,"tested_up_to":68,"requires_at_least":69,"requires_php":18,"tags":70,"homepage":74,"download_link":75,"security_score":76,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"external-thumbnail","External Thumbnail","1.2.1","mrtaiw","https:\u002F\u002Fprofiles.wordpress.org\u002Fmrtaiw\u002F","\u003Cp>Using external images from anywhere to make thumbnail.\u003C\u002Fp>\n\u003Cp>If empty url image, will take the first picture in the post as thumbnail\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>Having problems or need support? Feel free to email mrtaiw@gmail.com or Facebook https:\u002F\u002Fwww.facebook.com\u002Ftaiw96\u003C\u002Fp>\n","Using external images from anywhere to make thumbnail",10000,4535,"2016-06-17T07:31:00.000Z","4.5.33","3.3",[71,58,72,73],"external-featured-image","remote-thumbnail","thumbnail-via-url","http:\u002F\u002Fthucdem.mobi","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fexternal-thumbnail.zip",85,{"slug":78,"name":79,"version":80,"author":81,"author_profile":82,"description":83,"short_description":84,"active_installs":85,"downloaded":86,"rating":87,"num_ratings":88,"last_updated":89,"tested_up_to":90,"requires_at_least":91,"requires_php":92,"tags":93,"homepage":97,"download_link":98,"security_score":99,"vuln_count":28,"unpatched_count":28,"last_vuln_date":100,"fetched_at":31},"wp-remote-thumbnail","WP Remote Thumbnail","1.3.2","Nirmal Kumar Ram","https:\u002F\u002Fprofiles.wordpress.org\u002Fsagarseth9\u002F","\u003Cp>WP Remote Thumbnail is a very lightweight WordPress plugin that comes with zero configuration and one-click setup. Using this plugin, you can easily set any external image as the featured image of any post\u002Fpage or even custom post types.\u003C\u002Fp>\n\u003Cp>This plugin automatically adds a custom metabox to each post type that supports post thumbnails. You just need to copy and paste the URL of any image into the metabox and click publish\u002Fupdate.\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F28J9IYZ4WFI?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n","A small lightweight plugin to set external\u002Fremote images as post thumbnail\u002Ffeatured image.",90,11097,70,8,"2025-12-13T15:20:00.000Z","6.9.4","4.4","5.4",[71,94,95,72,96],"featured-image","remote-featured-image","url-to-featured-image","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-remote-thumbnail\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-remote-thumbnail.1.3.2.zip",76,"2025-04-08 00:00:00",{"slug":102,"name":103,"version":104,"author":105,"author_profile":106,"description":107,"short_description":108,"active_installs":109,"downloaded":110,"rating":99,"num_ratings":111,"last_updated":112,"tested_up_to":90,"requires_at_least":113,"requires_php":114,"tags":115,"homepage":120,"download_link":121,"security_score":27,"vuln_count":122,"unpatched_count":29,"last_vuln_date":123,"fetched_at":31},"auto-post-thumbnail","Auto Featured Image (Auto Post Thumbnail)","5.0.2","Themeisle","https:\u002F\u002Fprofiles.wordpress.org\u002Fthemeisle\u002F","\u003Cp>Auto Featured Image automatically fixes missing featured images and thumbnails across your WordPress site.\u003C\u002Fp>\n\u003Cp>Generate featured images from post titles, extract images from post content, or bulk assign thumbnails using advanced filters and scheduling — all in just a few clicks.\u003C\u002Fp>\n\u003Cp>It works seamlessly with Gutenberg, Elementor, Classic Editor, and any custom post type.\u003C\u002Fp>\n\u003Cp>No more manual uploads. No more posts going live without featured images.\u003C\u002Fp>\n\u003Cp>With Auto Featured Image, you can:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Generate featured images in bulk\u003C\u002Fli>\n\u003Cli>Create dynamic images from post titles\u003C\u002Fli>\n\u003Cli>Detect and assign images already inside post content\u003C\u002Fli>\n\u003Cli>Automatically apply default fallback images\u003C\u002Fli>\n\u003Cli>Set advanced filters and control generation rules\u003C\u002Fli>\n\u003Cli>Schedule bulk image generation\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Whether you run a small blog or manage thousands of posts, Auto Featured Image saves hours of repetitive work and keeps your website visually consistent — automatically.\u003C\u002Fp>\n\u003Ch3>⚡ Quick Links\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fauto-post-thumbnail\u002F\" rel=\"ugc\">Support Forum\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdocs.themeisle.com\u002Fcategory\u002F2453-installation-and-setup\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fthemeisle.com\u002Fplugins\u002Fauto-featured-image\u002Fupgrade\u002F?utm_source=plugin-readme&utm_medium=afi&utm_campaign=compare#free-vs-pro\" rel=\"nofollow ugc\">Compare Free vs Pro\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fthemeisle.com\u002Fplugins\u002Fauto-featured-image\u002Fupgrade\u002F?utm_source=plugin-readme&utm_medium=afi&utm_campaign=quick-links\" rel=\"nofollow ugc\">Go Pro\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🚀 How It Works\u003C\u002Fh3>\n\u003Ch3>Step 1: Choose a Generation Method\u003C\u002Fh3>\n\u003Cp>Select how featured images should be created:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Find in post – Uses the first image found inside the content.\u003C\u002Fli>\n\u003Cli>Generate from title – Creates a featured image dynamically using the post title.\u003C\u002Fli>\n\u003Cli>Find or generate – Uses existing images, otherwise generates one.\u003C\u002Fli>\n\u003Cli>Find or use default image – Falls back to a predefined image if none is found.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Step 2: Filter Your Posts\u003C\u002Fh3>\n\u003Cp>Apply filters to control exactly where images should be generated:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Post Type\u003C\u002Fli>\n\u003Cli>Post Status\u003C\u002Fli>\n\u003Cli>Post Category\u003C\u002Fli>\n\u003Cli>Date Range\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This ensures you only modify the content you intend to.\u003C\u002Fp>\n\u003Ch3>Step 3: Generate in One Click\u003C\u002Fh3>\n\u003Cp>Click \u003Cstrong>Generate Featured Images\u003C\u002Fstrong> and the plugin:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Processes posts in bulk\u003C\u002Fli>\n\u003Cli>Shows real-time progress\u003C\u002Fli>\n\u003Cli>Logs the last 100 generated images\u003C\u002Fli>\n\u003Cli>Updates thumbnails instantly in the posts list\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🔥 Core Features (Free Version)\u003C\u002Fh3>\n\u003Cp>✅ \u003Cstrong>Bulk Generate Featured Images:\u003C\u002Fstrong> Automatically create and assign featured images to multiple posts at once. Perfect for fixing older content in minutes instead of hours.\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>Find Images Inside Content:\u003C\u002Fstrong> Automatically detect the first image inside a post and set it as the featured image. Ideal for blogs that already include images but missed setting thumbnails.\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>Generate from Title:\u003C\u002Fstrong> Create clean, text-based featured images using the post title. Great for minimal blogs, news sites, and content-heavy websites.\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>Default Fallback Image:\u003C\u002Fstrong> Set a default image that will be applied whenever no suitable image is found, ensuring every post always has a featured image.\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>One-Click Generation:\u003C\u002Fstrong> Generate featured images for all selected posts instantly from a single dashboard screen.\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>Generation Log:\u003C\u002Fstrong> Monitor recently generated images with preview, size, generation method, and status for full transparency and control.\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>Live Preview Mode:\u003C\u002Fstrong> Instantly see how your featured image will look while adjusting background, font, alignment, colors, and layout settings. No need to save and regenerate repeatedly.\u003C\u002Fp>\n\u003Cp>✅ \u003Cstrong>Posts List Integration:\u003C\u002Fstrong> Generate, set, or remove featured images directly from the WordPress Posts screen using bulk actions. Manage multiple posts at once without opening each post individually.\u003C\u002Fp>\n\u003Ch3>💎 Auto Featured Image Pro\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fthemeisle.com\u002Fplugins\u002Fauto-featured-image\u002Fupgrade\u002F?utm_source=plugin-readme&utm_medium=afi&utm_campaign=pro-section\" rel=\"nofollow ugc\">Upgrade\u003C\u002Fa> to unlock full control and automation power\u003C\u002Fp>\n\u003Ch3>[PRO] Smart Filters & Targeting\u003C\u002Fh3>\n\u003Cp>Generate featured images exactly where and when you need them:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Filter by post status, category, or date range\u003C\u002Fli>\n\u003Cli>Target specific post types\u003C\u002Fli>\n\u003Cli>Schedule generation automatically\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>[PRO] Advanced Background Controls\u003C\u002Fh3>\n\u003Cp>Design featured images that match your brand:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Gradient background support\u003C\u002Fli>\n\u003Cli>Upload custom background images\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>[PRO] Typography & Layout Controls\u003C\u002Fh3>\n\u003Cp>Full control over how your title-based images look:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Use Google Fonts\u003C\u002Fli>\n\u003Cli>Upload custom font files\u003C\u002Fli>\n\u003Cli>Horizontal text alignment\u003C\u002Fli>\n\u003Cli>Vertical text alignment\u003C\u002Fli>\n\u003Cli>Custom before\u002Fafter string text\u003C\u002Fli>\n\u003Cli>Custom padding\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>[PRO] External Image Integration\u003C\u002Fh3>\n\u003Cp>Find images without leaving your dashboard:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Search and select images directly from Unsplash\u003C\u002Fli>\n\u003Cli>Search and select images from Pixabay\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>[PRO] Import & Automation\u003C\u002Fh3>\n\u003Cp>Scale your workflow:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Automatically upload external images to Media Library\u003C\u002Fli>\n\u003Cli>Schedule featured image generation\u003C\u002Fli>\n\u003Cli>Advanced post type targeting\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🧩 Use Cases\u003C\u002Fh3>\n\u003Ch3>Fix Missing Thumbnails\u003C\u002Fh3>\n\u003Cp>Clean up old blogs or imported content that lacks featured images.\u003C\u002Fp>\n\u003Ch3>Affiliate & Content Sites\u003C\u002Fh3>\n\u003Cp>Automatically generate branded thumbnails from titles.\u003C\u002Fp>\n\u003Ch3>High-Volume Publishing\u003C\u002Fh3>\n\u003Cp>Use filters and scheduling to automate thumbnail generation at scale.\u003C\u002Fp>\n\u003Cp>Auto Featured Image is developed and maintained by \u003Ca href=\"https:\u002F\u002Fthemeisle.com\u002F\" rel=\"nofollow ugc\">Themeisle\u003C\u002Fa>, a company trusted by over 1 million WordPress users worldwide.\u003C\u002Fp>\n","Automatically generate, assign, and manage featured images in bulk so every post on your site has a featured image.",50000,1835020,117,"2026-02-25T17:59:00.000Z","5.6","7.4",[116,94,117,118,119],"auto-featured-image","featured-image-from-title","post-thumbnails","thumbnails","https:\u002F\u002Fthemeisle.com\u002Fplugins\u002Fauto-featured-image","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fauto-post-thumbnail.5.0.2.zip",6,"2025-12-15 16:51:43",{"slug":125,"name":126,"version":127,"author":128,"author_profile":129,"description":130,"short_description":131,"active_installs":132,"downloaded":133,"rating":53,"num_ratings":134,"last_updated":135,"tested_up_to":136,"requires_at_least":137,"requires_php":138,"tags":139,"homepage":144,"download_link":145,"security_score":13,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"featured-image-admin-thumb-fiat","Featured Image Admin Thumb","1.6.1","Sean Hayes","https:\u002F\u002Fprofiles.wordpress.org\u002Fseanchayes\u002F","\u003Cp>When active this plugin adds a column to the All Posts\u002FAll Pages and where supported the All Custom Post Type admin views. This column, “Thumb”, will display a thumbnail of the featured image\u003Cbr \u002F>\n or post thumbnail so you can easily determine the content that is missing an image.\u003C\u002Fp>\n\u003Cp>You can also make inline edits that allow you to change the thumb\u002Fimage from the All Posts\u002FAll Pages\u002FAll Custom Post Type view without having to edit the post.\u003C\u002Fp>\n\u003Cp>Now the plugin is translatable. Using tools such as Poedit along with localized \u002F international versions of WordPress, FIAT can display user supplied translations of its text.\u003C\u002Fp>\n\u003Ch3>Updates\u003C\u002Fh3>\n","Adds inline thumbnail image to admin columns on Post\u002Fpost types view (where supported). Click to easily set\u002Fchange the featured image.",20000,201920,40,"2025-04-26T21:13:00.000Z","6.8.5","3.5.1","7.0",[140,141,142,143,23],"admin","featured","image","post-thumbnail","https:\u002F\u002Fwww.seanhayes.biz","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffeatured-image-admin-thumb-fiat.1.6.1.zip",{"slug":147,"name":148,"version":149,"author":150,"author_profile":151,"description":152,"short_description":153,"active_installs":154,"downloaded":155,"rating":53,"num_ratings":156,"last_updated":157,"tested_up_to":158,"requires_at_least":159,"requires_php":113,"tags":160,"homepage":18,"download_link":163,"security_score":76,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"multiple-featured-images","Multiple Featured Images","0.5.0","Marcus Kober","https:\u002F\u002Fprofiles.wordpress.org\u002Fmarcuskober\u002F","\u003Cp>You need more than one featured image for posts, pages and\u002For custom post types? Then this plugin is for you!\u003C\u002Fp>\n\u003Cp>Enable multiple featured images for all post types (including custom post types and WooCommerce products) and show the images with a widget or the handy shortcode.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\n\u003Cp>Add as many featured images as you need.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Add the featured images to any post type (post, page or even custom post types and WooCommerce products).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>It is possible to use different featured images for different post types. Easily you can add two new featured images to pages and three to posts, if you need it that way.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Fully customizable output – so it’s multilingual.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Handy shortcode for displaying the featured images everywhere.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Widget for displaying featured images in sidebars, etc.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>History\u003C\u002Fh4>\n\u003Cp>For one of my customers I had to assign two featured images to pages. One featured image was used as the header image and the other as a small button for the submenu. The images had to be different too (so I couldn’t simply use different images sizes) and so I wrote this little plugin.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>IMPORTANT NOTE TO THOSE UPDATING FROM 0.3:\u003C\u002Fstrong> The Plugin comes with a new method for registering featured images and updates the post meta key. It is fully backwards compatible, but if you are calling the post metas directly then please update your code accordingly. The new format of the post meta key is kdmfi_YOUR_ID.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>Contribute\u003C\u002Fh4>\n\u003Cp>Feel free to ask if you have problems with this plugin. But please keep in mind, that this plugin is developed in the author’s spare time – so it may take some time to answer.\u003Cbr \u002F>\nFeature requests are welcome too!\u003C\u002Fp>\n","Enables multiple featured images for all post types (including custom post types and WooCommerce products). Comes with a widget and a handy shortcode  …",5000,105745,28,"2020-08-20T08:32:00.000Z","5.5.18","3.5",[161,94,162,147,143],"custom-post-type","multiple-featured-image","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmultiple-featured-images.zip",{"attackSurface":165,"codeSignals":344,"taintFlows":545,"riskAssessment":673,"analyzedAt":685},{"hooks":166,"ajaxHandlers":340,"restRoutes":341,"shortcodes":342,"cronEvents":343,"entryPointCount":29,"unprotectedCount":29},[167,173,177,182,186,191,193,198,200,205,207,211,213,217,219,223,225,229,231,234,238,240,246,249,252,254,257,259,262,265,268,269,272,275,277,280,283,286,289,292,296,300,304,306,310,313,316,320,323,326,328,332,335],{"type":168,"name":169,"callback":170,"priority":28,"file":171,"line":172},"action","plugins_loaded","closure","index.php",61,{"type":168,"name":174,"callback":175,"file":171,"line":176},"init","showAdminColumnsImages",81,{"type":178,"name":179,"callback":180,"file":171,"line":181},"filter","admin_post_thumbnail_html","field",84,{"type":178,"name":183,"callback":184,"priority":185,"file":171,"line":76},"save_post","save",10,{"type":178,"name":187,"callback":188,"priority":189,"file":171,"line":190},"has_post_thumbnail","METHOD_1_helper_A",20,106,{"type":178,"name":187,"callback":188,"priority":189,"file":171,"line":192},122,{"type":178,"name":194,"callback":195,"priority":196,"file":171,"line":197},"get_post_metadata","METHOD_2_helper_A_filter",15,147,{"type":178,"name":194,"callback":195,"priority":196,"file":171,"line":199},167,{"type":178,"name":201,"callback":202,"priority":203,"file":171,"line":204},"wp_get_attachment_image_src","METHOD_3_helper_A_filter",50,198,{"type":178,"name":201,"callback":202,"priority":203,"file":171,"line":206},212,{"type":178,"name":208,"callback":209,"priority":122,"file":171,"line":210},"post_thumbnail_html","METHOD_4_filter",224,{"type":178,"name":208,"callback":209,"priority":122,"file":171,"line":212},234,{"type":178,"name":214,"callback":215,"priority":185,"file":171,"line":216},"wp_get_attachment_image","METHOD_5_filter",247,{"type":178,"name":214,"callback":215,"priority":185,"file":171,"line":218},256,{"type":178,"name":220,"callback":221,"priority":185,"file":171,"line":222},"wp_get_attachment_url","METHOD_6_filter",269,{"type":178,"name":220,"callback":221,"priority":185,"file":171,"line":224},280,{"type":178,"name":226,"callback":227,"priority":185,"file":171,"line":228},"elementor\u002Fimage_size\u002Fget_attachment_image_html","METHOD_9_filter",321,{"type":178,"name":226,"callback":221,"priority":185,"file":171,"line":230},339,{"type":168,"name":232,"callback":170,"file":171,"line":233},"admin_head",410,{"type":168,"name":235,"callback":170,"priority":28,"file":236,"line":237},"wp_head","library.php",4768,{"type":168,"name":232,"callback":170,"priority":28,"file":236,"line":239},4769,{"type":168,"name":241,"callback":242,"priority":243,"file":244,"line":245},"wp_enqueue_scripts","my_styles_hook",9,"library_wp.php",73,{"type":168,"name":247,"callback":242,"priority":243,"file":244,"line":248},"admin_enqueue_scripts",74,{"type":168,"name":250,"callback":170,"file":244,"line":251},"admin_footer",148,{"type":168,"name":174,"callback":170,"file":244,"line":253},163,{"type":168,"name":255,"callback":170,"file":244,"line":256},"admin_init",210,{"type":178,"name":258,"callback":170,"file":244,"line":206},"mce_external_plugins",{"type":178,"name":260,"callback":170,"file":244,"line":261},"mce_buttons_2",213,{"type":178,"name":263,"callback":170,"file":244,"line":264},"tiny_mce_version",215,{"type":168,"name":266,"callback":170,"priority":28,"file":244,"line":267},"wp",231,{"type":168,"name":169,"callback":170,"priority":28,"file":244,"line":48},{"type":168,"name":266,"callback":270,"file":244,"line":271},"my_flush__rewrite",550,{"type":168,"name":273,"callback":170,"file":244,"line":274},"wp_footer",700,{"type":168,"name":174,"callback":170,"file":244,"line":276},711,{"type":168,"name":278,"callback":170,"file":244,"line":279},"wp_loaded",854,{"type":168,"name":281,"callback":170,"file":244,"line":282},"shutdown",859,{"type":168,"name":174,"callback":284,"file":244,"line":285},"load_textdomain",1732,{"type":168,"name":232,"callback":287,"file":244,"line":288},"admin_head_func",1743,{"type":168,"name":290,"callback":170,"file":244,"line":291},"current_screen",1744,{"type":168,"name":266,"callback":293,"priority":294,"file":244,"line":295},"flush_checkpoint",999,1753,{"type":178,"name":297,"callback":298,"priority":28,"file":244,"line":299},"upload_mimes","upload_mimes_filter",1759,{"type":178,"name":301,"callback":302,"priority":185,"file":244,"line":303},"wp_handle_upload","wp_handle_upload_filter",1760,{"type":168,"name":174,"callback":170,"file":244,"line":305},1822,{"type":168,"name":307,"callback":308,"file":244,"line":309},"network_admin_menu","plugin__add_menu_or_submenu",1912,{"type":168,"name":311,"callback":308,"file":244,"line":312},"admin_menu",1914,{"type":168,"name":314,"callback":170,"file":244,"line":315},"activated_plugin",1916,{"type":168,"name":317,"callback":318,"file":244,"line":319},"network_admin_notices","admin_error_notice_pro",2103,{"type":168,"name":321,"callback":318,"file":244,"line":322},"admin_notices",2104,{"type":178,"name":324,"callback":170,"priority":185,"file":244,"line":325},"wp_php_error_message",2187,{"type":168,"name":273,"callback":170,"file":244,"line":327},2375,{"type":178,"name":329,"callback":330,"file":244,"line":331},"widget_text","do_shortcode",2399,{"type":178,"name":333,"callback":170,"file":244,"line":334},"site_transient_update_plugins",3266,{"type":178,"name":336,"callback":337,"priority":189,"file":338,"line":339},"EUAPFIT_currenturl","curr_url","youtube_images.php",58,[],[],[],[],{"dangerousFunctions":345,"sqlUsage":350,"outputEscaping":385,"fileOperations":540,"externalRequests":541,"nonceChecks":542,"capabilityChecks":543,"bundledLibraries":544},[346],{"fn":347,"file":236,"line":348,"context":349},"unserialize",3813,"if ( @unserialize($serialized_string) !== false ) \treturn $serialized_string;",{"prepared":351,"raw":352,"locations":353},46,14,[354,357,359,361,363,366,368,370,372,374,377,379,381,383],{"file":236,"line":355,"context":356},645,"$wpdb->query() with variable interpolation",{"file":244,"line":358,"context":356},784,{"file":244,"line":360,"context":356},785,{"file":244,"line":362,"context":356},1023,{"file":244,"line":364,"context":365},1224,"$wpdb->get_var() with variable interpolation",{"file":244,"line":367,"context":356},1353,{"file":244,"line":369,"context":356},1355,{"file":244,"line":371,"context":356},1368,{"file":244,"line":373,"context":356},1420,{"file":244,"line":375,"context":376},1421,"$wpdb->get_results() with variable interpolation",{"file":244,"line":378,"context":356},1430,{"file":244,"line":380,"context":356},1434,{"file":244,"line":382,"context":376},3058,{"file":244,"line":384,"context":356},3074,{"escaped":386,"rawEcho":387,"locations":388},82,79,[389,392,394,395,397,399,401,403,405,407,409,411,413,415,417,419,421,423,425,427,429,431,433,435,437,439,441,442,443,445,447,449,451,452,454,456,458,460,462,463,465,467,469,471,473,475,477,479,481,483,485,487,489,491,493,495,497,499,501,503,505,507,509,511,513,515,517,519,521,523,525,527,529,531,533,535,537,538,539],{"file":171,"line":390,"context":391},282,"raw output",{"file":171,"line":393,"context":391},342,{"file":171,"line":233,"context":391},{"file":171,"line":396,"context":391},493,{"file":171,"line":398,"context":391},504,{"file":236,"line":400,"context":391},480,{"file":236,"line":402,"context":391},2316,{"file":236,"line":404,"context":391},2915,{"file":236,"line":406,"context":391},3231,{"file":236,"line":408,"context":391},3238,{"file":236,"line":410,"context":391},3278,{"file":236,"line":412,"context":391},3391,{"file":236,"line":414,"context":391},3646,{"file":236,"line":416,"context":391},4194,{"file":236,"line":418,"context":391},4195,{"file":236,"line":420,"context":391},4245,{"file":236,"line":422,"context":391},4247,{"file":236,"line":424,"context":391},4442,{"file":236,"line":426,"context":391},4451,{"file":236,"line":428,"context":391},4453,{"file":236,"line":430,"context":391},4602,{"file":236,"line":432,"context":391},4694,{"file":236,"line":434,"context":391},4698,{"file":236,"line":436,"context":391},4705,{"file":236,"line":438,"context":391},4716,{"file":236,"line":440,"context":391},4722,{"file":236,"line":237,"context":391},{"file":236,"line":239,"context":391},{"file":236,"line":444,"context":391},5119,{"file":236,"line":446,"context":391},5121,{"file":244,"line":448,"context":391},396,{"file":244,"line":450,"context":391},401,{"file":244,"line":233,"context":391},{"file":244,"line":453,"context":391},442,{"file":244,"line":455,"context":391},576,{"file":244,"line":457,"context":391},655,{"file":244,"line":459,"context":391},660,{"file":244,"line":461,"context":391},674,{"file":244,"line":461,"context":391},{"file":244,"line":464,"context":391},1312,{"file":244,"line":466,"context":391},1317,{"file":244,"line":468,"context":391},1328,{"file":244,"line":470,"context":391},2320,{"file":244,"line":472,"context":391},2499,{"file":244,"line":474,"context":391},2513,{"file":244,"line":476,"context":391},2551,{"file":244,"line":478,"context":391},2553,{"file":244,"line":480,"context":391},2554,{"file":244,"line":482,"context":391},2582,{"file":244,"line":484,"context":391},2586,{"file":244,"line":486,"context":391},2589,{"file":244,"line":488,"context":391},2636,{"file":244,"line":490,"context":391},2656,{"file":244,"line":492,"context":391},2666,{"file":244,"line":494,"context":391},2671,{"file":244,"line":496,"context":391},2673,{"file":244,"line":498,"context":391},2700,{"file":244,"line":500,"context":391},2707,{"file":244,"line":502,"context":391},2754,{"file":244,"line":504,"context":391},2769,{"file":244,"line":506,"context":391},2782,{"file":244,"line":508,"context":391},2789,{"file":244,"line":510,"context":391},2790,{"file":244,"line":512,"context":391},2791,{"file":244,"line":514,"context":391},2796,{"file":244,"line":516,"context":391},2798,{"file":244,"line":518,"context":391},2806,{"file":244,"line":520,"context":391},2867,{"file":244,"line":522,"context":391},2981,{"file":244,"line":524,"context":391},2997,{"file":244,"line":526,"context":391},3006,{"file":244,"line":528,"context":391},3148,{"file":244,"line":530,"context":391},3393,{"file":244,"line":532,"context":391},3420,{"file":244,"line":534,"context":391},3423,{"file":338,"line":536,"context":391},44,{"file":338,"line":536,"context":391},{"file":338,"line":351,"context":391},{"file":338,"line":351,"context":391},19,4,5,3,[],[546,563,572,583,593,632,643,664],{"entryPoint":547,"graph":548,"unsanitizedCount":28,"severity":41},"force_redirect_to_https (library.php:103)",{"nodes":549,"edges":560},[550,555],{"id":551,"type":552,"label":553,"file":236,"line":554},"n0","source","$_SERVER['REQUEST_URI']",104,{"id":556,"type":557,"label":558,"file":236,"line":554,"wp_function":559},"n1","sink","header() [Header Injection]","header",[561],{"from":551,"to":556,"sanitized":562},false,{"entryPoint":564,"graph":565,"unsanitizedCount":28,"severity":41},"password_site (library.php:2312)",{"nodes":566,"edges":570},[567,569],{"id":551,"type":552,"label":553,"file":236,"line":568},2315,{"id":556,"type":557,"label":558,"file":236,"line":568,"wp_function":559},[571],{"from":551,"to":556,"sanitized":562},{"entryPoint":573,"graph":574,"unsanitizedCount":28,"severity":41},"redirect_to_https (library.php:3790)",{"nodes":575,"edges":581},[576,579],{"id":551,"type":552,"label":577,"file":236,"line":578},"$_SERVER",3793,{"id":556,"type":557,"label":558,"file":236,"line":580,"wp_function":559},3795,[582],{"from":551,"to":556,"sanitized":562},{"entryPoint":584,"graph":585,"unsanitizedCount":28,"severity":41},"redirect_to_nonwww (library.php:3800)",{"nodes":586,"edges":591},[587,589],{"id":551,"type":552,"label":577,"file":236,"line":588},3802,{"id":556,"type":557,"label":558,"file":236,"line":590,"wp_function":559},3804,[592],{"from":551,"to":556,"sanitized":562},{"entryPoint":594,"graph":595,"unsanitizedCount":243,"severity":41},"\u003Clibrary> (library.php:0)",{"nodes":596,"edges":626},[597,599,600,602,607,609,614,617,619,622],{"id":551,"type":552,"label":598,"file":236,"line":554},"$_SERVER['REQUEST_URI'] (x2)",{"id":556,"type":557,"label":558,"file":236,"line":554,"wp_function":559},{"id":601,"type":552,"label":577,"file":236,"line":218},"n2",{"id":603,"type":557,"label":604,"file":236,"line":605,"wp_function":606},"n3","wp_remote_get() [SSRF]",3066,"wp_remote_get",{"id":608,"type":552,"label":577,"file":236,"line":218},"n4",{"id":610,"type":557,"label":611,"file":236,"line":612,"wp_function":613},"n5","wp_remote_post() [SSRF]",3072,"wp_remote_post",{"id":615,"type":552,"label":616,"file":236,"line":578},"n6","$_SERVER (x2)",{"id":618,"type":557,"label":558,"file":236,"line":580,"wp_function":559},"n7",{"id":620,"type":552,"label":621,"file":236,"line":218},"n8","$_SERVER (x3)",{"id":623,"type":557,"label":624,"file":236,"line":420,"wp_function":625},"n9","echo() [XSS]","echo",[627,628,629,630,631],{"from":551,"to":556,"sanitized":562},{"from":601,"to":603,"sanitized":562},{"from":608,"to":610,"sanitized":562},{"from":615,"to":618,"sanitized":562},{"from":620,"to":623,"sanitized":562},{"entryPoint":633,"graph":634,"unsanitizedCount":29,"severity":642},"ajax_backend_call (library_wp.php:432)",{"nodes":635,"edges":639},[636,638],{"id":551,"type":552,"label":637,"file":244,"line":453},"$_POST['PRO_check_key']",{"id":556,"type":557,"label":624,"file":244,"line":453,"wp_function":625},[640],{"from":551,"to":556,"sanitized":641},true,"low",{"entryPoint":644,"graph":645,"unsanitizedCount":29,"severity":642},"\u003Clibrary_wp> (library_wp.php:0)",{"nodes":646,"edges":660},[647,648,649,652,656,659],{"id":551,"type":552,"label":637,"file":244,"line":453},{"id":556,"type":557,"label":624,"file":244,"line":453,"wp_function":625},{"id":601,"type":552,"label":650,"file":244,"line":651},"$_POST (x2)",1454,{"id":603,"type":557,"label":653,"file":244,"line":654,"wp_function":655},"get_var() [SQLi]",1456,"get_var",{"id":608,"type":552,"label":657,"file":244,"line":658},"$_POST",2527,{"id":610,"type":557,"label":624,"file":244,"line":504,"wp_function":625},[661,662,663],{"from":551,"to":556,"sanitized":641},{"from":601,"to":603,"sanitized":641},{"from":608,"to":610,"sanitized":641},{"entryPoint":665,"graph":666,"unsanitizedCount":14,"severity":672},"change_slug_2_old (library_wp.php:1451)",{"nodes":667,"edges":670},[668,669],{"id":551,"type":552,"label":650,"file":244,"line":651},{"id":556,"type":557,"label":653,"file":244,"line":654,"wp_function":655},[671],{"from":551,"to":556,"sanitized":562},"high",{"summary":674,"deductions":675},"The plugin 'external-url-as-post-featured-image-thumbnail' v2.08 exhibits a mixed security posture. While it has no known unpatched vulnerabilities and a relatively low number of CVEs historically, the static analysis reveals concerning code signals. The presence of the `unserialize` function without apparent sanitization is a significant risk, as it can lead to object injection vulnerabilities if untrusted data is passed to it. Furthermore, the taint analysis indicates a high-severity flow with unsanitized paths, which is a critical concern that could be exploited.  The plugin also has a concerning percentage of improperly escaped outputs (49%) and a number of file operations and external HTTP requests that could be vectors for attack if not handled with extreme care.  While the plugin benefits from a zero attack surface in terms of entry points and the use of prepared statements for most SQL queries, the identified risks, particularly the `unserialize` function and the high-severity taint flow, elevate the overall security risk.",[676,678,681,683],{"reason":677,"points":196},"Dangerous function 'unserialize' detected",{"reason":679,"points":680},"High severity taint flow with unsanitized paths",12,{"reason":682,"points":122},"Significant percentage of outputs not properly escaped",{"reason":684,"points":88},"Medium severity vulnerability in history","2026-03-16T20:02:44.797Z",{"wat":687,"direct":696},{"assetPaths":688,"generatorPatterns":691,"scriptPaths":692,"versionParams":693},[689,690],"\u002Fwp-content\u002Fplugins\u002Fexternal-url-as-post-featured-image-thumbnail\u002Fcss\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fexternal-url-as-post-featured-image-thumbnail\u002Fjs\u002Fexternal-url-as-post-featured-image-thumbnail.js",[],[690],[694,695],"external-url-as-post-featured-image-thumbnail\u002Fcss\u002Fstyle.css?ver=","external-url-as-post-featured-image-thumbnail\u002Fjs\u002Fexternal-url-as-post-featured-image-thumbnail.js?ver=",{"cssClasses":697,"htmlComments":698,"htmlAttributes":699,"restEndpoints":701,"jsGlobals":702,"shortcodeOutput":704},[],[],[700],"data-external-url-as-post-featured-image-thumbnail",[],[703],"EUAPFIT_AJAX_URL",[]]