[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-JVB3vc1ovZpwLkZObTgGJipRd1bAvZ8QtRXCTsMXCQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":88,"crawl_stats":37,"alternatives":96,"analysis":204,"fingerprints":434},"favorites","Favorites","2.3.6","Kyle Phillips","https:\u002F\u002Fprofiles.wordpress.org\u002Fkylephillips\u002F","\u003Cp>\u003Cstrong>Why Favorites?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Favorites is designed for end users and theme developers. It provides an easy-to-use API for adding favorite button functionality to any post type.\u003C\u002Fp>\n\u003Cp>The plugin can provide a way to save favorites, likes, bookmarks, or any other similar types of data with its customizable button text.\u003C\u002Fp>\n\u003Cp>Visit \u003Ca href=\"http:\u002F\u002Ffavoriteposts.com\" rel=\"nofollow ugc\">favoriteposts.com\u003C\u002Fa> for a full list of available template functions and shortcodes.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Use with Any Post Type\u003C\u002Fstrong> – Enable or disable favorite functionality per post type while automatically adding a favorite button before and\u002For after the content. Or, use the included functions to display the button anywhere in your template.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Available for All Users\u003C\u002Fstrong> – Don’t want to hide functionality behind a login? Favorites includes an option to save anonymous users’ favorites by either Session or Cookie. Logged-In users’ favorites are also saved as user meta\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Designed for Developers\u003C\u002Fstrong> – Favorites works great out-of-the-box for beginners, but a full set of template functions unlocks just about any sort of custom functionality developers may need. Favorites outputs the minimum amount of markup needed, putting the style and control in your hands.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>GDPR\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>As of version 2.2, a setting is provided to help comply with GDPR standards. To enable this setting, visit Settings > Favorites > Users, and check the field under “User Cookie Consent.” When this setting is enabled, the content saved under the setting displays in a modal window, and the user must agree to the terms you provide before favorite cookies can be saved. Note: There is no language provided by default. This should be supplied by a qualified attorney or legal entity. Once the user has approved or denied cookies, that is saved in the “simplefavorites” cookie along with the timestamp of approval or denial. If the site is part of a multi-site installation, the setting will carry through to all sites.\u003C\u002Fp>\n\u003Cp>If your site already has a cookie compliance solution in place, there are two document-level jQuery events that may be triggered in order to approve or deny cookies in the background.\u003C\u002Fp>\n\u003Cp>To approve the use of cookies, trigger the event “favorites-user-consent-approved”. To deny the use of cookies, trigger the event “favorites-user-consent-denied”.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Multisite Compatible\u003C\u002Fstrong> – As of version 1.1.0, Favorites is multisite compatible. User favorites are saved on a site\u002Fblog basis, and may be retrieved and displayed across sites.\u003C\u002Fp>\n\u003Cp>For more information visit \u003Ca href=\"http:\u002F\u002Ffavoriteposts.com\" rel=\"nofollow ugc\">favoriteposts.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Important: Favorites requires WordPress version 3.8 or higher, and PHP version 5.4 or higher.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Favorite Button\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The favorite button can be added automatically to the content by enabling specific post types in the plugin settings. It may also be added to template files or through the content editor using the included functions or shortcodes. The post id may be left blank in all cases if inside the loop. The site id parameter is optional, for use in multisite installations (defaults to current site).\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Get function:\u003C\u002Fstrong> \u003Ccode>get_favorites_button($post_id, $site_id)\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Print function:\u003C\u002Fstrong> \u003Ccode>the_favorites_button($post_id, $site_id)\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shortcode:\u003C\u002Fstrong> \u003Ccode>[favorite_button post_id=\"\" site_id=\"\"]\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Favorite Count (by Post)\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Total favorites for each post are saved as a simple integer. If a user unfavorites a post, this count is updated. Anonymous users’ favorites count towards the total by default, but may be disabled via the plugin settings. The post id may be left blank in all cases if inside the loop.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Get function:\u003C\u002Fstrong> \u003Ccode>get_favorites_count($post_id)\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Print function:\u003C\u002Fstrong> \u003Ccode>the_favorites_count($post_id)\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shortcode:\u003C\u002Fstrong> \u003Ccode>[favorite_count post_id=\"\"]\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Favorite Count (by User)\u003C\u002Fstrong>\u003Cbr \u002F>\nDisplays the total number of favorites a user has favorited. Template functions accept the same filters parameter as the user favorites functions.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Get function:\u003C\u002Fstrong> \u003Ccode>get_user_favorites_count($user_id, $site_id, $filters)\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Print function:\u003C\u002Fstrong> \u003Ccode>the_user_favorites_count($user_id, $site_id, $filters)\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shortcode:\u003C\u002Fstrong> \u003Ccode>[user_favorites user_id=\"\" site_id=\"\" post_types=\"\"]\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>User Favorites\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>User favorites are stored as an array of post ids. Logged-in users’ favorites are stored as a custom user meta field, while anonymous users’ favorites are stored in either the session or browser cookie (configurable in the plugin settings). If the user id parameter is omitted, the favorites default to the current user. The site id parameter is optional, for use in multisite installations (defaults to current site).\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Get function (returns array of IDs):\u003C\u002Fstrong> \u003Ccode>get_user_favorites($user_id, $site_id)\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Get function (returns html list):\u003C\u002Fstrong> \u003Ccode>get_user_favorites_list($user_id, $site_id, $include_links, $filters, $include_button, $include_thumbnails = false, $thumbnail_size = 'thumbnail', $include_excerpt = false)\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Print function (prints an html list):\u003C\u002Fstrong> \u003Ccode>the_user_favorites_list($user_id, $site_id, $include_links, $filters, $include_button, $include_thumbnails = false, $thumbnail_size = 'thumbnail', $include_excerpt = false)\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shortcode (prints an html list, with the option of omitting links):\u003C\u002Fstrong> `[user_favorites user_id=”” include_links=”true” site_id=”” include_buttons=”false” post_types=”post” include_thumbnails=”false” thumbnail_size=”thumbnail” include_excerpt=”false”]\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>List Users Who Have Favorited a Post\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Display a list of users who have favorited a specific post. If the user id parameter is omitted, the favorites default to the current user. The site id parameter is optional, for use in multisite installations (defaults to current site). The get function returns an array of user objects.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Get function (returns array of User Objects):\u003C\u002Fstrong> \u003Ccode>get_users_who_favorited_post($post_id, $site_id)\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Print function (prints an html list):\u003C\u002Fstrong> \u003Ccode>the_users_who_favorited_post($post_id = null, $site_id = null, $separator = 'list', $include_anonymous = true, $anonymous_label = 'Anonymous Users', $anonymous_label_single = 'Anonymous User')\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shortcode (prints an html list):\u003C\u002Fstrong> `[post_favorites post_id=”” site_id=”” separator=”list” include_anonymous=”true” anonymous_label=”Anonymous Users” anonymous_label_single=”Anonymous User”]\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Clear Favorites Button\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Displays a button that allows users to clear all of their favorites.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Get function:\u003C\u002Fstrong> \u003Ccode>get_clear_favorites_button($site_id, $text)\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Print function:\u003C\u002Fstrong> \u003Ccode>the_clear_favorites_button($site_id, $text)\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shortcode:\u003C\u002Fstrong> `[clear_favorites_button site_id=”” text=”Clear Favorites”]\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Favorite Count (Across all Posts)\u003C\u002Fstrong>\u003Cbr \u002F>\nDisplays the total number of favorites for a given site.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Get function:\u003C\u002Fstrong> \u003Ccode>get_total_favorites_count($site_id)\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Print function:\u003C\u002Fstrong> \u003Ccode>the_total_favorites_count($site_id)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n","Favorites for any post type. Easily add favoriting\u002Fliking, wishlists, or any other similar functionality using the developer-friendly API.",10000,293250,92,132,"2025-04-10T17:30:00.000Z","6.8.5","3.8","5.4",[20,21,4,22,23],"bookmark","favorite","like","likes","http:\u002F\u002Ffavoriteposts.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffavorites.2.3.6.zip",71,4,1,"2025-07-21 00:00:00","2026-03-15T15:16:48.613Z",[32,46,62,76],{"id":33,"url_slug":34,"title":35,"description":36,"plugin_slug":4,"theme_slug":37,"affected_versions":38,"patched_in_version":37,"severity":39,"cvss_score":40,"cvss_vector":41,"vuln_type":42,"published_date":29,"updated_date":43,"references":44,"days_to_patch":37},"CVE-2025-60202","favorites-unauthenticated-local-file-inclusion","Favorites \u003C= 2.3.6 - Unauthenticated Local File Inclusion","The Favorites plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.3.6. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \"safe\" file types can be uploaded and included.",null,"\u003C=2.3.6","high",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","Improper Control of Filename for Include\u002FRequire Statement in PHP Program ('PHP Remote File Inclusion')","2025-11-19 16:43:14",[45],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fe59085af-03da-4403-9804-6f8e8e7678b4?source=api-prod",{"id":47,"url_slug":48,"title":49,"description":50,"plugin_slug":4,"theme_slug":37,"affected_versions":51,"patched_in_version":52,"severity":53,"cvss_score":54,"cvss_vector":55,"vuln_type":56,"published_date":57,"updated_date":58,"references":59,"days_to_patch":61},"CVE-2025-1452","favorites-authenticated-admin-stored-cross-site-scripting","Favorites \u003C= 2.3.4 - Authenticated (Admin+) Stored Cross-Site Scripting","The Favorites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.","\u003C=2.3.4","2.3.5","medium",4.4,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-03-04 00:00:00","2025-04-21 15:56:23",[60],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fb472ffba-4bb8-4b46-9c6b-e80e286babd5?source=api-prod",49,{"id":63,"url_slug":64,"title":65,"description":66,"plugin_slug":4,"theme_slug":37,"affected_versions":67,"patched_in_version":68,"severity":53,"cvss_score":69,"cvss_vector":70,"vuln_type":56,"published_date":71,"updated_date":72,"references":73,"days_to_patch":75},"CVE-2024-2948","favorites-authenticated-contributor-stored-cross-site-scripting-via-shortcode","Favorites \u003C= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode","The Favorites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'user_favorites' shortcode in all versions up to, and including, 2.3.3 due to insufficient input sanitization and output escaping on user supplied attributes such as 'no_favorites'. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","\u003C=2.3.3","2.3.4",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","2024-03-29 00:00:00","2024-10-24 19:09:17",[74],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F38a87046-9a46-40c2-b10d-d1a7d5ef8742?source=api-prod",210,{"id":77,"url_slug":78,"title":79,"description":80,"plugin_slug":4,"theme_slug":37,"affected_versions":81,"patched_in_version":82,"severity":53,"cvss_score":69,"cvss_vector":70,"vuln_type":56,"published_date":83,"updated_date":84,"references":85,"days_to_patch":87},"CVE-2023-2304","favorites-authenticated-contributor-stored-cross-site-scripting-via-shortcode-2","Favorites \u003C= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode","The Favorites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_favorites' shortcode in versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","\u003C=2.3.2","2.3.3","2023-05-30 00:00:00","2024-01-22 19:56:02",[86],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F5bd03cd0-34f0-491c-8247-79656eba32a8?source=api-prod",238,{"slug":89,"display_name":7,"profile_url":8,"plugin_count":90,"total_installs":91,"avg_security_score":92,"avg_patch_time_days":93,"trust_score":94,"computed_at":95},"kylephillips",3,100010,86,399,69,"2026-04-04T15:14:20.743Z",[97,122,147,170,186],{"slug":98,"name":99,"version":100,"author":101,"author_profile":102,"description":103,"short_description":104,"active_installs":105,"downloaded":106,"rating":107,"num_ratings":108,"last_updated":109,"tested_up_to":110,"requires_at_least":111,"requires_php":112,"tags":113,"homepage":116,"download_link":117,"security_score":118,"vuln_count":119,"unpatched_count":120,"last_vuln_date":121,"fetched_at":30},"my-favorites","My Favorites","1.4.4","Takashi Matsuyama","https:\u002F\u002Fprofiles.wordpress.org\u002Ftakashimatsuyama\u002F","\u003Cp>Save user’s favorite posts and list them.\u003Cbr \u002F>\nThis plugin is simple. You can save the user’s favorite posts just a install and display them anywhere you want with just a shortcode.\u003Cbr \u002F>\nThe logged-in user’s data is saved in the user meta. Other user’s data is saved to Web Storage (localStorage).\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Shortcode:\u003C\u002Fstrong> \u003Ccode>[ccc_my_favorite_select_button post_id=\"\" style=\"\"]\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shortcode:\u003C\u002Fstrong> \u003Ccode>[ccc_my_favorite_list_menu slug=\"\" text=\"\" style=\"\"]\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shortcode:\u003C\u002Fstrong> \u003Ccode>[ccc_my_favorite_list_results class=\"\" style=\"\"]\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For pages with a shortcode for list view ([ccc_my_favorite_list_results]).\u003C\u002Fp>\n\u003Cp>“Load More” is displayed with “posts_per_page”.\u003Cbr \u002F>\nIt will be displayed when the user has more favorite posts than “posts_per_page”.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Shortcode:\u003C\u002Fstrong> \u003Ccode>[ccc_my_favorite_list_results posts_per_page=\"10\"]\u003C\u002Fcode> default is 100 posts.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can display the post’s “excerpt”.\u003Cbr \u002F>\nThis value is the char length.\u003Cbr \u002F>\nIf not needed, use “no excerpt” or “0”.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Shortcode:\u003C\u002Fstrong> \u003Ccode>[ccc_my_favorite_list_results excerpt=\"30\"]\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you want, you can change the code for list view yourself.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Shortcode:\u003C\u002Fstrong> \u003Ccode>[ccc_my_favorite_list_custom_template style=\"\"]\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For pages with a shortcode for custom list view ([ccc_my_favorite_list_custom_template]).\u003Cbr \u002F>\nAdd the function (\u003Ccode>function ccc_my_favorite_list_custom_template( $my_favorite_post_id ) { }\u003C\u002Fcode>) for your list view to \u003Ccode>your-theme\u002Ffunctions.php\u003C\u002Fcode>.\u003Cbr \u002F>\n    $my_favorite_post_id is array.\u003Cbr \u002F>\n    style=”none” excludes the default CSS for the list.\u003C\u002Fp>\n\u003Cp>Detailed usage is under preparation.\u003C\u002Fp>\n\u003Ch3>Discover More\u003C\u002Fh3>\n\u003Cp>This plugin is \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftakashi-matsuyama\u002Fmy-favorites\" rel=\"nofollow ugc\">developed on GitHub\u003C\u002Fa>\u003C\u002Fp>\n","Save user's favorite posts and list them.",1000,17149,100,15,"2026-01-09T08:29:00.000Z","6.9.4","4.8","5.4.0",[114,115,4,23],"accessibility","favorite-posts","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmy-favorites\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmy-favorites.1.4.4.zip",99,2,0,"2024-10-14 00:00:00",{"slug":123,"name":124,"version":125,"author":126,"author_profile":127,"description":128,"short_description":129,"active_installs":130,"downloaded":131,"rating":120,"num_ratings":120,"last_updated":132,"tested_up_to":133,"requires_at_least":134,"requires_php":135,"tags":136,"homepage":144,"download_link":145,"security_score":146,"vuln_count":120,"unpatched_count":120,"last_vuln_date":37,"fetched_at":30},"keyring-reactions-importer","Keyring Reactions Importer","1.1","petermolnar","https:\u002F\u002Fprofiles.wordpress.org\u002Fcadeyrn\u002F","\u003Cp>A \u003Ca href=\"http:\u002F\u002Findiewebcamp.com\u002Fbackfeed\" rel=\"nofollow ugc\">backfeed\u003C\u002Fa> plugin to have all the reaction from all the social networks you have a copy of your post at.\u003C\u002Fp>\n\u003Ch4>Required plugins\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fkeyring\" rel=\"ugc\">Keyring\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>note: to use 500px, you’ll need a \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fpetermolnar\u002Fkeyring\u002Fblob\u002Fmaster\u002Fincludes\u002Fservices\u002Fextended\u002F500px.php\" rel=\"nofollow ugc\">not-yet-merged addition to Keyring for 500px\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fkeyring\u002F\" rel=\"ugc\">Keyring\u003C\u002Fa> is a dependency; the plugin will not function without it!\u003C\u002Fp>\n\u003Ch4>How it works\u003C\u002Fh4>\n\u003Cp>The plugin checks the \u003Ccode>syndication_urls\u003C\u002Fcode> post meta field populated either by the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsyndication-links\u002F\" rel=\"ugc\">Syndication Links\u003C\u002Fa> plugin or by hand: one syndicated url per line.\u003C\u002Fp>\n\u003Cp>For example, it should look like:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>https:\u002F\u002Fwww.facebook.com\u002Fyour-facebook-user\u002Fposts\u002Ffacebook-post-id https:\u002F\u002Fwww.flickr.com\u002Fphotos\u002Fyour-flickr-user\u002Fflickr-post-id \u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>In case the auto-import is enabled it will fire up scheduled cron job once every day ( not changeable currently ) for each network auto-import is enabled on. The job will query X ( depending on the service it’s querying ) posts per request, then fire up a new cron in the background until all posts are processed.\u003C\u002Fp>\n\u003Ch4>Known issues\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>due to the nature of the plugin it’s highly recommended to use \u003Ca href=\"https:\u002F\u002Fsupport.hostgator.com\u002Farticles\u002Fspecialized-help\u002Ftechnical\u002Fwordpress\u002Fhow-to-replace-wordpress-cron-with-a-real-cron-job\" rel=\"nofollow ugc\">system cron\u003C\u002Fa> for WordPress instead of the built-in version\u003C\u002Fli>\n\u003Cli>the plugin can be heavy on load; in this case please consider limiting the import date range on the settings page.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Currently supported networks\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002F500px.com\u002F\" rel=\"nofollow ugc\">500px\u003C\u002Fa> – comments, favs, likes\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fflickr.com\u002F\" rel=\"nofollow ugc\">Flickr\u003C\u002Fa> – comments, favs\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ffacebook.com\u002F\" rel=\"nofollow ugc\">Facebook\u003C\u002Fa> – comments, likes\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Finstagram.com\" rel=\"nofollow ugc\">Instagram\u003C\u002Fa> – comments, likes\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Credit\u003C\u002Fh4>\n\u003Cp>Countless thanks for the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fkeyring-social-importers\u002F\" rel=\"ugc\">Keyring Social Importers\u003C\u002Fa> and the Keyring plugin from \u003Ca href=\"http:\u002F\u002Fdentedreality.com.au\u002F\" rel=\"nofollow ugc\">Beau Lebens\u003C\u002Fa>.\u003C\u002Fp>\n","A social reactions ( comments, like, favs, etc. ) importer.",10,1726,"2015-05-26T09:36:00.000Z","4.2.39","3.0","",[137,138,139,140,4,141,142,143,23],"500px","backfeed","comments","facebook","flickr","indieweb","instagram","https:\u002F\u002Fgithub.com\u002Fpetermolnar\u002Fkeyring-reactions-importer","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkeyring-reactions-importer.1.1.zip",85,{"slug":148,"name":149,"version":150,"author":151,"author_profile":152,"description":153,"short_description":154,"active_installs":155,"downloaded":156,"rating":107,"num_ratings":157,"last_updated":158,"tested_up_to":16,"requires_at_least":159,"requires_php":160,"tags":161,"homepage":166,"download_link":167,"security_score":168,"vuln_count":119,"unpatched_count":120,"last_vuln_date":169,"fetched_at":30},"slick-engagement","Slickstream: Engagement and Conversions","3.0.1","Slickstream","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpslickstream\u002F","\u003Cp>This plugin is for \u003Ca href=\"https:\u002F\u002Fwww.slickstream.com\" rel=\"nofollow ugc\">Slickstream\u003C\u002Fa> customers.  It adds our embed code and key metadata into your webpages without affecting site speed or performance.\u003C\u002Fp>\n\u003Cp>Slickstream users get unlimited access to all of our tools, including:\u003Cbr \u002F>\n– Responsive \u003Cem>as-you-type search\u003C\u002Fem> with a heap of advanced features that your visitors will love\u003Cbr \u002F>\n– Customizable \u003Cem>recommendation carousels and grids\u003C\u002Fem> backed by real data\u003Cbr \u002F>\n– Hassle-free \u003Cem>content favoriting\u003C\u002Fem> to keep your visitors coming back\u003Cbr \u002F>\n– A robust \u003Cem>analytics portal\u003C\u002Fem> with engagement insights you can actually use\u003C\u002Fp>\n\u003Ch3>The Slickstream Difference\u003C\u002Fh3>\n\u003Cp>What makes Slickstream different is that we handle the hard work for you. We sit outside of WordPress, which means when you sign up we build a model of your site and use it to populate all of our search and recommendation tools. Then you pick the ones you want to use, flip a switch, and we’re live! Your site can be running Slickstream tomorrow, with no complicated technical implementation required.\u003C\u002Fp>\n\u003Ch3>What’s Included\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Floating Search: Search with Slickstream on any page\u003C\u002Fli>\n\u003Cli>Hooked Search Buttons: Automatically link your existing search to Slickstream\u003C\u002Fli>\n\u003Cli>Inline Search Module: As-you-type search results displaying on page\u003C\u002Fli>\n\u003Cli>Infinite Filmstrip: Content recommendations placed above posts\u003C\u002Fli>\n\u003Cli>Filmstrip Toolbar: Sticky recommendations that display on scroll\u003C\u002Fli>\n\u003Cli>Content Grid: Flexible recommendation module that can be placed anywhere\u003C\u002Fli>\n\u003Cli>Floating Favorites: Interactive content bookmarking with no sign-in required\u003C\u002Fli>\n\u003Cli>Floating Back-to-Top: Simple option to return to top of content\u003C\u002Fli>\n\u003Cli>Web Story Player: Full site integrations for existing web stories\u003C\u002Fli>\n\u003Cli>Campaigns: Incorporate custom objectives into user experience (business only)\u003C\u002Fli>\n\u003Cli>Analytics Portal: Robust insights into both Slickstream statistics and general\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>General Features and Integrations:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Supports all major themes and editors\u003C\u002Fli>\n\u003Cli>Search or recommend content across multiple domains\u003C\u002Fli>\n\u003Cli>Multi-language search results supported\u003C\u002Fli>\n\u003Cli>Configurable GDPR settings\u003C\u002Fli>\n\u003Cli>Designed for accessibility compliance\u003C\u002Fli>\n\u003Cli>Client-side API available\u003C\u002Fli>\n\u003Cli>Email provider integrations (MailChimp, ConvertKit, ActiveCampaign)\u003C\u002Fli>\n\u003Cli>First-party data integration with advertising networks\u003C\u002Fli>\n\u003Cli>Google Analytics integration\u003C\u002Fli>\n\u003Cli>Recipe card integrations (WP Recipe Maker, Tasty Recipes)\u003C\u002Fli>\n\u003Cli>E-commerce integration (Shopify)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Configuration Options:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Pre-made templates to choose from\u003C\u002Fli>\n\u003Cli>Granular look and feel controls\u003C\u002Fli>\n\u003Cli>Custom messaging on all text prompts\u003C\u002Fli>\n\u003Cli>Attribution removal (additional charge)\u003C\u002Fli>\n\u003Cli>Built-in CLS (Cumulative Layout Shift) handling\u003C\u002Fli>\n\u003Cli>Optional opt-in email collection\u003C\u002Fli>\n\u003Cli>Optional advertising slot inclusions\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Search and Recommendation Details:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Search by category, content type, or author\u003C\u002Fli>\n\u003Cli>Default sort by relevance, date, or popularity\u003C\u002Fli>\n\u003Cli>Custom result weighting in search and recommendations\u003C\u002Fli>\n\u003Cli>Manual categorization and content grouping control\u003C\u002Fli>\n\u003Cli>Exclude results by category, content type, or individual posts\u003C\u002Fli>\n\u003Cli>Custom taxonomies supported\u003C\u002Fli>\n\u003Cli>Progressively detailed results including metadata\u003C\u002Fli>\n\u003Cli>Automatic content grouping in results\u003C\u002Fli>\n\u003Cli>Fuzzy matching and typo forgiveness\u003C\u002Fli>\n\u003Cli>Highlighted search terms in results\u003C\u002Fli>\n\u003Cli>Structured data search experience for ingredients or supplies\u003C\u002Fli>\n\u003Cli>All search queries recorded in analytics\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>FAQs\u003C\u002Fh3>\n\u003Ch4>What is Slickstream?\u003C\u002Fh4>\n\u003Cp>Slickstream is a sophisticated market-leading user engagement suite designed for independent publishers. It helps you turn casual visitors into loyal readers that return again and again through intelligent as-you-type search, content recommendations, favoriting and membership capabilities, email sign-up, and other useful features. You can easily design captivating user journeys that lead visitors to exactly what they’re looking for. The result is higher pageviews, time-on-page, click-throughs, and return visits. As if that isn’t enough, Slickstream’s reporting gives deep insights into its performance and how your visitors are interacting on your site, far beyond what you can see in Google Analytics.\u003C\u002Fp>\n\u003Ch4>How will Slickstream help me?\u003C\u002Fh4>\n\u003Cp>Slickstream helps you to get the most out of the traffic that visits your site by turning casual visitors into loyal readers, increasing ad revenue.\u003C\u002Fp>\n\u003Cp>Customizable features complement your brand and create a more premium site experience. The powerful recommendation engine serves up the best content to your readers so they spend more time on your site. Slickstream also saves you time, money and hassle from not having to rely on developers, multiple products, or other resources to do a bunch of manual site customization handled with one simple Slickstream installation.\u003C\u002Fp>\n\u003Cp>Worried about first-party data? Slickstream helps with that too! Slickstream helps you authenticate traffic and build first-party data with logged-in site visitors.\u003C\u002Fp>\n\u003Cp>Slickstream also offers an email sign-up feature that you can use to collect email addresses, but you can seamlessly use your existing email subscription method too. Slicksteam’s Highlighter feature draws attention to any element of your site you choose and has proven to significantly improve conversions.\u003C\u002Fp>\n\u003Ch4>Do You Support Languages Other Than English?\u003C\u002Fh4>\n\u003Cp>Yes we do. Our underlying recommendation technology is not English-specific, and we have already localized the Engagement Suite for German, Portuguese, Spanish, Dutch, French, Norwegian, Swedish, Croatian, Russian, Danish, Arabic, Hebrew, Japanese and more. \u003Ca href=\"https:\u002F\u002Fwww.slickstream.com\u002Fcontact\" rel=\"nofollow ugc\">Reach out to us\u003C\u002Fa> and we can confirm if we support your language too.\u003C\u002Fp>\n\u003Ch4>Where can I learn more about Slickstream?\u003C\u002Fh4>\n\u003Cp>You can find more information about Slickstream at our website: \u003Ca href=\"https:\u002F\u002Fslickstream.com\" rel=\"nofollow ugc\">https:\u002F\u002Fslickstream.com\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>How can I report security bugs?\u003C\u002Fh4>\n\u003Cp>You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team helps validate, triage and handle any security vulnerabilities. \u003Ca href=\"https:\u002F\u002Fpatchstack.com\u002Fdatabase\u002Fvdp\u002Fa5ba44ba-8ef4-4d10-a395-b0589af7d09e\" rel=\"nofollow ugc\">Report a security vulnerability.\u003C\u002Fa>\u003C\u002Fp>\n","Use Slickstream to upgrade your site search. Get beautiful as-you-type search, relevant content recommendations, user favorites and more!",2000,57799,11,"2025-09-25T15:54:00.000Z","5.2.0","7.4.0",[162,163,4,164,165],"bookmarks","engagement","recommendations","search","https:\u002F\u002Fslickstream.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fslick-engagement.3.0.1.zip",98,"2025-06-27 00:00:00",{"slug":171,"name":172,"version":173,"author":174,"author_profile":175,"description":176,"short_description":177,"active_installs":178,"downloaded":179,"rating":107,"num_ratings":180,"last_updated":181,"tested_up_to":110,"requires_at_least":17,"requires_php":135,"tags":182,"homepage":184,"download_link":185,"security_score":107,"vuln_count":120,"unpatched_count":120,"last_vuln_date":37,"fetched_at":30},"my-admin-bookmarks","Admin Bookmarks","2.0.0","bradvin","https:\u002F\u002Fprofiles.wordpress.org\u002Fbradvin\u002F","\u003Cp>This plugin allows you to easily bookmark\u002Ffavorite posts, pages and custom post types. When you ‘star’ a post a shortcut link will appear in the admin menu.\u003Cbr \u002F>\nUse this plugin if you constantly find yourself editing the same posts or pages, and are sick of showing the list of posts first, then finding the post, then clicking edit.\u003C\u002Fp>\n\u003Cp>\u003Cem>Steps to use\u003C\u002Fem>\u003C\u002Fp>\n\u003Col>\n\u003Cli>Go to Pages\u003C\u002Fli>\n\u003Cli>Click the Star icon on a page.\u003C\u002Fli>\n\u003Cli>Your page is now bookmarked!\u003C\u002Fli>\n\u003Cli>Repeat for other pages you always edit.\u003C\u002Fli>\n\u003Cli>Save time!\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cem>Plugin Features\u003C\u002Fem>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Intuitive interface to bookmark posts using a star icon.\u003C\u002Fli>\n\u003Cli>Zero settings! Activate and enjoy.\u003C\u002Fli>\n\u003Cli>Works with posts, pages and any custom post types.\u003C\u002Fli>\n\u003Cli>Dashboard widget listing all bookmarks.\u003C\u002Fli>\n\u003Cli>Setting a bookmark is done in realtime with no page reload.\u003C\u002Fli>\n\u003Cli>Bookmarks are added to the admin menu for quick access under a “Bookmarks” menu item.\u003C\u002Fli>\n\u003Cli>Adds a Bookmarks view\u002Ffilter to the listing pages.\u003C\u002Fli>\n\u003Cli>Bookmark shortcuts are also grouped by post type within the WordPress admin bar.\u003C\u002Fli>\n\u003Cli>Optional “Bookmark Title” quick edit field to customize menu labels\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cem>Filters\u003C\u002Fem>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>admin_bookmarks_post_types\u003C\u002Fcode> – Filter to scope bookmarks to specific post types\u003C\u002Fli>\n\u003Cli>\u003Ccode>admin_bookmarks_untitled_label\u003C\u002Fcode> – Filter to customize the untitled label\u003C\u002Fli>\n\u003Cli>\u003Ccode>admin_bookmark_feature-dashboard_widget\u003C\u002Fcode> – Filter to disable the dashboard widget\u003C\u002Fli>\n\u003Cli>\u003Ccode>admin_bookmark_feature-quick-edit\u003C\u002Fcode> – Filter to disable the quick edit feature\u003C\u002Fli>\n\u003Cli>\u003Ccode>admin_bookmark_feature-view\u003C\u002Fcode> – Filter to disable the view feature\u003C\u002Fli>\n\u003Cli>\u003Ccode>admin_bookmark_feature-admin-bar\u003C\u002Fcode> – Filter to disable the admin bar feature\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>To disable a feature, add a small bit of custom code to your theme’s \u003Ccode>functions.php\u003C\u002Fcode> file:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_filter( 'admin_bookmark_feature-dashboard_widget', '__return_false' );\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Bookmark your favorite posts, pages or custom post types within the WordPress admin",500,6676,9,"2025-12-04T08:48:00.000Z",[183,20,4],"admin","http:\u002F\u002Ffooplugins.com\u002Fplugins\u002Fadmin-bookmarks","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmy-admin-bookmarks.2.0.0.zip",{"slug":187,"name":188,"version":189,"author":190,"author_profile":191,"description":192,"short_description":193,"active_installs":194,"downloaded":195,"rating":196,"num_ratings":27,"last_updated":197,"tested_up_to":198,"requires_at_least":199,"requires_php":135,"tags":200,"homepage":202,"download_link":203,"security_score":146,"vuln_count":120,"unpatched_count":120,"last_vuln_date":37,"fetched_at":30},"dbwd-bookmark-page","DBWD Bookmark Page","4.2","Debra Berube","https:\u002F\u002Fprofiles.wordpress.org\u002Fdebra-berube\u002F","\u003Col>\n\u003Cli>Adds a “Bookmark this Page” button to your header WITHOUT editing your theme – Firefox and IE tested.\u003C\u002Fli>\n\u003Cli>Encourages your visitors to actually Bookmark your page – increases return visits.\u003C\u002Fli>\n\u003Cli>When the Button is pressed the browsers “Add Bookmark” function is opened for the user.\u003C\u002Fli>\n\u003Cli>Clean Admin Interface allows button selection and placement.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Benefits\u003C\u002Fh4>\n\u003Cp>Encourages your visitors to actually Bookmark your page.\u003C\u002Fp>\n\u003Ch4>Example usage\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Select a Button to best match your header area or link to your own (URL).\u003C\u002Fli>\n\u003Cli>Select Top Left or Top Right to orient the selected Button to that upper corner.\u003C\u002Fli>\n\u003Cli>Set the Down Distance from the Buttons top (Y co-ordinate in pixels).\u003C\u002Fli>\n\u003Cli>Set the Across Distance from the Buttons edge (X co-ordinate in pixels).\u003C\u002Fli>\n\u003Cli>If Button fails to appear, or interferes with menus, adjust the z-Index.\u003C\u002Fli>\n\u003Cli>Click “Save Changes” to activate the selected Bookmark Button on your site.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Other DBWD Products and Upgrades\u003C\u002Fh4>\n\u003Cp>DBWD offers many WordPress Plugins and Plugin Upgrades. To check them out please go to our Software Product Store…\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Fsoftware.tghosting.net\" rel=\"nofollow ugc\">DBWD Software Products and Upgrades Store\u003C\u002Fa>\u003C\u002Fp>\n","Adds a \"Bookmark this Page\" button to your header WITHOUT editing your theme - Firefox and IE tested.",30,9069,66,"2013-12-17T16:50:00.000Z","3.7.41","2.8",[20,162,21,4,201],"header","http:\u002F\u002Fsoftware.tghosting.net\u002F?page_id=9","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdbwd-bookmark-page.4.3.zip",{"attackSurface":205,"codeSignals":335,"taintFlows":415,"riskAssessment":416,"analyzedAt":433},{"hooks":206,"ajaxHandlers":274,"restRoutes":309,"shortcodes":310,"cronEvents":332,"entryPointCount":333,"unprotectedCount":334},[207,213,216,220,223,227,231,235,238,241,247,250,253,256,259,262,265,269],{"type":208,"name":209,"callback":210,"file":211,"line":212},"action","admin_enqueue_scripts","adminStyles","app\\Activation\\Dependencies.php",32,{"type":208,"name":209,"callback":214,"file":211,"line":215},"adminScripts",33,{"type":208,"name":217,"callback":218,"file":211,"line":219},"wp_enqueue_scripts","frontendStyles",34,{"type":208,"name":217,"callback":221,"file":211,"line":222},"frontendScripts",35,{"type":208,"name":224,"callback":224,"file":225,"line":226},"init","app\\Bootstrap.php",20,{"type":208,"name":228,"callback":229,"file":225,"line":230},"admin_init","adminInit",21,{"type":208,"name":232,"callback":233,"file":225,"line":234},"plugins_loaded","addLocalization",23,{"type":208,"name":228,"callback":236,"file":237,"line":215},"registerSettings","app\\Config\\Settings.php",{"type":208,"name":239,"callback":240,"file":237,"line":219},"admin_menu","registerSettingsPage",{"type":242,"name":243,"callback":244,"file":245,"line":246},"filter","favorites\u002Fauthentication_modal_content","wptexturize","app\\Config\\SettingsRepository.php",136,{"type":242,"name":243,"callback":248,"file":245,"line":249},"convert_smilies",137,{"type":242,"name":243,"callback":251,"file":245,"line":252},"convert_chars",138,{"type":242,"name":243,"callback":254,"file":245,"line":255},"wpautop",139,{"type":242,"name":243,"callback":257,"file":245,"line":258},"prepend_attachment",140,{"type":242,"name":243,"callback":260,"file":245,"line":261},"shortcode_unautop",141,{"type":242,"name":243,"callback":263,"file":245,"line":264},"do_shortcode",142,{"type":242,"name":266,"callback":267,"file":268,"line":194},"the_content","filterContent","app\\Entities\\Post\\PostHooks.php",{"type":208,"name":270,"callback":271,"file":272,"line":273},"add_meta_boxes","favoriteCountBox","app\\Entities\\Post\\PostMeta.php",17,[275,282,283,286,287,291,293,297,299,302,303,307],{"action":276,"nopriv":277,"callback":278,"hasNonce":279,"hasCapCheck":279,"file":280,"line":281},"favorites_favorite",true,"favoriteButton",false,"app\\Events\\RegisterPublicEvents.php",16,{"action":276,"nopriv":279,"callback":278,"hasNonce":279,"hasCapCheck":279,"file":280,"line":273},{"action":284,"nopriv":277,"callback":285,"hasNonce":279,"hasCapCheck":279,"file":280,"line":226},"favorites_array","favoritesArray",{"action":284,"nopriv":279,"callback":285,"hasNonce":279,"hasCapCheck":279,"file":280,"line":230},{"action":288,"nopriv":277,"callback":289,"hasNonce":279,"hasCapCheck":279,"file":280,"line":290},"favorites_clear","clearFavorites",24,{"action":288,"nopriv":279,"callback":289,"hasNonce":279,"hasCapCheck":279,"file":280,"line":292},25,{"action":294,"nopriv":277,"callback":295,"hasNonce":279,"hasCapCheck":279,"file":280,"line":296},"favorites_totalcount","favoriteCount",28,{"action":294,"nopriv":279,"callback":295,"hasNonce":279,"hasCapCheck":279,"file":280,"line":298},29,{"action":300,"nopriv":277,"callback":301,"hasNonce":279,"hasCapCheck":279,"file":280,"line":212},"favorites_list","favoriteList",{"action":300,"nopriv":279,"callback":301,"hasNonce":279,"hasCapCheck":279,"file":280,"line":215},{"action":304,"nopriv":277,"callback":305,"hasNonce":279,"hasCapCheck":279,"file":280,"line":306},"favorites_cookie_consent","cookiesConsented",36,{"action":304,"nopriv":279,"callback":305,"hasNonce":279,"hasCapCheck":279,"file":280,"line":308},37,[],[311,316,319,322,325,328],{"tag":312,"callback":313,"file":314,"line":315},"favorite_button","renderView","app\\API\\Shortcodes\\ButtonShortcode.php",14,{"tag":317,"callback":313,"file":318,"line":315},"clear_favorites_button","app\\API\\Shortcodes\\ClearFavoritesShortcode.php",{"tag":320,"callback":313,"file":321,"line":315},"favorite_count","app\\API\\Shortcodes\\FavoriteCountShortcode.php",{"tag":323,"callback":313,"file":324,"line":315},"post_favorites","app\\API\\Shortcodes\\PostFavoritesShortcode.php",{"tag":326,"callback":313,"file":327,"line":226},"user_favorite_count","app\\API\\Shortcodes\\UserFavoriteCount.php",{"tag":329,"callback":313,"file":330,"line":331},"user_favorites","app\\API\\Shortcodes\\UserFavoritesShortcode.php",22,[],18,12,{"dangerousFunctions":336,"sqlUsage":337,"outputEscaping":339,"fileOperations":28,"externalRequests":120,"nonceChecks":120,"capabilityChecks":120,"bundledLibraries":414},[],{"prepared":119,"raw":120,"locations":338},[],{"escaped":340,"rawEcho":308,"locations":341},42,[342,346,348,350,352,353,355,357,359,361,363,365,367,369,371,372,374,376,378,380,382,384,386,388,390,392,394,396,398,400,402,404,406,408,410,411,412],{"file":343,"line":344,"context":345},"app\\API\\functions.php",39,"raw output",{"file":343,"line":347,"context":345},73,{"file":343,"line":349,"context":345},128,{"file":343,"line":351,"context":345},163,{"file":343,"line":75,"context":345},{"file":343,"line":354,"context":345},229,{"file":343,"line":356,"context":345},253,{"file":343,"line":358,"context":345},274,{"file":360,"line":347,"context":345},"app\\Entities\\Post\\AdminColumns.php",{"file":272,"line":362,"context":345},44,{"file":272,"line":364,"context":345},45,{"file":272,"line":366,"context":345},46,{"file":368,"line":281,"context":345},"app\\Views\\settings\\settings-display.php",{"file":368,"line":370,"context":345},19,{"file":368,"line":298,"context":345},{"file":368,"line":373,"context":345},38,{"file":368,"line":375,"context":345},47,{"file":368,"line":377,"context":345},56,{"file":368,"line":379,"context":345},96,{"file":368,"line":381,"context":345},105,{"file":368,"line":383,"context":345},131,{"file":368,"line":385,"context":345},146,{"file":368,"line":387,"context":345},165,{"file":368,"line":389,"context":345},175,{"file":368,"line":391,"context":345},207,{"file":368,"line":393,"context":345},261,{"file":368,"line":395,"context":345},279,{"file":368,"line":397,"context":345},310,{"file":368,"line":399,"context":345},353,{"file":368,"line":401,"context":345},363,{"file":403,"line":373,"context":345},"app\\Views\\settings\\settings-general.php",{"file":403,"line":405,"context":345},53,{"file":403,"line":407,"context":345},60,{"file":409,"line":373,"context":345},"app\\Views\\settings\\settings-users.php",{"file":409,"line":340,"context":345},{"file":409,"line":347,"context":345},{"file":413,"line":119,"context":345},"app\\Views\\settings\\settings.php",[],[],{"summary":417,"deductions":418},"The 'favorites' plugin version 2.3.6 exhibits a concerning security posture, primarily due to a significant number of unprotected AJAX handlers. While the plugin demonstrates good practices in its SQL query handling by utilizing prepared statements, the lack of authorization checks on 12 out of 12 AJAX entry points creates a broad attack surface for unauthorized actions.  Furthermore, the static analysis reveals that only 53% of output is properly escaped, indicating a potential for Cross-Site Scripting (XSS) vulnerabilities.\n\nThe vulnerability history is particularly alarming. With a total of 4 known CVEs, one of which remains unpatched and is classified as high severity, the plugin has a history of severe security flaws. The common vulnerability types, including Remote File Inclusion and XSS, directly align with the static analysis findings of unprotected AJAX handlers and insufficient output escaping. This pattern suggests persistent weaknesses in input validation and privilege management within the plugin.\n\nIn conclusion, despite a positive aspect regarding prepared SQL statements, the 'favorites' plugin version 2.3.6 presents a high-risk profile. The combination of a large number of unprotected AJAX endpoints, moderate output escaping, and a history of critical and high-severity vulnerabilities, including an unpatched high-severity CVE, necessitates immediate attention and patching. The plugin's attack surface and historical trends point to potential exploitation scenarios.",[419,421,423,426,429,431],{"reason":420,"points":333},"Unpatched high severity CVE",{"reason":422,"points":130},"Unprotected AJAX handlers",{"reason":424,"points":425},"Insufficient output escaping",6,{"reason":427,"points":428},"Missing nonce checks on AJAX",8,{"reason":430,"points":428},"Missing capability checks",{"reason":432,"points":334},"Medium severity CVEs (3)","2026-03-16T17:39:34.784Z",{"wat":435,"direct":447},{"assetPaths":436,"generatorPatterns":442,"scriptPaths":443,"versionParams":444},[437,438,439,440,441],"\u002Fwp-content\u002Fplugins\u002Ffavorites\u002Fassets\u002Fcss\u002Ffavorites-admin.css","\u002Fwp-content\u002Fplugins\u002Ffavorites\u002Fassets\u002Fjs\u002Ffavorites-admin.min.js","\u002Fwp-content\u002Fplugins\u002Ffavorites\u002Fassets\u002Fcss\u002Ffavorites.css","\u002Fwp-content\u002Fplugins\u002Ffavorites\u002Fassets\u002Fjs\u002Ffavorites.js","\u002Fwp-content\u002Fplugins\u002Ffavorites\u002Fassets\u002Fjs\u002Ffavorites.min.js",[],[441,440],[445,446,4],"favorites-admin","simple-favorites",{"cssClasses":448,"htmlComments":450,"htmlAttributes":454,"restEndpoints":458,"jsGlobals":459,"shortcodeOutput":461},[449],"btn-favorite",[451,452,453],"This program is free software; you can redistribute it and\u002For modify\n    it under the terms of the GNU General Public License, version 2, as \n    published by the Free Software Foundation.","This program is distributed in the hope that it will be useful,\n    but WITHOUT ANY WARRANTY; without even the implied warranty of\n    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the\n    GNU General Public License for more details.","You should have received a copy of the GNU General Public License\n    along with this program; if not, write to the Free Software\n    Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA",[455,456,457],"data-id","data-site-id","data-group-id",[],[460],"favorites_data",[462,463,464],"[favorite_button]","[clear_favorites_button]","[favorite_count]"]