[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8N_ZE5WHMFhFYf--cCZOQ6M5ZAMOByjyTdsOn-WY4GM":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":15,"tags":18,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":35,"analysis":132,"fingerprints":708},"flexible-slider","Flexible Slider","1.0","youpick","https:\u002F\u002Fprofiles.wordpress.org\u002Fyoupick\u002F","\u003Cp>Flexible slider is a responsive and touch-enabled image slider and it is available as a WordPress plugin. Please take a look at it in your mobile device or try to re-size your browser to see the effect.\u003C\u002Fp>\n\u003Cp>Demo webiste: http:\u002F\u002Fyoupick.biz\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Touch navigation for mobile and desktop.\u003C\u002Fli>\n\u003Cli>SEO optimized.\u003C\u002Fli>\n\u003Cli>Responsive layout down to mobile.\u003C\u002Fli>\n\u003Cli>Multiple sliders per page is allowed, even with different skins.\u003C\u002Fli>\n\u003Cli>6 unique skins.\u003C\u002Fli>\n\u003Cli>Slider files are included only to posts where slider is used.\u003C\u002Fli>\n\u003Cli>Smart autoplay.\u003C\u002Fli>\n\u003Cli>Permalinks that allows linking to any slide from URL\u003C\u002Fli>\n\u003Cli>Optional keyboard navigation and much more\u003C\u002Fli>\n\u003C\u002Ful>\n","A jquery responsive touch-enabled slider for Wordpress from YouPick",10,5468,88,5,"","3.5.2","3.0",[19,20,21,22],"content-slider","flexible","gallery","jquery","http:\u002F\u002Fyoupick.biz","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflexible-slider.zip",100,0,null,"2026-03-15T10:48:56.248Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},1,30,94,"2026-04-05T02:29:28.791Z",[36,56,75,93,113],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":46,"num_ratings":11,"last_updated":47,"tested_up_to":48,"requires_at_least":49,"requires_php":15,"tags":50,"homepage":52,"download_link":53,"security_score":54,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":55},"jquery-lightbox-for-native-galleries","jQuery Lightbox For Native Galleries","3.2.2","Automattic","https:\u002F\u002Fprofiles.wordpress.org\u002Fautomattic\u002F","\u003Cp>\u003Cstrong>DISCONTINUATION NOTICE:\u003C\u002Fstrong> Development on this plugin has ceased in favor of the carousel module in the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fjetpack\u002F\" rel=\"ugc\">Jetpack plugin\u003C\u002Fa>. I recommend you use that plugin instead — it’s much more full featured.\u003C\u002Fp>\n\u003Cp>Makes the native WordPress galleries use a lightbox script called \u003Ca href=\"http:\u002F\u002Fcolorpowered.com\u002Fcolorbox\u002F\" rel=\"nofollow ugc\">ColorBox\u003C\u002Fa> to display the fullsize images right there in the page. No modifications required.\u003C\u002Fp>\n\u003Cp>You can also make single non-\u003Ccode>[gallery]\u003C\u002Fcode> images use the lightbox by giving their links a class of “lightbox”, like so:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Ca href=\"...\" class=\"lightbox\">\u003Cimg src=\"...\" alt=\"...\" \u002F>\u003C\u002Fa>\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Makes the native WordPress galleries use a lightbox script called ColorBox to display the fullsize images.",5000,225633,80,"2017-11-28T08:58:00.000Z","3.4.2","2.6",[21,22,51],"lightbox","http:\u002F\u002Fwww.viper007bond.com\u002Fwordpress-plugins\u002Fjquery-lightbox-for-native-galleries\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjquery-lightbox-for-native-galleries.zip",85,"2026-03-15T15:16:48.613Z",{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":64,"downloaded":65,"rating":66,"num_ratings":67,"last_updated":68,"tested_up_to":15,"requires_at_least":69,"requires_php":15,"tags":70,"homepage":73,"download_link":74,"security_score":54,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":55},"cleaner-gallery","Cleaner Gallery","1.1.0","Justin Tadlock","https:\u002F\u002Fprofiles.wordpress.org\u002Fgreenshady\u002F","\u003Cp>This plugin was written to take care of the invalid HTML that WordPress produces when using the \u003Ccode>[gallery]\u003C\u002Fcode> shortcode.\u003C\u002Fp>\n\u003Cp>It does a bit more than that though.  It will integrate with many Lightbox-type scripts and allow you to do much cooler things with your galleries.  Plus, it has a couple of extra options that you can play around with.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Uses HTML5 \u003Ccode>\u003Cfig>\u003C\u002Fcode> and \u003Ccode>\u003Cfigcaption>\u003C\u002Fcode> elements.\u003C\u002Fli>\n\u003Cli>Integrates with \u003Ca href=\"http:\u002F\u002Fschema.org\" rel=\"nofollow ugc\">Schema.org microdata\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Uses the \u003Ccode>aria-describedby\u003C\u002Fcode> attribute to make images + captions more accessible to users with disabilities.\u003C\u002Fli>\n\u003Cli>Validates the invalid code that WordPress spits out.\u003C\u002Fli>\n\u003Cli>Several options on how you want your gallery images.\u003C\u002Fli>\n\u003Cli>Allows multiple galleries in a single post.\u003C\u002Fli>\n\u003Cli>Ability to set the number of images shown in each gallery.\u003C\u002Fli>\n\u003Cli>Ability to exclude or include any images from your gallery.\u003C\u002Fli>\n\u003Cli>Doesn’t load any extra CSS or JavaScript unless you choose to do so.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Integrates with 18 different Lightbox-type scripts\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.huddletogether.com\u002Fprojects\u002Flightbox2\u002F\" rel=\"nofollow ugc\">Lightbox 2\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.digitalia.be\u002Fsoftware\u002Fslimbox\" rel=\"nofollow ugc\">Slimbox\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.digitalia.be\u002Fsoftware\u002Fslimbox2\" rel=\"nofollow ugc\">Slimbox 2\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fjquery.com\u002Fdemo\u002Fthickbox\u002F\" rel=\"nofollow ugc\">Thickbox\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fdolem.com\u002Flytebox\u002F\" rel=\"nofollow ugc\">Lytebox\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Forangoo.com\u002Flabs\u002FGreyBox\u002F\" rel=\"nofollow ugc\">Greybox\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.nickstakenburg.com\u002Fprojects\u002Flightview\u002F\" rel=\"nofollow ugc\">Lightview\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.balupton.com\u002Fsandbox\u002Fjquery_lightbox\u002F\" rel=\"nofollow ugc\">jQuery Lightbox Plugin\u003C\u002Fa> (balupton edition)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fleandrovieira.com\u002Fprojects\u002Fjquery\u002Flightbox\u002F\" rel=\"nofollow ugc\">jQuery Lightbox Plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.laptoptips.ca\u002Fprojects\u002Fwp-shutter-reloaded\u002F\" rel=\"nofollow ugc\">Shutter Reloaded\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fmjijackson.com\u002Fshadowbox\u002Findex.html\" rel=\"nofollow ugc\">Shadowbox\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Ffancy.klade.lv\" rel=\"nofollow ugc\">FancyBox\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fgithub.com\u002Fkrewenki\u002Fjquery-lightbox\u002Ftree\u002Fmaster\" rel=\"nofollow ugc\">jQuery Lightbox\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.stickmanlabs.com\u002Flightwindow\" rel=\"nofollow ugc\">LightWindow\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.cabel.name\u002F2008\u002F02\u002Ffancyzoom-10.html\" rel=\"nofollow ugc\">FancyZoom\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Frandomous.com\u002Ffloatbox\u002Fhome\" rel=\"nofollow ugc\">Floatbox\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fcolorpowered.com\u002Fcolorbox\" rel=\"nofollow ugc\">Colorbox\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.no-margin-for-errors.com\u002Fprojects\u002Fprettyphoto-jquery-lightbox-clone\" rel=\"nofollow ugc\">prettyPhoto\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Professional Support\u003C\u002Fh3>\n\u003Cp>If you need professional plugin support from me, the plugin author, you can access the support forums at \u003Ca href=\"http:\u002F\u002Fthemehybrid.com\u002Fsupport\" rel=\"nofollow ugc\">Theme Hybrid\u003C\u002Fa>, which is a professional WordPress help\u002Fsupport site where I handle support for all my plugins and themes for a community of 40,000+ users (and growing).\u003C\u002Fp>\n\u003Ch3>Plugin Development\u003C\u002Fh3>\n\u003Cp>If you’re a theme author, plugin author, or just a code hobbyist, you can follow the development of this plugin on it’s \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fjustintadlock\u002Fcleaner-gallery\" rel=\"nofollow ugc\">GitHub repository\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Donations\u003C\u002Fh3>\n\u003Cp>Yes, I do accept donations.  If you want to buy me a beer or whatever, you can do so from my \u003Ca href=\"http:\u002F\u002Fthemehybrid.com\u002Fdonate\" rel=\"nofollow ugc\">donations page\u003C\u002Fa>.  I appreciate all donations, no matter the size.  Further development of this plugin is not contingent on donations, but they are always a nice incentive.\u003C\u002Fp>\n","A cleaner WordPress [gallery] that integrates with multiple Lightbox-type scripts.",2000,216255,96,23,"2017-11-28T16:13:00.000Z","3.9",[21,71,22,51,72],"images","slimbox","http:\u002F\u002Fthemehybrid.com\u002Fplugins\u002Fcleaner-gallery","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcleaner-gallery.1.1.0.zip",{"slug":76,"name":77,"version":78,"author":79,"author_profile":80,"description":81,"short_description":82,"active_installs":64,"downloaded":83,"rating":25,"num_ratings":84,"last_updated":85,"tested_up_to":86,"requires_at_least":87,"requires_php":15,"tags":88,"homepage":91,"download_link":92,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":55},"wp-featherlight-disabled","WP Featherlight Disabled","1.0.4","treeflips","https:\u002F\u002Fprofiles.wordpress.org\u002Ftreeflips\u002F","\u003Cp>This minimal WordPress lightbox plugin adds high performance, responsive jQuery lightbox functionality to your images. When standard WordPress images\u002Fgalleries are clicked, the background fades out into black as images display in lightbox popup. Galleries can be navigated with on-screen arrows, touchscreen swipes, or pressing arrows keys.\u003C\u002Fp>\n\u003Cp>In order for WordPress images and galleries to be lightboxed:\u003Cbr \u002F>\n– You must select the “Media File” option when choosing where thumbnails should link. You can also select the “Custom Link” option if it links directly to an image file. This should work for any image file, even if it’s hosted on another website.\u003Cbr \u002F>\n– Enable on each post by checking “Enable lightbox” on the WP Featherlight settings.\u003Cbr \u002F>\n– You can also lightbox videos, iframes, and ajax content by adding data attributes to your content. For more details on custom content loading, check out the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fnoelboss\u002Ffeatherlight\u002F#usage\" rel=\"nofollow ugc\">featherlight documentation\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>My plugin is simply a forked version of the original \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fwp-featherlight\" rel=\"ugc\">WP Featherlight plugin\u003C\u002Fa>. Only difference is the original loads the featherlight CSS\u002FJS on every page whereas mine only loads when you manually enable. Big thanks to Yin and Walter for contributing.\u003C\u002Fp>\n\u003Ch4>Features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Ultra-lightweight – even more lightweight than the original WP Featherlight since the lightbox CSS\u002FJS is not loaded automatically.\u003C\u002Fli>\n\u003Cli>Manual activation – to enable lightbox functionality, simply click the checkbox in your post settings.\u003C\u002Fli>\n\u003Cli>Retains WP Featherlight features – has all the same features and filters as the original WP Featherlight plugin (up to version 1.3.3)\u003C\u002Fli>\n\u003Cli>Supports WEBP image format.\u003C\u002Fli>\n\u003C\u002Ful>\n","The most lightweight WordPress lightbox plugin...and the featherlight CSS\u002FJS (only 7kb) is automatically disabled unless you manually enable within ea …",17115,3,"2025-05-14T09:05:00.000Z","6.8.5","4.0",[21,89,22,90,51],"image","jquery-lightbox","https:\u002F\u002Fwpjohnny.com\u002Fwp-featherlight-disabled\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-featherlight-disabled.1.0.4.zip",{"slug":94,"name":95,"version":96,"author":97,"author_profile":98,"description":99,"short_description":100,"active_installs":101,"downloaded":102,"rating":66,"num_ratings":103,"last_updated":104,"tested_up_to":105,"requires_at_least":106,"requires_php":15,"tags":107,"homepage":111,"download_link":112,"security_score":54,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":55},"jquery-masonry-image-gallery","jQuery Masonry Image Gallery","3.0.2","phoenixMagoo","https:\u002F\u002Fprofiles.wordpress.org\u002Fphoenixmagoo\u002F","\u003Cp>\u003Ca href=\"http:\u002F\u002Fwillrees.com\u002Fjquery-masonry-wordpress-gallery-plugin-demo\u002F?utm_source=wordpressorg&utm_medium=link&utm_campaign=jmig\" title=\"See Demo\" rel=\"nofollow ugc\">See Demo\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Adds a Masonry layout to all galleries that are using the WordPress [gallery] shortcode. Looks best on galleries that are not using 1:1 ratio thumbnails.\u003C\u002Fp>\n\u003Cp>Now includes optional \u003Cstrong>Lazy Load for larger galleries\u003C\u002Fstrong> and hover captions!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Please note:\u003C\u002Fstrong> By default this plugin includes CSS that will overwrite the existing gallery layout. However, you can turn off some or all of the jMIG layout CSS on the options page under Settings.\u003C\u002Fp>\n\u003Cp>This plugin also includes 1 CSS file that is for animation purposes only (Chrome, Firefox, Safari and IE 10+). The entire gallery will fade in using a CSS3 animation once all the images have loaded. IE 8 and IE 9 will work, but will not fade in.\u003C\u002Fp>\n","Adds a Masonry layout to all built-in WordPress Galleries.",1000,72698,31,"2017-11-28T19:21:00.000Z","4.7.32","3.5",[21,108,109,110],"jquery-masonry","lazy-load","masonry","http:\u002F\u002Fwillrees.com\u002F2013\u002F02\u002Fjquery-masonry-and-native-wordpress-image-galleries\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjquery-masonry-image-gallery.3.0.2.zip",{"slug":114,"name":115,"version":116,"author":117,"author_profile":118,"description":119,"short_description":120,"active_installs":101,"downloaded":121,"rating":122,"num_ratings":123,"last_updated":124,"tested_up_to":125,"requires_at_least":126,"requires_php":15,"tags":127,"homepage":130,"download_link":131,"security_score":54,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":55},"w3dev-fancybox","fancyBox 3 for WordPress","1.2.4","w3dev","https:\u002F\u002Fprofiles.wordpress.org\u002Fw3dev\u002F","\u003Cp>Seamlessly integrates the fancyBox 3 script into your WordPress installation: Upload, activate, and you’re done. Additional configuration is optional.\u003C\u002Fp>\n\u003Cp>You can easily customize almost anything you can think about fancyBox lightbox. By default, the plugin will use jQuery to apply fancyBox to ANY thumbnails that link directly to an image. It will also automatically convert WordPress image galleries into fancyBox galleries.\u003C\u002Fp>\n\u003Cp>For Inline content linking\u003Cbr \u002F>\n– Create a link to any hidden or visible div with an ID attribate, and the plugin will transform the link and enable it for fancyBox usage.\u003Cbr \u002F>\n– Note: this may cause a conflict if your page or website is using a smooth scrolling function to jump between page sections!\u003C\u002Fp>\n\u003Cp>In upcoming versions, additional functionality for ajax calls and iframe data will be implemented.\u003C\u002Fp>\n","Seamlessly integrates the fancyBox 3 script into your WordPress installation: Upload, activate, and you're done. Additional configuration is opti …",15612,98,7,"2023-11-06T22:53:00.000Z","6.3.8","3.4",[128,129,21,22,51],"fancybox","fancybox-3","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fw3dev-fancybox\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fw3dev-fancybox.zip",{"attackSurface":133,"codeSignals":161,"taintFlows":621,"riskAssessment":694,"analyzedAt":707},{"hooks":134,"ajaxHandlers":154,"restRoutes":155,"shortcodes":156,"cronEvents":160,"entryPointCount":31,"unprotectedCount":26},[135,141,145,149],{"type":136,"name":137,"callback":138,"file":139,"line":140},"action","admin_menu","fslider_menu","flexibleslider.php",24,{"type":136,"name":142,"callback":143,"file":139,"line":144},"admin_enqueue_scripts","admin_scripts",26,{"type":136,"name":146,"callback":147,"file":139,"line":148},"wp_enqueue_scripts","front_cripts",28,{"type":136,"name":150,"callback":151,"file":152,"line":153},"wp_footer","scripts","html.php",52,[],[],[157],{"tag":158,"callback":159,"file":139,"line":32},"flexibleslider","fslider_shortcode",[],{"dangerousFunctions":162,"sqlUsage":163,"outputEscaping":173,"fileOperations":619,"externalRequests":26,"nonceChecks":26,"capabilityChecks":26,"bundledLibraries":620},[],{"prepared":164,"raw":165,"locations":166},6,2,[167,170],{"file":139,"line":168,"context":169},151,"$wpdb->get_results() with variable interpolation",{"file":139,"line":171,"context":172},451,"$wpdb->query() with variable interpolation",{"escaped":26,"rawEcho":174,"locations":175},232,[176,178,180,182,183,185,187,189,191,193,195,197,199,201,203,205,207,209,211,213,215,217,219,221,223,225,227,229,231,233,235,237,239,241,243,245,247,249,251,253,255,257,259,261,263,265,267,269,271,273,275,277,279,281,283,285,287,289,291,293,295,297,299,301,303,305,307,309,311,313,315,317,319,321,323,325,326,327,329,331,333,335,337,339,341,343,345,347,349,351,353,355,357,359,361,363,365,367,369,371,373,375,377,379,381,383,385,387,389,391,392,393,395,397,399,400,401,403,405,407,409,411,413,414,415,417,419,421,423,425,427,429,431,433,435,437,439,441,443,445,447,449,451,453,455,457,459,461,463,465,467,469,471,473,474,475,477,479,481,482,483,485,487,489,491,493,495,497,499,501,503,505,507,509,511,513,515,517,519,521,523,525,527,529,531,533,535,537,539,541,543,545,547,549,551,553,555,557,558,559,561,563,565,567,569,570,572,575,577,579,581,583,584,586,587,589,591,593,595,597,598,599,601,603,605,607,608,610,612,613,615,617],{"file":139,"line":122,"context":177},"raw output",{"file":139,"line":179,"context":177},144,{"file":139,"line":181,"context":177},205,{"file":152,"line":168,"context":177},{"file":152,"line":184,"context":177},152,{"file":152,"line":186,"context":177},153,{"file":152,"line":188,"context":177},154,{"file":152,"line":190,"context":177},155,{"file":152,"line":192,"context":177},156,{"file":152,"line":194,"context":177},158,{"file":152,"line":196,"context":177},160,{"file":152,"line":198,"context":177},161,{"file":152,"line":200,"context":177},164,{"file":152,"line":202,"context":177},165,{"file":152,"line":204,"context":177},166,{"file":152,"line":206,"context":177},169,{"file":152,"line":208,"context":177},170,{"file":152,"line":210,"context":177},171,{"file":152,"line":212,"context":177},177,{"file":152,"line":214,"context":177},178,{"file":152,"line":216,"context":177},179,{"file":152,"line":218,"context":177},182,{"file":152,"line":220,"context":177},183,{"file":152,"line":222,"context":177},184,{"file":152,"line":224,"context":177},187,{"file":152,"line":226,"context":177},193,{"file":152,"line":228,"context":177},200,{"file":152,"line":230,"context":177},210,{"file":152,"line":232,"context":177},252,{"file":152,"line":234,"context":177},253,{"file":152,"line":236,"context":177},254,{"file":152,"line":238,"context":177},255,{"file":152,"line":240,"context":177},256,{"file":152,"line":242,"context":177},257,{"file":152,"line":244,"context":177},259,{"file":152,"line":246,"context":177},261,{"file":152,"line":248,"context":177},262,{"file":152,"line":250,"context":177},265,{"file":152,"line":252,"context":177},266,{"file":152,"line":254,"context":177},267,{"file":152,"line":256,"context":177},270,{"file":152,"line":258,"context":177},271,{"file":152,"line":260,"context":177},272,{"file":152,"line":262,"context":177},278,{"file":152,"line":264,"context":177},279,{"file":152,"line":266,"context":177},280,{"file":152,"line":268,"context":177},283,{"file":152,"line":270,"context":177},284,{"file":152,"line":272,"context":177},285,{"file":152,"line":274,"context":177},288,{"file":152,"line":276,"context":177},294,{"file":152,"line":278,"context":177},301,{"file":152,"line":280,"context":177},314,{"file":152,"line":282,"context":177},356,{"file":152,"line":284,"context":177},357,{"file":152,"line":286,"context":177},358,{"file":152,"line":288,"context":177},359,{"file":152,"line":290,"context":177},360,{"file":152,"line":292,"context":177},361,{"file":152,"line":294,"context":177},363,{"file":152,"line":296,"context":177},365,{"file":152,"line":298,"context":177},366,{"file":152,"line":300,"context":177},370,{"file":152,"line":302,"context":177},371,{"file":152,"line":304,"context":177},372,{"file":152,"line":306,"context":177},378,{"file":152,"line":308,"context":177},379,{"file":152,"line":310,"context":177},380,{"file":152,"line":312,"context":177},383,{"file":152,"line":314,"context":177},388,{"file":152,"line":316,"context":177},398,{"file":152,"line":318,"context":177},404,{"file":152,"line":320,"context":177},412,{"file":152,"line":322,"context":177},420,{"file":152,"line":324,"context":177},429,{"file":152,"line":324,"context":177},{"file":152,"line":324,"context":177},{"file":152,"line":328,"context":177},430,{"file":152,"line":330,"context":177},434,{"file":152,"line":332,"context":177},435,{"file":152,"line":334,"context":177},477,{"file":152,"line":336,"context":177},478,{"file":152,"line":338,"context":177},479,{"file":152,"line":340,"context":177},480,{"file":152,"line":342,"context":177},481,{"file":152,"line":344,"context":177},482,{"file":152,"line":346,"context":177},484,{"file":152,"line":348,"context":177},486,{"file":152,"line":350,"context":177},487,{"file":152,"line":352,"context":177},491,{"file":152,"line":354,"context":177},492,{"file":152,"line":356,"context":177},493,{"file":152,"line":358,"context":177},505,{"file":152,"line":360,"context":177},506,{"file":152,"line":362,"context":177},507,{"file":152,"line":364,"context":177},510,{"file":152,"line":366,"context":177},515,{"file":152,"line":368,"context":177},523,{"file":152,"line":370,"context":177},531,{"file":152,"line":372,"context":177},542,{"file":152,"line":374,"context":177},543,{"file":152,"line":376,"context":177},544,{"file":152,"line":378,"context":177},545,{"file":152,"line":380,"context":177},554,{"file":152,"line":382,"context":177},555,{"file":152,"line":384,"context":177},556,{"file":152,"line":386,"context":177},557,{"file":152,"line":388,"context":177},561,{"file":152,"line":390,"context":177},562,{"file":152,"line":390,"context":177},{"file":152,"line":390,"context":177},{"file":152,"line":394,"context":177},563,{"file":152,"line":396,"context":177},572,{"file":152,"line":398,"context":177},573,{"file":152,"line":398,"context":177},{"file":152,"line":398,"context":177},{"file":152,"line":402,"context":177},574,{"file":152,"line":404,"context":177},578,{"file":152,"line":406,"context":177},584,{"file":152,"line":408,"context":177},588,{"file":152,"line":410,"context":177},597,{"file":152,"line":412,"context":177},605,{"file":152,"line":412,"context":177},{"file":152,"line":412,"context":177},{"file":152,"line":416,"context":177},606,{"file":152,"line":418,"context":177},610,{"file":152,"line":420,"context":177},614,{"file":152,"line":422,"context":177},615,{"file":152,"line":424,"context":177},671,{"file":152,"line":426,"context":177},672,{"file":152,"line":428,"context":177},673,{"file":152,"line":430,"context":177},674,{"file":152,"line":432,"context":177},675,{"file":152,"line":434,"context":177},676,{"file":152,"line":436,"context":177},678,{"file":152,"line":438,"context":177},679,{"file":152,"line":440,"context":177},687,{"file":152,"line":442,"context":177},688,{"file":152,"line":444,"context":177},689,{"file":152,"line":446,"context":177},692,{"file":152,"line":448,"context":177},697,{"file":152,"line":450,"context":177},705,{"file":152,"line":452,"context":177},713,{"file":152,"line":454,"context":177},724,{"file":152,"line":456,"context":177},725,{"file":152,"line":458,"context":177},726,{"file":152,"line":460,"context":177},727,{"file":152,"line":462,"context":177},736,{"file":152,"line":464,"context":177},737,{"file":152,"line":466,"context":177},738,{"file":152,"line":468,"context":177},739,{"file":152,"line":470,"context":177},743,{"file":152,"line":472,"context":177},744,{"file":152,"line":472,"context":177},{"file":152,"line":472,"context":177},{"file":152,"line":476,"context":177},745,{"file":152,"line":478,"context":177},754,{"file":152,"line":480,"context":177},755,{"file":152,"line":480,"context":177},{"file":152,"line":480,"context":177},{"file":152,"line":484,"context":177},756,{"file":152,"line":486,"context":177},760,{"file":152,"line":488,"context":177},766,{"file":152,"line":490,"context":177},770,{"file":152,"line":492,"context":177},779,{"file":152,"line":494,"context":177},786,{"file":152,"line":496,"context":177},792,{"file":152,"line":498,"context":177},797,{"file":152,"line":500,"context":177},803,{"file":152,"line":502,"context":177},849,{"file":152,"line":504,"context":177},850,{"file":152,"line":506,"context":177},851,{"file":152,"line":508,"context":177},852,{"file":152,"line":510,"context":177},853,{"file":152,"line":512,"context":177},854,{"file":152,"line":514,"context":177},856,{"file":152,"line":516,"context":177},857,{"file":152,"line":518,"context":177},865,{"file":152,"line":520,"context":177},870,{"file":152,"line":522,"context":177},871,{"file":152,"line":524,"context":177},874,{"file":152,"line":526,"context":177},880,{"file":152,"line":528,"context":177},885,{"file":152,"line":530,"context":177},891,{"file":152,"line":532,"context":177},896,{"file":152,"line":534,"context":177},901,{"file":152,"line":536,"context":177},910,{"file":152,"line":538,"context":177},919,{"file":152,"line":540,"context":177},929,{"file":152,"line":542,"context":177},935,{"file":152,"line":544,"context":177},940,{"file":152,"line":546,"context":177},941,{"file":152,"line":548,"context":177},942,{"file":152,"line":550,"context":177},943,{"file":152,"line":552,"context":177},946,{"file":152,"line":554,"context":177},951,{"file":152,"line":556,"context":177},952,{"file":152,"line":556,"context":177},{"file":152,"line":556,"context":177},{"file":152,"line":560,"context":177},953,{"file":152,"line":562,"context":177},956,{"file":152,"line":564,"context":177},961,{"file":152,"line":566,"context":177},970,{"file":152,"line":568,"context":177},972,{"file":152,"line":568,"context":177},{"file":152,"line":571,"context":177},976,{"file":573,"line":574,"context":177},"view.php",99,{"file":573,"line":576,"context":177},103,{"file":573,"line":578,"context":177},107,{"file":573,"line":580,"context":177},131,{"file":573,"line":582,"context":177},190,{"file":573,"line":582,"context":177},{"file":573,"line":585,"context":177},192,{"file":573,"line":226,"context":177},{"file":573,"line":588,"context":177},195,{"file":573,"line":590,"context":177},196,{"file":573,"line":592,"context":177},197,{"file":573,"line":594,"context":177},198,{"file":573,"line":596,"context":177},223,{"file":573,"line":596,"context":177},{"file":573,"line":596,"context":177},{"file":573,"line":600,"context":177},241,{"file":573,"line":602,"context":177},246,{"file":573,"line":604,"context":177},263,{"file":573,"line":606,"context":177},268,{"file":573,"line":270,"context":177},{"file":573,"line":609,"context":177},286,{"file":573,"line":611,"context":177},287,{"file":573,"line":274,"context":177},{"file":573,"line":614,"context":177},289,{"file":573,"line":616,"context":177},290,{"file":573,"line":618,"context":177},292,9,[],[622,640,650,659,678],{"entryPoint":623,"graph":624,"unsanitizedCount":31,"severity":639},"fslider_save (flexibleslider.php:105)",{"nodes":625,"edges":636},[626,631],{"id":627,"type":628,"label":629,"file":139,"line":630},"n0","source","$_POST",109,{"id":632,"type":633,"label":634,"file":139,"line":181,"wp_function":635},"n1","sink","echo() [XSS]","echo",[637],{"from":627,"to":632,"sanitized":638},false,"medium",{"entryPoint":641,"graph":642,"unsanitizedCount":31,"severity":639},"edit_form (view.php:68)",{"nodes":643,"edges":648},[644,647],{"id":627,"type":628,"label":645,"file":573,"line":646},"$_GET",72,{"id":632,"type":633,"label":634,"file":573,"line":270,"wp_function":635},[649],{"from":627,"to":632,"sanitized":638},{"entryPoint":651,"graph":652,"unsanitizedCount":31,"severity":658},"\u003Cview> (view.php:0)",{"nodes":653,"edges":656},[654,655],{"id":627,"type":628,"label":645,"file":573,"line":646},{"id":632,"type":633,"label":634,"file":573,"line":270,"wp_function":635},[657],{"from":627,"to":632,"sanitized":638},"low",{"entryPoint":660,"graph":661,"unsanitizedCount":165,"severity":677},"fslider_delete (flexibleslider.php:85)",{"nodes":662,"edges":674},[663,665,669,672],{"id":627,"type":628,"label":645,"file":139,"line":664},89,{"id":632,"type":633,"label":666,"file":139,"line":667,"wp_function":668},"query() [SQLi]",95,"query",{"id":670,"type":628,"label":671,"file":139,"line":122},"n2","$_GET['msg']",{"id":673,"type":633,"label":634,"file":139,"line":122,"wp_function":635},"n3",[675,676],{"from":627,"to":632,"sanitized":638},{"from":670,"to":673,"sanitized":638},"high",{"entryPoint":679,"graph":680,"unsanitizedCount":84,"severity":677},"\u003Cflexibleslider> (flexibleslider.php:0)",{"nodes":681,"edges":690},[682,683,684,685,686,688],{"id":627,"type":628,"label":645,"file":139,"line":664},{"id":632,"type":633,"label":666,"file":139,"line":667,"wp_function":668},{"id":670,"type":628,"label":671,"file":139,"line":122},{"id":673,"type":633,"label":634,"file":139,"line":122,"wp_function":635},{"id":687,"type":628,"label":629,"file":139,"line":630},"n4",{"id":689,"type":633,"label":634,"file":139,"line":181,"wp_function":635},"n5",[691,692,693],{"from":627,"to":632,"sanitized":638},{"from":670,"to":673,"sanitized":638},{"from":687,"to":689,"sanitized":638},{"summary":695,"deductions":696},"The \"flexible-slider\" v1.0 plugin presents a mixed security posture.  While it boasts no known CVEs and a relatively small attack surface consisting of a single shortcode, significant concerns arise from its code analysis.  The complete lack of output escaping is a critical weakness, meaning any dynamic content rendered by the plugin is highly susceptible to Cross-Site Scripting (XSS) attacks. Additionally, the taint analysis reveals two high-severity flows with unsanitized paths, indicating potential for malicious data to be processed without proper validation. The absence of nonce and capability checks, while not directly tied to specific entry points identified, amplifies the risk associated with these other vulnerabilities by reducing the layers of defense.  The plugin's vulnerability history is clean, which is positive, but it does not mitigate the immediate risks identified in the code analysis.",[697,700,703,705],{"reason":698,"points":699},"Output escaping is completely missing",8,{"reason":701,"points":702},"Two high severity taint flows found",12,{"reason":704,"points":14},"No nonce checks",{"reason":706,"points":14},"No capability checks","2026-03-16T23:11:57.986Z",{"wat":709,"direct":720},{"assetPaths":710,"generatorPatterns":714,"scriptPaths":715,"versionParams":716},[711,712,713],"\u002Fwp-content\u002Fplugins\u002Fflexible-slider\u002Fcss\u002Ffslider.css","\u002Fwp-content\u002Fplugins\u002Fflexible-slider\u002Fcss\u002Ffslider-admin.css","\u002Fwp-content\u002Fplugins\u002Fflexible-slider\u002Fjs\u002Ffslider.js",[],[713],[717,718,719],"flexible-slider\u002Fcss\u002Ffslider.css?ver=","flexible-slider\u002Fcss\u002Ffslider-admin.css?ver=","flexible-slider\u002Fjs\u002Ffslider.js?ver=",{"cssClasses":721,"htmlComments":723,"htmlAttributes":724,"restEndpoints":725,"jsGlobals":726,"shortcodeOutput":727},[722],"fslider-msg",[],[],[],[],[728,729],"[flexibleslider","class=\"flexslider\""]