[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3qqcHZoYtXjI6lho0hZiuPsopkJghkhY_cX-t5siVUs":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":15,"requires_php":15,"tags":16,"homepage":17,"download_link":18,"security_score":19,"vuln_count":13,"unpatched_count":13,"last_vuln_date":20,"fetched_at":21,"vulnerabilities":22,"developer":23,"crawl_stats":20,"alternatives":31,"analysis":32,"fingerprints":115},"google-news-xml-sitemap-generator","Peadig’s Google News XML Sitemap Generator","1.1","Alex Moss","https:\u002F\u002Fprofiles.wordpress.org\u002Falexmoss\u002F","\u003Cp>Automatically generates a Google News XML sitemap for submission online via Webmaster Tools.\u003C\u002Fp>\n\u003Cp>Follows Google guidelines:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>50,000 item limit\u003C\u002Fli>\n\u003Cli>Posts from the last 2 days\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Keywords for sitemap are generated from post category and post tags.\u003C\u002Fp>\n\u003Cp>Optional categories can be excluded from Google News sitemap.\u003C\u002Fp>\n\u003Cp>Updated to conform with new Google News Sitemap format.\u003C\u002Fp>\n","Contributors: Alex Moss (@alexmossSEO), Chris Jinks, David Stansbury Link: http:\u002F\u002Fpleer.co.uk\u002Fwordpress\u002Fplugins\u002Fwp-twitter-feed Tags: Google News, Sit …",50,10179,0,"2018-04-04T22:14:00.000Z","",[],"http:\u002F\u002Fpleer.co.uk\u002Fwordpress\u002Fplugins\u002Fgoogle-news-xml-sitemap-generator\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgoogle-news-xml-sitemap-generator.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":24,"display_name":7,"profile_url":8,"plugin_count":25,"total_installs":26,"avg_security_score":27,"avg_patch_time_days":28,"trust_score":29,"computed_at":30},"alexmoss",11,3650,83,249,67,"2026-04-04T09:16:17.469Z",[],{"attackSurface":33,"codeSignals":71,"taintFlows":99,"riskAssessment":100,"analyzedAt":114},{"hooks":34,"ajaxHandlers":67,"restRoutes":68,"shortcodes":69,"cronEvents":70,"entryPointCount":13,"unprotectedCount":13},[35,41,44,47,51,54,57,60,63],{"type":36,"name":37,"callback":38,"file":39,"line":40},"action","publish_post","write_google_news_sitemap","google-news-sitemap.php",186,{"type":36,"name":42,"callback":38,"file":39,"line":43},"save_post",187,{"type":36,"name":45,"callback":38,"file":39,"line":46},"delete_post",188,{"type":36,"name":48,"callback":38,"priority":49,"file":39,"line":50},"transition_post_status",10,189,{"type":36,"name":52,"callback":38,"priority":49,"file":39,"line":53},"update_option_googlenewssitemap_includePosts",192,{"type":36,"name":55,"callback":38,"priority":49,"file":39,"line":56},"update_option_googlenewssitemap_includePages",193,{"type":36,"name":58,"callback":38,"priority":49,"file":39,"line":59},"update_option_googlenewssitemap_tagkeywords",194,{"type":36,"name":61,"callback":38,"priority":49,"file":39,"line":62},"update_option_googlenewssitemap_excludeCat",195,{"type":36,"name":64,"callback":65,"file":39,"line":66},"admin_menu","show_googlenewssitemap_options",213,[],[],[],[],{"dangerousFunctions":72,"sqlUsage":73,"outputEscaping":90,"fileOperations":91,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":98},[],{"prepared":13,"raw":74,"locations":75},6,[76,79,81,83,86,88],{"file":39,"line":77,"context":78},31,"$wpdb->get_results() with variable interpolation",{"file":39,"line":80,"context":78},47,{"file":39,"line":82,"context":78},68,{"file":39,"line":84,"context":85},95,"$wpdb->get_var() with variable interpolation",{"file":39,"line":87,"context":85},97,{"file":39,"line":89,"context":78},131,{"escaped":13,"rawEcho":91,"locations":92},2,[93,96],{"file":39,"line":94,"context":95},314,"raw output",{"file":39,"line":97,"context":95},318,[],[],{"summary":101,"deductions":102},"The \"google-news-xml-sitemap-generator\" v1.1 plugin presents a mixed security posture. On one hand, the static analysis indicates a very small attack surface, with no identified AJAX handlers, REST API routes, shortcodes, or cron events that could be directly exploited. The absence of dangerous functions and external HTTP requests is also a positive sign. However, the code analysis reveals significant concerns regarding data handling. All SQL queries are performed without prepared statements, and none of the detected output operations are properly escaped. This combination significantly increases the risk of SQL injection and cross-site scripting (XSS) vulnerabilities, especially if any of the data processed by these queries or outputs originates from user input. The plugin's vulnerability history is clean, with no known CVEs, which might suggest a history of good security practices or simply a lack of targeted research. Nevertheless, the identified code-level weaknesses in SQL and output handling require immediate attention, as they represent potential entry points for attackers, regardless of past vulnerability records.",[103,106,109,112],{"reason":104,"points":105},"SQL queries not using prepared statements",20,{"reason":107,"points":108},"Output escaping is not used",16,{"reason":110,"points":111},"No capability checks found",5,{"reason":113,"points":111},"No nonce checks found","2026-03-16T22:03:23.033Z",{"wat":116,"direct":121},{"assetPaths":117,"generatorPatterns":118,"scriptPaths":119,"versionParams":120},[],[],[],[],{"cssClasses":122,"htmlComments":123,"htmlAttributes":128,"restEndpoints":129,"jsGlobals":130,"shortcodeOutput":131},[],[124,125,126,127],"\u003C!-- Generated by Google News Sitemap Generator Wordpress Plugin -->","\u003C!-- Created by Chris Jinks | http:\u002F\u002Fwww.southcoastwebsites.co.uk, tweaked by Alex Moss | http:\u002F\u002Falex-moss.co.uk\u002F -->","\u003C!-- http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fgoogle-news-sitemap-generator\u002F -->","\u003C!-- Last build time: ",[],[],[],[]]