[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fI1I6n4YrfB7iMZ5ChECxgdRzHkZ7KZtBr9Fcz_r0naQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":22,"download_link":23,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":37,"analysis":106,"fingerprints":143},"gp-additional-links","GP Additional Links","1.0","Greg Ross","https:\u002F\u002Fprofiles.wordpress.org\u002Fgregross\u002F","\u003Cp>A plugin for \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FGlotPress\u002FGlotPress-WP\" rel=\"nofollow ugc\">GlotPress as a WordPress plugin\u003C\u002Fa> that adds a link to the WordPress dashboard for admins in the GlotPress page as well as a link to the GlotPress page in the WordPress admin menu.\u003C\u002Fp>\n","A plugin for GlotPress as a WordPress plugin that adds a link to the WordPress dashboard for admins in the GlotPress page as well as a link to the Glo …",20,2044,100,1,"2023-12-03T02:47:00.000Z","6.4.8","4.4","",[20,21],"glotpress","translation","http:\u002F\u002Fglot-o-matic.com\u002Fgp-additional-links","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgp-additional-links.1.0.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":33,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"gregross",34,7510,88,39,80,"2026-04-04T03:50:02.923Z",[38,60,75,85,96],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":18,"tags":53,"homepage":58,"download_link":59,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"localize","Localize WordPress","0.4","S","https:\u002F\u002Fprofiles.wordpress.org\u002Fsushkov\u002F","\u003Cp>This plugin allows you to switch your WordPress installation to use any of the\u003Cbr \u002F>\nlanguages available on \u003Ca href=\"http:\u002F\u002Ftranslate.wordpress.org\" rel=\"nofollow ugc\">GlotPress\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Some of the features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>No gettext compiler required!\u003C\u002Fli>\n\u003Cli>Does all the dirty work from editing \u003Ccode>wp-config.php\u003C\u002Fcode> to downloading the right files\u003C\u002Fli>\n\u003Cli>Can switch between versions. Available: stable and dev\u003C\u002Fli>\n\u003Cli>Uses GlotPress api!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cdiv class=\"embed-vimeo\" style=\"text-align: center;\">\u003Ciframe loading=\"lazy\" src=\"https:\u002F\u002Fplayer.vimeo.com\u002Fvideo\u002F19433386\" width=\"750\" height=\"422\" frameborder=\"0\" webkitallowfullscreen mozallowfullscreen allowfullscreen>\u003C\u002Fiframe>\u003C\u002Fdiv>\n","Easily switch to any localization from GlotPress",200,23338,90,2,"2011-07-06T00:08:00.000Z","3.2.1","2.9",[20,54,55,56,57],"locale","localization","switch","translations","https:\u002F\u002Fgithub.com\u002Fstas\u002Flocalize","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flocalize.0.4.zip",{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":13,"downloaded":68,"rating":25,"num_ratings":25,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":18,"tags":72,"homepage":73,"download_link":74,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"wp-translation","WP Translation Status","0.1","Pascal Casier","https:\u002F\u002Fprofiles.wordpress.org\u002Fcasiepa\u002F","\u003Cp>Let admins have a direct way to the translation of a plugin with an action link on the plugins page.\u003C\u002Fp>\n\u003Cp>Current features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>It verifies the local site language and points you to the plugins central translation on GlotPress.\u003C\u002Fli>\n\u003C\u002Ful>\n","Make a link to GlotPress centralised translation so contributor can help translating the plugin that do not have yet a translation in the local site l …",843,"2016-09-05T07:58:00.000Z","4.6.30","4.0",[20,21],"http:\u002F\u002Fcasier.eu\u002Fwp-dev","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-translation.zip",{"slug":76,"name":77,"version":6,"author":7,"author_profile":8,"description":78,"short_description":79,"active_installs":35,"downloaded":80,"rating":25,"num_ratings":25,"last_updated":81,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":82,"homepage":83,"download_link":84,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"gp-removed-powered-by","GP Remove Powered By","\u003Cp>A plugin for \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FGlotPress\u002FGlotPress-WP\" rel=\"nofollow ugc\">GlotPress as a WordPress plugin\u003C\u002Fa> that removes the “Powered By” in the footer.\u003C\u002Fp>\n","A plugin for GlotPress as a WordPress plugin that removes the \"Powered By\" in the footer.",6393,"2023-12-03T02:50:00.000Z",[20,21],"http:\u002F\u002Fglot-o-matic.com\u002Fgp-remove-powered-by","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgp-removed-powered-by.1.0.zip",{"slug":86,"name":87,"version":88,"author":7,"author_profile":8,"description":89,"short_description":90,"active_installs":11,"downloaded":91,"rating":13,"num_ratings":14,"last_updated":92,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":93,"homepage":94,"download_link":95,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"gp-download-name","GP Download Name","0.6","\u003Cp>A plugin for \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fglotpress\" rel=\"ugc\">GlotPress\u003C\u002Fa> that uses a customizable template for the download file name.\u003C\u002Fp>\n\u003Cp>Simply install, activate and configure via the WordPress settings menu.\u003C\u002Fp>\n\u003Cp>Note: this plugin requires GlotPress 2.3 or above.\u003C\u002Fp>\n","A plugin for GlotPress that uses a customizable template for the download file name.",1869,"2023-12-03T02:48:00.000Z",[20,21],"http:\u002F\u002Fglot-o-matic.com\u002Fgp-download-name","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgp-download-name.0.6.zip",{"slug":97,"name":98,"version":6,"author":7,"author_profile":8,"description":99,"short_description":100,"active_installs":11,"downloaded":101,"rating":13,"num_ratings":14,"last_updated":18,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":102,"homepage":103,"download_link":104,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":105},"gp-single-click-edit","GP Single Click Edit","\u003Cp>A plugin for \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FGlotPress\u002FGlotPress-WP\" rel=\"nofollow ugc\">GlotPress as a WordPress plugin\u003C\u002Fa> that allows you to single click a translation row to open the editor.\u003C\u002Fp>\n","A plugin for GlotPress as a WordPress plugin that allows you to single click a translation row to open the editor.",2544,[20,21],"http:\u002F\u002Fglot-o-matic.com\u002Fgp-single-click-edit","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgp-single-click-edit.1.1.zip","2026-03-15T10:48:56.248Z",{"attackSurface":107,"codeSignals":127,"taintFlows":134,"riskAssessment":135,"analyzedAt":142},{"hooks":108,"ajaxHandlers":123,"restRoutes":124,"shortcodes":125,"cronEvents":126,"entryPointCount":25,"unprotectedCount":25},[109,115,119],{"type":110,"name":111,"callback":111,"priority":112,"file":113,"line":114},"filter","gp_nav_menu_items",10,"gp-additional-links.php",19,{"type":116,"name":117,"callback":117,"priority":112,"file":113,"line":118},"action","admin_menu",22,{"type":116,"name":120,"callback":121,"file":113,"line":122},"gp_init","gp_additional_links_init",59,[],[],[],[],{"dangerousFunctions":128,"sqlUsage":129,"outputEscaping":131,"fileOperations":25,"externalRequests":25,"nonceChecks":25,"capabilityChecks":25,"bundledLibraries":133},[],{"prepared":25,"raw":25,"locations":130},[],{"escaped":25,"rawEcho":25,"locations":132},[],[],[],{"summary":136,"deductions":137},"The \"gp-additional-links\" plugin v1.0 exhibits a strong security posture based on the provided static analysis.  There are no identified entry points (AJAX, REST API, shortcodes, cron events) exposed in the code, meaning there are no direct avenues for attackers to interact with the plugin's functionality. Furthermore, the code adheres to secure coding practices by not utilizing dangerous functions, all SQL queries are prepared, and all output is properly escaped. The absence of file operations and external HTTP requests further limits the plugin's attack surface and potential for unintended interactions. The vulnerability history is also clean, with no recorded CVEs, indicating a lack of publicly known vulnerabilities for this plugin version.\n\nDespite the excellent static analysis results, a significant concern arises from the complete absence of capability checks and nonce checks. While there are no identified entry points to protect, this indicates a potential lack of defensive programming. If any new functionality were to be added in the future, or if the attack surface were to evolve, the absence of these fundamental security mechanisms could expose the plugin to vulnerabilities like Cross-Site Request Forgery (CSRF) or unauthorized access if functionality were to be unexpectedly exposed. The current lack of demonstrable risk is a testament to the limited attack surface, but it also means the plugin isn't proactively hardened against common WordPress attack vectors. Overall, the plugin is currently very secure due to its minimal exposure, but it lacks essential security safeguards for future development.\n\nIn conclusion, \"gp-additional-links\" v1.0 is currently in a strong security state due to its extremely limited attack surface and adherence to secure coding principles for the existing code. The absence of any vulnerabilities in its history further reinforces this. However, the complete lack of capability and nonce checks represents a significant weakness in its defensive programming, which could become a critical issue if the plugin's functionality or attack surface expands in the future. This means the plugin is well-defended by obscurity and minimalism right now, but not by robust security mechanisms.",[138,140],{"reason":139,"points":112},"Missing capability checks",{"reason":141,"points":112},"Missing nonce checks","2026-03-16T22:57:29.339Z",{"wat":144,"direct":150},{"assetPaths":145,"generatorPatterns":147,"scriptPaths":148,"versionParams":149},[146],"\u002Fwp-content\u002Fplugins\u002Fgp-additional-links\u002FGlotPress-Logo-20px.png",[],[],[],{"cssClasses":151,"htmlComments":152,"htmlAttributes":153,"restEndpoints":154,"jsGlobals":155,"shortcodeOutput":156},[],[],[],[],[],[]]