[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffLj6gi2YgkaOq9kBp2zp7iaMXkAakEjX_Q6RqeHuLZo":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":14,"tags":17,"homepage":20,"download_link":21,"security_score":22,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":24,"vulnerabilities":25,"developer":26,"crawl_stats":23,"alternatives":34,"analysis":108,"fingerprints":146},"gp-import-from-wp-org","GP Import Translations from wordress.org","0.5","Greg Ross","https:\u002F\u002Fprofiles.wordpress.org\u002Fgregross\u002F","\u003Cp>A plugin for \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FGlotPress\u002FGlotPress-WP\" rel=\"nofollow ugc\">GlotPress as a WordPress plugin\u003C\u002Fa> that imports a language from wordpress.org’s translation site.\u003C\u002Fp>\n\u003Cp>With a single click you can now import translations that reside on translate.wordpress.org in to your local GlotPress installation!\u003C\u002Fp>\n\u003Cp>A new “Import from wordpress.org” section will be available in the footer of a translation set page and allow you to import either the development or stable branches from translate.wordpress.org.\u003C\u002Fp>\n\u003Cp>For the import to work, your project slug in GlotPress must match the plugin slug on wordpress.org.\u003C\u002Fp>\n","A plugin for GlotPress as a WordPress plugin that imports a language from wordpress.org's translation site.",10,1954,0,"","6.4.8","4.4",[18,19],"glotpress","translation","http:\u002F\u002Fglot-o-matic.com\u002Fgp-import-from-wp-org","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgp-import-from-wp-org.0.5.zip",100,null,"2026-03-15T14:44:11.924Z",[],{"slug":27,"display_name":7,"profile_url":8,"plugin_count":28,"total_installs":29,"avg_security_score":30,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},"gregross",34,7510,88,39,80,"2026-04-04T05:30:27.009Z",[35,59,74,85,97],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":43,"downloaded":44,"rating":45,"num_ratings":46,"last_updated":47,"tested_up_to":48,"requires_at_least":49,"requires_php":14,"tags":50,"homepage":55,"download_link":56,"security_score":57,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":58},"localize","Localize WordPress","0.4","S","https:\u002F\u002Fprofiles.wordpress.org\u002Fsushkov\u002F","\u003Cp>This plugin allows you to switch your WordPress installation to use any of the\u003Cbr \u002F>\nlanguages available on \u003Ca href=\"http:\u002F\u002Ftranslate.wordpress.org\" rel=\"nofollow ugc\">GlotPress\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Some of the features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>No gettext compiler required!\u003C\u002Fli>\n\u003Cli>Does all the dirty work from editing \u003Ccode>wp-config.php\u003C\u002Fcode> to downloading the right files\u003C\u002Fli>\n\u003Cli>Can switch between versions. Available: stable and dev\u003C\u002Fli>\n\u003Cli>Uses GlotPress api!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cdiv class=\"embed-vimeo\" style=\"text-align: center;\">\u003Ciframe loading=\"lazy\" src=\"https:\u002F\u002Fplayer.vimeo.com\u002Fvideo\u002F19433386\" width=\"750\" height=\"422\" frameborder=\"0\" webkitallowfullscreen mozallowfullscreen allowfullscreen>\u003C\u002Fiframe>\u003C\u002Fdiv>\n","Easily switch to any localization from GlotPress",200,23338,90,2,"2011-07-06T00:08:00.000Z","3.2.1","2.9",[18,51,52,53,54],"locale","localization","switch","translations","https:\u002F\u002Fgithub.com\u002Fstas\u002Flocalize","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flocalize.0.4.zip",85,"2026-03-15T15:16:48.613Z",{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":22,"downloaded":67,"rating":13,"num_ratings":13,"last_updated":68,"tested_up_to":69,"requires_at_least":70,"requires_php":14,"tags":71,"homepage":72,"download_link":73,"security_score":57,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":58},"wp-translation","WP Translation Status","0.1","Pascal Casier","https:\u002F\u002Fprofiles.wordpress.org\u002Fcasiepa\u002F","\u003Cp>Let admins have a direct way to the translation of a plugin with an action link on the plugins page.\u003C\u002Fp>\n\u003Cp>Current features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>It verifies the local site language and points you to the plugins central translation on GlotPress.\u003C\u002Fli>\n\u003C\u002Ful>\n","Make a link to GlotPress centralised translation so contributor can help translating the plugin that do not have yet a translation in the local site l …",843,"2016-09-05T07:58:00.000Z","4.6.30","4.0",[18,19],"http:\u002F\u002Fcasier.eu\u002Fwp-dev","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-translation.zip",{"slug":75,"name":76,"version":77,"author":7,"author_profile":8,"description":78,"short_description":79,"active_installs":32,"downloaded":80,"rating":13,"num_ratings":13,"last_updated":81,"tested_up_to":15,"requires_at_least":16,"requires_php":14,"tags":82,"homepage":83,"download_link":84,"security_score":57,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":58},"gp-removed-powered-by","GP Remove Powered By","1.0","\u003Cp>A plugin for \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FGlotPress\u002FGlotPress-WP\" rel=\"nofollow ugc\">GlotPress as a WordPress plugin\u003C\u002Fa> that removes the “Powered By” in the footer.\u003C\u002Fp>\n","A plugin for GlotPress as a WordPress plugin that removes the \"Powered By\" in the footer.",6393,"2023-12-03T02:50:00.000Z",[18,19],"http:\u002F\u002Fglot-o-matic.com\u002Fgp-remove-powered-by","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgp-removed-powered-by.1.0.zip",{"slug":86,"name":87,"version":77,"author":7,"author_profile":8,"description":88,"short_description":89,"active_installs":90,"downloaded":91,"rating":22,"num_ratings":92,"last_updated":93,"tested_up_to":15,"requires_at_least":16,"requires_php":14,"tags":94,"homepage":95,"download_link":96,"security_score":57,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":58},"gp-additional-links","GP Additional Links","\u003Cp>A plugin for \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FGlotPress\u002FGlotPress-WP\" rel=\"nofollow ugc\">GlotPress as a WordPress plugin\u003C\u002Fa> that adds a link to the WordPress dashboard for admins in the GlotPress page as well as a link to the GlotPress page in the WordPress admin menu.\u003C\u002Fp>\n","A plugin for GlotPress as a WordPress plugin that adds a link to the WordPress dashboard for admins in the GlotPress page as well as a link to the Glo …",20,2044,1,"2023-12-03T02:47:00.000Z",[18,19],"http:\u002F\u002Fglot-o-matic.com\u002Fgp-additional-links","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgp-additional-links.1.0.zip",{"slug":98,"name":99,"version":100,"author":7,"author_profile":8,"description":101,"short_description":102,"active_installs":90,"downloaded":103,"rating":22,"num_ratings":92,"last_updated":104,"tested_up_to":15,"requires_at_least":16,"requires_php":14,"tags":105,"homepage":106,"download_link":107,"security_score":57,"vuln_count":13,"unpatched_count":13,"last_vuln_date":23,"fetched_at":58},"gp-download-name","GP Download Name","0.6","\u003Cp>A plugin for \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fglotpress\" rel=\"ugc\">GlotPress\u003C\u002Fa> that uses a customizable template for the download file name.\u003C\u002Fp>\n\u003Cp>Simply install, activate and configure via the WordPress settings menu.\u003C\u002Fp>\n\u003Cp>Note: this plugin requires GlotPress 2.3 or above.\u003C\u002Fp>\n","A plugin for GlotPress that uses a customizable template for the download file name.",1869,"2023-12-03T02:48:00.000Z",[18,19],"http:\u002F\u002Fglot-o-matic.com\u002Fgp-download-name","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgp-download-name.0.6.zip",{"attackSurface":109,"codeSignals":124,"taintFlows":135,"riskAssessment":136,"analyzedAt":145},{"hooks":110,"ajaxHandlers":120,"restRoutes":121,"shortcodes":122,"cronEvents":123,"entryPointCount":13,"unprotectedCount":13},[111,115],{"type":112,"name":113,"callback":113,"priority":11,"file":114,"line":90},"filter","gp_translations_footer_links","gp-import-from-wp-org.php",{"type":116,"name":117,"callback":118,"file":114,"line":119},"action","gp_init","gp_import_from_wp_org_init",94,[],[],[],[],{"dangerousFunctions":125,"sqlUsage":126,"outputEscaping":128,"fileOperations":133,"externalRequests":13,"nonceChecks":13,"capabilityChecks":92,"bundledLibraries":134},[],{"prepared":13,"raw":13,"locations":127},[],{"escaped":13,"rawEcho":92,"locations":129},[130],{"file":114,"line":131,"context":132},60,"raw output",4,[],[],{"summary":137,"deductions":138},"The \"gp-import-from-wp-org\" plugin, version 0.5, exhibits a generally good security posture based on the provided static analysis.  The plugin has a commendably small attack surface with zero identified entry points, and importantly, zero unprotected entry points.  The absence of dangerous functions and the use of prepared statements for all SQL queries are significant strengths.  Furthermore, the plugin demonstrates a clean vulnerability history with no recorded CVEs.\n\nHowever, there are a few areas for concern. The critical signal is that 100% of output is not properly escaped. This means that any dynamic data outputted by the plugin could potentially be vulnerable to Cross-Site Scripting (XSS) attacks if that data is not already sufficiently sanitized before being passed to the output functions.  While the plugin has a capability check, it has zero nonce checks, which is a weakness for certain types of operations that might be performed through its limited functionality, especially if any of the file operations involve user-supplied input.\n\nIn conclusion, the plugin's minimal attack surface and lack of historical vulnerabilities are positive indicators. The primary concern lies in the unescaped output, which represents a clear XSS risk. The lack of nonce checks also presents a potential, albeit less defined, risk depending on the nature of the file operations. Addressing the output escaping and implementing nonce checks would significantly improve the plugin's overall security.",[139,142],{"reason":140,"points":141},"Output escaping missing",8,{"reason":143,"points":144},"Nonce checks missing",5,"2026-03-16T23:32:25.850Z",{"wat":147,"direct":152},{"assetPaths":148,"generatorPatterns":149,"scriptPaths":150,"versionParams":151},[],[],[],[],{"cssClasses":153,"htmlComments":154,"htmlAttributes":155,"restEndpoints":156,"jsGlobals":157,"shortcodeOutput":158},[],[],[],[],[],[159],"Import from wordpress.org: [Stable] [Development]"]