[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWUNFltCloAmusjU8hpPPf-AOH9Ad0wcRiqCav-dMLF8":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":15,"tags":18,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":47,"crawl_stats":36,"alternatives":50,"analysis":149,"fingerprints":235},"hebrewdates","Hebrew Dates","2.3.1","mikeage","https:\u002F\u002Fprofiles.wordpress.org\u002Fmikeage\u002F","\u003Cp>This plugin allows WordPress to easily show Hebrew dates instead of (or in addition to) the standard Gregorian dates. No theme changes are required.\u003C\u002Fp>\n\u003Cp>This plugin is based on the Hebrew Date plugin from KosherJava. All bugs are mine, though.\u003C\u002Fp>\n\u003Cp>This plugin is slightly similar to https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fwordpress-hebrew-date\u002F, but much more robust. It’s also older, although not on wordpress.org\u003C\u002Fp>\n\u003Ch3>Known Issues\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>The sunset routine cannot take into account DST, since the wordpress offset is GMT +\u002F-, not a timezone (not to mention the computational nightmare that is the Israeli timezone).\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin allows WordPress to easily show Hebrew dates instead of (or in addition to) the standard Gregorian dates. No theme changes are required.",10,4856,70,2,"","6.6.5","2.0",[19,20,21,22],"dates","formatting","hebrew","jewish","http:\u002F\u002Fmikeage.net\u002Fcontent\u002Fsoftware\u002Fhebrew-dates-in-wordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhebrewdates.2.3.1.zip",99,1,0,"2024-11-11 00:00:00","2026-03-15T10:48:56.248Z",[31],{"id":32,"url_slug":33,"title":34,"description":35,"plugin_slug":4,"theme_slug":36,"affected_versions":37,"patched_in_version":38,"severity":39,"cvss_score":40,"cvss_vector":41,"vuln_type":42,"published_date":28,"updated_date":43,"references":44,"days_to_patch":46},"CVE-2024-52388","hebrew-date-cross-site-request-forgery-to-stored-cross-site-scripting","Hebrew Date \u003C= 2.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting","The Hebrew Date plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.0. This is due to missing or incorrect nonce validation on the hebrewdate_subpanel() function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.",null,"\u003C=2.1.0","2.3.0","medium",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2024-11-21 13:53:06",[45],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fbd7bf023-4a18-4918-9600-12720c1b4ad8?source=api-prod",11,{"slug":7,"display_name":7,"profile_url":8,"plugin_count":26,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":46,"trust_score":48,"computed_at":49},93,"2026-04-05T05:41:35.912Z",[51,70,89,108,128],{"slug":52,"name":53,"version":54,"author":55,"author_profile":56,"description":57,"short_description":58,"active_installs":59,"downloaded":60,"rating":61,"num_ratings":62,"last_updated":63,"tested_up_to":64,"requires_at_least":17,"requires_php":15,"tags":65,"homepage":67,"download_link":68,"security_score":61,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":69},"wordpress-hebrew-date","WP Hebrew Date","2.0.5","hatul","https:\u002F\u002Fprofiles.wordpress.org\u002Fhatul\u002F","\u003Cp>The plugin preview Hebrew date in date of post and date of comments.\u003Cbr \u002F>\nThe hebrew date format able to change in options page of the plugin.\u003C\u002Fp>\n\u003Cp>Note: This plugin was previously known as “WordPress Hebrew Date”.\u003C\u002Fp>\n\u003Ch4>Shortcode\u003C\u002Fh4>\n\u003Cp>You can add the shortcode \u003Ccode>[today_hebdate]\u003C\u002Fcode> in posts or pages for show the hebrew date of today.\u003C\u002Fp>\n\u003Ch4>Widget\u003C\u002Fh4>\n\u003Cp>You can add widget for show the hebrew date of today.\u003C\u002Fp>\n","Convert dates in wordpress to Hebrew dates.",700,15166,100,9,"2025-09-15T07:54:00.000Z","6.8.5",[66,21,22],"date","https:\u002F\u002Fhatul.info\u002Fhebdate\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwordpress-hebrew-date.2.0.5.zip","2026-03-15T15:16:48.613Z",{"slug":71,"name":72,"version":73,"author":71,"author_profile":74,"description":75,"short_description":76,"active_installs":77,"downloaded":78,"rating":79,"num_ratings":80,"last_updated":81,"tested_up_to":16,"requires_at_least":82,"requires_php":83,"tags":84,"homepage":87,"download_link":88,"security_score":61,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":69},"calj","CalJ","1.5","https:\u002F\u002Fprofiles.wordpress.org\u002Fcalj\u002F","\u003Cp>Use the popular CalJ API to display the begin and end times of Shabbat as well as the name of the week’s Parasha on your blog,\u003Cbr \u002F>\nwith the help of a simple \u003Cem>shortcode\u003C\u002Fem>\u003C\u002Fp>\n","Display the Shabbat times (zmanim) for the city of your choice.",90,3685,68,5,"2025-06-20T14:49:00.000Z","4.9","5.6",[85,66,86,21,22],"calendar","events","https:\u002F\u002Fcalj.net","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcalj.zip",{"slug":90,"name":91,"version":92,"author":93,"author_profile":94,"description":95,"short_description":96,"active_installs":97,"downloaded":98,"rating":27,"num_ratings":27,"last_updated":99,"tested_up_to":100,"requires_at_least":83,"requires_php":101,"tags":102,"homepage":106,"download_link":107,"security_score":61,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":69},"jewish-date","Jewish Date","1.0.2","kikipress","https:\u002F\u002Fprofiles.wordpress.org\u002Fkikiatwp\u002F","\u003Cp>The Jewish Date plugin enables you to show the Jewish date next to the Gregorian date on your WordPress site.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Enable or disable display of the Jewish date next to the Gregorian post date\u003C\u002Fli>\n\u003Cli>Enable or disable display of the Jewish date next to the Gregorian comment date\u003C\u002Fli>\n\u003Cli>Install a widget displaying today’s Jewish date, and optionally also today’s Gregorian date, in a registered sidebar\u003C\u002Fli>\n\u003Cli>Available in English (default), French, German and Spanish. You can add your own translation if you want\u003C\u002Fli>\n\u003C\u002Ful>\n","Jewish Date is a small plugin to show the Jewish date on your WordPress site.",40,1943,"2025-12-04T10:22:00.000Z","6.9.4","7.0.0",[103,104,22,105,90],"hebrew-calendar","hebrew-date","jewish-calendar","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fjewish-date","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjewish-date.1.0.2.zip",{"slug":109,"name":110,"version":111,"author":112,"author_profile":113,"description":114,"short_description":115,"active_installs":116,"downloaded":117,"rating":27,"num_ratings":27,"last_updated":118,"tested_up_to":119,"requires_at_least":120,"requires_php":15,"tags":121,"homepage":125,"download_link":126,"security_score":127,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":69},"hebrew-username","Hebrew username","1","DrMosko","https:\u002F\u002Fprofiles.wordpress.org\u002Fdrmosko\u002F","\u003Cp>this plugin overrides default wordpress sanitize and add Hebrew characters.\u003C\u002Fp>\n","Add Hebrew characters to sanitize_user",20,69792,"2016-01-04T01:53:00.000Z","4.4.34","3.7.0",[21,22,122,123,124],"sanitize","user","username","http:\u002F\u002Fwww.dossihost.net","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhebrew-username.1.zip",85,{"slug":129,"name":130,"version":131,"author":132,"author_profile":133,"description":134,"short_description":135,"active_installs":136,"downloaded":137,"rating":77,"num_ratings":138,"last_updated":139,"tested_up_to":100,"requires_at_least":140,"requires_php":83,"tags":141,"homepage":146,"download_link":147,"security_score":61,"vuln_count":26,"unpatched_count":27,"last_vuln_date":148,"fetched_at":69},"tinymce-advanced","Advanced Editor Tools","5.9.2","Andrew Ozz","https:\u002F\u002Fprofiles.wordpress.org\u002Fazaozz\u002F","\u003Cp>Advanced Editor Tools (previously TinyMCE Advanced) introduces a “Classic Paragraph” block for the block editor (Gutenberg).\u003Cbr \u002F>\nIf you are not quite ready to switch to the block editor, or have plugins that cannot be used there (yet), using the Classic Paragraph block is your best option. It lets you to continue to use the familiar TinyMCE editor for most tasks, and at the same time gives you full access to all blocks and new features in the block editor.\u003C\u002Fp>\n\u003Cp>Version 5.5 continues to improve and enhance the new features introduced in version 5.0 of the plugin. It includes an improved “Clear Formatting” button, several advanced settings for tables, and importing and exporting of the settings to a file.\u003C\u002Fp>\n\u003Cp>If you want to continue to use the previous (“classic”) editor in WordPress 5.0 and newer, this plugin has an option to replace the new editor with the previous one. If you prefer to have access to both editors side by side or to allow your users to switch editors, it would be better to install the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fclassic-editor\u002F\" rel=\"ugc\">Classic Editor plugin\u003C\u002Fa>. Advanced Editor Tools is fully compatible with the classic editor plugin and similar plugins that restore use of the previous WordPress editor.\u003C\u002Fp>\n\u003Cp>As always this plugin will let you add, remove and arrange the buttons that are shown on the Visual Editor toolbar in the Classic Paragraph and Classic blocks in the block editor, and in the classic editor (when enabled by a plugin). There you can configure up to four rows of buttons including Font Sizes, Font Family, text and background colors, tables, etc.\u003C\u002Fp>\n\u003Cp>It includes 15 plugins for \u003Ca href=\"https:\u002F\u002Fwww.tiny.cloud\u002F\" rel=\"nofollow ugc\">TinyMCE\u003C\u002Fa> that are automatically enabled or disabled depending on the buttons you have chosen.\u003Cbr \u002F>\nIn addition this plugin adds options for keeping the paragraph tags in text mode and importing the CSS classes from the theme’s editor-style.css.\u003C\u002Fp>\n\u003Ch4>Some of the features added by this plugin\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>“Classic Paragraph” block that can be used instead of or together with the standard Paragraph block.\u003C\u002Fli>\n\u003Cli>An option to set the Classic Paragraph or Classic block as the default block in the block editor.\u003C\u002Fli>\n\u003Cli>Supports converting of most default blocks to classic paragraphs, and from classic paragraphs back to the default blocks.\u003C\u002Fli>\n\u003Cli>Support for creating and editing tables in the Classic blocks and the classic editor.\u003C\u002Fli>\n\u003Cli>More options when inserting lists in the Classic blocks and the classic editor.\u003C\u002Fli>\n\u003Cli>Search and Replace in the Classic blocks and the classic editor.\u003C\u002Fli>\n\u003Cli>Ability to set Font Family and Font Sizes in the Classic blocks and the classic editor.\u003C\u002Fli>\n\u003Cli>And many others.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Privacy\u003C\u002Fh4>\n\u003Cp>Advanced Editor Tools does not collect or store any user related data. It does not set cookies, and it does not connect to any third-party websites. It only uses functionality that is available in \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002F\" rel=\"ugc\">WordPress\u003C\u002Fa>, and in the \u003Ca href=\"https:\u002F\u002Ftinymce.com\u002F\" rel=\"nofollow ugc\">TinyMCE editor\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>In that terms Advanced Editor Tools does not affect your website’s user privacy in any way.\u003C\u002Fp>\n","Extends and enhances the block editor (Gutenberg) and the classic editor (TinyMCE).",2000000,35126516,351,"2025-12-08T15:02:00.000Z","5.9",[142,143,144,20,145],"block-editor","classic-editor","editor","gutenberg","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftinymce-advanced\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftinymce-advanced.5.9.2.zip","2014-09-08 00:00:00",{"attackSurface":150,"codeSignals":187,"taintFlows":195,"riskAssessment":223,"analyzedAt":234},{"hooks":151,"ajaxHandlers":183,"restRoutes":184,"shortcodes":185,"cronEvents":186,"entryPointCount":27,"unprotectedCount":27},[152,158,163,167,171,175,179],{"type":153,"name":154,"callback":155,"file":156,"line":157},"action","admin_menu","hebrewDateMenu","hebrewdate.php",837,{"type":159,"name":160,"callback":161,"priority":11,"file":156,"line":162},"filter","the_time","AddHebrewDateWrap_the_time",838,{"type":159,"name":164,"callback":165,"priority":11,"file":156,"line":166},"the_date","AddHebrewDateWrap_the_date",839,{"type":159,"name":168,"callback":169,"priority":11,"file":156,"line":170},"get_the_time","AddHebrewDateWrap_get_the_time",840,{"type":159,"name":172,"callback":173,"priority":11,"file":156,"line":174},"get_the_date","AddHebrewDateWrap_get_the_date",841,{"type":159,"name":176,"callback":177,"priority":11,"file":156,"line":178},"get_comment_date","AddHebrewDateWrap_get_comment_date",842,{"type":159,"name":180,"callback":181,"priority":11,"file":156,"line":182},"get_comment_time","AddHebrewDateWrap_get_comment_time",843,[],[],[],[],{"dangerousFunctions":188,"sqlUsage":189,"outputEscaping":191,"fileOperations":27,"externalRequests":27,"nonceChecks":26,"capabilityChecks":27,"bundledLibraries":194},[],{"prepared":27,"raw":27,"locations":190},[],{"escaped":192,"rawEcho":27,"locations":193},43,[],[],[196,215],{"entryPoint":197,"graph":198,"unsanitizedCount":27,"severity":214},"hebrewdate_subpanel (hebrewdate.php:667)",{"nodes":199,"edges":211},[200,205],{"id":201,"type":202,"label":203,"file":156,"line":204},"n0","source","$_POST (x9)",671,{"id":206,"type":207,"label":208,"file":156,"line":209,"wp_function":210},"n1","sink","update_option() [Settings Manipulation]",680,"update_option",[212],{"from":201,"to":206,"sanitized":213},true,"low",{"entryPoint":216,"graph":217,"unsanitizedCount":27,"severity":214},"\u003Chebrewdate> (hebrewdate.php:0)",{"nodes":218,"edges":221},[219,220],{"id":201,"type":202,"label":203,"file":156,"line":204},{"id":206,"type":207,"label":208,"file":156,"line":209,"wp_function":210},[222],{"from":201,"to":206,"sanitized":213},{"summary":224,"deductions":225},"The Hebrewdates plugin v2.3.1 demonstrates strong adherence to secure coding practices, particularly regarding SQL injection prevention and output escaping.  The static analysis reveals no direct entry points like AJAX handlers, REST API routes, or shortcodes that are exposed without authentication, and importantly, no dangerous functions, file operations, or external HTTP requests were identified. The complete absence of unsanitized paths in the taint analysis further reinforces a positive security posture. However, the plugin's vulnerability history, specifically a medium-severity Cross-Site Request Forgery (CSRF) vulnerability reported in late 2024, indicates a potential weakness. Although this vulnerability is now patched, it highlights a historical area of concern and suggests that the plugin's input validation or state-changing operations might require more robust protection, even if not immediately apparent in the current static analysis.",[226,229,232],{"reason":227,"points":228},"Medium severity CSRF vulnerability historically present",8,{"reason":230,"points":231},"Only 1 nonce check for a plugin of this size",3,{"reason":233,"points":80},"0 capability checks found","2026-03-16T23:13:29.081Z",{"wat":236,"direct":245},{"assetPaths":237,"generatorPatterns":240,"scriptPaths":241,"versionParams":242},[238,239],"\u002Fwp-content\u002Fplugins\u002Fhebrewdates\u002Fhebrewdate.css","\u002Fwp-content\u002Fplugins\u002Fhebrewdates\u002Fhebrewdate.js",[],[239],[243,244],"hebrewdates\u002Fhebrewdate.css?ver=","hebrewdates\u002Fhebrewdate.js?ver=",{"cssClasses":246,"htmlComments":247,"htmlAttributes":248,"restEndpoints":249,"jsGlobals":250,"shortcodeOutput":252},[],[],[],[],[251],"hebrewdate",[]]