[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCZGbqDKpjkXQvuneQlj67dcoal9M7_xtxeA2P__bnGQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":22,"download_link":23,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":43,"crawl_stats":34,"alternatives":49,"analysis":145,"fingerprints":172},"hide-text-shortcode","Hide Text Shortcode","1.1","biscia7","https:\u002F\u002Fprofiles.wordpress.org\u002Fbiscia7\u002F","\u003Ch4>Hide Text Shortcode\u003C\u002Fh4>\n\u003Cp>Useful shortcode to hide text in a post\u003C\u002Fp>\n\u003Cp>[htsP type=”Read More…”]Lorem ipsum dolor sit amet, consectetuer adipiscing elit.[\u002FhtsP].\u003C\u002Fp>\n\u003Cp>This shortcode add a javascript function that  hide a text in a post and will show it on clicking on a choosen string.\u003C\u002Fp>\n\u003Ch4>Credits\u003C\u002Fh4>\n\u003Cp>This plugin is created by \u003Ca href=\"http:\u002F\u002Fwww.crawlermotori.com\u002F\" title=\"Danilo Franceschini\" rel=\"friend nofollow ugc\">Danilo Franceschini\u003C\u002Fa>.\u003C\u002Fp>\n","Shortcode to hide text",400,2333,0,"2016-06-16T17:25:00.000Z","4.8.28","3.9","",[19,20,21],"hide-text","javascript","shortcode","http:\u002F\u002Fwww.crawlermotori.com\u002F210\u002Fhide-text-shortcode-plug-wordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhide-text-shortcode.zip",63,1,"2025-08-13 00:00:00","2026-03-15T15:16:48.613Z",[29],{"id":30,"url_slug":31,"title":32,"description":33,"plugin_slug":4,"theme_slug":34,"affected_versions":35,"patched_in_version":34,"severity":36,"cvss_score":37,"cvss_vector":38,"vuln_type":39,"published_date":26,"updated_date":40,"references":41,"days_to_patch":34},"CVE-2025-49051","hide-text-shortcode-authenticated-contributor-stored-cross-site-scripting","Hide Text Shortcode \u003C= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting","The Hide Text Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=1.1","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-08-18 20:50:17",[42],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F68f470ad-2475-444c-ae9d-8b86a5b8349f?source=api-prod",{"slug":7,"display_name":7,"profile_url":8,"plugin_count":44,"total_installs":45,"avg_security_score":46,"avg_patch_time_days":47,"trust_score":46,"computed_at":48},4,420,80,30,"2026-04-04T14:22:50.826Z",[50,74,92,110,129],{"slug":51,"name":52,"version":53,"author":54,"author_profile":55,"description":56,"short_description":57,"active_installs":58,"downloaded":59,"rating":60,"num_ratings":61,"last_updated":62,"tested_up_to":63,"requires_at_least":64,"requires_php":65,"tags":66,"homepage":70,"download_link":71,"security_score":60,"vuln_count":72,"unpatched_count":13,"last_vuln_date":73,"fetched_at":27},"shortcoder","Shortcoder — Create Shortcodes for Anything","6.5.2","vaakash","https:\u002F\u002Fprofiles.wordpress.org\u002Fvaakash\u002F","\u003Cp>Shortcoder plugin allows to create a custom shortcodes for HTML, JavaScript, CSS and other code snippets. Now the shortcodes can be used in posts\u002Fpages and the snippet will be replaced in place.\u003C\u002Fp>\n\u003Ch3>✍ Create shortcodes easily\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Give a name for the shortcode\u003C\u002Fli>\n\u003Cli>Paste the HTML\u002FJavaScript\u002FCSS as shortcode content\u003C\u002Fli>\n\u003Cli>Save !\u003C\u002Fli>\n\u003Cli>Now insert the shortcode \u003Ccode>[sc name=\"my_shortcode\"]\u003C\u002Fcode> in your post\u002Fpage.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Voila !\u003C\u002Fstrong> You got the HTML\u002FJavascript\u002FCSS in your post.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>✨ Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Create \u003Cstrong>custom shortcodes\u003C\u002Fstrong> easily and use them in any place where shortcode is supported.\u003C\u002Fli>\n\u003Cli>Have any \u003Cstrong>HTML\u003C\u002Fstrong>, \u003Cstrong>Javascript\u003C\u002Fstrong>, \u003Cstrong>CSS\u003C\u002Fstrong> as Shortcode content.\u003C\u002Fli>\n\u003Cli>Insert: \u003Cstrong>Custom parameters\u003C\u002Fstrong> in shortcode\u003C\u002Fli>\n\u003Cli>Insert: \u003Cstrong>WordPress parameters\u003C\u002Fstrong> in shortcode\u003C\u002Fli>\n\u003Cli>Multiple editors: Code, Visual and text modes.\u003C\u002Fli>\n\u003Cli>Globally disable the shortcode when not needed.\u003C\u002Fli>\n\u003Cli>Disable shortcode on desktop, mobile devices.\u003C\u002Fli>\n\u003Cli>A button in post editor to pick the shortcodes to insert.\u003C\u002Fli>\n\u003Cli>Execute blocks HTML in shortcode content.\u003C\u002Fli>\n\u003Cli>Insert shortcodes in Gutenberg\u002Fblock editor.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🎲 An example usage\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Create a shortcode named “adsenseAd” in the Shortcoder admin page.\u003C\u002Fli>\n\u003Cli>Paste the adsense code in the box given and save it.\u003C\u002Fli>\n\u003Cli>Use \u003Ccode>[sc name=\"adsenseAd\"]\u003C\u002Fcode> in your posts and pages.\u003C\u002Fli>\n\u003Cli>Tada !!! the ad code is replaced and it appears in the post.\u003C\u002Fli>\n\u003Cli>Now you can edit the ad code at one place and the code is updated in all the locations where the shortcode is used.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Similarly shortcodes can be created for frequently used snippets.\u003C\u002Fp>\n\u003Cp>You can also add \u003Ca href=\"https:\u002F\u002Fwww.aakashweb.com\u002Fdocs\u002Fshortcoder\u002F\" rel=\"nofollow ugc\">custom parameters\u003C\u002Fa> (like \u003Ccode>%%id%%\u003C\u002Fcode>) inside the snippets, and change it’s value like \u003Ccode>[sc name=\"youtube\" id=\"GrlRADfvjII\"]\u003C\u002Fcode> when using them.\u003C\u002Fp>\n\u003Ch3>🧱 Using in block editor\u003C\u002Fh3>\n\u003Cp>Though shortcodes can be used in \u003Cstrong>any\u003C\u002Fstrong> place manually, Shortcoder provides below options to select and insert the shortcodes created easily when working with the block editor.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Shortcoder block\u003C\u002Fli>\n\u003Cli>Toolbar button to select and insert shortcodes inline (under “more”)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>💎 Upgrade to PRO\u003C\u002Fh3>\n\u003Cp>Shortcoder also provides a \u003Ca href=\"https:\u002F\u002Fwww.aakashweb.com\u002Fwordpress-plugins\u002Fshortcoder\u002F\" rel=\"nofollow ugc\">PRO version\u003C\u002Fa> which has additional features to further enhance the experience. Below features are offered in the PRO version.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Custom editor\u003C\u002Fstrong> – Edit Shortcode content using block editor or page builder plugins like Elementor and WPBakery.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>(New) Translation with WPML\u003C\u002Fstrong> – Translate Shortcode content with WPML.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Revisions\u003C\u002Fstrong> – Revisions support for Shortcode content.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Locate shortcode\u003C\u002Fstrong> – Search posts and pages where a shortcode is used.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Extra code\u003C\u002Fstrong> – Include extra code to the footer when a shortcode is used in a page.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.aakashweb.com\u002Fwordpress-plugins\u002Fshortcoder\u002F\" rel=\"nofollow ugc\">Get started with Shortcoder – PRO\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Links\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.aakashweb.com\u002Fdocs\u002Fshortcoder\u002F\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.aakashweb.com\u002Fdocs\u002Fshortcoder\u002Ffaq\u002F\" rel=\"nofollow ugc\">FAQs\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.aakashweb.com\u002Fforum\u002F\" rel=\"nofollow ugc\">Support forum\u002FReport bugs\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.aakashweb.com\u002Fwordpress-plugins\u002Fshortcoder\u002F#pro\" rel=\"nofollow ugc\">PRO features\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Create custom \"Shortcodes\" easily for HTML, JavaScript, CSS code snippets and use the shortcodes within posts, pages & widgets",100000,1888190,98,225,"2026-03-01T17:44:00.000Z","6.9.4","4.9.0","5.3",[67,68,20,21,69],"code","html","snippets","https:\u002F\u002Fwww.aakashweb.com\u002Fwordpress-plugins\u002Fshortcoder\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshortcoder.6.5.2.zip",2,"2026-01-09 00:00:00",{"slug":75,"name":76,"version":77,"author":78,"author_profile":79,"description":80,"short_description":81,"active_installs":82,"downloaded":83,"rating":13,"num_ratings":13,"last_updated":84,"tested_up_to":85,"requires_at_least":86,"requires_php":17,"tags":87,"homepage":89,"download_link":90,"security_score":91,"vuln_count":13,"unpatched_count":13,"last_vuln_date":34,"fetched_at":27},"slideshow","Slideshow","0.1","Justin Tadlock","https:\u002F\u002Fprofiles.wordpress.org\u002Fgreenshady\u002F","\u003Cp>The Slideshow plugin gives you a shortcode called \u003Ccode>[slideshow]\u003C\u002Fcode>, which pulls any image attachments for a post (or any post type) and formats them into a nicely-designed slideshow.\u003C\u002Fp>\n\u003Cp>The Slideshow plugin was originally developed as a feature of the \u003Ca href=\"http:\u002F\u002Fdevpress.com\u002Fthemes\u002Fnews\" title=\"News WordPress theme\" rel=\"nofollow ugc\">News theme\u003C\u002Fa> (if you’re using that theme, please don’t install this plugin).  Realizing that users sometimes switch themes, we wanted to give those users a way to continue using their slideshows with other themes.  This also allows us to make the slideshow feature something that anyone can use, even if they’re not using one of our themes.\u003C\u002Fp>\n","A shortcode for displaying a slideshow of image attachments for a post.",1000,110767,"2017-11-28T14:07:00.000Z","3.0.5","3.0",[20,88,21,75],"jquery","http:\u002F\u002Fdevpress.com\u002Fplugins\u002Fslideshow","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fslideshow.0.1.zip",85,{"slug":93,"name":94,"version":95,"author":96,"author_profile":97,"description":98,"short_description":99,"active_installs":100,"downloaded":101,"rating":100,"num_ratings":44,"last_updated":102,"tested_up_to":103,"requires_at_least":104,"requires_php":17,"tags":105,"homepage":108,"download_link":109,"security_score":91,"vuln_count":13,"unpatched_count":13,"last_vuln_date":34,"fetched_at":27},"same-height","Same Height","1.4.1","damiarita","https:\u002F\u002Fprofiles.wordpress.org\u002Fdamiarita\u002F","\u003Cp>Sometimes we want to display to boxes side by side and they have to look the same. CSS doesn’t always help.\u003C\u002Fp>\n\u003Cp>This plugin will use jQuery to detect the boxes you want and force them all to have the same size. The size is uses is the size of the tallest box.\u003C\u002Fp>\n\u003Cp>If you have a some parts of your content that need to have the same height, simply wrap them with the \u003Ccode>[sameheight\u002F]\u003C\u002Fcode> shortcode like this:\u003Cbr \u002F>\n    [sameheight]\u003Cbr \u002F>\n      This is a short text\u003Cbr \u002F>\n    [\u002Fsameheight]\u003Cbr \u002F>\n    [sameheight]\u003Cbr \u002F>\n      This is a very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very long text\u003Cbr \u002F>\n    [\u002Fsameheight]\u003C\u002Fp>\n\u003Cp>When the html renders on your screen, both parts content parts will look equally height. This is very useful if they are floating next to each other and they have a background.\u003C\u002Fp>\n\u003Ch4>What if I have different sizes in the same page?\u003C\u002Fh4>\n\u003Cp>You can group shortcodes like this:\u003Cbr \u002F>\n    [sameheight group=”1″]\u003Cbr \u002F>\n      This is a very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very long text\u003Cbr \u002F>\n    [\u002Fsameheight]\u003Cbr \u002F>\n    [sameheight group=”1″]\u003Cbr \u002F>\n      This is a short text\u003Cbr \u002F>\n    [\u002Fsameheight]\u003Cbr \u002F>\n    [sameheight group=”2″]\u003Cbr \u002F>\n      This is another short text\u003Cbr \u002F>\n    [\u002Fsameheight]\u003Cbr \u002F>\n    [sameheight group=”2″]\u003Cbr \u002F>\n      This text is long, but not quite as long as the previous one. So, I don’t want these to parts to look as long. But they should still look the same.\u003Cbr \u002F>\n    [\u002Fsameheight]\u003C\u002Fp>\n\u003Ch4>What if I have a responsive site and I only want the same height to apply in wide-screen, side-by-side configurations?\u003C\u002Fh4>\n\u003Cp>You can add a breakpoint like this.\u003Cbr \u002F>\n    [sameheight breakpoint=”xs” ] (You could even use no breakpoint at all)\u003Cbr \u002F>\n      This is a very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very long text\u003Cbr \u002F>\n    [\u002Fsameheight]\u003Cbr \u002F>\n    [sameheight breakpoint=”xs” ] (You could even use no breakpoint at all)\u003Cbr \u002F>\n      This text always has to use the same height than the previous one.\u003Cbr \u002F>\n    [\u002Fsameheight]\u003Cbr \u002F>\n    [sameheight breakpoint=”md”]\u003Cbr \u002F>\n        This is a very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very, very long text\u003Cbr \u002F>\n    [\u002Fsameheight]\u003Cbr \u002F>\n    [sameheight breakpoint=”md”]\u003Cbr \u002F>\n      This text only has to use the same height when it is next to the previous, but not when it is underneath on smarphones.\u003Cbr \u002F>\n    [\u002Fsameheight]\u003C\u002Fp>\n\u003Cp>You have these breakpoints (those familiar with bootstrap know them):\u003C\u002Fp>\n\u003Cul>\n\u003Cli>“xs” forces same height for all window widths (extra small window – smartphone). Alternatively, you can use no breakpoint\u003C\u002Fli>\n\u003Cli>“sm” forces same height for window widths > 768px (small window – small tablet)\u003C\u002Fli>\n\u003Cli>“md” forces same height for window widths > 992px (medium window – table or small desktop)\u003C\u002Fli>\n\u003Cli>“lg” forces same height for window widths > 1200px (large window – desktop)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Names and widths are based on bootstrap.\u003C\u002Fp>\n\u003Cp>Please, note that shortcodes with different “breakpoint” will be in different groups regardless of the “group” setting. You can still use “group” to separate to groups with the same “breakpoint”.\u003C\u002Fp>\n\u003Ch4>I have some styles in CSS for my classes. How can I apply classes to the content?\u003C\u002Fh4>\n\u003Cp>Easy:\u003Cbr \u002F>\n    [sameheight additional_classes=”my-class1 my-classA”]\u003Cbr \u002F>\n      This is a short text\u003Cbr \u002F>\n    [\u002Fsameheight additional_classes=”my-class2 my-classB”]\u003Cbr \u002F>\n    [sameheight]\u003Cbr \u002F>\n      This is a very, very, very, very, very, very long text\u003Cbr \u002F>\n    [\u002Fsameheight]\u003C\u002Fp>\n\u003Ch4>Can I use all the possibilities together?\u003C\u002Fh4>\n\u003Cp>Sure:\u003Cbr \u002F>\n    [sameheight group=”1″ breakpoint=”md” additional_classes=”my-class1 my-classA” \u002F] will work.\u003C\u002Fp>\n\u003Ch4>Do I need to use the shortcode?\u003C\u002Fh4>\n\u003Cp>No! If you are editing your html, you can put the right properties in it. That’s all tha shortcode does. Make sure you add the class ‘same-height’. If you use a break point, add it with a hyphen (-) like this: ‘same-height-xs’, ‘same-height-sm’, ‘same-height-md’, or ‘same-height-lg’. The Javascript is looking for those classes to identify the html elements it has to work on.\u003Cbr \u002F>\nIf you are grouping boxes, use the ‘same-height-group’ property. Like \u003Ccode>\u003Cdiv class=\"same-height\" same-height-group=\"1\" >\u003C\u002Fcode>\u003C\u002Fp>\n","Force different parts of your content to the same height. Very useful if you want to present to boxes side by side. Responsive and bootstrap-friendly.",100,3084,"2017-01-24T15:31:00.000Z","4.7.32","1.3.0",[106,20,88,107,21],"css","sameheight","https:\u002F\u002Fwww.facebook.com\u002Fdamiarita","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsame-height.zip",{"slug":111,"name":112,"version":113,"author":114,"author_profile":115,"description":116,"short_description":117,"active_installs":118,"downloaded":119,"rating":13,"num_ratings":13,"last_updated":120,"tested_up_to":121,"requires_at_least":122,"requires_php":65,"tags":123,"homepage":127,"download_link":128,"security_score":91,"vuln_count":13,"unpatched_count":13,"last_vuln_date":34,"fetched_at":27},"pym-shortcode","Pym.js Embeds","1.3.2.4","Automattic","https:\u002F\u002Fprofiles.wordpress.org\u002Fautomattic\u002F","\u003Cp>Pym.js Embeds provides shortcode and Gutenberg block wrappers for embedding responsive iframes using \u003Ca href=\"http:\u002F\u002Fblog.apps.npr.org\u002Fpym.js\u002F\" rel=\"nofollow ugc\">Pym.js\u003C\u002Fa>, developed by the NPR Visuals Team. Embedded content resizes vertically to match its container’s width.\u003C\u002Fp>\n\u003Cp>AMP compatibility is provided by the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Famp\u002F\" rel=\"ugc\">official AMP plugin\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Pym.js Resources from NPR\u003C\u002Fh3>\n\u003Cp>You may also want to look at NPR’s Pym.js resources:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fblog.apps.npr.org\u002Fpym.js\u002F\" rel=\"nofollow ugc\">Pym.js homepage\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fnprapps\u002Fpym.js\u002F\" rel=\"nofollow ugc\">Pym.js repo on GutHub\u002Fnprapps\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","A WordPress block and shortcode for embedding iframes that are responsive horizontally and vertically, using the NPR Visuals Team's Pym.js.",90,4430,"2020-03-26T18:09:00.000Z","5.4.19","3.0.1",[124,125,20,126,21],"embeds","iframe","responsive","https:\u002F\u002Fgithub.com\u002FINN\u002Fpym-shortcode","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpym-shortcode.1.3.2.4.zip",{"slug":130,"name":131,"version":132,"author":133,"author_profile":134,"description":135,"short_description":136,"active_installs":47,"downloaded":137,"rating":138,"num_ratings":25,"last_updated":139,"tested_up_to":15,"requires_at_least":140,"requires_php":17,"tags":141,"homepage":143,"download_link":144,"security_score":91,"vuln_count":13,"unpatched_count":13,"last_vuln_date":34,"fetched_at":27},"insert-title","Insert Title","1.2","Harman Singh Hira","https:\u002F\u002Fprofiles.wordpress.org\u002Fjatthira\u002F","\u003Cp>This plugin simply Insert post’s or page’s title in content area. If you are really sick of copying and pasting title in content again and again, then simply use this plugin because it comes with Shortcode button. Click on button from editor to insert the title of the page.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Insert \u003Cstrong>“Post’s or Page’s”\u003C\u002Fstrong> title easily and use it within Content area\u003C\u002Fli>\n\u003Cli>Insert Shortcode using Visual Editor or Text Editor\u003C\u002Fli>\n\u003Cli>Simple Shortcode functionality\u003C\u002Fli>\n\u003Cli>SEO Friendly\u003C\u002Fli>\n\u003Cli>Mobile and Mobile theme’s friendly\u003C\u002Fli>\n\u003Cli>Simple lightweight Plugin\u003C\u002Fli>\n\u003Cli>Easy to use\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Resources\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.ultimatetech.org\u002Finsert-title-wordpress-plugin\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Finsert-title\" rel=\"ugc\">Support\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.ultimatetech.org\u002F?p=344#report_bug\" rel=\"nofollow ugc\">Report Bugs\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin simply Insert post's or page's title in content area. If you are really sick of copying and pasting title in content again and a &hellip;",1808,40,"2017-07-05T07:38:00.000Z","3.3",[68,130,20,21,142],"shortcodes","https:\u002F\u002Fultimatetech.org\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Finsert-title.zip",{"attackSurface":146,"codeSignals":157,"taintFlows":164,"riskAssessment":165,"analyzedAt":171},{"hooks":147,"ajaxHandlers":148,"restRoutes":149,"shortcodes":150,"cronEvents":156,"entryPointCount":25,"unprotectedCount":13},[],[],[],[151],{"tag":152,"callback":153,"file":154,"line":155},"htsP","hide_text_shortcode_post","hide_text_shortcode.php",12,[],{"dangerousFunctions":158,"sqlUsage":159,"outputEscaping":161,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":163},[],{"prepared":13,"raw":13,"locations":160},[],{"escaped":13,"rawEcho":13,"locations":162},[],[],[],{"summary":166,"deductions":167},"The \"hide-text-shortcode\" v1.1 plugin exhibits a generally good security posture in its current code analysis.  It correctly avoids dangerous functions, uses prepared statements for all SQL queries, and properly escapes all output. There are no identified file operations or external HTTP requests, and the attack surface appears to be minimal and protected. The absence of taint analysis findings further suggests a lack of immediate, exploitable vulnerabilities within the provided code snapshot.\n\nHowever, a significant concern arises from the plugin's vulnerability history. The presence of one unpatched medium severity CVE, specifically related to Cross-Site Scripting (XSS), is a critical red flag. This indicates that the plugin, in its past versions, has had a known flaw that allows for arbitrary code execution within a user's browser. The fact that this vulnerability remains unpatched for this version is a serious oversight and presents a clear and present danger.\n\nIn conclusion, while the static code analysis of v1.1 shows promising security practices, the unpatched historical vulnerability drastically outweighs these positive indicators. Users of this plugin are at risk of XSS attacks unless they can confirm that the specific CVE affecting this plugin has been addressed in a way not reflected in the provided data or that they are using a version that has since been patched. The plugin's strengths in code hygiene are overshadowed by the critical need to address the known security flaw.",[168],{"reason":169,"points":170},"Unpatched CVE",15,"2026-03-16T19:47:59.007Z",{"wat":173,"direct":179},{"assetPaths":174,"generatorPatterns":175,"scriptPaths":176,"versionParams":177},[],[],[],[178],"hide-text-shortcode\u002Fstyle.css?ver=",{"cssClasses":180,"htmlComments":181,"htmlAttributes":182,"restEndpoints":183,"jsGlobals":184,"shortcodeOutput":186},[],[],[],[],[185],"visualizza",[187,188],"\u003Cdiv id=\"testohtsP\">\u003Ca href=\"#\" onclick=\"visualizza('bodyhtsP'); return false\">","\u003Cdiv id=\"bodyhtsP\" style=\"display:none\">"]