[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQMvb158s9w5ePa2MNfdXLgeqrdkLZ3mWl6FGzXbFbxs":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":36,"analysis":144,"fingerprints":235},"hreflang-flag","hreflang Flag","1.2","julienvdg","https:\u002F\u002Fprofiles.wordpress.org\u002Fjulienvdg\u002F","\u003Cp>hreflang Flag plugin uses \u003Ca href=\"http:\u002F\u002Fwww.w3.org\u002FTR\u002Fcss3-selectors\u002F#attribute-selectors\" title=\"W3C CSS3 Attribute selectors description\" rel=\"nofollow ugc\">css3 selectors\u003C\u002Fa> to add a flag icon to your links depending on their \u003Ca href=\"http:\u002F\u002Fwww.w3.org\u002FTR\u002Fhtml401\u002Fstruct\u002Flinks.html#adef-hreflang\" title=\"hreflang attribute description on W3C\" rel=\"nofollow ugc\">hreflang attribute\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>This is really useful if you regularly link to pages in other languages and you want to inform your visitors about the language of the link target.\u003C\u002Fp>\n\u003Cp>It’s even more useful if your own blog is multilingual.\u003C\u002Fp>\n","Add a flag icon to link corresponding to the hreflang attribute.",10,3161,0,"2010-10-29T19:21:00.000Z","3.0.5","2.7","",[19,20,21,22,23],"css","flag","flags","hreflang","lang","http:\u002F\u002Fsilicone.homelinux.org\u002Fprojects\u002Fhreflang-flag","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhreflang-flag.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":26,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},2,100,30,84,"2026-04-05T09:24:42.708Z",[37,62,86,104,120],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":48,"last_updated":49,"tested_up_to":50,"requires_at_least":51,"requires_php":17,"tags":52,"homepage":57,"download_link":58,"security_score":59,"vuln_count":60,"unpatched_count":60,"last_vuln_date":61,"fetched_at":28},"language-icons-flags-switcher","Flag Icons","2.2","Vasilis Triantafyllou","https:\u002F\u002Fprofiles.wordpress.org\u002Fhavengr\u002F","\u003Cp>This plugin helps you to add the flag icons with the targeted links on your site by choosing desired position or using a shortcode.\u003C\u002Fp>\n\u003Cp>Version 2 supports Google Translate ICON !\u003C\u002Fp>\n\u003Cp>You just have to select position,flag and add the link!\u003C\u002Fp>\n\u003Cp>Flags Icons: English, Bosnia, Nepal, Klingon, Iceland, Switzerland, Mongolia, Moldova, Greece, Belgium, EU, UAE, Indonesia, Hong Kong, Brazil, Estonia, Lithuania, Latvia, Argentina, Finland, Norway, Germany, Spain, Wales, Ireland, Romania, India, Hungary, Portugal, Usa, Turkey, Japan, Israel, Saudi Arabia, Sweden, France, Italy, Netherlands, s. Korea, China, Czech , Cyprus, Russia, Malaysia, Singapore, Thailand, Denmark, Bulgaria , Canada, Dominician Republic, Croatia, Egypt, New Zealand, Myanmar, Algeria, Australia, Esperado, Iran, Iraq, Catalan, Taiwav, Albania, Morocco, Palestine, Luxembourg, Mexico, Vietnam, Azerbaijan,Belarus,Cambodia,Libya,Ethiopia, Luxembourg, Afghanistan, Aruba, Georgia, Haiti, Kuwait, Malta, paraguay, Peru, South-Africa, Uzbekistan, Ukraine, Pakistan, Australia, Austria, Tunisia and Poland.\u003C\u002Fp>\n\u003Ch3>Arbitrary section 1\u003C\u002Fh3>\n\u003Cp>Thanks for using! Its my first plugin i hope it will help!\u003C\u002Fp>\n","Flags Icons Language Switcher.",4000,63370,98,20,"2022-04-10T20:50:00.000Z","5.8.13","3.3",[21,53,54,55,56],"icons","language","multisite","switch","http:\u002F\u002Fwww.webcraft.gr\u002Fmuli","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flanguage-icons-flags-switcher.zip",64,1,"2025-03-31 00:00:00",{"slug":63,"name":64,"version":65,"author":66,"author_profile":67,"description":68,"short_description":69,"active_installs":70,"downloaded":71,"rating":32,"num_ratings":72,"last_updated":73,"tested_up_to":74,"requires_at_least":75,"requires_php":76,"tags":77,"homepage":82,"download_link":83,"security_score":84,"vuln_count":60,"unpatched_count":13,"last_vuln_date":85,"fetched_at":28},"language-switcher-for-transposh","Language Switcher for Transposh","2.0.6","codingfix","https:\u002F\u002Fprofiles.wordpress.org\u002Fcodingfix\u002F","\u003Cp>\u003Cstrong>IMPORTANT: READ BEFORE INSTALLING\u003C\u002Fstrong>\u003Cbr \u002F>\nLanguage Switcher for Transposh (LSfT) is \u003Cstrong>not\u003C\u002Fstrong> a translation engine. It is an advanced styling and integration tool that provides a beautiful, customizable interface for the \u003Ca href=\"https:\u002F\u002Ftransposh.org\u002Fdownload\" rel=\"nofollow ugc\">Transposh Translation Filter plugin\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>LSfT REQUIRES TRANSPOSH TO WORK.\u003C\u002Fstrong> It will not translate your content on its own and cannot be activated unless Transposh is already installed and active.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>How to get started:\u003C\u002Fstrong>\u003Cbr \u002F>\n1. \u003Cstrong>First:\u003C\u002Fstrong> Download, install, and activate \u003Ca href=\"https:\u002F\u002Ftransposh.org\u002Fdownload\" rel=\"nofollow ugc\">Transposh Translation Filter\u003C\u002Fa>. Configure your languages in the Transposh settings.\u003Cbr \u002F>\n2. \u003Cstrong>Second:\u003C\u002Fstrong> Install and activate \u003Cstrong>Language Switcher for Transposh\u003C\u002Fstrong>. You can now choose how to display your flags and language names.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Main Features:\u003C\u002Fstrong>\u003Cbr \u002F>\n* \u003Cstrong>Integrated CSS Editor (New in 2.0):\u003C\u002Fstrong> Customize the switcher’s appearance directly from the admin panel with a professional code editor (CodeMirror).\u003Cbr \u002F>\n* \u003Cstrong>Safe Customization:\u003C\u002Fstrong> Experiment with confidence! If something goes wrong with your custom styles, you can always restore the original plugin stylesheet with a single click.\u003Cbr \u002F>\n* \u003Cstrong>Fast & Smart Loading:\u003C\u002Fstrong> Your custom styles are saved in the database for maximum performance, while keeping the original files untouched as a secure backup.\u003Cbr \u002F>\n* \u003Cstrong>Flexbox Powered:\u003C\u002Fstrong> Modernized layout for perfect vertical and horizontal alignment in any theme.\u003Cbr \u002F>\n* \u003Cstrong>Automode:\u003C\u002Fstrong> Automatically inject the switcher into your primary or selected WordPress menu.\u003Cbr \u002F>\n* \u003Cstrong>Shortcodes & Widgets:\u003C\u002Fstrong> Full support for Shortcodes and Legacy Widgets, compatible with Classic and Block-based themes.\u003Cbr \u002F>\n* \u003Cstrong>Admin Tools:\u003C\u002Fstrong> Adds an “Edit Translation” button for authorized roles (Admin, Author, Editor) to quickly toggle the Transposh Editor.\u003C\u002Fp>\n\u003Ch3>Switcher Types\u003C\u002Fh3>\n\u003Cp>The version 2.0.0 provides 10 distinct switcher styles:\u003Cbr \u002F>\n1.  \u003Cstrong>Horizontal:\u003C\u002Fstrong> Flags only or Code only.\u003Cbr \u002F>\n2.  \u003Cstrong>Vertical:\u003C\u002Fstrong> Flags only ir Code only.\u003Cbr \u002F>\n3.  \u003Cstrong>Dropdown (Custom JS):\u003C\u002Fstrong> Flags only, Text only, Code only or Flags and Text.\u003Cbr \u002F>\n4.  \u003Cstrong>Native Select:\u003C\u002Fstrong> Lightweight browser-native dropdown: Code only or Text only.\u003C\u002Fp>\n","A professional, highly customizable language switcher for Transposh. Requires Transposh Translation Filter plugin to be installed.",1000,53325,6,"2026-01-13T17:51:00.000Z","6.9.4","5.0","5.6",[21,78,79,80,81],"language-switcher","multi-language","translation","transposh","https:\u002F\u002Fcodingfix.com\u002Flanguage-switcher-for-transposh","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flanguage-switcher-for-transposh.2.0.6.zip",99,"2024-04-19 00:00:00",{"slug":87,"name":88,"version":89,"author":90,"author_profile":91,"description":92,"short_description":93,"active_installs":48,"downloaded":94,"rating":13,"num_ratings":13,"last_updated":17,"tested_up_to":95,"requires_at_least":96,"requires_php":17,"tags":97,"homepage":101,"download_link":102,"security_score":32,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":103},"stella-flags","Stella Flags Widget","1.0","rafallach","https:\u002F\u002Fprofiles.wordpress.org\u002Freal99\u002F","\u003Cp>Plugin creates language selector widget with country flags for the Stella plugin.\u003Cbr \u002F>\nPlugin can be easly styled by css attached to your wordpress template.\u003C\u002Fp>\n\u003Ch3>Source\u003C\u002Fh3>\n\u003Cp>Mecrucrial Repository: https:\u002F\u002Frafallach@bitbucket.org\u002Frafallach\u002Fstella-flags-plugin\u003C\u002Fp>\n","Plugin creates language selector widget with country flags for the Stella plugin.",2439,"3.4.2","3.0",[21,98,99,100],"languages","localization","widget","http:\u002F\u002Fbitbucket.org\u002Frafallach\u002Fstella-flags-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstella-flags.zip","2026-03-15T10:48:56.248Z",{"slug":105,"name":106,"version":107,"author":108,"author_profile":109,"description":110,"short_description":111,"active_installs":11,"downloaded":112,"rating":32,"num_ratings":60,"last_updated":113,"tested_up_to":114,"requires_at_least":96,"requires_php":17,"tags":115,"homepage":117,"download_link":118,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":119},"no-function-language-widget","No Function Language Widget","1.6","theode","https:\u002F\u002Fprofiles.wordpress.org\u002Ftheode\u002F","\u003Cp>Did you ever need to connect multiple language plugins? I know this is a niche, but from my long lasting experience I know that sometimes you need such a thing.\u003C\u002Fp>\n\u003Cp>Maybe you don’t like the widgets your translation plugin provides. So you maybe need something else.\u003C\u002Fp>\n\u003Cp>Try this if you are in need for a language widget which has no function except to be a widget.\u003C\u002Fp>\n\u003Cp>Here is an example:\u003C\u002Fp>\n\u003Cp>Imagine you have some people in your company providing their own translation but for some reason you also need machine translations of your content. In our specific case it was the plugin Global Translator and WPML. Of course all these plugins have their own widgets, but getting mad if you try to use them both because their widgets only work with the single plugin. So there was a need for a widget which has no function behind it to simply connect two plugins.\u003C\u002Fp>\n\u003Cp>You need to configure the WPML part for the languages with your own translations and the Global Translator part for those without.\u003C\u002Fp>\n\u003Cp>In the no function language widget you simply choose the language codes with a comma seperated list. It even works if you need other names for your languages. Just replace the flag to your name for example rename de.png to german.png and use \u002Fgerman as your language base.\u003C\u002Fp>\n","With this you can bridge the gap between multiple translation plugins. It is a no function language widget with multiple options.",3442,"2016-10-30T19:47:00.000Z","4.7.32",[21,54,116,100],"multilingual","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fno-function-language-widget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fno-function-language-widget.zip","2026-03-15T14:54:45.397Z",{"slug":121,"name":122,"version":123,"author":124,"author_profile":125,"description":126,"short_description":127,"active_installs":128,"downloaded":129,"rating":130,"num_ratings":131,"last_updated":132,"tested_up_to":133,"requires_at_least":134,"requires_php":135,"tags":136,"homepage":142,"download_link":143,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"international-telephone-input-for-contact-form-7","International Telephone Input for Contact Form 7","1.5.7","Yordan Soares","https:\u002F\u002Fprofiles.wordpress.org\u002Fyordansoares\u002F","\u003Cp>Addon for Contact Form 7 that creates a new type of input for entering and validating international telephone numbers. It adds a flag dropdown with prefix of the telephone number, detects the user’s country, displays a relevant placeholder and provides formatting\u002Fvalidation methods.\u003C\u002Fp>\n\u003Ch4>How to use\u003C\u002Fh4>\n\u003Cp>Once you have installed and activated your plugin, a new type of input field will be available in your Contact Form 7 forms. In order to add it to your form, you can either click on the “International Telephone” button above your form editor, or add the shortcode like: \u003Ccode>[intl_tel* {your-phone}]\u003C\u002Fcode>. Replace \u003Ccode>{your-phone}\u003C\u002Fcode> by the name do you want to give the field. Optionally, you can use the asterisk (*) to makes the field required.\u003C\u002Fp>\n\u003Cp>To display the field’s info on your email, use this tag: \u003Ccode>[{your-phone}]\u003C\u002Fcode>. It will display something like +12025550109\u003C\u002Fp>\n\u003Ch4>Aditional info in your email\u003C\u002Fh4>\n\u003Cp>You can also recover specific parts of the telephone number: the name of the country it refers to, the country code, the number without the country code. Use this tags:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>[{your-phone}-cf7it-country-name]\u003C\u002Fcode>: It prints the name of the country. For the example above: United States\u003C\u002Fli>\n\u003Cli>\u003Ccode>[{your-phone}-cf7it-country-code]\u003C\u002Fcode>: It prints the country code of the phone number. For the example above: 1\u003C\u002Fli>\n\u003Cli>\u003Ccode>[{your-phone}-cf7it-country-iso2]\u003C\u002Fcode>: It prints the country iso code. For the example above: us\u003C\u002Fli>\n\u003Cli>\u003Ccode>[{your-phone}-cf7it-national]\u003C\u002Fcode>: It prints the phone number without international prefix. For the example above: 2025550109\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Third-party software\u003C\u002Fh4>\n\u003Cp>This plugin uses the \u003Ca href=\"https:\u002F\u002Fintl-tel-input.com\u002F\" rel=\"nofollow ugc\">International Telephone Input\u003C\u002Fa> JavaScript library and the \u003Ca href=\"https:\u002F\u002Fextreme-ip-lookup.com\" rel=\"nofollow ugc\">eXTReMe-IP-LOOKUP.com API\u003C\u002Fa>.\u003C\u002Fp>\n","Addon for Contact Form 7 that creates a new type of input for entering and validating international telephone numbers. It adds a flag dropdown, detect …",9000,78374,92,26,"2022-02-21T04:53:00.000Z","5.9.13","4.0","7.0",[137,138,139,140,141],"cf7-international-phone-input","contact-form-7","country-code","international-phone-input","telephone-flags-input","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Finternational-telephone-input-for-contact-form-7\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Finternational-telephone-input-for-contact-form-7.1.5.7.zip",{"attackSurface":145,"codeSignals":167,"taintFlows":223,"riskAssessment":224,"analyzedAt":234},{"hooks":146,"ajaxHandlers":163,"restRoutes":164,"shortcodes":165,"cronEvents":166,"entryPointCount":13,"unprotectedCount":13},[147,152,155,159],{"type":148,"name":149,"callback":149,"file":150,"line":151},"action","admin_menu","hreflang-flag-admin.inc.php",241,{"type":148,"name":153,"callback":153,"file":150,"line":154},"admin_init",242,{"type":148,"name":156,"callback":156,"file":157,"line":158},"wp_print_styles","hreflang-flag-public.inc.php",47,{"type":148,"name":160,"callback":160,"file":161,"line":162},"init","hreflang-flag.php",39,[],[],[],[],{"dangerousFunctions":168,"sqlUsage":169,"outputEscaping":171,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":222},[],{"prepared":13,"raw":13,"locations":170},[],{"escaped":13,"rawEcho":172,"locations":173},24,[174,177,178,180,182,184,186,188,190,192,194,196,198,200,202,204,206,208,210,212,214,216,218,220],{"file":150,"line":175,"context":176},45,"raw output",{"file":150,"line":158,"context":176},{"file":150,"line":179,"context":176},107,{"file":150,"line":181,"context":176},108,{"file":150,"line":183,"context":176},113,{"file":150,"line":185,"context":176},117,{"file":150,"line":187,"context":176},118,{"file":150,"line":189,"context":176},122,{"file":150,"line":191,"context":176},123,{"file":150,"line":193,"context":176},127,{"file":150,"line":195,"context":176},128,{"file":150,"line":197,"context":176},132,{"file":150,"line":199,"context":176},133,{"file":150,"line":201,"context":176},134,{"file":150,"line":203,"context":176},140,{"file":150,"line":205,"context":176},148,{"file":150,"line":207,"context":176},150,{"file":150,"line":209,"context":176},152,{"file":150,"line":211,"context":176},154,{"file":150,"line":213,"context":176},156,{"file":150,"line":215,"context":176},158,{"file":150,"line":217,"context":176},162,{"file":150,"line":219,"context":176},163,{"file":157,"line":221,"context":176},37,[],[],{"summary":225,"deductions":226},"The \"hreflang-flag\" v1.2 plugin exhibits a strong security posture based on the provided static analysis.  The plugin has no identifiable entry points like AJAX handlers, REST API routes, or shortcodes, significantly minimizing its attack surface.  Furthermore, all SQL queries are properly prepared, and there are no file operations or external HTTP requests, which are common sources of vulnerabilities.\n\nHowever, a significant concern arises from the complete lack of output escaping across all 24 detected output points. This represents a critical weakness that could lead to Cross-Site Scripting (XSS) vulnerabilities if any user-supplied data is directly reflected in the output without proper sanitization.  While the plugin has no recorded vulnerability history, the absence of security checks (nonces and capability checks) alongside the unescaped output means that any potential vulnerability would be entirely unprotected.\n\nIn conclusion, the \"hreflang-flag\" plugin benefits from a very small attack surface and secure data handling for database operations.  The critical flaw lies in its output sanitization, leaving it highly susceptible to XSS attacks.  The lack of any recorded vulnerabilities might be due to its limited functionality or previous low exposure, but the current analysis reveals a significant, unaddressed risk.",[227,229,232],{"reason":228,"points":48},"100% of outputs are unescaped",{"reason":230,"points":231},"No capability checks",5,{"reason":233,"points":231},"No nonce checks","2026-03-17T00:18:05.834Z",{"wat":236,"direct":245},{"assetPaths":237,"generatorPatterns":240,"scriptPaths":241,"versionParams":242},[238,239],"\u002Fwp-content\u002Fplugins\u002Fhreflang-flag\u002Fcss\u002Fhreflang-flag.css","\u002Fwp-content\u002Fplugins\u002Fhreflang-flag\u002Fjs\u002Fhreflang-flag.js",[],[239],[243,244],"hreflang-flag\u002Fcss\u002Fhreflang-flag.css?ver=","hreflang-flag\u002Fjs\u002Fhreflang-flag.js?ver=",{"cssClasses":246,"htmlComments":248,"htmlAttributes":251,"restEndpoints":252,"jsGlobals":253,"shortcodeOutput":255},[247],"hreflang-flag-icon",[249,250],"\u003C!-- START hreflang-flag -->","\u003C!-- END hreflang-flag -->",[],[],[254],"hreflang_flag_params",[]]