[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fodUaRe3m4kbL0XgSS_0kdRrvla8yDEz5rvgFhdDbSTA":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":49,"crawl_stats":38,"alternatives":57,"analysis":144,"fingerprints":432},"hreflang-manager-lite","Hreflang Manager – Hreflang Implementation for International SEO","1.16","DAEXT","https:\u002F\u002Fprofiles.wordpress.org\u002Fdaext\u002F","\u003Cp>The Hreflang Manager plugin provides you an easy and reliable method to implement hreflang in WordPress.\u003C\u002Fp>\n\u003Cp>For more information on the technical use of hreflang, please consider reading the \u003Ca href=\"https:\u002F\u002Fdevelopers.google.com\u002Fsearch\u002Fdocs\u002Fadvanced\u002Fcrawling\u002Flocalized-versions\" rel=\"nofollow ugc\">official documentation provided by Google\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Pro Version\u003C\u002Fh3>\n\u003Cp>A \u003Ca href=\"https:\u002F\u002Fdaext.com\u002Fhreflang-manager\u002F\" rel=\"nofollow ugc\">Pro Version\u003C\u002Fa> of this plugin is available on our website with many additional features, like the ability to move the hreflang implementation in all the websites of the network, a maximum of 100 alternative versions of the page per connection, the ability to mass import hreflang data from a spreadsheet, and much more.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Supports the hreflang implementation of different websites or the sub-sites of a WordPress network\u003C\u002Fli>\n\u003Cli>Supports all the languages defined with \u003Ca href=\"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FList_of_ISO_639-1_codes\" rel=\"nofollow ugc\">ISO_639-1\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Supports all the scripts defined with \u003Ca href=\"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FISO_15924\" rel=\"nofollow ugc\">ISO 15924\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Supports all the countries defined with \u003Ca href=\"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FISO_3166-1_alpha-2\" rel=\"nofollow ugc\">ISO 3166-1 alpha-2\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>A maximum of 10 alternative versions of the page per connection\u003C\u002Fli>\n\u003Cli>Includes a log system to verify the correct implementation in the front-end\u003C\u002Fli>\n\u003Cli>Ability to select the default languages, scripts, and countries\u003C\u002Fli>\n\u003Cli>Automatically deletes the hreflang data of the deleted posts\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>This plugin makes use of the following resources:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fselect2.org\u002F\" rel=\"nofollow ugc\">Select2\u003C\u002Fa> licensed under the MIT License\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For each library you can find the actual copy of the license inside the folder used to store the library files.\u003C\u002Fp>\n","The Hreflang Manager plugin provides you an easy and reliable method to implement hreflang in WordPress.",6000,59403,92,7,"2026-03-01T09:08:00.000Z","6.9.4","4.0","5.2",[20,21,22,23,24],"hreflang","internationalization","language","multilingual","seo","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhreflang-manager-lite.1.16.zip",100,1,0,"2023-11-14 00:00:00","2026-03-15T15:16:48.613Z",[33],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48},"WF-c357e34f-2d0f-4af4-bb67-cbbc6cd4e141-hreflang-manager-lite","hreflang-manager-cross-site-request-forgery","Hreflang Manager \u003C= 1.06 - Cross-Site Request Forgery","The Hreflang Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.06. This is due to missing nonce validation in the ~\u002Fadmin\u002Fview\u002Fconnections.php file. This makes it possible for unauthenticated attackers to modify, delete, and clone connections via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.",null,"\u003C=1.06","1.07","medium",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2024-01-22 19:56:02",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fc357e34f-2d0f-4af4-bb67-cbbc6cd4e141?source=api-prod",70,{"slug":50,"display_name":7,"profile_url":8,"plugin_count":51,"total_installs":52,"avg_security_score":53,"avg_patch_time_days":54,"trust_score":55,"computed_at":56},"daext",13,30390,99,101,78,"2026-04-04T15:40:55.109Z",[58,74,90,107,122],{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":66,"downloaded":67,"rating":29,"num_ratings":29,"last_updated":68,"tested_up_to":16,"requires_at_least":69,"requires_php":70,"tags":71,"homepage":72,"download_link":73,"security_score":27,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"hreflang-tags-management","HREFLANG Tags Management By Webnow","1.0.2","Webnow","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebnow66\u002F","\u003Cp>The HREFLANG Tags Management is a powerful tool designed to simplify the management of hreflang tags for websites targeting multiple languages and regions. It ensures that search engines correctly understand the linguistic and regional targeting of your web pages, improving SEO and user experience.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Easy Hreflang Tag Management: Add, edit, and delete hreflang tags directly from your WordPress dashboard.\u003C\u002Fli>\n\u003Cli>Import\u002FExport: Manage hreflang tags with JSON import\u002Fexport functionality.\u003C\u002Fli>\n\u003Cli>Multisite Support: Fully compatible with WordPress multisite installations.\u003C\u002Fli>\n\u003Cli>Automatic Tag Generation: Generate hreflang tags automatically based on site structure and language settings.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPLv2 or later license. For more information, see the LICENSE.txt file included with the plugin.\u003C\u002Fp>\n","HREFLANG Tags Management helps you manage hreflang tags for multilingual and multi-regional websites easily from your WordPress dashboard.",600,1915,"2025-12-26T05:13:00.000Z","4.7","7.4",[20,21,23,24],"https:\u002F\u002Fwww.webnow.in\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhreflang-tags-management.1.0.2.zip",{"slug":75,"name":76,"version":77,"author":78,"author_profile":79,"description":80,"short_description":81,"active_installs":29,"downloaded":82,"rating":29,"num_ratings":29,"last_updated":83,"tested_up_to":16,"requires_at_least":84,"requires_php":70,"tags":85,"homepage":88,"download_link":89,"security_score":27,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"abdiel-multilingual-manager","Multilingual Manager – Abdiel","1.0.0","Abdiel","https:\u002F\u002Fprofiles.wordpress.org\u002Fabdielreyef\u002F","\u003Cp>\u003Cstrong>Abdiel Multilingual Manager\u003C\u002Fstrong> is a lightweight and developer-friendly multilingual plugin for WordPress.\u003C\u002Fp>\n\u003Cp>It is designed to manage \u003Cstrong>language structure, content relationships, and SEO signals\u003C\u002Fstrong>, without automatic translations or heavy overhead.\u003C\u002Fp>\n\u003Cp>You keep full control over:\u003Cbr \u002F>\n– Your content\u003Cbr \u002F>\n– Your URLs\u003Cbr \u002F>\n– Your SEO strategy\u003Cbr \u002F>\n– Your performance\u003C\u002Fp>\n\u003Cp>This plugin is ideal for projects where translations are created manually and quality matters.\u003C\u002Fp>\n\u003Ch4>Key features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Define multiple site languages with one default language\u003C\u002Fli>\n\u003Cli>Assign a language to each page, post, and selected custom post types\u003C\u002Fli>\n\u003Cli>Link translation equivalents between languages\u003C\u002Fli>\n\u003Cli>Automatically generate hreflang and alternate URLs\u003C\u002Fli>\n\u003Cli>Language switcher via shortcode, menu, or floating button\u003C\u002Fli>\n\u003Cli>Optional menu switching per language\u003C\u002Fli>\n\u003Cli>Elementor compatible (headers, footers, and Nav Menu widgets)\u003C\u002Fli>\n\u003Cli>Flexible URL modes (prefix or query-based)\u003C\u002Fli>\n\u003Cli>Bulk language assignment for content\u003C\u002Fli>\n\u003Cli>Clean, predictable, and SEO-friendly behavior\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Important note about translations\u003C\u002Fh4>\n\u003Cp>This plugin \u003Cstrong>does NOT translate content automatically\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>Abdiel Multilingual Manager is built for:\u003Cbr \u002F>\n* Manual, high-quality translations\u003Cbr \u002F>\n* SEO-focused multilingual sites\u003Cbr \u002F>\n* Full control without forced workflows\u003Cbr \u002F>\n* Minimal performance impact\u003C\u002Fp>\n\u003Ch4>Optional translation tools (Beta)\u003C\u002Fh4>\n\u003Cp>Automatic translation features are intentionally \u003Cstrong>not included in the core plugin\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>An optional \u003Cstrong>beta translation module\u003C\u002Fstrong> may be offered separately for users who want assisted translations, while keeping the core plugin clean, fast, and predictable.\u003C\u002Fp>\n\u003Ch4>Ideal for\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Developers\u003C\u002Fli>\n\u003Cli>Designers using Elementor\u003C\u002Fli>\n\u003Cli>SEO professionals\u003C\u002Fli>\n\u003Cli>Multilingual business websites\u003C\u002Fli>\n\u003Cli>Projects that require full control over URLs and content\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Insert the language switcher anywhere using the shortcode:\u003Cbr \u002F>\n  [abdiel_language_switcher]\u003C\u002Fli>\n\u003Cli>Optionally enable the floating switcher from \u003Cstrong>Settings\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>Link translation equivalents to activate hreflang and alternate URLs automatically.\u003C\u002Fli>\n\u003C\u002Ful>\n","Lightweight multilingual manager for WordPress focused on language structure, SEO, and full content control.",127,"2026-01-22T11:48:00.000Z","6.0",[86,20,87,23,24],"elementor","languages","https:\u002F\u002Fjoseabdiel.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fabdiel-multilingual-manager.1.0.0.zip",{"slug":91,"name":92,"version":93,"author":94,"author_profile":95,"description":96,"short_description":97,"active_installs":29,"downloaded":98,"rating":29,"num_ratings":29,"last_updated":25,"tested_up_to":99,"requires_at_least":100,"requires_php":70,"tags":101,"homepage":104,"download_link":105,"security_score":27,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":106},"puzzlesync","PuzzleSync – Multilingual Content Manager","1.0.5","Chris Martens","https:\u002F\u002Fprofiles.wordpress.org\u002Fchrmrtns\u002F","\u003Cp>\u003Cstrong>PuzzleSync helps you rank in multiple countries by properly managing multilingual content for search engines.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>If you run a multilingual WordPress site, you need proper hreflang implementation to tell Google which language version to show in each country. PuzzleSync makes this easy with automatic hreflang tag generation, translation management, and SEO validation – without requiring expensive translation plugins or complex configurations.\u003C\u002Fp>\n\u003Ch4>Why Choose PuzzleSync?\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>🎯 Simple Language Detection\u003C\u002Fstrong>\u003Cbr \u002F>\nJust add a category or tag to your posts (like “English” or “Deutsch”) and PuzzleSync automatically:\u003Cbr \u002F>\n* Detects the content language\u003Cbr \u002F>\n* Generates proper hreflang tags\u003Cbr \u002F>\n* Sets the correct HTML lang attribute\u003Cbr \u002F>\n* Creates JSON-LD structured data for search engines\u003C\u002Fp>\n\u003Cp>No need for complex language codes or technical setup!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>🌍 Truly Multilingual\u003C\u002Fstrong>\u003Cbr \u002F>\nUnlike plugins limited to 2-3 languages, PuzzleSync supports ANY language you configure:\u003Cbr \u002F>\n* English, German, French, Spanish, Italian, Portuguese, Dutch, Polish, Russian\u003Cbr \u002F>\n* Japanese, Chinese, Korean, Arabic, Turkish, Swedish, Danish, Norwegian\u003Cbr \u002F>\n* 30+ built-in language mappings, easily add more in settings\u003Cbr \u002F>\n* Automatic locale conversion (en \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> en-US, de \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> de-DE, etc.)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>⚡ Fast & Lightweight\u003C\u002Fstrong>\u003Cbr \u002F>\n* Custom database storage (not post meta) for instant queries\u003Cbr \u002F>\n* No impact on page load speed\u003Cbr \u002F>\n* Works with any theme or page builder (Gutenberg, Elementor, Bricks, etc.)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>✅ Built-in Validation\u003C\u002Fstrong>\u003Cbr \u002F>\n* Automatic detection of broken translation links\u003Cbr \u002F>\n* One-click fixes for common issues\u003Cbr \u002F>\n* Validation dashboard shows exactly what needs attention\u003C\u002Fp>\n\u003Cp>\u003Cstrong>🔧 Flexible & Developer-Friendly\u003C\u002Fstrong>\u003Cbr \u002F>\n* Works with categories OR tags (your choice)\u003Cbr \u002F>\n* Tag naming is flexible: “english”, “English”, “en”, “english-version” all work!\u003Cbr \u002F>\n* Translation Groups for automatic linking\u003Cbr \u002F>\n* Clean, modern PHP code with namespaces\u003Cbr \u002F>\n* Shortcodes for language switchers\u003C\u002Fp>\n\u003Ch4>Perfect For\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Multilingual blogs and business sites\u003C\u002Fli>\n\u003Cli>International e-commerce stores\u003C\u002Fli>\n\u003Cli>Content creators targeting multiple countries\u003C\u002Fli>\n\u003Cli>SEO professionals managing multilingual sites\u003C\u002Fli>\n\u003Cli>Agencies building sites for international clients\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>How It Works\u003C\u002Fh4>\n\u003Col>\n\u003Cli>\u003Cstrong>Add languages\u003C\u002Fstrong> in settings (English, German, French, etc.)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Tag your content\u003C\u002Fstrong> with categories or tags (e.g., “english”, “deutsch”)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Link translations\u003C\u002Fstrong> using Translation Groups or manual URLs\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Done!\u003C\u002Fstrong> PuzzleSync automatically generates all hreflang tags and SEO markup\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Language Support\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Supports ANY language\u003C\u002Fstrong> – just add it in settings! Built-in support includes:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>European:\u003C\u002Fstrong> English, German, French, Spanish, Italian, Portuguese, Dutch, Polish, Russian, Czech, Hungarian, Romanian, Greek, Ukrainian, Croatian, Slovak, Bulgarian, Swedish, Danish, Norwegian, Finnish\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Asian:\u003C\u002Fstrong> Japanese, Chinese, Korean, Thai, Vietnamese, Indonesian, Hebrew\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Middle Eastern:\u003C\u002Fstrong> Arabic, Turkish\u003C\u002Fli>\n\u003Cli>\u003Cstrong>And more\u003C\u002Fstrong> – easily add any language you need!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>PuzzleSync automatically handles proper locale formatting (en \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> en-US, de \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> de-DE, ja \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> ja-JP, etc.)\u003C\u002Fp>\n","Manage multilingual content with automatic hreflang tags, translation groups, and dynamic language detection for better SEO.",158,"6.8.5","5.8",[20,102,23,24,103],"language-switcher","translation","https:\u002F\u002Fpuzzlesync.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpuzzlesync.1.0.5.zip","2026-03-15T10:48:56.248Z",{"slug":108,"name":109,"version":110,"author":111,"author_profile":112,"description":113,"short_description":114,"active_installs":29,"downloaded":115,"rating":29,"num_ratings":29,"last_updated":116,"tested_up_to":16,"requires_at_least":84,"requires_php":70,"tags":117,"homepage":120,"download_link":121,"security_score":27,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"translatejs-website-translator","Website translator & Language switcher – TranslateJS","1.1.3","translatejs","https:\u002F\u002Fprofiles.wordpress.org\u002Ftranslatejs\u002F","\u003Cp>Translate JS is a powerful translation plugin for WordPress that helps you make your website multilingual in seconds. Expand your reach to new countries and unlock international growth by connecting with audiences worldwide in their native languages.\u003C\u002Fp>\n\u003Cp>It uses advanced AI to provide accurate translations and includes built-in SEO support to help your translated content rank in search engines across different regions. Break down language barriers and tap into new markets without the complexity.\u003C\u002Fp>\n\u003Ch4>Key Benefits\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Quick Setup\u003C\u002Fstrong> – Get started in under 10 seconds\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Reach Global Audiences\u003C\u002Fstrong> – Connect with visitors from any country in their preferred language\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Drive International Growth\u003C\u002Fstrong> – Expand your business into new markets effortlessly\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Increase Conversions\u003C\u002Fstrong> – Studies show users are more likely to purchase in their native language\u003C\u002Fli>\n\u003Cli>\u003Cstrong>SEO-Optimized\u003C\u002Fstrong> – Creates SEO-friendly URLs for each language (\u002Fes\u002F, \u002Ffr\u002F ..).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>AI-Powered\u003C\u002Fstrong> – Advanced translation technology for natural, accurate results\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Lightweight:\u003C\u002Fstrong> Minimal impact on your site’s performance.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable:\u003C\u002Fstrong> Easily change colors and style og the language switcher to match your website.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>SEO Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>SEO-friendly language URLs (\u002Fes\u002F, \u002Ffr\u002F ..)\u003C\u002Fli>\n\u003Cli>Creates indexable translated pages\u003C\u002Fli>\n\u003Cli>Automatic hreflang generation\u003C\u002Fli>\n\u003Cli>Translated meta titles and descriptions\u003C\u002Fli>\n\u003Cli>Compatible with popular WordPress SEO plugins\u003C\u002Fli>\n\u003Cli>Suitable for international content discovery\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Perfect For\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>E-commerce stores looking to sell internationally\u003C\u002Fli>\n\u003Cli>Blogs wanting to reach a global audience\u003C\u002Fli>\n\u003Cli>Businesses expanding into new markets\u003C\u002Fli>\n\u003Cli>Service providers targeting multilingual customers\u003C\u002Fli>\n\u003Cli>Anyone ready to grow beyond their local market\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Transform your website into a global platform and watch your audience grow across continents.\u003C\u002Fp>\n\u003Ch3>External services\u003C\u002Fh3>\n\u003Cp>This plugin connects to our own API, which operates on https:\u002F\u002Fapp.translatejs.com.\u003Cbr \u002F>\nIt is necessary to store account data, settings, and the translations themselves. Only public texts available on the user’s website are stored to improve translation speed, and this data can be deleted immediately when the user decides to delete a specific translation or all translations at once.\u003C\u002Fp>\n","Short Description: Automatically translate your website and add a language switcher in 10 seconds. Boost global SEO with instant localization.",228,"2026-02-08T00:45:00.000Z",[102,118,23,24,119],"localization","translate","https:\u002F\u002Fapp.translatejs.com\u002Fwordpress-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftranslatejs-website-translator.1.1.3.zip",{"slug":123,"name":124,"version":125,"author":126,"author_profile":127,"description":128,"short_description":129,"active_installs":130,"downloaded":131,"rating":132,"num_ratings":133,"last_updated":134,"tested_up_to":16,"requires_at_least":135,"requires_php":70,"tags":136,"homepage":139,"download_link":140,"security_score":141,"vuln_count":142,"unpatched_count":29,"last_vuln_date":143,"fetched_at":31},"loco-translate","Loco Translate","2.8.3","Tim W","https:\u002F\u002Fprofiles.wordpress.org\u002Ftimwhitlock\u002F","\u003Cp>Loco Translate provides in-browser editing of WordPress translation files and integration with automatic translation services.\u003C\u002Fp>\n\u003Cp>It also provides Gettext\u002Flocalization tools for developers, such as extracting strings and generating templates.\u003C\u002Fp>\n\u003Cp>Features include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Built-in translation editor within WordPress admin\u003C\u002Fli>\n\u003Cli>Integration with translation APIs including DeepL, Google, Lecto, Microsoft and OpenAI.\u003C\u002Fli>\n\u003Cli>Create and update language files directly in your theme or plugin\u003C\u002Fli>\n\u003Cli>Extraction of translatable strings from your source code\u003C\u002Fli>\n\u003Cli>Native MO file compilation without the need for Gettext on your system\u003C\u002Fli>\n\u003Cli>JSON (Jed) file compilation compatible with WordPress script localization\u003C\u002Fli>\n\u003Cli>Support for standard PO features including comments, references and plural forms\u003C\u002Fli>\n\u003Cli>PO source view with clickable source code references\u003C\u002Fli>\n\u003Cli>Protected language directory for saving custom translations\u003C\u002Fli>\n\u003Cli>Configurable PO file backups with diff and restore capability\u003C\u002Fli>\n\u003Cli>Built-in WordPress locale codes\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Official \u003Ca href=\"https:\u002F\u002Flocalise.biz\u002F\" rel=\"nofollow ugc\">Loco\u003C\u002Fa> WordPress plugin by Tim Whitlock.\u003Cbr \u002F>\nFor more information please visit our \u003Ca href=\"https:\u002F\u002Flocalise.biz\u002Fwordpress\u002Fplugin\" rel=\"nofollow ugc\">plugin page\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Keyboard shortcuts\u003C\u002Fh3>\n\u003Cp>The PO file editor supports the following keyboard shortcuts for faster translating:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Done and Next: \u003Ccode>Ctrl ↵\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Next string: \u003Ccode>Ctrl \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">↓\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Previous string: \u003Ccode>Ctrl \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">↑\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Next untranslated: \u003Ccode>Shift Ctrl \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">↓\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Previous untranslated: \u003Ccode>Shift Ctrl \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">↑\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Copy from source text: \u003Ccode>Ctrl B\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Clear translation: \u003Ccode>Ctrl K\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Toggle Fuzzy: \u003Ccode>Ctrl U\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Save PO \u002F compile MO: \u003Ccode>Ctrl S\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Toggle invisibles: \u003Ccode>Shift Ctrl I\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Suggest translation: \u003Ccode>Ctrl J\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Mac users can use ⌘ Cmd instead of Ctrl.\u003C\u002Fp>\n","Translate WordPress plugins and themes directly in your browser. Versatile PO file editor with integrated AI translation providers.",1000000,34331592,96,447,"2026-03-14T11:53:00.000Z","6.6",[137,138,22,23,103],"i18n","l10n","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Floco-translate\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Floco-translate.2.8.3.zip",95,4,"2026-03-30 15:35:09",{"attackSurface":145,"codeSignals":268,"taintFlows":332,"riskAssessment":423,"analyzedAt":431},{"hooks":146,"ajaxHandlers":239,"restRoutes":240,"shortcodes":266,"cronEvents":267,"entryPointCount":142,"unprotectedCount":29},[147,153,156,160,164,168,173,177,181,185,190,193,195,198,201,204,209,214,216,218,220,223,228,232,236],{"type":148,"name":149,"callback":150,"file":151,"line":152},"action","admin_enqueue_scripts","enqueue_admin_styles","admin\\class-daexthrmal-admin.php",64,{"type":148,"name":149,"callback":154,"file":151,"line":155},"enqueue_admin_scripts",65,{"type":148,"name":157,"callback":158,"file":151,"line":159},"admin_menu","me_add_admin_menu",68,{"type":148,"name":161,"callback":162,"file":151,"line":163},"add_meta_boxes","create_meta_box",71,{"type":148,"name":165,"callback":166,"file":151,"line":167},"save_post","save_meta_box",74,{"type":148,"name":169,"callback":170,"priority":171,"file":151,"line":172},"wpmu_new_blog","new_blog_create_options_and_tables",10,77,{"type":148,"name":174,"callback":175,"priority":171,"file":151,"line":176},"delete_blog","delete_blog_delete_options_and_tables",80,{"type":148,"name":178,"callback":179,"file":151,"line":180},"wp_trash_post","delete_post_connection",83,{"type":148,"name":182,"callback":183,"file":151,"line":184},"init","handle_menus",86,{"type":148,"name":186,"callback":187,"priority":171,"file":188,"line":189},"admin_init","handle_duplicate","admin\\inc\\menu\\class-daexthrmal-menu-elements.php",125,{"type":148,"name":186,"callback":191,"priority":171,"file":188,"line":192},"handle_delete",126,{"type":148,"name":186,"callback":194,"priority":171,"file":188,"line":82},"handle_bulk_actions",{"type":148,"name":186,"callback":196,"priority":171,"file":188,"line":197},"process_form",131,{"type":148,"name":182,"callback":199,"file":200,"line":159},"daexthrmal_register_hreflang_manager_sidebar","blocks\\src\\init.php",{"type":148,"name":149,"callback":202,"file":200,"line":203},"daexthrmal_enqueue_editor_assets",84,{"type":148,"name":205,"callback":206,"file":207,"line":208},"rest_api_init","rest_api_register_route","inc\\class-daexthrmal-rest.php",38,{"type":148,"name":210,"callback":211,"file":212,"line":213},"plugins_loaded","get_instance","init.php",27,{"type":148,"name":210,"callback":211,"file":212,"line":215},31,{"type":148,"name":210,"callback":211,"file":212,"line":217},43,{"type":148,"name":210,"callback":211,"file":212,"line":219},60,{"type":148,"name":182,"callback":221,"file":212,"line":222},"daexthrmal_load_plugin_textdomain",108,{"type":148,"name":224,"callback":225,"file":226,"line":227},"wp_head","set_hreflang","public\\class-daexthrmal-public.php",36,{"type":148,"name":229,"callback":230,"file":226,"line":231},"wp_footer","generate_log",39,{"type":148,"name":233,"callback":234,"file":226,"line":235},"wp_enqueue_scripts","enqueue_styles",42,{"type":148,"name":233,"callback":237,"file":226,"line":238},"enqueue_scripts",45,[],[241,249,255,261],{"namespace":242,"route":243,"methods":244,"callback":246,"permissionCallback":247,"file":207,"line":248},"hreflang-manager-lite\u002Fv1","\u002Fpost\u002F(?P\u003Cid>\\d+)",[245],"GET","rest_api_daext_hreflang_manager_read_connections_callback","rest_api_daext_hreflang_manager_read_connections_callback_permission_check",63,{"namespace":242,"route":250,"methods":251,"callback":253,"permissionCallback":254,"file":207,"line":167},"\u002Fpost\u002F",[252],"POST","rest_api_daext_hreflang_manager_post_connection_callback","rest_api_daext_hreflang_manager_post_connection_callback_permission_check",{"namespace":242,"route":256,"methods":257,"callback":258,"permissionCallback":259,"file":207,"line":260},"\u002Fread-options\u002F",[252],"rest_api_daext_hreflang_manager_read_options_callback","rest_api_daext_hreflang_manager_read_options_callback_permission_check",85,{"namespace":242,"route":262,"methods":263,"callback":264,"permissionCallback":265,"file":207,"line":132},"\u002Foptions",[252],"rest_api_daext_hreflang_manager_update_options_callback","rest_api_daext_hreflang_manager_update_options_callback_permission_check",[],[],{"dangerousFunctions":269,"sqlUsage":270,"outputEscaping":297,"fileOperations":29,"externalRequests":29,"nonceChecks":327,"capabilityChecks":51,"bundledLibraries":328},[],{"prepared":217,"raw":271,"locations":272},9,[273,276,278,281,285,288,290,292,295],{"file":151,"line":274,"context":275},335,"$wpdb->get_col() with variable interpolation",{"file":151,"line":277,"context":275},533,{"file":151,"line":279,"context":280},584,"$wpdb->query() with variable interpolation",{"file":282,"line":283,"context":284},"admin\\inc\\menu\\child\\class-daexthrmal-tools-menu-elements.php",61,"$wpdb->get_results() with variable interpolation",{"file":188,"line":286,"context":287},209,"$wpdb->get_var() with variable interpolation",{"file":188,"line":289,"context":284},238,{"file":188,"line":291,"context":280},1219,{"file":293,"line":294,"context":287},"shared\\class-daexthrmal-shared.php",853,{"file":293,"line":296,"context":287},1910,{"escaped":298,"rawEcho":51,"locations":299},366,[300,303,305,307,309,311,313,316,317,319,321,323,325],{"file":151,"line":301,"context":302},693,"raw output",{"file":151,"line":304,"context":302},713,{"file":151,"line":306,"context":302},733,{"file":151,"line":308,"context":302},776,{"file":151,"line":310,"context":302},796,{"file":151,"line":312,"context":302},816,{"file":314,"line":315,"context":302},"admin\\inc\\class-daexthrmal-pagination.php",183,{"file":282,"line":222,"context":302},{"file":282,"line":318,"context":302},109,{"file":282,"line":320,"context":302},110,{"file":282,"line":322,"context":302},111,{"file":188,"line":324,"context":302},407,{"file":188,"line":326,"context":302},906,6,[329],{"name":330,"version":38,"knownCves":331},"Select2",[],[333,356,381,395,403,415],{"entryPoint":334,"graph":335,"unsanitizedCount":28,"severity":41},"display_crud_menu (admin\\inc\\menu\\class-daexthrmal-menu-elements.php:1273)",{"nodes":336,"edges":352},[337,342,346],{"id":338,"type":339,"label":340,"file":188,"line":341},"n0","source","$_GET",1292,{"id":343,"type":344,"label":345,"file":188,"line":341},"n1","transform","→ edit_item()",{"id":347,"type":348,"label":349,"file":188,"line":350,"wp_function":351},"n2","sink","echo() [XSS]",540,"echo",[353,355],{"from":338,"to":343,"sanitized":354},false,{"from":343,"to":347,"sanitized":354},{"entryPoint":357,"graph":358,"unsanitizedCount":28,"severity":41},"\u003Cclass-daexthrmal-menu-elements> (admin\\inc\\menu\\class-daexthrmal-menu-elements.php:0)",{"nodes":359,"edges":375},[360,362,366,367,369,371,373],{"id":338,"type":339,"label":340,"file":188,"line":361},430,{"id":343,"type":348,"label":363,"file":188,"line":364,"wp_function":365},"get_row() [SQLi]",529,"get_row",{"id":347,"type":339,"label":340,"file":188,"line":361},{"id":368,"type":348,"label":349,"file":188,"line":350,"wp_function":351},"n3",{"id":370,"type":339,"label":340,"file":188,"line":341},"n4",{"id":372,"type":344,"label":345,"file":188,"line":341},"n5",{"id":374,"type":348,"label":349,"file":188,"line":350,"wp_function":351},"n6",[376,378,379,380],{"from":338,"to":343,"sanitized":377},true,{"from":347,"to":368,"sanitized":377},{"from":370,"to":372,"sanitized":354},{"from":372,"to":374,"sanitized":354},{"entryPoint":382,"graph":383,"unsanitizedCount":29,"severity":394},"save_meta_box (admin\\class-daexthrmal-admin.php:847)",{"nodes":384,"edges":392},[385,388],{"id":338,"type":339,"label":386,"file":151,"line":387},"$_POST",921,{"id":343,"type":348,"label":389,"file":151,"line":390,"wp_function":391},"query() [SQLi]",927,"query",[393],{"from":338,"to":343,"sanitized":377},"low",{"entryPoint":396,"graph":397,"unsanitizedCount":29,"severity":394},"\u003Cclass-daexthrmal-admin> (admin\\class-daexthrmal-admin.php:0)",{"nodes":398,"edges":401},[399,400],{"id":338,"type":339,"label":386,"file":151,"line":387},{"id":343,"type":348,"label":389,"file":151,"line":390,"wp_function":391},[402],{"from":338,"to":343,"sanitized":377},{"entryPoint":404,"graph":405,"unsanitizedCount":29,"severity":394},"process_form (admin\\inc\\menu\\child\\class-daexthrmal-connections-menu-elements.php:70)",{"nodes":406,"edges":413},[407,411],{"id":338,"type":339,"label":408,"file":409,"line":410},"$_POST (x2)","admin\\inc\\menu\\child\\class-daexthrmal-connections-menu-elements.php",94,{"id":343,"type":348,"label":389,"file":409,"line":412,"wp_function":391},155,[414],{"from":338,"to":343,"sanitized":377},{"entryPoint":416,"graph":417,"unsanitizedCount":29,"severity":394},"\u003Cclass-daexthrmal-connections-menu-elements> (admin\\inc\\menu\\child\\class-daexthrmal-connections-menu-elements.php:0)",{"nodes":418,"edges":421},[419,420],{"id":338,"type":339,"label":408,"file":409,"line":410},{"id":343,"type":348,"label":389,"file":409,"line":412,"wp_function":391},[422],{"from":338,"to":343,"sanitized":377},{"summary":424,"deductions":425},"The hreflang-manager-lite v1.16 plugin exhibits a generally strong security posture, with a significant emphasis on secure coding practices. The static analysis reveals a well-managed attack surface, with all identified entry points (REST API routes and AJAX handlers) protected by appropriate permission callbacks or nonce checks. The plugin also demonstrates excellent data handling, with a high percentage of SQL queries using prepared statements and nearly all output being properly escaped, minimizing the risk of common web vulnerabilities like SQL injection and Cross-Site Scripting (XSS). The absence of dangerous functions, file operations, and external HTTP requests further bolsters its security. However, the presence of two flows with unsanitized paths in the taint analysis, while not flagged as critical or high severity, warrants attention as they represent potential avenues for exploitation if further context or data manipulation is possible.  While the plugin has a history of one medium-severity CVE, it is currently patched, indicating a proactive approach to addressing security issues. The historical pattern of a single medium vulnerability suggests the developers are generally aware of security best practices but may occasionally overlook specific edge cases.  Overall, hreflang-manager-lite appears to be a reasonably secure plugin, with its strengths lying in its robust input validation and output escaping. The minor concerns stem from the taint analysis findings and the historical vulnerability, suggesting continued vigilance and code review are advisable.",[426,429],{"reason":427,"points":428},"Flows with unsanitized paths found",5,{"reason":430,"points":428},"One medium severity CVE in history","2026-03-16T18:02:29.437Z",{"wat":433,"direct":446},{"assetPaths":434,"generatorPatterns":439,"scriptPaths":440,"versionParams":441},[435,436,437,438],"\u002Fwp-content\u002Fplugins\u002Fhreflang-manager-lite\u002Fadmin\u002Fcss\u002Fdaexthrmal-admin-style.css","\u002Fwp-content\u002Fplugins\u002Fhreflang-manager-lite\u002Fadmin\u002Fjs\u002Fdaexthrmal-admin-script.js","\u002Fwp-content\u002Fplugins\u002Fhreflang-manager-lite\u002Fpublic\u002Fcss\u002Fdaexthrmal-public-style.css","\u002Fwp-content\u002Fplugins\u002Fhreflang-manager-lite\u002Fpublic\u002Fjs\u002Fdaexthrmal-public-script.js",[],[],[442,443,444,445],"hreflang-manager-lite\u002Fadmin\u002Fcss\u002Fdaexthrmal-admin-style.css?ver=","hreflang-manager-lite\u002Fadmin\u002Fjs\u002Fdaexthrmal-admin-script.js?ver=","hreflang-manager-lite\u002Fpublic\u002Fcss\u002Fdaexthrmal-public-style.css?ver=","hreflang-manager-lite\u002Fpublic\u002Fjs\u002Fdaexthrmal-public-script.js?ver=",{"cssClasses":447,"htmlComments":450,"htmlAttributes":452,"restEndpoints":454,"jsGlobals":456,"shortcodeOutput":458},[448,449],"daexthrmal-admin-wrap","daexthrmal-admin-page",[451],"\u003C!-- Required and instantiate the class used to handle the current menu. -->",[453],"data-daexthrmal-pro-badge",[455],"\u002Fwp-json\u002Fdaexthrmal\u002Fv1\u002Fhreflang\u002F",[457],"daexthrmal_params",[]]