[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftk3-gYSjpvkiIEZx6rRaFSsVM03K3G3_ZCWukmdWnGo":3,"$fwo0NQ_Immi4dGwvHAoiaInzxeOI0t-VVKzproSaG5Hs":239,"$f2SNtcvTJG8DcZSP7QE8noqURTbIGoYZybCL4i43Bp4U":244},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"discovery_status":29,"vulnerabilities":30,"developer":47,"crawl_stats":36,"alternatives":52,"analysis":145,"fingerprints":217},"intl-datetime-calendar","Intl DateTime Calendar","1.0.3","Theerawat Patthawee","https:\u002F\u002Fprofiles.wordpress.org\u002Fsigmarubyz\u002F","\u003Cp>Intl DateTime Calendar transforms how dates and times are displayed on your WordPress site by leveraging the ECMAScript Internationalization API (Intl). This plugin allows you to switch between different calendar systems like Buddhist, Islamic, Hebrew, and more, without affecting your database or SEO.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Multiple Calendar Systems\u003C\u002Fstrong> – Support for Gregorian, Buddhist, Chinese, Hebrew, Islamic, Japanese, Persian and more\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WordPress Integration\u003C\u002Fstrong> – Automatically uses your WordPress date\u002Ftime format and locale settings\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Block Editor Compatible\u003C\u002Fstrong> – Works with all WordPress core blocks, including custom date formats\u003C\u002Fli>\n\u003Cli>\u003Cstrong>SEO Friendly\u003C\u002Fstrong> – Maintains proper HTML datetime attributes for search engines\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multilingual Support\u003C\u002Fstrong> – Works with any locale WordPress supports\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Site Performance\u003C\u002Fstrong> – Client-side formatting with minimal impact on page load time\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Thai Language Support\u003C\u002Fstrong> – Special handling for Thai date formats including Buddhist calendar years\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Supported Calendar Systems\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Gregorian (Western)\u003C\u002Fli>\n\u003Cli>Buddhist\u003C\u002Fli>\n\u003Cli>Chinese\u003C\u002Fli>\n\u003Cli>Coptic\u003C\u002Fli>\n\u003Cli>Dangi (Korean)\u003C\u002Fli>\n\u003Cli>Ethiopic\u003C\u002Fli>\n\u003Cli>Ethiopic (Amete Alem)\u003C\u002Fli>\n\u003Cli>Hebrew\u003C\u002Fli>\n\u003Cli>Indian\u003C\u002Fli>\n\u003Cli>Islamic\u003C\u002Fli>\n\u003Cli>Islamic (Civil)\u003C\u002Fli>\n\u003Cli>Islamic (Saudi Arabia)\u003C\u002Fli>\n\u003Cli>Islamic (Tabular)\u003C\u002Fli>\n\u003Cli>Islamic (Umm al-Qura)\u003C\u002Fli>\n\u003Cli>ISO 8601\u003C\u002Fli>\n\u003Cli>Japanese\u003C\u002Fli>\n\u003Cli>Persian\u003C\u002Fli>\n\u003Cli>Republic of China\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Use Cases\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Buddhist websites in Thailand that need Buddhist Era years (BE)\u003C\u002Fli>\n\u003Cli>Islamic websites that need Hijri calendar dates\u003C\u002Fli>\n\u003Cli>Multilingual websites that want dates in native calendar systems\u003C\u002Fli>\n\u003Cli>Any website that needs specialized date formatting without affecting SEO\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Additional Information\u003C\u002Fh3>\n\u003Ch4>Technical Details\u003C\u002Fh4>\n\u003Cp>This plugin uses the ECMAScript Internationalization API (Intl) for client-side date formatting. The Intl API provides robust support for various calendar systems and locales. For older browsers that may not fully support all features, the plugin includes fallback formatting options.\u003C\u002Fp>\n\u003Ch4>Browser Compatibility\u003C\u002Fh4>\n\u003Cp>Modern browsers (last 2-3 years) fully support the plugin’s functionality. For older browsers, basic date formatting will still work, but some advanced calendar systems might fall back to Gregorian.\u003C\u002Fp>\n\u003Ch4>Privacy\u003C\u002Fh4>\n\u003Cp>This plugin does not collect or share any personal data, and all date formatting is done client-side in the user’s browser.\u003C\u002Fp>\n","Display dates and times in various calendar systems (Buddhist, Islamic, etc.) while respecting WordPress settings and maintaining SEO friendliness.",0,451,"2026-01-01T14:36:00.000Z","6.9.4","5.0","7.0",[18,19,20,21,22],"calendar","datetime","formatting","i18n","internationalization","https:\u002F\u002Fgithub.com\u002Fttwrpz\u002Fintl-datetime-calendar","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fintl-datetime-calendar.1.0.3.zip",78,1,"2025-08-15 14:54:41","2026-04-06T09:54:40.288Z","no_bundle",[31],{"id":32,"url_slug":33,"title":34,"description":35,"plugin_slug":4,"theme_slug":36,"affected_versions":37,"patched_in_version":36,"severity":38,"cvss_score":39,"cvss_vector":40,"vuln_type":41,"published_date":27,"updated_date":42,"references":43,"days_to_patch":36,"patch_diff_files":45,"patch_trac_url":36,"research_status":36,"research_verified":46,"research_rounds_completed":11,"research_plan":36,"research_summary":36,"research_vulnerable_code":36,"research_fix_diff":36,"research_exploit_outline":36,"research_model_used":36,"research_started_at":36,"research_completed_at":36,"research_error":36,"poc_status":36,"poc_video_id":36,"poc_summary":36,"poc_steps":36,"poc_tested_at":36,"poc_wp_version":36,"poc_php_version":36,"poc_playwright_script":36,"poc_exploit_code":36,"poc_has_trace":46,"poc_model_used":36,"poc_verification_depth":36},"CVE-2025-8293","intl-datetime-calendar-authenticated-contributor-stored-cross-site-scripting-via-date-parameter","Intl DateTime Calendar \u003C= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via date Parameter","The Intl DateTime Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=1.0.1","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-08-16 03:38:53",[44],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fdc333949-de1e-493a-badd-3be1c9060503?source=api-prod",[],false,{"slug":48,"display_name":7,"profile_url":8,"plugin_count":26,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":49,"trust_score":50,"computed_at":51},"sigmarubyz",30,79,"2026-05-19T20:16:04.541Z",[53,75,95,113,127],{"slug":54,"name":55,"version":56,"author":57,"author_profile":58,"description":59,"short_description":60,"active_installs":61,"downloaded":62,"rating":63,"num_ratings":26,"last_updated":64,"tested_up_to":65,"requires_at_least":66,"requires_php":57,"tags":67,"homepage":71,"download_link":72,"security_score":73,"vuln_count":11,"unpatched_count":11,"last_vuln_date":36,"fetched_at":74},"my-review","My Review","1.2","","https:\u002F\u002Fprofiles.wordpress.org\u002Fmike_sapiens\u002F","\u003Cp>My Review plugin helps you format your post as a review by making it easier for your readers to spot the good and the bad of the product\u002Fservice you’re reviewing. You can also rate different aspects(price, quality, taste – you name it) of it according to your liking.\u003Cbr \u002F>\nYou can customize the formatting by modifying the template found in the plugin’s directory.\u003C\u002Fp>\n\u003Ch3>Tutorial\u003C\u002Fh3>\n\u003Cp>See the \u003Ca href=\"http:\u002F\u002Fwordpress.sapiensworks.com\u002Farticles\u002Fmy-review-nice-plugin-for-reviewers\u002F\" rel=\"nofollow ugc\">plugin page\u003C\u002Fa> for examples how to use it.\u003C\u002Fp>\n\u003Ch3>Release Notes\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>1.2\u003C\u002Fstrong> – Added i18n support + new special tag (see the tutorial)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>1.0.2\u003C\u002Fstrong> – Plugin is more php4 friendly now.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>1.0.1\u003C\u002Fstrong> – Accents are properly handled in ratings names.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>1.0\u003C\u002Fstrong> – First version released\u003C\u002Fp>\n","My Review plugin helps you format your post as a review.",10,8670,100,"2008-06-07T08:26:00.000Z","2.5.1","2.5",[68,21,22,69,70],"content-formatting","post","review","http:\u002F\u002Fwordpress.sapiensworks.com\u002Farticles\u002Fmy-review-nice-plugin-for-reviewers\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmy-review.1.2.zip",85,"2026-04-16T10:56:18.058Z",{"slug":76,"name":77,"version":78,"author":79,"author_profile":80,"description":81,"short_description":82,"active_installs":83,"downloaded":84,"rating":85,"num_ratings":86,"last_updated":87,"tested_up_to":14,"requires_at_least":88,"requires_php":16,"tags":89,"homepage":93,"download_link":94,"security_score":63,"vuln_count":11,"unpatched_count":11,"last_vuln_date":36,"fetched_at":74},"performant-translations","Performant Translations","1.2.0","Pascal Birchler","https:\u002F\u002Fprofiles.wordpress.org\u002Fswissspidy\u002F","\u003Cp>Making internationalization\u002Flocalization in WordPress faster than ever before.\u003C\u002Fp>\n\u003Ch3>Disclaimer about WordPress 6.5\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Attention:\u003C\u002Fstrong> most functionality of this plugin has been merged into WordPress 6.5! You might not need it anymore.\u003C\u002Fp>\n\u003Cp>\u003Cem>However\u003C\u002Fem>, this plugin is still relevant for cases where language packs are not downloaded from WordPress.org but somewhere else, for example if you are developing your own plugins or using commercial plugins.\u003C\u002Fp>\n\u003Cp>The Performant Translations plugin converts the translation files of those plugins to the new file format introduced in WordPress 6.5, to really optimize them for speed.\u003C\u002Fp>\n\u003Ch3>What this plugin does\u003C\u002Fh3>\n\u003Cp>This project uses a new approach to handle translation files in WordPress, making localization blazing fast.\u003C\u002Fp>\n\u003Cp>An \u003Ca href=\"https:\u002F\u002Fmake.wordpress.org\u002Fcore\u002F2023\u002F07\u002F24\u002Fi18n-performance-analysis\u002F\" rel=\"nofollow ugc\">in-depth i18n performance analysis\u003C\u002Fa> showed that localized WordPress sites load significantly slower than a site without translations.\u003C\u002Fp>\n\u003Cp>With this plugin’s new approach to localization, this overhead is massively reduced, making your site fast again. It does so by converting \u003Ccode>.mo\u003C\u002Fcode> translation files to \u003Ccode>.php\u003C\u002Fcode> files.\u003C\u002Fp>\n\u003Cp>If your site is using a language other than English (US), you should see immediate speed improvements simply by activating this plugin.\u003C\u002Fp>\n","Making internationalization\u002Flocalization in WordPress faster than ever before.",40000,196117,98,16,"2025-12-05T10:38:00.000Z","6.5",[21,22,90,91,92],"localization","performance","translation","https:\u002F\u002Fgithub.com\u002Fswissspidy\u002Fperformant-translations","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fperformant-translations.1.2.0.zip",{"slug":96,"name":97,"version":98,"author":79,"author_profile":80,"description":99,"short_description":100,"active_installs":101,"downloaded":102,"rating":63,"num_ratings":103,"last_updated":104,"tested_up_to":14,"requires_at_least":105,"requires_php":106,"tags":107,"homepage":109,"download_link":110,"security_score":111,"vuln_count":26,"unpatched_count":11,"last_vuln_date":112,"fetched_at":74},"preferred-languages","Preferred Languages","2.4.1","\u003Cp>Thanks to language packs it’s easier than ever before to change the main language of your site.\u003Cbr \u002F>\nHowever, in some cases a single locale is not enough. When WordPress can’t find a translation for the active locale, it falls back to the original English strings.\u003Cbr \u002F>\nThat’s a poor user experience for many non-English speakers.\u003C\u002Fp>\n\u003Cp>This feature project aims to change that by letting users choose multiple languages for displaying WordPress in.\u003Cbr \u002F>\nThat way you can set some sort of “fallback chain” where WordPress tries to load translations in your preferred order.\u003C\u002Fp>\n\u003Cp>Please help us test this plugin and let us know if something is not working as you think it should.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Keyboard Shortcuts\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>Arrow Up\u003C\u002Fcode>: Move selected locale one position up.\u003C\u002Fli>\n\u003Cli>\u003Ccode>Arrow Down\u003C\u002Fcode>: Move selected locale one position down.\u003C\u002Fli>\n\u003Cli>\u003Ccode>Home\u003C\u002Fcode>: Select first locale in the list.\u003C\u002Fli>\n\u003Cli>\u003Ccode>End\u003C\u002Fcode>: Select last locale in the list.\u003C\u002Fli>\n\u003Cli>\u003Ccode>Backspace\u003C\u002Fcode>\u002F\u003Ccode>Delete\u003C\u002Fcode>: remove the selected locale from the list.\u003C\u002Fli>\n\u003Cli>\u003Ccode>Alt+A\u003C\u002Fcode>: Add the current locale from the dropdown to the list.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Note\u003C\u002Fstrong>: the Preferred Languages UI needs to be focused in order for the keyboard shortcuts to work.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Merging Translations\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Previously, only the first available translation for a given locale and domain will be loaded.\u003Cbr \u002F>\nHowever, when translations are incomplete, some strings might still be displayed in English.\u003Cbr \u002F>\nThat’s a poor user experience as well.\u003C\u002Fp>\n\u003Cp>To prevent this, Preferred Languages now automatically merges all incomplete translations in the list.\u003C\u002Fp>\n\u003Cp>the \u003Ccode>preferred_languages_merge_translations\u003C\u002Fcode> filter can be used to opt out of this behavior.\u003Cbr \u002F>\nIt provides three parameters:\u003C\u002Fp>\n\u003Col>\n\u003Cli>\u003Ccode>$merge\u003C\u002Fcode> – Whether translations should be merged. Defaults to \u003Ccode>true\u003C\u002Fcode>.\u003C\u002Fli>\n\u003Cli>\u003Ccode>$domain\u003C\u002Fcode> – The text domain\u003C\u002Fli>\n\u003Cli>\u003Ccode>$current_locale\u003C\u002Fcode> – The current locale.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Get Involved\u003C\u002Fh4>\n\u003Cp>Active development is taking place on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fswissspidy\u002Fpreferred-languages\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>If you want to get involved, check out \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fswissspidy\u002Fpreferred-languages\u002Fissues\" rel=\"nofollow ugc\">open issues\u003C\u002Fa> and join the \u003Ca href=\"https:\u002F\u002Fwordpress.slack.com\u002Fmessages\u002Fcore-i18n\" rel=\"nofollow ugc\">#core-i18n\u003C\u002Fa> channel on \u003Ca href=\"https:\u002F\u002Fwordpress.slack.com\u002F\" rel=\"nofollow ugc\">Slack\u003C\u002Fa>. If you don’t have a Slack account yet, you can sign up at \u003Ca href=\"https:\u002F\u002Fmake.wordpress.org\u002Fchat\u002F\" rel=\"nofollow ugc\">make.wordpress.org\u002Fchat\u002F\u003C\u002Fa>.\u003C\u002Fp>\n","Choose languages for displaying WordPress in, in order of preference.",2000,108923,17,"2025-11-28T15:06:00.000Z","6.6","7.2.24",[21,22,108,90,92],"language","https:\u002F\u002Fgithub.com\u002Fswissspidy\u002Fpreferred-languages\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpreferred-languages.2.4.1.zip",99,"2024-05-30 00:00:00",{"slug":114,"name":115,"version":116,"author":117,"author_profile":118,"description":119,"short_description":120,"active_installs":121,"downloaded":122,"rating":11,"num_ratings":11,"last_updated":123,"tested_up_to":66,"requires_at_least":66,"requires_php":57,"tags":124,"homepage":57,"download_link":126,"security_score":73,"vuln_count":11,"unpatched_count":11,"last_vuln_date":36,"fetched_at":74},"transliterado","Transliterado","0.8","bertilow","https:\u002F\u002Fprofiles.wordpress.org\u002Fbertilow\u002F","\u003Cp>This plugin gives better transliteration of non-ASCII characters in slugs. Currently covers Esperanto, Swedish, Finnish, Danish, Norwegian, German, Russian and Bulgarian. It can also handle dashes.\u003C\u002Fp>\n\u003Cp>When WordPress creates slugs for the titles of posts and pages, and for tags and categories, it makes them all-ASCII, which among other things means removing diacritics (e.g. “é” becomes “e”, “ö” becomes “o”, “ĉ” becomes “c”, etc.). For some languages the default filtering is OK, but for others it gives very bad results. The results for languages that don’t even use a Latin script are especially unsatisfactory. The plugin Transliterado provides better transliteration systems for some languages. You can choose which of those systems should be used for your slugs. For some languages more than one transliteration system is available. Transliterado can also go through already existing posts and pages, and redo their slugs, if the user chooses that option. Another option does the same for tags and categories.\u003C\u002Fp>\n\u003Cp>Significant parts of the code comes from the plugins Rustolat by Anton Skorobogatov, BGtoLat by Ognyan Mladenov, and Slugger by Hans Christian Saustrup.\u003C\u002Fp>\n\u003Cp>Maybe you want to add systems for other languages. It’s very easy to do. Have a look at the files for the languages that are in the plugin package already. I’ll be happy to include any additions that are sent to me: “bertilow” at “gmail.com”.\u003C\u002Fp>\n\u003Cp>Priskribo:\u003C\u002Fp>\n\u003Cp>Ĉi tiu kromprogramo donas pli bonan transliteradon de ne-Askiaj literoj en URL-nomoj. Nun prizorgataj estas Esperanto, la Sveda, la Finna, la Dana, la Norvega, la Germana, la Rusa kaj la Bulgara.\u003C\u002Fp>\n\u003Cp>Kiam WordPress kreas URL-nomojn por afiŝoj kaj paĝoj, kaj por etikedoj kaj kategorioj, ĝi transformas ilin al Askio, kio interalie signifas, ke ĝi forigas ĉiujn kromsignojn (ekz. “é” fariĝas “e”, “ö” fariĝas “o”, “ĉ” fariĝas “c”, k.t.p.). Por iuj lingvoj la defaŭlta filtrado estas en ordo, sed por aliaj ĝi donas tre malbonan rezulton. Precipe nekontentigaj estas la rezultoj por lingvoj, kiuj eĉ ne uzas la Latinan alfabeton. La kromprogramo Transliterado provizas pli bonajn transliteradajn sistemojn por kelkaj lingvoj. Oni povas elekti, kiuj el tiuj sistemoj estu uzataj por URL-nomoj. Por iuj lingvoj haveblas pli ol unu transliterada sistemo. Transliterado ankaŭ povas prilabori jam ekzistantajn afiŝojn kaj paĝoj, refarante ties URL-nomojn, se la uzanto elektas tiun eblon. Alia eblo faras la samon pri etikedoj kaj kategorioj.\u003C\u002Fp>\n\u003Cp>Gravaj partoj de la kodo venas el la kromprogramoj Rustolat de Anton Skorobogatov, BGtoLat de Ognyan Mladenov, kaj Slugger de Hans Christian Saustrup.\u003C\u002Fp>\n\u003Cp>Eble vi volas aldoni sistemojn por aliaj lingvoj. Tio estas tre facila. Rigardu la dosierojn de tiuj lingvoj, kiuj jam estas en la kromprograma paketo. Mi volonte enmetos aldonojn, kiujn vi sendos al mi: “bertilow” ĉe “gmail.com”.\u003C\u002Fp>\n\u003Ch3>Licence \u002F Licenco\u003C\u002Fh3>\n\u003Cp>This plugin is released under the GPL licence. You can use it free of charge.\u003C\u002Fp>\n\u003Cp>Tiu ĉi kromprogramo estas publikigita sub la licenco GPL. Vi rajtas uzi ĝin senkoste.\u003C\u002Fp>\n\u003Ch3>Translations \u002F Tradukoj\u003C\u002Fh3>\n\u003Cp>The basic language of Transliterado is Esperanto. There are translations into English, Swedish, Finnish, German, Russian and Bulgarian. More translations are of course welcome: “bertilow” at “gmail.com”.\u003C\u002Fp>\n\u003Cp>La baza lingvo de Transliterado estas Esperanto. Ekzistas tradukoj en la Anglan, la Svedan, la Finnan, la Germanan, la Rusan kaj la Bulgaran. Pliaj tradukoj estos bonvenaj: “bertilow” ĉe “gmail.com”.\u003C\u002Fp>\n","This plugin gives better transliteration of non-ASCII characters in slugs.",300,14562,"2010-06-03T17:09:00.000Z",[21,22,125],"slugs","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftransliterado.0.8.zip",{"slug":128,"name":129,"version":130,"author":131,"author_profile":132,"description":133,"short_description":134,"active_installs":135,"downloaded":136,"rating":63,"num_ratings":137,"last_updated":138,"tested_up_to":14,"requires_at_least":139,"requires_php":140,"tags":141,"homepage":143,"download_link":144,"security_score":63,"vuln_count":11,"unpatched_count":11,"last_vuln_date":36,"fetched_at":74},"translation-stats","Translation Stats","1.3.2","Pedro Mendonça","https:\u002F\u002Fprofiles.wordpress.org\u002Fpedromendonca\u002F","\u003Cp>The plugin adds a “Translation Stats” column to the plugin list screen in WordPress admin.\u003C\u002Fp>\n\u003Cp>The translation stats are shown only for plugins that exist in \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002F\" rel=\"nofollow ugc\">translate.wordpress.org\u003C\u002Fa> and are \u003Ca href=\"https:\u002F\u002Fdeveloper.wordpress.org\u002Fplugins\u002Finternationalization\u002Fhow-to-internationalize-your-plugin\u002F\" rel=\"nofollow ugc\">prepared for localization\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>If a plugin doesn’t have complete translation stats, you’ll see a notice with one of the reasons below:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Plugin not found on WordPress.org\u003C\u002Fli>\n\u003Cli>Translation project not found on WordPress.org\u003C\u002Fli>\n\u003Cli>The plugin is not properly prepared for localization\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The color scheme of the translation stats bars is exactly same used in \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fglotpress\u002F\" rel=\"ugc\">GlotPress\u003C\u002Fa> for consistency with the translation experience in \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002F\" rel=\"nofollow ugc\">translate.wp.org\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>This plugin is properly prepared for localization.\u003C\u002Fp>\n","Show plugins translation stats on your WordPress install.",20,8878,6,"2025-10-04T15:19:00.000Z","4.9","7.4",[21,22,142,90,92],"l10n","https:\u002F\u002Ftranslationstats.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftranslation-stats.1.3.2.zip",{"attackSurface":146,"codeSignals":193,"taintFlows":204,"riskAssessment":205,"analyzedAt":216},{"hooks":147,"ajaxHandlers":185,"restRoutes":186,"shortcodes":187,"cronEvents":192,"entryPointCount":26,"unprotectedCount":11},[148,153,157,161,165,170,174,178,181],{"type":149,"name":150,"callback":150,"file":151,"line":152},"action","init","intl-datetime-calendar.php",103,{"type":149,"name":154,"callback":155,"file":151,"line":156},"admin_menu","add_settings_page",111,{"type":149,"name":158,"callback":159,"file":151,"line":160},"admin_init","register_settings",112,{"type":149,"name":162,"callback":163,"file":151,"line":164},"wp_enqueue_scripts","enqueue_scripts",115,{"type":166,"name":167,"callback":168,"priority":61,"file":151,"line":169},"filter","render_block_core\u002Fpost-date","filter_post_date_block",118,{"type":166,"name":171,"callback":172,"priority":61,"file":151,"line":173},"render_block_core\u002Fpost-time","filter_post_time_block",119,{"type":166,"name":175,"callback":176,"priority":61,"file":151,"line":177},"render_block_core\u002Fpost-modified-date","filter_modified_date_blocks",120,{"type":166,"name":179,"callback":176,"priority":61,"file":151,"line":180},"render_block_core\u002Fpost-modified-time",121,{"type":166,"name":182,"callback":183,"priority":61,"file":151,"line":184},"render_block","filter_datetime_blocks",124,[],[],[188],{"tag":189,"callback":190,"file":151,"line":191},"intl_datetime","intl_datetime_shortcode",127,[],{"dangerousFunctions":194,"sqlUsage":195,"outputEscaping":197,"fileOperations":11,"externalRequests":11,"nonceChecks":11,"capabilityChecks":11,"bundledLibraries":203},[],{"prepared":11,"raw":11,"locations":196},[],{"escaped":198,"rawEcho":26,"locations":199},71,[200],{"file":151,"line":201,"context":202},302,"raw output",[],[],{"summary":206,"deductions":207},"The \"intl-datetime-calendar\" v1.0.3 plugin exhibits a generally positive security posture based on the static analysis. The code demonstrates good practices by consistently using prepared statements for all SQL queries and properly escaping the vast majority of its output.  The absence of dangerous functions, file operations, external HTTP requests, and critical taint analysis findings further contributes to a sense of security.  However, a significant concern arises from the vulnerability history. The presence of one unpatched medium severity CVE, specifically Cross-site Scripting (XSS), indicates a known and actively exploitable vulnerability. This single unpatched vulnerability, even if medium, presents a tangible risk that could be leveraged by attackers.\n\nWhile the code itself appears robust in its handling of common vulnerabilities like SQL injection and output escaping, the unaddressed CVE undermines the overall security. The plugin's limited attack surface, consisting primarily of a single shortcode, is a strength.  Nonetheless, the fact that a known XSS vulnerability remains unpatched in this version is a critical weakness that outweighs the otherwise positive static analysis. Users should be highly cautious until this vulnerability is addressed by the developer.",[208,211,214],{"reason":209,"points":210},"Unpatched medium severity CVE (XSS)",15,{"reason":212,"points":213},"No nonce checks found",5,{"reason":215,"points":213},"No capability checks found","2026-04-16T13:30:11.340Z",{"wat":218,"direct":227},{"assetPaths":219,"generatorPatterns":222,"scriptPaths":223,"versionParams":224},[220,221],"\u002Fwp-content\u002Fplugins\u002Fintl-datetime-calendar\u002Fintl-datetime-calendar.js","\u002Fwp-content\u002Fplugins\u002Fintl-datetime-calendar\u002Fintl-datetime-calendar.css",[],[220],[225,226],"intl-datetime-calendar\u002Fintl-datetime-calendar.css?ver=","intl-datetime-calendar\u002Fintl-datetime-calendar.js?ver=",{"cssClasses":228,"htmlComments":230,"htmlAttributes":231,"restEndpoints":234,"jsGlobals":235,"shortcodeOutput":237},[229],"intl-datetime-calendar-output",[],[232,233],"data-calendar-type","data-datetime-format",[],[236],"IntlDateTimeCalendar",[238],"[intl_datetime",{"error":240,"url":241,"statusCode":242,"statusMessage":243,"message":243},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fintl-datetime-calendar\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":245,"versions":246},4,[247,253,261,269],{"version":6,"download_url":24,"svn_tag_url":248,"released_at":36,"has_diff":46,"diff_files_changed":249,"diff_lines":36,"trac_diff_url":250,"vulnerabilities":251,"is_current":240},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fintl-datetime-calendar\u002Ftags\u002F1.0.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fintl-datetime-calendar%2Ftags%2F1.0.2&new_path=%2Fintl-datetime-calendar%2Ftags%2F1.0.3",[252],{"id":32,"url_slug":33,"title":34,"severity":38,"cvss_score":39,"vuln_type":41,"patched_in_version":36},{"version":254,"download_url":255,"svn_tag_url":256,"released_at":36,"has_diff":46,"diff_files_changed":257,"diff_lines":36,"trac_diff_url":258,"vulnerabilities":259,"is_current":46},"1.0.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fintl-datetime-calendar.1.0.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fintl-datetime-calendar\u002Ftags\u002F1.0.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fintl-datetime-calendar%2Ftags%2F1.0.1&new_path=%2Fintl-datetime-calendar%2Ftags%2F1.0.2",[260],{"id":32,"url_slug":33,"title":34,"severity":38,"cvss_score":39,"vuln_type":41,"patched_in_version":36},{"version":262,"download_url":263,"svn_tag_url":264,"released_at":36,"has_diff":46,"diff_files_changed":265,"diff_lines":36,"trac_diff_url":266,"vulnerabilities":267,"is_current":46},"1.0.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fintl-datetime-calendar.1.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fintl-datetime-calendar\u002Ftags\u002F1.0.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fintl-datetime-calendar%2Ftags%2F1.0.0&new_path=%2Fintl-datetime-calendar%2Ftags%2F1.0.1",[268],{"id":32,"url_slug":33,"title":34,"severity":38,"cvss_score":39,"vuln_type":41,"patched_in_version":36},{"version":270,"download_url":271,"svn_tag_url":272,"released_at":36,"has_diff":46,"diff_files_changed":273,"diff_lines":36,"trac_diff_url":36,"vulnerabilities":274,"is_current":46},"1.0.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fintl-datetime-calendar.1.0.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fintl-datetime-calendar\u002Ftags\u002F1.0.0\u002F",[],[275],{"id":32,"url_slug":33,"title":34,"severity":38,"cvss_score":39,"vuln_type":41,"patched_in_version":36}]