[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOYJNfXzsIqXhtcfbcCOvKRkc_0JyGWBMmwodPuem0pc":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":15,"requires_php":15,"tags":16,"homepage":22,"download_link":23,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":35,"analysis":132,"fingerprints":222},"just-unzip","Just Unzip","0.2.2","James Revillini","https:\u002F\u002Fprofiles.wordpress.org\u002Fjrevillini\u002F","\u003Cp>Just Unzip (LGPL Licensed) takes a zip file you upload from the “Write” page, unzips it, stores the zipped files in your upload folder, and associates the unzipped files with the current post.    Just Unzip makes use of the PclZip php library (LGPL Licensed).\u003C\u002Fp>\n","Just Unzip (LGPL Licensed) takes a zip file you upload from the \"Write\" page, unzips it, stores the zipped files in your upload folder, and  …",10,5893,0,"2007-04-15T17:13:00.000Z","",[17,18,19,20,21],"admin","multiple","post","unzip","upload","http:\u002F\u002Fjames.revillini.com\u002Fprojects\u002Fjust-unzip\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjust-unzip.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":29,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":24,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},"jrevillini",4,1220,30,84,"2026-04-04T17:01:07.157Z",[36,60,80,98,115],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":46,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":56,"download_link":57,"security_score":33,"vuln_count":58,"unpatched_count":13,"last_vuln_date":59,"fetched_at":26},"add-from-server","Add From Server","3.4.5","Dion Hulse","https:\u002F\u002Fprofiles.wordpress.org\u002Fdd32\u002F","\u003Cp>This plugin offers limited support. Please do not expect new features or too many bugfixes. Features may be removed at any time.\u003C\u002Fp>\n\u003Cp>Add From Server is designed to help ease the pain of bad web hosts, allowing you to upload files via FTP or SSH and later import them into WordPress.\u003C\u002Fp>\n\u003Cp>This plugin is NOT designed to..\u003Cbr \u002F>\n * Be used as a replacement for the file uploader\u003Cbr \u002F>\n * Be used for migration of websites\u003Cbr \u002F>\n * Re-import your files after moving webhosting\u003Cbr \u002F>\n * Batch import media\u003C\u002Fp>\n\u003Cp>This plugins IS designed to..\u003Cbr \u002F>\n * Import files which are larger than your hosting allows to be uploaded.\u003Cbr \u002F>\n * Import files which are too large for your internet connections upload speed.\u003C\u002Fp>\n\u003Cp>WordPress does a better job of file uploads than this plugin, so please consider your needs before you use it.\u003C\u002Fp>\n\u003Cp>You may also want to look at using WP-CLI for media import purposes:\u003Cbr \u002F>\nhttps:\u002F\u002Fdeveloper.wordpress.org\u002Fcli\u002Fcommands\u002Fmedia\u002Fimport\u002F\u003C\u002Fp>\n","Add From Server is designed to help ease the pain of bad web hosts, allowing you to upload files via FTP or SSH and later import them into WordPress.",70000,1319395,92,239,"2020-12-11T07:32:00.000Z","5.5.18","5.4","7.0",[17,53,54,19,55],"import","media","uploads","https:\u002F\u002Fdd32.id.au\u002Fwordpress-plugins\u002Fadd-from-server\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadd-from-server.3.4.5.zip",1,"2016-08-08 00:00:00",{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":68,"downloaded":69,"rating":70,"num_ratings":71,"last_updated":72,"tested_up_to":73,"requires_at_least":74,"requires_php":15,"tags":75,"homepage":78,"download_link":79,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"post-lists-view-custom","Post Lists View Custom","1.7.4","gqevu6bsiz","https:\u002F\u002Fprofiles.wordpress.org\u002Fgqevu6bsiz\u002F","\u003Cul>\n\u003Cli>All Posts List View\u003C\u002Fli>\n\u003Cli>All Page List View\u003C\u002Fli>\n\u003Cli>Custom Post Type List View\u003C\u002Fli>\n\u003Cli>Media Library List View\u003C\u002Fli>\n\u003Cli>Comments List View\u003C\u002Fli>\n\u003Cli>Available Widgets List View\u003C\u002Fli>\n\u003Cli>Menus to show on screen\u003C\u002Fli>\n\u003Cli>Menus to show advanced menu properties\u003C\u002Fli>\n\u003Cli>Users List View\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>These list to customization is possible.\u003C\u002Fp>\n\u003Ch3>日本語でのご説明\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>投稿一覧\u003C\u002Fli>\n\u003Cli>ページ一覧\u003C\u002Fli>\n\u003Cli>カスタム投稿タイプ一覧\u003C\u002Fli>\n\u003Cli>メディア一覧\u003C\u002Fli>\n\u003Cli>コメント一覧\u003C\u002Fli>\n\u003Cli>利用できるウィジェット一覧\u003C\u002Fli>\n\u003Cli>メニューの表示一覧\u003C\u002Fli>\n\u003Cli>メニューの拡張表示一覧\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>これらの一覧表示をカスタマイズするプラグインです。\u003Cbr \u002F>\nアイキャッチ画像やカスタムフィールドの項目、記事のIDを一覧に表示することが可能です。\u003Cbr \u002F>\nまた、表示の順番も自由に変更できます。\u003C\u002Fp>\n","Customize the list of the post and page and the custom post type.",1000,21691,80,7,"2015-08-13T17:25:00.000Z","4.3.34","3.8",[17,76,19,77,21],"page","posts","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fpost-lists-view-custom\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpost-lists-view-custom.1.7.4.zip",{"slug":81,"name":82,"version":83,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":11,"downloaded":88,"rating":13,"num_ratings":13,"last_updated":89,"tested_up_to":90,"requires_at_least":91,"requires_php":15,"tags":92,"homepage":96,"download_link":97,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"akwpuploader-alternative-wordpress-image-uploader","Alternative WordPress Image Uploader Using Flickr","1.1.0","Amit Kumar Singh","https:\u002F\u002Fprofiles.wordpress.org\u002Fthecancerus\u002F","\u003Cp>This plugin was created to for those people who are unsatisfied with image resizing capabilites of wordpress uploader.\u003Cbr \u002F>\nIt uses services from flickr. You can upload your images to flickr.com and then make your photos public. You can play with your pictures using services provided by flickr and then using this plugin you can easily attach them to your blog post.\u003C\u002Fp>\n\u003Cp>This release aadded the option for choosing tags or sets to fetch the images. Also fixed the issue where enabling this plugin, interfered with wordpress 2.5’s jquery.\u003Cbr \u002F>\nyou can get more information at \u003Ca href=\"http:\u002F\u002Famiworks.co.in\u002Ftalk\u002Fakwpupoader-alternative-wordpress-image-uploader\u002F\" title=\" Alternative WordPress Image Uploader using Flickr\" rel=\"nofollow ugc\">akWpUploader article\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>After you check out this plugin, please provide some rating and leave comments for improving it.\u003C\u002Fp>\n\u003Cp>PLEASE NOTE ! This plugin is still in development and may contain few bugs, please report any bug that you find !,\u003C\u002Fp>\n","This plugin was created for those people who are unsatisfied with image resizing capabilites of wordpress uploader. It uses services from flickr.",6612,"2009-08-25T08:41:00.000Z","2.8","2.5",[17,93,94,95,19],"flickr","gallery","image-uploader","http:\u002F\u002Famiworks.co.in\u002Ftalk\u002Fakwpupoader-alternative-wordpress-image-uploader\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fakwpuploader-alternative-wordpress-image-uploader.1.1.0.zip",{"slug":99,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":11,"downloaded":106,"rating":13,"num_ratings":13,"last_updated":107,"tested_up_to":15,"requires_at_least":15,"requires_php":15,"tags":108,"homepage":113,"download_link":114,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"multiple-user-post","Multiple User Post","2.0","Kapil Lohakare","https:\u002F\u002Fprofiles.wordpress.org\u002Fkapillohakare\u002F","\u003Cul>\n\u003Cli>This plugin will be helpful if you want to have multiple editor for single post.\u003C\u002Fli>\n\u003Cli>This plugin will add the multiple users to single post so that each user can contribute to the post.\u003C\u002Fli>\n\u003Cli>The Plugin will send and email to registered user to add\u002Fsuggest the edits in the given post.\u003C\u002Fli>\n\u003Cli>Post author can select\u002Fassign the user to post and publish the post.\u003C\u002Fli>\n\u003Cli>The same post content will be forwarded to users and email be sent out for suggesting update.\u003C\u002Fli>\n\u003Cli>User will logged into the admin panel and edit the post at their end. Same information will be forwarded to the author of the post. This information will be displayed into the meta field of the post and author can see it.\u003C\u002Fli>\n\u003Cli>One new “Unread” Custom post type is created for storing these suggestions and this CPT will be hidden from front end so that these edits access protection will be controlled.\u003C\u002Fli>\n\u003Cli>This is because it has one to one relationship within post and users table. This plugin will be helpful for suggest an update for post by different users.\u003C\u002Fli>\n\u003C\u002Ful>\n","assign users, delegate post, edit me, post relationship, one to many, many to many, user post, multiple posts, suggest edit, multiple edit.",1468,"2016-07-05T15:57:00.000Z",[109,110,111,99,112],"admin-user-roles","more-editors","more-users","multiple-user-to-single-post","#","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmultiple-user-post.zip",{"slug":116,"name":117,"version":118,"author":119,"author_profile":120,"description":121,"short_description":122,"active_installs":13,"downloaded":123,"rating":13,"num_ratings":13,"last_updated":124,"tested_up_to":125,"requires_at_least":126,"requires_php":15,"tags":127,"homepage":15,"download_link":130,"security_score":131,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"show-featured-thumbnails","Show Featured Thumbnails","1.0.0","Hatsuhito","https:\u002F\u002Fprofiles.wordpress.org\u002Ftohitsu\u002F","\u003Cp>投稿および固定ページ一覧画面にアイキャッチ画像のサムネイルカラムを追加します。\u003Cbr \u002F>\nアイキャッチ画像がない場合は、ページ一覧から直接アイキャッチを指定できます。\u003C\u002Fp>\n\u003Cp>Add a thumbnail column of featured images to the Posts and Pages list screens.\u003Cbr \u002F>\nIf a post has no featured image, you can assign one directly from the list view.\u003C\u002Fp>\n\u003Ch3>Contact\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Author: Hatsuhito Shimizu\u003C\u002Fli>\n\u003Cli>Author URI: https:\u002F\u002Fhatsuhito.com\u002F\u003C\u002Fli>\n\u003C\u002Ful>\n","Adds a featured image thumbnail column to the Posts and Pages list screens, and allows assigning an image directly from the list if none exists.",320,"2025-05-14T16:09:00.000Z","6.8.5","5.0",[17,128,129,21],"post-list","thumbnails","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshow-featured-thumbnails.1.0.0.zip",100,{"attackSurface":133,"codeSignals":144,"taintFlows":209,"riskAssessment":210,"analyzedAt":221},{"hooks":134,"ajaxHandlers":140,"restRoutes":141,"shortcodes":142,"cronEvents":143,"entryPointCount":13,"unprotectedCount":13},[135],{"type":136,"name":137,"callback":137,"file":138,"line":139},"filter","uploading_iframe_src","just-unzip.php",70,[],[],[],[],{"dangerousFunctions":145,"sqlUsage":146,"outputEscaping":159,"fileOperations":205,"externalRequests":13,"nonceChecks":206,"capabilityChecks":207,"bundledLibraries":208},[],{"prepared":13,"raw":30,"locations":147},[148,152,155,157],{"file":149,"line":150,"context":151},"inline-uploading.php",232,"$wpdb->get_var() with variable interpolation",{"file":149,"line":153,"context":154},242,"$wpdb->get_results() with variable interpolation",{"file":149,"line":156,"context":154},751,{"file":149,"line":158,"context":151},754,{"escaped":13,"rawEcho":160,"locations":161},22,[162,165,167,169,171,173,174,176,177,179,180,182,184,186,188,190,192,194,196,198,200,203],{"file":149,"line":163,"context":164},402,"raw output",{"file":149,"line":166,"context":164},408,{"file":149,"line":168,"context":164},572,{"file":149,"line":170,"context":164},577,{"file":149,"line":172,"context":164},750,{"file":149,"line":172,"context":164},{"file":149,"line":175,"context":164},752,{"file":149,"line":175,"context":164},{"file":149,"line":178,"context":164},755,{"file":149,"line":178,"context":164},{"file":149,"line":181,"context":164},760,{"file":149,"line":183,"context":164},761,{"file":149,"line":185,"context":164},767,{"file":149,"line":187,"context":164},768,{"file":149,"line":189,"context":164},779,{"file":149,"line":191,"context":164},780,{"file":149,"line":193,"context":164},785,{"file":149,"line":195,"context":164},807,{"file":149,"line":197,"context":164},808,{"file":149,"line":199,"context":164},809,{"file":201,"line":202,"context":164},"pclzip.lib.php",3958,{"file":201,"line":204,"context":164},3973,66,2,3,[],[],{"summary":211,"deductions":212},"The \"just-unzip\" v0.2.2 plugin exhibits a mixed security posture. On the positive side, the static analysis reveals no identified vulnerabilities in its history and a very limited attack surface, with zero AJAX handlers, REST API routes, shortcodes, or cron events exposed without authentication or proper checks. Taint analysis also shows no critical or high-severity issues, indicating a lack of directly exploitable data flow vulnerabilities.\n\nHowever, the code analysis raises significant concerns regarding the handling of data. A substantial number of file operations (66) coupled with a complete lack of output escaping (0% properly escaped) is a major red flag. While there are no external HTTP requests or dangerous functions, this high volume of unescaped output in file operations could lead to various injection vulnerabilities, depending on how the unzipped content is processed or displayed. The presence of SQL queries that are not prepared (0% using prepared statements) is another critical weakness, potentially exposing the site to SQL injection attacks.\n\nThe absence of any recorded vulnerabilities in its history is a positive indicator, but it should not overshadow the internal code quality issues. The plugin appears to have a low external attack surface but internal processing weaknesses that could be exploited if an attacker can trigger the file operations or SQL queries with malicious input. The recommendation would be to urgently address the unescaped output and unprepared SQL queries to improve its overall security.",[213,215,218],{"reason":214,"points":11},"SQL queries not using prepared statements",{"reason":216,"points":217},"No output properly escaped",8,{"reason":219,"points":220},"High number of file operations without proper checks",5,"2026-03-17T01:03:36.708Z",{"wat":223,"direct":229},{"assetPaths":224,"generatorPatterns":226,"scriptPaths":227,"versionParams":228},[225],"\u002Fwp-content\u002Fplugins\u002Fjust-unzip\u002Finline-uploading.php",[],[],[],{"cssClasses":230,"htmlComments":231,"htmlAttributes":232,"restEndpoints":233,"jsGlobals":234,"shortcodeOutput":235},[],[],[],[],[],[]]