[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMkurErUq0Cd90-4xEjfGYKx-QJUg1f_MMBDSplxdI-A":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":13,"vuln_count":27,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":47,"crawl_stats":37,"alternatives":55,"analysis":145,"fingerprints":294},"kodo-qiniu","KODO Qiniu","1.5.8","沈唁","https:\u002F\u002Fprofiles.wordpress.org\u002Fshenyanzhi\u002F","\u003Cp>使用七牛云海量存储系统 KODO 作为附件存储空间。（This is a plugin that uses Qiniu Cloud KODO for attachments remote saving.）\u003C\u002Fp>\n\u003Cul>\n\u003Cli>依赖七牛云海量存储系统 KODO 服务：https:\u002F\u002Fwww.qiniu.com\u002Fproducts\u002Fkodo\u003C\u002Fli>\n\u003Cli>使用说明：https:\u002F\u002Fdeveloper.qiniu.com\u002Fkodo?ref=www.qq52o.me\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>插件特点\u003C\u002Fh3>\n\u003Col>\n\u003Cli>可配置是否上传缩略图和是否保留本地备份\u003C\u002Fli>\n\u003Cli>本地删除可同步删除七牛云海量存储系统 KODO 中的文件\u003C\u002Fli>\n\u003Cli>支持七牛云海量存储系统 KODO 绑定的个性域名\u003C\u002Fli>\n\u003Cli>支持替换数据库中旧的资源链接地址\u003C\u002Fli>\n\u003Cli>支持七牛云海量存储系统 KODO 完整地域使用\u003C\u002Fli>\n\u003Cli>支持同步历史附件到七牛云海量存储系统 KODO\u003C\u002Fli>\n\u003Cli>支持七牛云图片样式\u003C\u002Fli>\n\u003Cli>支持七牛云原图保护\u003C\u002Fli>\n\u003Cli>支持媒体库编辑\u003C\u002Fli>\n\u003Cli>支持上传文件自动重命名\u003C\u002Fli>\n\u003Cli>支持图片裁剪编辑等操作后的上传\u003C\u002Fli>\n\u003Cli>支持多站点\u003C\u002Fli>\n\u003Cli>支持使用 wp-cli 命令上传\u002F删除文件\u003C\u002Fli>\n\u003Cli>插件更多详细介绍和安装：\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fsy-records\u002Fqiniu-kodo-wordpress\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Fsy-records\u002Fqiniu-kodo-wordpress\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>其他插件\u003C\u002Fh3>\n\u003Cp>腾讯云 COS：\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fsy-records\u002Fsync-qcloud-cos\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>，\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsync-qcloud-cos\" rel=\"ugc\">WordPress Plugins\u003C\u002Fa>\u003Cbr \u002F>\n华为云 OBS：\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fsy-records\u002Fhuaweicloud-obs-wordpress\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>，\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fobs-huaweicloud\" rel=\"ugc\">WordPress Plugins\u003C\u002Fa>\u003Cbr \u002F>\n阿里云 OSS：\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fsy-records\u002Faliyun-oss-wordpress\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>，\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Foss-aliyun\" rel=\"ugc\">WordPress Plugins\u003C\u002Fa>\u003Cbr \u002F>\n又拍云 USS：\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fsy-records\u002Fupyun-uss-wordpress\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>，\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fuss-upyun\" rel=\"ugc\">WordPress Plugins\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>作者博客\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fqq52o.me\" title=\"沈唁志\" rel=\"nofollow ugc\">沈唁志\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>QQ 交流群：887595381\u003C\u002Fp>\n","使用七牛云海量存储系统 KODO 作为附件存储空间。（This is a plugin that uses Qiniu Cloud KODO for attachments remote saving.）",300,14079,100,2,"2025-12-05T03:13:00.000Z","6.9.4","4.6","7.1",[20,21,22,23,24],"kodo","qiniu","%e5%af%b9%e8%b1%a1%e5%ad%98%e5%82%a8","%e6%b5%b7%e9%87%8f%e5%ad%98%e5%82%a8","%e4%b8%83%e7%89%9b%e4%ba%91","https:\u002F\u002Fgithub.com\u002Fsy-records\u002Fqiniu-kodo-wordpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkodo-qiniu.1.5.8.zip",1,0,"2024-02-23 00:00:00","2026-03-15T15:16:48.613Z",[32],{"id":33,"url_slug":34,"title":35,"description":36,"plugin_slug":4,"theme_slug":37,"affected_versions":38,"patched_in_version":39,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":29,"updated_date":44,"references":45,"days_to_patch":27},"WF-85e17f3a-cec1-41de-b3e2-ac06a9c9290f-kodo-qiniu","kodo-qiniu-cross-site-request-forgery","KODO Qiniu \u003C= 1.5.0 - Cross-Site Request Forgery","The KODO Qiniu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to 1.5.1 (exclusive). This is due to missing or incorrect nonce validation on the kodo_setting_page() function. This makes it possible for unauthenticated attackers to replace URLs via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.",null,"\u003C1.5.1","1.5.1","medium",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2024-02-23 15:35:55",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F85e17f3a-cec1-41de-b3e2-ac06a9c9290f?source=api-prod",{"slug":48,"display_name":7,"profile_url":8,"plugin_count":49,"total_installs":50,"avg_security_score":51,"avg_patch_time_days":52,"trust_score":53,"computed_at":54},"shenyanzhi",13,3950,99,143,78,"2026-04-05T12:00:25.628Z",[56,77,94,110,127],{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":64,"downloaded":65,"rating":13,"num_ratings":14,"last_updated":66,"tested_up_to":16,"requires_at_least":67,"requires_php":68,"tags":69,"homepage":75,"download_link":76,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"wpqiniu","WPQiNiu七牛云对象存储","5.0","老蒋和他的小伙伴","https:\u002F\u002Fprofiles.wordpress.org\u002Flaobuluo\u002F","\u003Cp>WordPress 七牛云对象存储（简称:WPQiNiu），基于七牛云对象存储与WordPress实现静态资源到对象存储中，让静态资源包括图片、附件分离WordPress根目录，提高网站打开速度。\u003C\u002Fp>\n\u003Ch3>插件特点\u003C\u002Fh3>\n\u003Col>\n\u003Cli>支持自定义域名设置\u003C\u002Fli>\n\u003Cli>支持一键禁止缩略图\u003C\u002Fli>\n\u003Cli>支持自定义任意对象存储目录，一个存储桶可以多网站\u003C\u002Fli>\n\u003Cli>支持自动文件重命名\u003C\u002Fli>\n\u003Cli>支持本地和对象存储分离和同步\u003C\u002Fli>\n\u003Cli>上传时正确设置 MIME 类型，确保七牛云中图片可正常预览\u003C\u002Fli>\n\u003Cli>兼容 PHP 7.4 及 PHP 8.x 版本\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>七牛云对象存储插件安装方法：\u003Ca href=\"https:\u002F\u002Fwww.lezaiyun.com\u002F1097.html\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.lezaiyun.com\u002F1097.html\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>网站支持\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.laojiang.me\u002F\" title=\"老蒋玩运营\" rel=\"nofollow ugc\">老蒋玩运营\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.lezaiyun.com\u002F\" title=\"乐在云工作室\" rel=\"nofollow ugc\">乐在云工作室\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>欢迎加入插件和站长微信公众号：老蒋朋友圈（公众号）\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","WordPress 七牛云对象存储（简称:WPQiNiu），基于七牛云对象存储与WordPress实现静态资源到对象存储中，让静态资源包括图片、附件分离WordPress根目录，提高网站打开速度。",400,21740,"2026-02-09T07:08:00.000Z","5.3","7.4",[70,71,72,73,74],"wordpress%e5%af%b9%e8%b1%a1%e5%ad%98%e5%82%a8","%e4%b8%83%e7%89%9bwordpress","%e4%b8%83%e7%89%9b%e5%8a%a0%e9%80%9fwordpress","%e4%b8%83%e7%89%9b%e5%af%b9%e8%b1%a1%e5%ad%98%e5%82%a8","%e4%b8%83%e7%89%9b%e4%ba%91%e5%ad%98%e5%82%a8wordpress","https:\u002F\u002Fwww.lezaiyun.com\u002F1097.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpqiniu.5.0.zip",{"slug":78,"name":79,"version":39,"author":7,"author_profile":8,"description":80,"short_description":81,"active_installs":82,"downloaded":83,"rating":84,"num_ratings":85,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":86,"homepage":90,"download_link":91,"security_score":92,"vuln_count":27,"unpatched_count":28,"last_vuln_date":93,"fetched_at":30},"oss-aliyun","OSS Aliyun","\u003Cp>使用阿里云对象存储 OSS 作为附件存储空间。(This is a plugin that uses Aliyun Object Storage Service for attachments remote saving.)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>依赖阿里云 OSS 服务：https:\u002F\u002Fwww.aliyun.com\u002Fproduct\u002Foss\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>插件特点\u003C\u002Fh3>\n\u003Col>\n\u003Cli>可配置是否上传缩略图和是否保留本地备份\u003C\u002Fli>\n\u003Cli>本地删除可同步删除阿里云对象存储 OSS 中的文件\u003C\u002Fli>\n\u003Cli>支持阿里云对象存储 OSS 绑定的用户域名\u003C\u002Fli>\n\u003Cli>支持替换数据库中旧的资源链接地址\u003C\u002Fli>\n\u003Cli>支持阿里云对象存储 OSS 完整地域使用\u003C\u002Fli>\n\u003Cli>支持同步历史附件到阿里云对象存储 OSS\u003C\u002Fli>\n\u003Cli>支持阿里云 OSS 图片处理\u003C\u002Fli>\n\u003Cli>支持上传文件自动重命名\u003C\u002Fli>\n\u003Cli>支持使用 ECS 的 RAM 操作\u003C\u002Fli>\n\u003Cli>支持原图保护\u003C\u002Fli>\n\u003Cli>支持 \u003Ccode>wp-cli\u003C\u002Fcode> 命令上传\u002F删除文件\u003C\u002Fli>\n\u003Cli>支持多站点\u003C\u002Fli>\n\u003Cli>支持图片裁剪编辑等操作后的上传\u003C\u002Fli>\n\u003Cli>插件更多详细介绍和安装：\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fsy-records\u002Faliyun-oss-wordpress\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Fsy-records\u002Faliyun-oss-wordpress\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>其他插件\u003C\u002Fh3>\n\u003Cp>腾讯云 COS：\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fsy-records\u002Fwordpress-qcloud-cos\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>，\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsync-qcloud-cos\" rel=\"ugc\">WordPress Plugins\u003C\u002Fa>\u003Cbr \u002F>\n华为云 OBS：\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fsy-records\u002Fhuaweicloud-obs-wordpress\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>，\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fobs-huaweicloud\" rel=\"ugc\">WordPress Plugins\u003C\u002Fa>\u003Cbr \u002F>\n七牛云 KODO：\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fsy-records\u002Fqiniu-kodo-wordpress\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>，\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fkodo-qiniu\" rel=\"ugc\">WordPress Plugins\u003C\u002Fa>\u003Cbr \u002F>\n又拍云 USS：\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fsy-records\u002Fupyun-uss-wordpress\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>，\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fuss-upyun\" rel=\"ugc\">WordPress Plugins\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>作者博客\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fqq52o.me\" title=\"沈唁志\" rel=\"nofollow ugc\">沈唁志\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>欢迎加入沈唁的 WordPress 云存储全家桶 QQ 交流群：887595381\u003C\u002Fp>\n","使用阿里云对象存储 OSS 作为附件存储空间。(This is a plugin that uses Aliyun Object Storage Service for attachments remote saving.)",3000,34389,96,5,[87,88,89,22],"aliyun","%e9%98%bf%e9%87%8c%e4%ba%91","oss","https:\u002F\u002Fgithub.com\u002Fsy-records\u002Faliyun-oss-wordpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Foss-aliyun.1.5.1.zip",98,"2024-03-28 00:00:00",{"slug":95,"name":96,"version":59,"author":60,"author_profile":61,"description":97,"short_description":98,"active_installs":99,"downloaded":100,"rating":101,"num_ratings":102,"last_updated":103,"tested_up_to":16,"requires_at_least":104,"requires_php":68,"tags":105,"homepage":108,"download_link":109,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"wposs","WPOSS阿里云对象存储","\u003Cp>WordPress阿里云对象存储插件（简称:WPOSS），基于阿里云OSS对象存储与WordPress实现静态资源到OSS存储。支持阿里云OSS图片编辑，水印、裁剪、压缩等。\u003C\u002Fp>\n\u003Ch3>插件特点\u003C\u002Fh3>\n\u003Col>\n\u003Cli>新增支持图像自定义处理 设置水印、编辑图片、压缩WEBP等\u003C\u002Fli>\n\u003Cli>支持已有图片编辑功能\u003C\u002Fli>\n\u003Cli>提高上传速度\u003C\u002Fli>\n\u003Cli>支持一键替换静态本地化至对象存储远程URL\u003C\u002Fli>\n\u003Cli>支持一键禁止缩略图\u003C\u002Fli>\n\u003Cli>支持自定义任意对象存储目录，一个存储桶可以多网站\u003C\u002Fli>\n\u003Cli>支持自动文件重命名\u003C\u002Fli>\n\u003Cli>支持本地和对象存储分离和同步\u003C\u002Fli>\n\u003Cli>2020年重构代码改变传统逻辑模型\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>阿里云对象存储插件安装方法：\u003Ca href=\"https:\u002F\u002Fwww.lezaiyun.com\u002F?p=1095\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.lezaiyun.com\u002F?p=1095\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>网站支持\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.laojiang.me\u002F\" title=\"老蒋玩运营\" rel=\"nofollow ugc\">老蒋玩运营\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.zhujipingjia.com\u002F\" title=\"主机评价网\" rel=\"nofollow ugc\">主机评价网\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>欢迎加入插件和站长微信公众号：老蒋朋友圈（公众号）\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","WordPress阿里云对象存储插件（简称:WPOSS），基于阿里云OSS对象存储与WordPress实现静态资源到OSS存储。支持阿里云OSS图片编辑，水印、裁剪、压缩等。",900,23607,92,7,"2026-02-09T02:40:00.000Z","5.5",[106,89,107,22],"%e9%98%bf%e9%87%8c%e4%ba%91oss","wordpress-oss","https:\u002F\u002Fwww.lezaiyun.com\u002F1095.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwposs.5.0.zip",{"slug":111,"name":112,"version":113,"author":7,"author_profile":8,"description":114,"short_description":115,"active_installs":64,"downloaded":116,"rating":13,"num_ratings":117,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":118,"tags":119,"homepage":124,"download_link":125,"security_score":13,"vuln_count":27,"unpatched_count":28,"last_vuln_date":126,"fetched_at":30},"sync-qcloud-cos","Sync QCloud COS","2.6.6","\u003Cp>使用腾讯云对象存储服务 COS 作为附件存储空间。(Using Tencent Cloud Object Storage Service COS as Attachment Storage Space.)\u003C\u002Fp>\n\u003Cul>\n\u003Cli>依赖腾讯云 COS 服务：https:\u002F\u002Fcloud.tencent.com\u002Fproduct\u002Fcos\u003C\u002Fli>\n\u003Cli>使用说明：https:\u002F\u002Fcloud.tencent.com\u002Fproduct\u002Fcos\u002Fdetails\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>插件特点\u003C\u002Fh3>\n\u003Col>\n\u003Cli>可配置是否上传缩略图和是否保留本地备份\u003C\u002Fli>\n\u003Cli>本地删除可同步删除腾讯云对象存储 COS 中的文件\u003C\u002Fli>\n\u003Cli>支持腾讯云对象存储 COS 绑定的个性域名\u003C\u002Fli>\n\u003Cli>支持替换数据库中旧的资源链接地址\u003C\u002Fli>\n\u003Cli>支持北京、上海、广州、香港、法兰克福等完整地域使用\u003C\u002Fli>\n\u003Cli>支持同步历史附件到 COS\u003C\u002Fli>\n\u003Cli>支持验证桶名是否填写正确\u003C\u002Fli>\n\u003Cli>支持腾讯云数据万象 CI 图片处理\u003C\u002Fli>\n\u003Cli>支持上传文件自动重命名\u003C\u002Fli>\n\u003Cli>支持媒体库编辑\u003C\u002Fli>\n\u003Cli>支持腾讯云数据万象图片极智压缩\u003C\u002Fli>\n\u003Cli>支持文件预览\u003C\u002Fli>\n\u003Cli>支持文本内容审核\u003C\u002Fli>\n\u003Cli>支持原图保护\u003C\u002Fli>\n\u003Cli>支持数据监控\u003C\u002Fli>\n\u003Cli>支持使用 \u003Ccode>wp-cli\u003C\u002Fcode> 命令上传\u002F删除文件\u003C\u002Fli>\n\u003Cli>支持上传文件到存储桶子目录\u003C\u002Fli>\n\u003Cli>支持多站点\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>插件更多详细介绍和安装：\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fsy-records\u002Fsync-qcloud-cos\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Fsy-records\u002Fsync-qcloud-cos\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>作者博客\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fqq52o.me\" title=\"沈唁志\" rel=\"nofollow ugc\">沈唁志\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>欢迎加入沈唁的 WordPress 云存储全家桶 QQ 交流群：887595381\u003C\u002Fp>\n","使用腾讯云对象存储服务 COS 作为附件存储空间。(Using Tencent Cloud Object Storage Service COS as Attachment Storage Space.)",22702,6,"7.2",[120,121,122,123,22],"cos","%e8%85%be%e8%ae%af%e4%ba%91","qcloud","tencent","https:\u002F\u002Fqq52o.me\u002F2518.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsync-qcloud-cos.2.6.6.zip","2022-02-17 00:00:00",{"slug":128,"name":129,"version":130,"author":60,"author_profile":61,"description":131,"short_description":132,"active_installs":11,"downloaded":133,"rating":134,"num_ratings":117,"last_updated":135,"tested_up_to":16,"requires_at_least":136,"requires_php":68,"tags":137,"homepage":143,"download_link":144,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"wpcos","WPCOS腾讯云对象存储COS","4.8","\u003Cp>WordPress COS（简称:WPCOS），基于腾讯云COS存储与WordPress实现静态资源到COS存储中。提高网站项目的访问速度，以及静态资源的安全存储功能。\u003C\u002Fp>\n\u003Ch3>插件特点\u003C\u002Fh3>\n\u003Col>\n\u003Cli>新增支持腾讯云数据万象 设置水印、编辑图片、压缩WEBP等（取消）\u003C\u002Fli>\n\u003Cli>支持已有图片编辑功能\u003C\u002Fli>\n\u003Cli>支持自定义域名设置\u003C\u002Fli>\n\u003Cli>支持一键替换静态本地化至对象存储远程URL\u003C\u002Fli>\n\u003Cli>支持一键禁止缩略图\u003C\u002Fli>\n\u003Cli>支持自定义任意对象存储目录，一个存储桶可以多网站\u003C\u002Fli>\n\u003Cli>支持自动文件重命名\u003C\u002Fli>\n\u003Cli>支持本地和对象存储分离和同步\u003C\u002Fli>\n\u003Cli>优化重构加速上传\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>WPCOS插件安装方法：\u003Ca href=\"https:\u002F\u002Fwww.lezaiyun.com\u002F1093.html\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.lezaiyun.com\u002F1093.html\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>网站支持\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.laojiang.me\u002F\" title=\"老蒋玩运营\" rel=\"nofollow ugc\">老蒋玩运营\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.zhujipingjia.com\u002F\" title=\"主机评价网\" rel=\"nofollow ugc\">主机评价网\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>欢迎加入插件和站长微信公众号：老蒋朋友圈（公众号）\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","WordPress COS（简称:WPCOS），基于腾讯云COS存储与WordPress实现静态资源到COS存储中。提高网站项目的访问速度，以及静态资源的安全存储功能。",16355,74,"2026-02-08T12:09:00.000Z","6.0.1",[138,139,140,141,142],"%e8%85%be%e8%ae%af%e4%ba%91cos","%e8%85%be%e8%ae%af%e4%ba%91wordpress","%e8%85%be%e8%ae%af%e4%ba%91%e5%ad%98%e5%82%a8","%e8%85%be%e8%ae%af%e4%ba%91%e5%ad%98%e5%82%a8%e5%88%86%e7%a6%bb","%e8%85%be%e8%ae%af%e4%ba%91%e5%af%b9%e8%b1%a1%e5%ad%98%e5%82%a8","https:\u002F\u002Fwww.lezaiyun.com\u002F1093.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpcos.4.8.zip",{"attackSurface":146,"codeSignals":226,"taintFlows":248,"riskAssessment":288,"analyzedAt":293},{"hooks":147,"ajaxHandlers":222,"restRoutes":223,"shortcodes":224,"cronEvents":225,"entryPointCount":28,"unprotectedCount":28},[148,155,158,161,165,169,174,178,183,186,191,195,199,203,207,210,214,218],{"type":149,"name":150,"callback":151,"priority":152,"file":153,"line":154},"filter","wp_get_attachment_url","kodo_add_suffix_to_attachment_url",10,"qiniu-kodo-wordpress.php",196,{"type":149,"name":156,"callback":151,"priority":152,"file":153,"line":157},"wp_get_attachment_thumb_url",197,{"type":149,"name":159,"callback":151,"priority":152,"file":153,"line":160},"wp_get_original_image_url",198,{"type":149,"name":162,"callback":163,"priority":152,"file":153,"line":164},"wp_prepare_attachment_for_js","kodo_add_suffix_to_attachment",199,{"type":149,"name":166,"callback":167,"file":153,"line":168},"image_get_intermediate_size","kodo_add_suffix_for_media_send_to_editor",200,{"type":149,"name":170,"callback":171,"priority":172,"file":153,"line":173},"wp_handle_upload","kodo_upload_attachments",50,321,{"type":149,"name":175,"callback":176,"priority":13,"file":153,"line":177},"wp_generate_attachment_metadata","kodo_upload_thumbs",322,{"type":149,"name":179,"callback":180,"priority":181,"file":153,"line":182},"wp_save_image_editor_file","kodo_save_image_editor_file",101,323,{"type":149,"name":184,"callback":185,"file":153,"line":64},"wp_update_attachment_metadata","kodo_image_editor_file_do",{"type":187,"name":188,"callback":189,"file":153,"line":190},"action","delete_attachment","kodo_delete_remote_attachment",474,{"type":149,"name":150,"callback":192,"priority":193,"file":153,"line":194},"kodo_modify_img_url",30,484,{"type":149,"name":196,"callback":197,"priority":152,"file":153,"line":198},"sanitize_file_name","kodo_sanitize_file_name",500,{"type":149,"name":200,"callback":201,"priority":152,"file":153,"line":202},"plugin_action_links","kodo_plugin_action_links",550,{"type":149,"name":204,"callback":205,"priority":152,"file":153,"line":206},"wp_calculate_image_srcset","kodo_custom_image_srcset",570,{"type":149,"name":162,"callback":208,"priority":152,"file":153,"line":209},"kodo_wp_prepare_attachment_for_js",572,{"type":149,"name":211,"callback":212,"file":153,"line":213},"the_content","kodo_setting_content_style",610,{"type":149,"name":215,"callback":216,"priority":152,"file":153,"line":217},"post_thumbnail_html","kodo_setting_post_thumbnail_style",631,{"type":187,"name":219,"callback":220,"file":153,"line":221},"admin_menu","kodo_add_setting_page",658,[],[],[],[],{"dangerousFunctions":227,"sqlUsage":228,"outputEscaping":231,"fileOperations":27,"externalRequests":28,"nonceChecks":27,"capabilityChecks":27,"bundledLibraries":247},[],{"prepared":229,"raw":28,"locations":230},4,[],{"escaped":232,"rawEcho":117,"locations":233},40,[234,237,239,241,243,245],{"file":153,"line":235,"context":236},691,"raw output",{"file":153,"line":238,"context":236},708,{"file":153,"line":240,"context":236},801,{"file":153,"line":242,"context":236},810,{"file":153,"line":244,"context":236},814,{"file":153,"line":246,"context":236},815,[],[249,277],{"entryPoint":250,"graph":251,"unsanitizedCount":28,"severity":276},"kodo_setting_page (qiniu-kodo-wordpress.php:661)",{"nodes":252,"edges":272},[253,258,264,268],{"id":254,"type":255,"label":256,"file":153,"line":257},"n0","source","$_POST (x2)",719,{"id":259,"type":260,"label":261,"file":153,"line":262,"wp_function":263},"n1","sink","update_option() [Settings Manipulation]",721,"update_option",{"id":265,"type":255,"label":266,"file":153,"line":267},"n2","$_SERVER (x2)",735,{"id":269,"type":260,"label":270,"file":153,"line":244,"wp_function":271},"n3","echo() [XSS]","echo",[273,275],{"from":254,"to":259,"sanitized":274},true,{"from":265,"to":269,"sanitized":274},"low",{"entryPoint":278,"graph":279,"unsanitizedCount":28,"severity":276},"\u003Cqiniu-kodo-wordpress> (qiniu-kodo-wordpress.php:0)",{"nodes":280,"edges":285},[281,282,283,284],{"id":254,"type":255,"label":256,"file":153,"line":257},{"id":259,"type":260,"label":261,"file":153,"line":262,"wp_function":263},{"id":265,"type":255,"label":266,"file":153,"line":267},{"id":269,"type":260,"label":270,"file":153,"line":244,"wp_function":271},[286,287],{"from":254,"to":259,"sanitized":274},{"from":265,"to":269,"sanitized":274},{"summary":289,"deductions":290},"The \"kodo-qiniu\" plugin v1.5.8 exhibits a generally strong security posture based on the static analysis. It demonstrates good practices by utilizing prepared statements for all SQL queries and performing a high percentage of output escaping.  Furthermore, the absence of dangerous functions, external HTTP requests, and unsanitized paths in taint flows are positive indicators.\n\nHowever, a notable concern is the presence of a past medium-severity Cross-Site Request Forgery (CSRF) vulnerability, even though it is currently patched. While the plugin shows no active vulnerabilities and the static analysis reveals a very small attack surface with no immediately apparent unprotected entry points, the historical CSRF issue suggests a potential area for future attention. The single file operation and limited nonce\u002Fcapability checks, while not inherently problematic given the limited attack surface, could become risk factors if the plugin's functionality or attack surface were to expand significantly.\n\nIn conclusion, the \"kodo-qiniu\" plugin v1.5.8 is relatively secure, with diligent coding practices observed in its current state. The historical CSRF vulnerability is the most significant indicator of past risk and warrants continued vigilance. The minimal attack surface and the lack of critical static analysis findings are strengths, but the plugin's security should be reassessed if its features or integrations evolve.",[291],{"reason":292,"points":152},"Past medium CVE","2026-03-16T19:56:17.733Z",{"wat":295,"direct":300},{"assetPaths":296,"generatorPatterns":297,"scriptPaths":298,"versionParams":299},[],[],[],[],{"cssClasses":301,"htmlComments":302,"htmlAttributes":303,"restEndpoints":305,"jsGlobals":306,"shortcodeOutput":308},[],[],[304],"data-kodo-options",[],[307],"kodo_options",[]]