[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXiMJriMlkoWGfiBj_UJyUehdMuZHOjZo_xbxb0Y9h_g":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":46,"crawl_stats":37,"alternatives":51,"analysis":163,"fingerprints":201},"lazy-load-videos-and-sticky-control","Lazy load videos and sticky control","3.0.1","Aishan","https:\u002F\u002Fprofiles.wordpress.org\u002Faishan\u002F","\u003Cp>This plugin enhances page load times by loading only the YouTube video preview image initially. Additionally, it offers the option to make your video sticky, positioning it at the top or bottom of the window when the user scrolls away from the video viewport.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Lazy Load Videos:\u003C\u002Fstrong> Reduce the amount of time it takes to load your video by loading just the video thumbnail.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multiple Video Support:\u003C\u002Fstrong> You may quickly and simply add more than one video to a page. Videos can only be played one at a time, and when one is playing, the other one instantly pauses.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Sticky Video:\u003C\u002Fstrong> Keep videos visible as you navigate by adhering them to the top or bottom of the screen to ensure ongoing playback.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Styling:\u003C\u002Fstrong> Adapt your videos’ look to perfectly match the style of your website by using your own CSS.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Ch3>Method 1: Using the Classic Editor (WP Editor)\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong>Generate Shortcode in WP Editor:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Open the post\u002Fpage where you want to add the YouTube video.\u003C\u002Fli>\n\u003Cli>In the WordPress editor, click on the \u003Cstrong>LLVASC\u003C\u002Fstrong> icon. This will open a popup window.\u003C\u002Fli>\n\u003Cli>In the popup, add your YouTube video ID. The video ID is the unique alphanumeric code found at the end of your YouTube video URL. For example, in \u003Ccode>https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=iXGoAj7IEys\u003C\u002Fcode>, the video ID is \u003Ccode>iXGoAj7IEys\u003C\u002Fcode>.\u003C\u002Fli>\n\u003Cli>After entering the video ID, click “Ok”. This action will generate and insert a shortcode into your content.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Shortcode Format:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>The shortcode added to your content will look like this:\u003Cbr \u002F>\n  [lazy-load-videos-and-sticky-control id=”Youtube-video-ID”]\u003C\u002Fli>\n\u003Cli>For example, if your video ID is \u003Ccode>iXGoAj7IEys\u003C\u002Fcode>, the shortcode will be:\u003Cbr \u002F>\n  [lazy-load-videos-and-sticky-control id=”iXGoAj7IEys”]\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Save\u002FUpdate:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Save or update your post\u002Fpage to apply the changes.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Preview and Customize:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Preview your page to see the embedded video.\u003C\u002Fli>\n\u003Cli>If you need to adjust the styling, you can add custom CSS in the General tab of the plugin settings.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Method 2: Using Gutenberg Block\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong>Add a Block:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Open the post\u002Fpage where you want to add the YouTube video using the Gutenberg editor.\u003C\u002Fli>\n\u003Cli>Click on the “+” icon to add a new block.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Select the \u003C\u002Fstrong>\u003Cstrong>\u003Cem>LLVASC\u003C\u002Fem>\u003C\u002Fstrong> Block:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Search for the “LLVASC” block in the block library.\u003C\u002Fli>\n\u003Cli>Add this block to your content.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Enter YouTube Video ID:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>In the LLVASC block settings inspect control, select your video platform and enter your video ID. For example, if your YouTube video URL is \u003Ccode>https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=iXGoAj7IEys\u003C\u002Fcode>, the video ID is \u003Ccode>iXGoAj7IEys\u003C\u002Fcode>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Save\u002FUpdate:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Save or update your post\u002Fpage to apply the changes.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Preview and Customize:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Preview your page to see the embedded video.\u003C\u002Fli>\n\u003Cli>Customize the block settings as needed to adjust the appearance and functionality.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Demo Preview\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpreview-plugin.web.app\u002Flazy-load-videos-and-sticky-control.html\" rel=\"nofollow ugc\">Demo\u003C\u002Fa>\u003C\u002Fp>\n","Lazy load and sticky your video. Super-easy and fun!",100,5422,84,5,"2024-11-21T15:25:00.000Z","6.7.5","5.2","7.2",[20,21,22,23,24],"floating-video","lazyload","shortcode","sticky-video","videos","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flazy-load-videos-and-sticky-control.3.0.1.zip",71,1,"2024-11-20 13:38:27","2026-03-15T15:16:48.613Z",[32],{"id":33,"url_slug":34,"title":35,"description":36,"plugin_slug":4,"theme_slug":37,"affected_versions":38,"patched_in_version":37,"severity":39,"cvss_score":40,"cvss_vector":41,"vuln_type":42,"published_date":29,"updated_date":43,"references":44,"days_to_patch":37},"CVE-2024-11428","lazy-load-videos-and-sticky-control-authenticated-contributor-stored-cross-site-scripting","Lazy load videos and sticky control \u003C= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting","The Lazy load videos and sticky control plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'lazy-load-videos-and-sticky-control' shortcode in all versions up to, and including, 3.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=3.0.0","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-11-21 02:06:29",[45],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F3a9715c3-6ce0-46f8-820d-194bd0e8e6fd?source=api-prod",{"slug":47,"display_name":7,"profile_url":8,"plugin_count":28,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":48,"trust_score":49,"computed_at":50},"aishan",30,74,"2026-04-04T04:52:41.885Z",[52,74,97,114,139],{"slug":53,"name":54,"version":55,"author":56,"author_profile":57,"description":58,"short_description":59,"active_installs":11,"downloaded":60,"rating":13,"num_ratings":61,"last_updated":62,"tested_up_to":63,"requires_at_least":64,"requires_php":25,"tags":65,"homepage":70,"download_link":71,"security_score":72,"vuln_count":28,"unpatched_count":28,"last_vuln_date":73,"fetched_at":30},"auto-last-youtube-video","Auto Last Youtube Video","1.0.7","David Merinas","https:\u002F\u002Fprofiles.wordpress.org\u002Fdavidmerinas\u002F","\u003Cp>This plugin provides both Widget and Shortcode to show latest videos from any public Youtube channel. Using [auto_last_youtube_video user=’channel_name’ width=’450′ height=’320′][\u002Fauto_last_youtube_video] in a page or post will show last video uploaded to that channel and will change if another video is uploaded. The widget let you show as many videos as you want from any Youtube channel.\u003C\u002Fp>\n","This plugin provides both Widget and Shortcode to show latest videos from any public Youtube channel.",8951,6,"2020-05-08T12:28:00.000Z","5.4.19","3.3",[66,67,22,68,69],"davidmerinas","last-videos","widget","youtube","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fauto-last-youtube-video\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fauto-last-youtube-video.zip",63,"2025-09-05 00:00:00",{"slug":75,"name":76,"version":77,"author":78,"author_profile":79,"description":80,"short_description":81,"active_installs":82,"downloaded":83,"rating":82,"num_ratings":84,"last_updated":85,"tested_up_to":86,"requires_at_least":87,"requires_php":25,"tags":88,"homepage":93,"download_link":94,"security_score":95,"vuln_count":96,"unpatched_count":96,"last_vuln_date":37,"fetched_at":30},"vimeo-everywhere","Vimeo Everywhere","2.1","Michael","https:\u002F\u002Fprofiles.wordpress.org\u002Fmgyura\u002F","\u003Cp>Display your public Vimeo videos, albums or channels on a WordPress website.  Use the shortcode generator to place your videos on pages, posts or custom post types.  Use the admin panel to place your videos in the dashboard (for example, make a learning center for your clients).  Use the widget to put a video list in the sidebar.\u003C\u002Fp>\n","Display your public Vimeo videos on your WordPress website via shortcode, widget, or dashboard menu.  Perfect for making a custom training library",60,8509,2,"2016-12-16T15:54:00.000Z","4.7.32","4.0",[89,90,24,91,92],"learning-center","video-training","vimeo","vimeo-shortcode","http:\u002F\u002Fpokayoke.co","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvimeo-everywhere.zip",85,0,{"slug":98,"name":99,"version":100,"author":101,"author_profile":102,"description":103,"short_description":104,"active_installs":48,"downloaded":105,"rating":96,"num_ratings":96,"last_updated":106,"tested_up_to":107,"requires_at_least":108,"requires_php":18,"tags":109,"homepage":25,"download_link":113,"security_score":11,"vuln_count":96,"unpatched_count":96,"last_vuln_date":37,"fetched_at":30},"floating-video-widget","Floating Video Widget","1.0","transformdigitalnz","https:\u002F\u002Fprofiles.wordpress.org\u002Ftransformdigitalnz\u002F","\u003Cp>The Floating Video Widget plugin allows you to easily add a floating video element to your WordPress site. Perfect for showcasing promotional videos, product demonstrations, or background ambiance without disrupting your site’s layout.\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easy implementation with shortcode [floating_video]\u003C\u002Fli>\n\u003Cli>Customizable placement (top-right, top-left, bottom-right, bottom-left)\u003C\u002Fli>\n\u003Cli>Optional close button\u003C\u002Fli>\n\u003Cli>Responsive design\u003C\u002Fli>\n\u003Cli>Lightweight and performance-optimized\u003C\u002Fli>\n\u003Cli>Admin settings panel for easy configuration\u003C\u002Fli>\n\u003C\u002Ful>\n","Add a customizable floating video widget to any page or post using a simple shortcode.",410,"2025-05-03T05:35:00.000Z","6.8.5","5.0",[20,110,22,111,112],"multimedia","video","video-widget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffloating-video-widget.1.0.zip",{"slug":115,"name":116,"version":117,"author":118,"author_profile":119,"description":120,"short_description":121,"active_installs":122,"downloaded":123,"rating":124,"num_ratings":125,"last_updated":126,"tested_up_to":127,"requires_at_least":108,"requires_php":128,"tags":129,"homepage":134,"download_link":135,"security_score":136,"vuln_count":137,"unpatched_count":96,"last_vuln_date":138,"fetched_at":30},"shortcodes-ultimate","WP Shortcodes Plugin — Shortcodes Ultimate","7.4.9","Vova","https:\u002F\u002Fprofiles.wordpress.org\u002Fgn_themes\u002F","\u003Ch3>SHORTCODES ULIMATE – THE #1 SHORTCODES PLUGIN\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgetshortcodes.com\u002F?utm_campaign=wporg&utm_medium=readme&utm_source=description\" rel=\"nofollow ugc\">Shortcodes Ultimate\u003C\u002Fa> is a huge collection of useful elements, that you can use in the post editor, text widgets or even in template files.\u003C\u002Fp>\n\u003Cdiv class=\"embed-vimeo\" style=\"text-align: center;\">\u003Ciframe loading=\"lazy\" src=\"https:\u002F\u002Fplayer.vimeo.com\u002Fvideo\u002F507942335\" width=\"750\" height=\"422\" frameborder=\"0\" webkitallowfullscreen mozallowfullscreen allowfullscreen>\u003C\u002Fiframe>\u003C\u002Fdiv>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgetshortcodes.com\u002Fdocs-category\u002Fshortcodes\u002F?utm_campaign=wporg&utm_medium=readme&utm_source=features\" rel=\"nofollow ugc\">Over 50 gorgeous shortcodes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Insert shortcodes in 1 click with Live Preview\u003C\u002Fli>\n\u003Cli>Supports the Block Editor\u003C\u002Fli>\n\u003Cli>Seamlessly integrates with your theme\u003C\u002Fli>\n\u003Cli>Looks great on mobile devices\u003C\u002Fli>\n\u003Cli>Custom CSS editor is included\u003C\u002Fli>\n\u003Cli>Developer-friendly with plenty of hooks and extensive documentation\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Included shortcodes\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Posts\u003C\u002Fstrong> – allows you to show specific posts anywhere\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Accordion\u003C\u002Fstrong> – simple toggle block to show\u002Fhide your content\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Button\u003C\u002Fstrong> – highly-customizable button with multiple styles\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Lightbox\u003C\u002Fstrong> – a lightbox that you can use with virtually any element\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Image Carousel\u003C\u002Fstrong> – beautiful super-customizable image carousel\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Columns\u003C\u002Fstrong> – must-have tool for creating layouts\u003C\u002Fli>\n\u003Cli>And many more…\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Get Help\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgetshortcodes.com\u002Fdocs\u002F?utm_campaign=wporg&utm_medium=readme&utm_source=links-docs\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fshortcodes-ultimate\" rel=\"ugc\">Community Support Forum\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgetshortcodes.com\u002Fsupport\u002Fopen-support-ticket\u002F?utm_campaign=wporg&utm_medium=readme&utm_source=links-support\" rel=\"nofollow ugc\">The Pro Support\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>TRY THE PRO VERSION FOR FREE\u003C\u002Fh3>\n\u003Cp>Try Shortcodes Ultimate Pro risk-free for 30 days. You are fully protected by our no questions asked refund policy!\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgetshortcodes.com\u002Fpricing\u002F?utm_campaign=wporg&utm_medium=readme&utm_source=try-pro\" rel=\"nofollow ugc\">Upgrade to Pro\u003C\u002Fa>\u003C\u002Fp>\n","A comprehensive collection of visual components for your site",400000,24545518,98,5917,"2026-02-02T16:19:00.000Z","6.9.4","5.4",[130,131,132,22,133],"carousel","columns","posts","toggle","https:\u002F\u002Fgetshortcodes.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshortcodes-ultimate.7.4.9.zip",88,32,"2025-11-23 10:11:05",{"slug":140,"name":141,"version":142,"author":143,"author_profile":144,"description":145,"short_description":146,"active_installs":147,"downloaded":148,"rating":149,"num_ratings":150,"last_updated":151,"tested_up_to":152,"requires_at_least":153,"requires_php":25,"tags":154,"homepage":159,"download_link":160,"security_score":161,"vuln_count":14,"unpatched_count":96,"last_vuln_date":162,"fetched_at":30},"mw-wp-form","MW WP Form","5.1.0","Takashi Kitajima","https:\u002F\u002Fprofiles.wordpress.org\u002Finc2734\u002F","\u003Cp>\u003Cstrong>This plugin currently has only the minimum required maintenance releases.\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Cstrong>Main maintainer has been handed over from @inc2734 to @websoudan.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>MW WP Form can create mail form with a confirmation screen using shortcode.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Form created using shortcodes\u003C\u002Fli>\n\u003Cli>Using confirmation page is possible.\u003C\u002Fli>\n\u003Cli>The page changes by the same URL or individual URL are possible.\u003C\u002Fli>\n\u003Cli>Many validation rules\u003C\u002Fli>\n\u003Cli>Saving inquiry data is possible.\u003C\u002Fli>\n\u003Cli>Displaying Chart using saved inquiry data is possible.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Official\u003C\u002Fh4>\n\u003Cp>https:\u002F\u002Fmw-wp-form.web-soudan.co.jp\u003C\u002Fp>\n\u003Ch4>GitHub\u003C\u002Fh4>\n\u003Cp>https:\u002F\u002Fgithub.com\u002Fweb-soudan\u002Fmw-wp-form\u003C\u002Fp>\n\u003Ch4>The following third-party resources\u003C\u002Fh4>\n\u003Cp>Google Charts\u003Cbr \u002F>\nSource: https:\u002F\u002Fdevelopers.google.com\u002Fchart\u002F\u003C\u002Fp>\n\u003Ch4>Contributors\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002F2inc.org\" rel=\"nofollow ugc\">Takashi Kitajima\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Finc2734\" rel=\"nofollow ugc\">inc2734\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwebcre-archive.com\" rel=\"nofollow ugc\">Ryujiro Yamamoto\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fryu263\" rel=\"nofollow ugc\">ryu263\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fkee-non.com\" rel=\"nofollow ugc\">Tsujimoto Tomoyuki\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Ftomothumb\" rel=\"nofollow ugc\">tomothumb\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>[Naoyuki Ohata] ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fnanniku\" rel=\"nofollow ugc\">nanniku\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmt8.biz\u002F\" rel=\"nofollow ugc\">Kazuto Takeshita\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fmt8biz\u002F\" rel=\"nofollow ugc\">moto hachi\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.next-season.net\u002F\" rel=\"nofollow ugc\">Atsushi Ando\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fnext-season\u002F\" rel=\"nofollow ugc\">NExt-Season\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fvisualive.jp\u002F\" rel=\"nofollow ugc\">Kazuki Tomiyasu\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fkuck1u\u002F\" rel=\"nofollow ugc\">KUCKLU\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmypacecreator.net\u002F\" rel=\"nofollow ugc\">Kei Nomura\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fmypacecreator\u002F\" rel=\"nofollow ugc\">mypacecreator\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fmh35\" rel=\"nofollow ugc\">mh35\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fnojimage\" rel=\"nofollow ugc\">Takashi Nojima\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fherikutu\" rel=\"nofollow ugc\">herikutu\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftsucharoku\" rel=\"nofollow ugc\">tsucharoku\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ft-hamano\" rel=\"nofollow ugc\">Tetsuaki Hamano\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fwildworks\u002F\" rel=\"nofollow ugc\">t-hamano\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmusus\" rel=\"nofollow ugc\">Susumu Seino\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fmusus\u002F\" rel=\"nofollow ugc\">Susumu Seino\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Flikr\" rel=\"nofollow ugc\">Yosuke Onoue\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Flikr\u002F\" rel=\"nofollow ugc\">likr\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fyudai524\" rel=\"nofollow ugc\">Yudai Konishi\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fyudai524\u002F\" rel=\"nofollow ugc\">Yudai Konishi\u003C\u002Fa> )\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fnoldorinfo\" rel=\"nofollow ugc\">takekoshi\u003C\u002Fa> ( \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fnoldorinfo\u002F\" rel=\"nofollow ugc\">takekoshi\u003C\u002Fa> )\u003C\u002Fli>\n\u003C\u002Ful>\n","MW WP Form is shortcode base contact form plugin. This plugin have many features. For example you can use many validation rules, inquiry data saving,  …",200000,1771027,86,22,"2024-03-13T02:48:00.000Z","6.4.8","6.0",[155,156,157,158,22],"confirm","form","mail","preview","https:\u002F\u002Fmw-wp-form.web-soudan.co.jp","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmw-wp-form.5.1.0.zip",81,"2024-01-31 00:00:00",{"attackSurface":164,"codeSignals":182,"taintFlows":193,"riskAssessment":194,"analyzedAt":200},{"hooks":165,"ajaxHandlers":175,"restRoutes":176,"shortcodes":177,"cronEvents":181,"entryPointCount":28,"unprotectedCount":96},[166,171],{"type":167,"name":168,"callback":168,"file":169,"line":170},"action","admin_enqueue_scripts","inc\\classes\\helpers\\class-settings-api.php",23,{"type":167,"name":172,"callback":173,"file":174,"line":49},"plugins_loaded","initialize_lazy_load_videos_and_sticky_control","lazy-load-videos-and-sticky-control.php",[],[],[178],{"tag":4,"callback":179,"file":180,"line":161},"llvasc_shortcode_callback","inc\\classes\\class-lazy-load-videos-and-sticky-control-shortcode.php",[],{"dangerousFunctions":183,"sqlUsage":184,"outputEscaping":186,"fileOperations":96,"externalRequests":96,"nonceChecks":84,"capabilityChecks":84,"bundledLibraries":189},[],{"prepared":96,"raw":96,"locations":185},[],{"escaped":187,"rawEcho":96,"locations":188},55,[],[190],{"name":191,"version":37,"knownCves":192},"TinyMCE",[],[],{"summary":195,"deductions":196},"The plugin 'lazy-load-videos-and-sticky-control' v3.0.1 exhibits a mixed security posture. On the positive side, the static analysis reveals strong adherence to secure coding practices. There are no identified dangerous functions, all SQL queries utilize prepared statements, and all output is properly escaped. File operations and external HTTP requests are also absent, and the plugin implements nonce and capability checks for its entry points. The limited attack surface, consisting of a single shortcode with no apparent authentication bypass, is also a good sign.\n\nHowever, a significant concern arises from the plugin's vulnerability history. The presence of one unpatched medium-severity CVE for Cross-Site Scripting (XSS) is a critical red flag. This indicates that despite good general coding practices, a specific vulnerability exists and is currently exploitable. The fact that the last vulnerability was recent (November 20, 2024) suggests ongoing issues or a lack of timely patching. The absence of taint analysis results in this report does not negate the proven existence of past vulnerabilities.\n\nIn conclusion, while the plugin demonstrates good security fundamentals in its current codebase, the unpatched XSS vulnerability creates a significant risk. Users should be aware that a known exploit exists. The plugin's strengths lie in its well-handled database operations and output escaping, but its weakness is the single, exploitable, unpatched vulnerability. Prioritizing the patching of this CVE is paramount for mitigating the identified risk.",[197],{"reason":198,"points":199},"Unpatched Medium Severity CVE",15,"2026-03-16T21:04:56.027Z",{"wat":202,"direct":213},{"assetPaths":203,"generatorPatterns":206,"scriptPaths":207,"versionParams":209},[204,205],"\u002Fwp-content\u002Fplugins\u002Flazy-load-videos-and-sticky-control\u002Fassets\u002Fjs\u002Fllvasc-backend.min.js","\u002Fwp-content\u002Fplugins\u002Flazy-load-videos-and-sticky-control\u002Fassets\u002Fcss\u002Fllvasc-frontend.css",[],[204,208],"\u002Fwp-content\u002Fplugins\u002Flazy-load-videos-and-sticky-control\u002Fassets\u002Fjs\u002Fllvasc-frontend.js",[210,211,212],"lazy-load-videos-and-sticky-control\u002Fassets\u002Fjs\u002Fllvasc-backend.min.js?ver=","lazy-load-videos-and-sticky-control\u002Fassets\u002Fcss\u002Fllvasc-frontend.css?ver=","lazy-load-videos-and-sticky-control\u002Fassets\u002Fjs\u002Fllvasc-frontend.js?ver=",{"cssClasses":214,"htmlComments":216,"htmlAttributes":217,"restEndpoints":219,"jsGlobals":220,"shortcodeOutput":222},[215],"llvasc-sticky-video",[],[218],"data-llvasc-sticky",[],[221],"LLVSC_OPTIONS",[]]