[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIBhO5cF6YGLZV1qgpB4LkyK_c6MYIlENEBGgqqzGsfM":3,"$fAv8TQa5BkeG28gTUsmogoJL3ZJo0haJ-Pd6NJ-CyrVc":244,"$fbT_7RQtywcHJL_8D_J4gf0_yrKOBynBtGSrEdAMY7qQ":248},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"discovery_status":29,"vulnerabilities":30,"developer":31,"crawl_stats":27,"alternatives":37,"analysis":111,"fingerprints":225},"media-library-internet-archive-content","Internet Archive Media Library","1.0.2","yknivag","https:\u002F\u002Fprofiles.wordpress.org\u002Fyknivag\u002F","\u003Cp>Mapping file(s) from Internet Archive (archive.org) into WordPress Media Library.\u003C\u002Fp>\n\u003Cp>Supported File Types:\u003Cbr \u002F>\n* Any file for general addition\u003Cbr \u002F>\n* JPG\u002FPNG\u002FGIF files for picture meta-data\u003Cbr \u002F>\n* [FUTURE (v1.1)] MP3 files for audio meta-data\u003Cbr \u002F>\n* [FUTURE] More types to be added in due-course.\u003C\u002Fp>\n\u003Cp>Features:\u003Cbr \u002F>\n* Mapping file(s) from Internet Archive into WordPress Media Library.\u003Cbr \u002F>\n* Determination of MIME type from file extension (for images and mp3 only).\u003Cbr \u002F>\n* Real meta-data added for JPG\u002FPNG\u002FGIF files.\u003Cbr \u002F>\n* [FUTURE (v1.1+ as above)] Addition of real meta-data to WordPress for file where available, or sensible generic meta-data where not.\u003Cbr \u002F>\n* [FUTURE (v1.2+ as above)] Option to manually edit the meta-data.\u003C\u002Fp>\n\u003Cp>Required:\u003Cbr \u002F>\n* PHP 5.3.0\u003Cbr \u002F>\n* WordPress 3.5 or greater\u003C\u002Fp>\n\u003Cp>How it works:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Upload file(s) to Internet Archive (archive.org).\u003C\u002Fli>\n\u003Cli>Set up IA prefix in Admin >> Media >> Internet Archive Media Library >> URL Prefix.\u003C\u002Fli>\n\u003Cli>Add file name in WordPress Admin >> Media >> Internet Archive Media Library >> Map File.\u003C\u002Fli>\n\u003Cli>Go to WordPress Admin >> Media >> Library. Now you can see your Internet Archive file in preview.\u003C\u002Fli>\n\u003Cli>Once added you can edit meta-data and\u002For delete media from the Media Library in the normal way.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>ROADMAP\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>See version numbering next to [FUTURE] statements for anticipated future functionality steps.\u003C\u002Fli>\n\u003C\u002Ful>\n","Mapping file from Internet Archive into Wordpress Media Library.",10,1873,0,"2020-06-21T22:47:00.000Z","5.4.19","3.5","",[19,20,21,22,23],"archive-org","archive-org-mapping","internet-archive","internet-archive-mapping","internet-archive-media-library","https:\u002F\u002Fgithub.com\u002Fyknivag\u002Fwp-iaml-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmedia-library-internet-archive-content.zip",85,null,"2026-04-06T09:54:40.288Z","no_bundle",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":26,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},3,20,30,84,"2026-05-20T07:22:56.952Z",[38,61,77,97],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":53,"tags":54,"homepage":17,"download_link":58,"security_score":59,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":60},"internet-archive-wayback-machine-link-fixer","Internet Archive Wayback Machine Link Fixer","1.3.6","Internet Archive","https:\u002F\u002Fprofiles.wordpress.org\u002Fwaybackmachineplugin\u002F","\u003Cp>\u003Cstrong>Internet Archive Wayback Machine Link Fixer\u003C\u002Fstrong> is a WordPress plugin designed to combat \u003Cstrong>link rot\u003C\u002Fstrong>—the gradual decay of web links as pages are moved, changed, or taken down. It automatically scans your post content—on save and across existing posts—to detect outbound links. For each one, it checks the Internet Archive’s Wayback Machine for an archived version and creates a snapshot if one isn’t available.\u003C\u002Fp>\n\u003Cp>When a linked page disappears, the plugin helps preserve your user experience by redirecting visitors to a reliable archived version. It also works proactively by archiving your own posts every time they’re updated, creating a consistent backup of your content’s history.\u003C\u002Fp>\n\u003Cp>Protect your links, preserve your content, and automate the archiving process—all with minimal effort.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Automatically scans for outbound links in post content\u003C\u002Fli>\n\u003Cli>Checks the Wayback Machine for existing archives\u003C\u002Fli>\n\u003Cli>Creates new snapshots if no archive exists\u003C\u002Fli>\n\u003Cli>Redirects broken or missing links to archived versions\u003C\u002Fli>\n\u003Cli>Archives your own posts on updates\u003C\u002Fli>\n\u003Cli>Works on both new and existing content\u003C\u002Fli>\n\u003Cli>Helps maintain long-term content reliability and SEO\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin connects to external services provided by the Internet Archive to provide its core functionality. The following information details what data is sent, when, and why:\u003C\u002Fp>\n\u003Ch4>Internet Archive Wayback Machine API (web.archive.org)\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>What the service is and what it is used for:\u003C\u002Fstrong>\u003Cbr \u002F>\nThe Internet Archive Wayback Machine is a digital archive of the World Wide Web. This plugin uses their API to check for existing archived versions of web pages, create new snapshots of pages, and verify the status of archiving jobs.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>What data is sent and when:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>System Status Check\u003C\u002Fstrong>: No personal data is sent. Used to verify if the Wayback Machine service is online.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>User Account Validation\u003C\u002Fstrong>: When you configure an API key, your access key and secret key are sent in the Authorization header to validate your account and retrieve usage statistics (available snapshots, daily limits, etc.).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>URL Archiving\u003C\u002Fstrong>: URLs from your website content are sent to create new snapshots in the Wayback Machine. This includes both external links found in your content and your own post URLs when auto-archiving is enabled.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Snapshot Status Checks\u003C\u002Fstrong>: Job IDs are sent to check the status of archiving requests.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Existing Snapshot Lookups\u003C\u002Fstrong>: URLs are sent to search for existing archived versions of web pages.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Service Terms and Privacy Policy:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Terms of Service: \u003Ca href=\"https:\u002F\u002Farchive.org\u002Fabout\u002Fterms.php\" rel=\"nofollow ugc\">https:\u002F\u002Farchive.org\u002Fabout\u002Fterms.php\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Privacy Policy: \u003Ca href=\"https:\u002F\u002Farchive.org\u002Fabout\u002Fprivacy.php\" rel=\"nofollow ugc\">https:\u002F\u002Farchive.org\u002Fabout\u002Fprivacy.php\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Internet Archive Bot API (iabot-api.archive.org)\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>What the service is and what it is used for:\u003C\u002Fstrong>\u003Cbr \u002F>\nThis service checks if web pages are accessible and retrieves final URLs after redirects. It’s used to determine if links are broken and need to be replaced with archived versions.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>What data is sent and when:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Link Accessibility Checks\u003C\u002Fstrong>: URLs from your website content are sent to check if they are accessible and to get the final destination URL after any redirects.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Impersonation Parameter\u003C\u002Fstrong>: A technical parameter (\u003Ccode>impersonate=1\u003C\u002Fcode>) is sent to ensure proper link checking behavior.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Service Terms and Privacy Policy:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Terms of Service: \u003Ca href=\"https:\u002F\u002Farchive.org\u002Fabout\u002Fterms.php\" rel=\"nofollow ugc\">https:\u002F\u002Farchive.org\u002Fabout\u002Fterms.php\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Privacy Policy: \u003Ca href=\"https:\u002F\u002Farchive.org\u002Fabout\u002Fprivacy.php\" rel=\"nofollow ugc\">https:\u002F\u002Farchive.org\u002Fabout\u002Fprivacy.php\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Data Retention and Privacy:\u003C\u002Fstrong>\u003Cbr \u002F>\nThe Internet Archive is a non-profit organization dedicated to preserving digital content for public access. URLs sent to these services become part of the public archive and may be accessible through the Wayback Machine interface. No personal information beyond the URLs themselves is transmitted to these services.\u003C\u002Fp>\n\u003Ch3>Developer Documentation\u003C\u002Fh3>\n\u003Cp>For developer docs and source code, see the GitHub repository: \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fa8cteam51\u002Finternet-archive-wayback-machine-link-fixer\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Fa8cteam51\u002Finternet-archive-wayback-machine-link-fixer\u003C\u002Fa>\u003C\u002Fp>\n","Automatically fix broken links by replacing them with archived versions from the Internet Archive's Wayback Machine.",1000,10135,86,6,"2026-03-12T12:44:00.000Z","6.9.4","6.4","7.4",[55,56,21,57],"archive-links","broken-links","wayback-machine","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Finternet-archive-wayback-machine-link-fixer.1.3.6.zip",100,"2026-04-16T10:56:18.058Z",{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":59,"downloaded":69,"rating":13,"num_ratings":13,"last_updated":70,"tested_up_to":51,"requires_at_least":71,"requires_php":53,"tags":72,"homepage":17,"download_link":76,"security_score":59,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":60},"archiveo-importer-wayback","Archiveo – Importer for the Wayback Machine","2.6.0","Kaudo","https:\u002F\u002Fprofiles.wordpress.org\u002Fkaudo\u002F","\u003Cp>Archiveo helps you bring archived content back to life.\u003C\u002Fp>\n\u003Cp>If a website or blog is no longer available, Archiveo allows you to browse its archived pages stored on the Wayback Machine (Internet Archive) and import selected pages directly into WordPress as drafts.\u003C\u002Fp>\n\u003Cp>The plugin is designed for careful, manual recovery of content — nothing is published automatically, and you always stay in control.\u003C\u002Fp>\n\u003Cp>Archiveo works entirely inside the WordPress admin area and focuses on simplicity, transparency, and safety.\u003C\u002Fp>\n\u003Ch3>What Archiveo Does\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Finds archived HTML pages for a given domain or URL\u003C\u002Fli>\n\u003Cli>Lets you browse and filter archived URLs\u003C\u002Fli>\n\u003Cli>Creates WordPress drafts from selected snapshots\u003C\u002Fli>\n\u003Cli>Preserves readable content while removing navigation, scripts, and clutter\u003C\u002Fli>\n\u003Cli>Works with the WordPress Block Editor (Gutenberg)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>What Archiveo Does NOT Do\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>It does not scrape live websites\u003C\u002Fli>\n\u003Cli>It does not bypass paywalls or access private content\u003C\u002Fli>\n\u003Cli>It does not automatically publish posts\u003C\u002Fli>\n\u003Cli>It does not guarantee copyright compliance\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Archiveo only accesses publicly available snapshots provided by the Wayback Machine.\u003C\u002Fp>\n\u003Ch3>Typical Use Cases\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Recovering articles from a lost or expired website\u003C\u002Fli>\n\u003Cli>Rebuilding a blog after a hosting or domain failure\u003C\u002Fli>\n\u003Cli>Migrating old content that only exists in archive.org\u003C\u002Fli>\n\u003Cli>Researching or preserving historical web content\u003C\u002Fli>\n\u003Cli>Educational or archival projects\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>How It Works\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Enter a domain or archived URL\u003C\u002Fli>\n\u003Cli>Archiveo retrieves available archived pages from the Wayback Machine\u003C\u002Fli>\n\u003Cli>Filter and browse the list of archived URLs\u003C\u002Fli>\n\u003Cli>Choose a page and create a WordPress draft\u003C\u002Fli>\n\u003Cli>Edit, review, and publish manually if appropriate\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Important Notes on Responsibility\u003C\u002Fh3>\n\u003Cp>Archiveo is a technical tool.\u003C\u002Fp>\n\u003Cp>You are fully responsible for ensuring that any imported content is used in compliance with copyright law, licensing terms, and local regulations.\u003C\u002Fp>\n\u003Cp>The plugin does not verify ownership, permissions, or legal rights to the content.\u003C\u002Fp>\n\u003Ch3>Requirements\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>WordPress 5.8 or newer\u003C\u002Fli>\n\u003Cli>PHP 7.4 or newer\u003C\u002Fli>\n\u003Cli>Block Editor (Gutenberg)\u003C\u002Fli>\n\u003C\u002Ful>\n","Import archived pages from the Wayback Machine into WordPress as editable drafts.",563,"2026-03-07T22:21:00.000Z","5.8",[73,74,75,21,57],"archive-importer","content-import","content-recovery","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Farchiveo-importer-wayback.zip",{"slug":78,"name":79,"version":80,"author":81,"author_profile":82,"description":83,"short_description":84,"active_installs":85,"downloaded":86,"rating":13,"num_ratings":13,"last_updated":87,"tested_up_to":88,"requires_at_least":89,"requires_php":17,"tags":90,"homepage":95,"download_link":96,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":60},"avoid-googles-cache","Avoid Google's Cache","1.2.1","kezze","https:\u002F\u002Fprofiles.wordpress.org\u002Fkezze\u002F","\u003Cp>Avoid getting your blog cached by e.g. Google and Internet Archive. A politician asked me to develop this for his website.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Credits\u003C\u002Fstrong>\u003Cbr \u002F>\nThe banner is a composition of two photos by ‘\u003Ca href=\"http:\u002F\u002Fwww.flickr.com\u002Fphotos\u002Fskimaniac\u002F100495205\u002F\" rel=\"nofollow ugc\">Skimaniac\u003C\u002Fa>‘ and \u003Ca href=\"http:\u002F\u002Fwww.flickr.com\u002Fphotos\u002Fgnackgnackgnack\u002F3942331668\u002F\" rel=\"nofollow ugc\">Patrick Brosset\u003C\u002Fa>.\u003C\u002Fp>\n","Avoid getting your blog cached by e.g. Google and Internet Archive.",50,4747,"2023-03-23T06:50:00.000Z","6.2.9","2.0",[91,92,93,94,21],"cache","google","google-cache","googles-cache","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Favoid-googles-cache\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Favoid-googles-cache.zip",{"slug":98,"name":99,"version":6,"author":100,"author_profile":101,"description":102,"short_description":103,"active_installs":13,"downloaded":104,"rating":13,"num_ratings":13,"last_updated":105,"tested_up_to":106,"requires_at_least":107,"requires_php":17,"tags":108,"homepage":17,"download_link":110,"security_score":59,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":60},"mediaformat-embed-archive-org","Media embed for Archive.org","Django","https:\u002F\u002Fprofiles.wordpress.org\u002Fmediaformat\u002F","\u003Cp>Embed audio, video, and text content from Archive.org using the core\u002Fembed block.\u003C\u002Fp>\n\u003Ch3>Archive.org\u003C\u002Fh3>\n\u003Cp>When pasting an archive.org link into the Editor, the plugin connects to the Internet Archive’s API to obtain information about the requested resource, it’s needed to embed content from the Interent Archive.\u003C\u002Fp>\n\u003Cp>When a page inlcudes the Archive.org iframe, it typically sends the following data:\u003Cbr \u002F>\n1. Embed URL of the Page: The Page requests the URL of the archive.org document that the user wants to view in its embedded form.\u003Cbr \u002F>\n2. User Agent Information: The browser may send information about the user’s browser and operating system.\u003Cbr \u002F>\n3. Referrer Information: The browser may send the referrer URL, which is the URL of the page that linked to the archived page.\u003Cbr \u002F>\n4. Timestamp Information: The browser may send the timestamp of the request to specify the exact date and time the user wants to view the archived page.\u003C\u002Fp>\n\u003Cp>The service is provided by the “Internet Archive”: \u003Ca href=\"https:\u002F\u002Farchive.org\u002Fabout\u002Fterms\" rel=\"nofollow ugc\">terms of use\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Copright\u003C\u002Fh3>\n\u003Cp>Archive.org name and logo are trademarked and belong to the Internet Archive.\u003C\u002Fp>\n","Embed media from Archive.org",225,"2025-10-21T21:18:00.000Z","6.8.5","5.4",[19,109],"embed","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmediaformat-embed-archive-org.1.0.2.zip",{"attackSurface":112,"codeSignals":140,"taintFlows":165,"riskAssessment":212,"analyzedAt":224},{"hooks":113,"ajaxHandlers":129,"restRoutes":136,"shortcodes":137,"cronEvents":138,"entryPointCount":139,"unprotectedCount":13},[114,120,125],{"type":115,"name":116,"callback":117,"file":118,"line":119},"filter","wp_get_attachment_url","iaml_getMediaURLFile","internet-archive-media-library.php",66,{"type":121,"name":122,"callback":123,"file":118,"line":124},"action","admin_enqueue_scripts","iaml_adminScript",103,{"type":121,"name":126,"callback":127,"file":118,"line":128},"admin_menu","iaml_media_actions",112,[130],{"action":131,"nopriv":132,"callback":133,"hasNonce":134,"hasCapCheck":132,"file":118,"line":135},"iaml_action",false,"iaml_ajax_post",true,143,[],[],[],1,{"dangerousFunctions":141,"sqlUsage":142,"outputEscaping":144,"fileOperations":13,"externalRequests":13,"nonceChecks":163,"capabilityChecks":13,"bundledLibraries":164},[],{"prepared":13,"raw":13,"locations":143},[],{"escaped":145,"rawEcho":145,"locations":146},8,[147,150,152,155,156,158,160,162],{"file":118,"line":148,"context":149},123,"raw output",{"file":118,"line":151,"context":149},134,{"file":153,"line":154,"context":149},"internet-archive-media-management.php",81,{"file":153,"line":26,"context":149},{"file":153,"line":157,"context":149},87,{"file":153,"line":159,"context":149},96,{"file":153,"line":161,"context":149},98,{"file":153,"line":59,"context":149},2,[],[166,199],{"entryPoint":167,"graph":168,"unsanitizedCount":139,"severity":198},"iaml_ajax_post (internet-archive-media-library.php:115)",{"nodes":169,"edges":194},[170,175,180,184,188],{"id":171,"type":172,"label":173,"file":118,"line":174},"n0","source","$_POST (x2)",118,{"id":176,"type":177,"label":178,"file":118,"line":148,"wp_function":179},"n1","sink","echo() [XSS]","echo",{"id":181,"type":172,"label":182,"file":118,"line":183},"n2","$_POST",121,{"id":185,"type":186,"label":187,"file":118,"line":183},"n3","transform","→ iaml_saveMappingFolder()",{"id":189,"type":177,"label":190,"file":191,"line":192,"wp_function":193},"n4","update_option() [Settings Manipulation]","includes\\class-IAMLWeb.php",19,"update_option",[195,196,197],{"from":171,"to":176,"sanitized":134},{"from":181,"to":185,"sanitized":132},{"from":185,"to":189,"sanitized":132},"low",{"entryPoint":200,"graph":201,"unsanitizedCount":139,"severity":198},"\u003Cinternet-archive-media-library> (internet-archive-media-library.php:0)",{"nodes":202,"edges":208},[203,204,205,206,207],{"id":171,"type":172,"label":173,"file":118,"line":174},{"id":176,"type":177,"label":178,"file":118,"line":148,"wp_function":179},{"id":181,"type":172,"label":182,"file":118,"line":183},{"id":185,"type":186,"label":187,"file":118,"line":183},{"id":189,"type":177,"label":190,"file":191,"line":192,"wp_function":193},[209,210,211],{"from":171,"to":176,"sanitized":134},{"from":181,"to":185,"sanitized":132},{"from":185,"to":189,"sanitized":132},{"summary":213,"deductions":214},"The plugin \"media-library-internet-archive-content\" v1.0.2 demonstrates several good security practices. It has a minimal attack surface with only one AJAX handler, and importantly, this entry point has no authentication checks, meaning any unauthenticated user could potentially interact with it. The code analysis shows no dangerous functions, all SQL queries use prepared statements, and there are no file operations or external HTTP requests, which are all positive signs. The presence of nonce checks (2) is also a good practice for AJAX handlers. However, a significant concern arises from the taint analysis, which identified two flows with unsanitized paths. This suggests that user-supplied data might be processed in a way that could lead to path traversal or other file-related vulnerabilities, despite the absence of explicit file operation functions in the code signals. The plugin has no recorded vulnerability history, which is reassuring, but this should not lead to complacency, especially given the taint analysis findings. Overall, while the plugin avoids many common pitfalls, the identified unsanitized path flows present a notable risk that requires attention.",[215,218,221],{"reason":216,"points":217},"AJAX handler without auth check",7,{"reason":219,"points":220},"Taint flows with unsanitized paths",12,{"reason":222,"points":223},"Half of output is not properly escaped",5,"2026-03-16T23:50:19.702Z",{"wat":226,"direct":237},{"assetPaths":227,"generatorPatterns":231,"scriptPaths":232,"versionParams":233},[228,229,230],"\u002Fwp-content\u002Fplugins\u002Fmedia-library-internet-archive-content\u002Fcss\u002Fiaml.css","\u002Fwp-content\u002Fplugins\u002Fmedia-library-internet-archive-content\u002Fcss\u002Fjquery-ui-classic.css","\u002Fwp-content\u002Fplugins\u002Fmedia-library-internet-archive-content\u002Fjs\u002Fiaml.js",[],[230],[234,235,236],"media-library-internet-archive-content\u002Fjs\u002Fiaml.js?ver=","media-library-internet-archive-content\u002Fcss\u002Fiaml.css?ver=","media-library-internet-archive-content\u002Fcss\u002Fjquery-ui-classic.css?ver=",{"cssClasses":238,"htmlComments":239,"htmlAttributes":240,"restEndpoints":241,"jsGlobals":242,"shortcodeOutput":243},[],[],[],[],[],[],{"error":134,"url":245,"statusCode":246,"statusMessage":247,"message":247},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fmedia-library-internet-archive-content\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":139,"versions":249},[250],{"version":251,"download_url":252,"svn_tag_url":253,"released_at":27,"has_diff":132,"diff_files_changed":254,"diff_lines":27,"trac_diff_url":27,"vulnerabilities":255,"is_current":132},"1.0.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmedia-library-internet-archive-content.1.0.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fmedia-library-internet-archive-content\u002Ftags\u002F1.0.0\u002F",[],[]]