[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkBKlk2YdNjq264hLr6CDM29pximmlQNO5Yz0MlgWxDA":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":39,"analysis":135,"fingerprints":199},"mpcx-lightbox","Lightbox","1.2.5","Stefan Hüsges","https:\u002F\u002Fprofiles.wordpress.org\u002Fdeustron\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftronsha\u002Fwp-lightbox-plugin\" rel=\"nofollow ugc\">Source Code on GitHub\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Documentation\u003C\u002Fh4>\n\u003Cp>Select “Media File” at “Link to” when creating a gallery.\u003C\u002Fp>\n\u003Cp>If the plugin is active, the images are now open in the lightbox.\u003C\u002Fp>\n\u003Cp>The plugin requires PHP 5.3.2 or newer.\u003C\u002Fp>\n\u003Cp>This plugin uses \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Flokesh\u002Flightbox2\" rel=\"nofollow ugc\">Lightbox2\u003C\u002Fa> from Lokesh Dhakar, \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffancyapps\u002Ffancybox\" rel=\"nofollow ugc\">fancyBox3\u003C\u002Fa> from Jānis Skarnelis, \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fjackmoore\u002Fcolorbox\" rel=\"nofollow ugc\">Colorbox\u003C\u002Fa> from Jack Moore and \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmiromannino\u002FJustified-Gallery\" rel=\"nofollow ugc\">Justified Gallery\u003C\u002Fa> from Miro Mannino.\u003C\u002Fp>\n","Lightbox for Wordpress Gallery",700,19505,88,9,"2019-02-19T09:29:00.000Z","5.1.22","3.3","",[20,21,22,23,24],"colorbox","fancybox","gallery","justified-gallery","lightbox","https:\u002F\u002Fgithub.com\u002Ftronsha\u002Fwp-lightbox-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmpcx-lightbox.1.2.5.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":35,"avg_security_score":27,"avg_patch_time_days":36,"trust_score":37,"computed_at":38},"deustron",3,760,30,84,"2026-04-04T06:02:30.096Z",[40,63,82,100,116],{"slug":41,"name":42,"version":43,"author":44,"author_profile":45,"description":46,"short_description":47,"active_installs":48,"downloaded":49,"rating":50,"num_ratings":51,"last_updated":52,"tested_up_to":53,"requires_at_least":54,"requires_php":18,"tags":55,"homepage":58,"download_link":59,"security_score":60,"vuln_count":61,"unpatched_count":28,"last_vuln_date":62,"fetched_at":30},"wp-colorbox","WP Colorbox","1.1.6","Noor Alam","https:\u002F\u002Fprofiles.wordpress.org\u002Fnaa986\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fnoorsplugin.com\u002Fwordpress-colorbox-plugin\u002F\" rel=\"nofollow ugc\">WP Colorbox\u003C\u002Fa> plugin is a simple lightbox tool for WordPress. It allows users to pop up content in lightbox using the popular jQuery ColorBox library. They can also view the larger version of a particular media file without leaving the page.\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F2osxJcPTS1E?version=3&rel=0&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Beautiful lightbox popup style\u003C\u002Fli>\n\u003Cli>Flexiblity of creating your own lightbox link\u003C\u002Fli>\n\u003Cli>Pop up custom\u002FHTML content in lightbox\u003C\u002Fli>\n\u003Cli>Trigger lightbox from either a text\u002Fimage link\u003C\u002Fli>\n\u003Cli>Add lightbox to a YouTube or Vimeo video link\u003C\u002Fli>\n\u003Cli>Enable lightbox functionality on your site which supports modern browsers\u003C\u002Fli>\n\u003Cli>Use a simple shortcode to pop up a media file in lightbox\u003C\u002Fli>\n\u003Cli>Apply lightbox effect on images inserted into WordPress post\u002Fpage\u003C\u002Fli>\n\u003Cli>Open external page in lightbox using iframe\u003C\u002Fli>\n\u003Cli>Responsive lightbox popup which works on mobile devices. Also it fits perfectly on smaller screens.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>How to Use WP Colorbox\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Pop up image in lightbox\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Create a new post\u002Fpage and use the following shortcode to create a text\u002Fimage link which will trigger lightbox once clicked:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_colorbox_media url=\"https:\u002F\u002Fexample.com\u002Fwp-content\u002Fuploads\u002Fimages\u002Foverlay.jpg\" type=\"image\" hyperlink=\"click here to pop up image\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>here, url is the link to the media file that you wish to open in lightbox and hyperlink is the anchor text\u002Fimage.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_colorbox_media url=\"https:\u002F\u002Fexample.com\u002Fwp-content\u002Fuploads\u002Fimages\u002Foverlay.jpg\" type=\"image\" hyperlink=\"http:\u002F\u002Fexample.com\u002Fwp-content\u002Fuploads\u002Fimages\u002Fthumb.jpg\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Pop up YouTube video in lightbox\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_colorbox_media url=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Fnmp3Ra3Yj24\" type=\"youtube\" hyperlink=\"click here to pop up youtube video\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Pop up Vimeo video in lightbox\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_colorbox_media url=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F1284237\" type=\"vimeo\" hyperlink=\"click here to pop up vimeo video\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Specify an Alternate Text for an Image\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_colorbox_media url=\"https:\u002F\u002Fexample.com\u002Fwp-content\u002Fuploads\u002Fimages\u002Foverlay.jpg\" title=\"overlay image\" type=\"image\" hyperlink=\"http:\u002F\u002Fexample.com\u002Fwp-content\u002Fuploads\u002Fimages\u002Fthumb.jpg\" alt=\"Thumbnail image description\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Apply Custom CSS\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You can specify your own CSS class in the shortcode to customize a text\u002Fimage link.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_colorbox_media url=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Fnmp3Ra3Yj24\" type=\"youtube\" hyperlink=\"click here to pop up youtube video\" class=\"custom_class\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Multiple CSS classes can be separated with a space. For example:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_colorbox_media url=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Fnmp3Ra3Yj24\" type=\"youtube\" hyperlink=\"click here to pop up youtube video\" class=\"custom_class custom_class2\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>For detailed documentation please visit the \u003Ca href=\"https:\u002F\u002Fnoorsplugin.com\u002Fwordpress-colorbox-plugin\u002F\" rel=\"nofollow ugc\">WordPress Colorbox\u003C\u002Fa> plugin page\u003C\u002Fp>\n","View image, video (YouTube, Vimeo), page, inline HTML, custom content in lightbox. Add jQuery Colorbox lightbox effect to your WordPress site.",6000,154370,86,23,"2025-08-16T01:19:00.000Z","6.8.5","3.0",[20,22,56,24,57],"image","photo","https:\u002F\u002Fnoorsplugin.com\u002Fwordpress-colorbox-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-colorbox.zip",98,2,"2025-08-20 00:00:00",{"slug":64,"name":65,"version":66,"author":67,"author_profile":68,"description":69,"short_description":70,"active_installs":71,"downloaded":72,"rating":73,"num_ratings":74,"last_updated":75,"tested_up_to":76,"requires_at_least":77,"requires_php":18,"tags":78,"homepage":18,"download_link":81,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"photo-swipe","PhotoSwipe","4.1.1.1","Louy Alakkad","https:\u002F\u002Fprofiles.wordpress.org\u002Flouyx\u002F","\u003Cp>This plugins adds the PhotoSwipe library to your WordPress blog seamlessly. No configuration required.\u003C\u002Fp>\n","A very light implementation of PhotoSwipe javascript plugin for WordPress",1000,31166,90,11,"2016-03-17T14:51:00.000Z","4.4.0","4.0",[79,21,22,80,24],"attachments","images","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fphoto-swipe.4.1.1.1.zip",{"slug":83,"name":84,"version":85,"author":86,"author_profile":87,"description":88,"short_description":89,"active_installs":71,"downloaded":90,"rating":60,"num_ratings":91,"last_updated":92,"tested_up_to":93,"requires_at_least":94,"requires_php":18,"tags":95,"homepage":98,"download_link":99,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"w3dev-fancybox","fancyBox 3 for WordPress","1.2.4","w3dev","https:\u002F\u002Fprofiles.wordpress.org\u002Fw3dev\u002F","\u003Cp>Seamlessly integrates the fancyBox 3 script into your WordPress installation: Upload, activate, and you’re done. Additional configuration is optional.\u003C\u002Fp>\n\u003Cp>You can easily customize almost anything you can think about fancyBox lightbox. By default, the plugin will use jQuery to apply fancyBox to ANY thumbnails that link directly to an image. It will also automatically convert WordPress image galleries into fancyBox galleries.\u003C\u002Fp>\n\u003Cp>For Inline content linking\u003Cbr \u002F>\n– Create a link to any hidden or visible div with an ID attribate, and the plugin will transform the link and enable it for fancyBox usage.\u003Cbr \u002F>\n– Note: this may cause a conflict if your page or website is using a smooth scrolling function to jump between page sections!\u003C\u002Fp>\n\u003Cp>In upcoming versions, additional functionality for ajax calls and iframe data will be implemented.\u003C\u002Fp>\n","Seamlessly integrates the fancyBox 3 script into your WordPress installation: Upload, activate, and you're done. Additional configuration is opti …",15612,7,"2023-11-06T22:53:00.000Z","6.3.8","3.4",[21,96,22,97,24],"fancybox-3","jquery","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fw3dev-fancybox\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fw3dev-fancybox.zip",{"slug":101,"name":102,"version":103,"author":44,"author_profile":45,"description":104,"short_description":105,"active_installs":71,"downloaded":106,"rating":107,"num_ratings":61,"last_updated":108,"tested_up_to":53,"requires_at_least":109,"requires_php":18,"tags":110,"homepage":111,"download_link":112,"security_score":113,"vuln_count":61,"unpatched_count":114,"last_vuln_date":115,"fetched_at":30},"wp-fancybox","WP fancybox","1.0.4","\u003Cp>\u003Ca href=\"https:\u002F\u002Fnoorsplugin.com\u002Fwordpress-fancybox-plugin\u002F\" rel=\"nofollow ugc\">WP fancybox\u003C\u002Fa> plugin adds fancybox lightbox effect to your WordPress website. The lightbox looks great on desktop as well as mobile devices.\u003C\u002Fp>\n\u003Ch3>WP fancybox Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Responsive lightbox popup using fancybox\u003C\u002Fli>\n\u003Cli>Designed with a mobile first approach so it looks great on desktop, mobile and tablet devices\u003C\u002Fli>\n\u003Cli>Quick and easy setup\u003C\u002Fli>\n\u003Cli>Open lightbox popup from either a text link or a thumbnail image link\u003C\u002Fli>\n\u003Cli>YouTube video popup\u003C\u002Fli>\n\u003Cli>Vimeo video popup\u003C\u002Fli>\n\u003Cli>Use a simple shortcode to pop up content in lightbox\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>How to Use WP fancybox\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Image in lightbox\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Create a new post\u002Fpage and use the following shortcode to create a text\u002Fimage link which will open lightbox once clicked:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_fancybox_media url=\"https:\u002F\u002Fexample.com\u002Fwp-content\u002Fuploads\u002Fimages\u002Foverlay.jpg\" hyperlink=\"click here to pop up image\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>here, url is the link to the media file that you wish to open in lightbox and hyperlink is the anchor text\u002Fimage.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_fancybox_media url=\"https:\u002F\u002Fexample.com\u002Fwp-content\u002Fuploads\u002Fimages\u002Foverlay.jpg\" hyperlink=\"https:\u002F\u002Fexample.com\u002Fwp-content\u002Fuploads\u002Fimages\u002Fthumb.jpg\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>YouTube video in lightbox\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_fancybox_media url=\"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=Vpg9yizPP_g\" hyperlink=\"click here to pop up youtube video\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Vimeo video in lightbox\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_fancybox_media url=\"https:\u002F\u002Fvimeo.com\u002F1084537\" hyperlink=\"click here to pop up vimeo video\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Alternate Text for an Image\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_fancybox_media url=\"https:\u002F\u002Fexample.com\u002Fwp-content\u002Fuploads\u002Fimages\u002Foverlay.jpg\" hyperlink=\"https:\u002F\u002Fexample.com\u002Fwp-content\u002Fuploads\u002Fimages\u002Fthumb.jpg\" alt=\"Thumbnail image description\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Custom CSS\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You can specify your own CSS class in the shortcode to customize a text\u002Fimage link.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_fancybox_media url=\"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=Vpg9yizPP_g\" hyperlink=\"click here to pop up youtube video\" class=\"custom_class\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Multiple CSS classes can be separated with a space. For example:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[wp_fancybox_media url=\"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=Vpg9yizPP_g\" hyperlink=\"click here to pop up youtube video\" class=\"custom_class custom_class2\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>For detailed documentation please visit the \u003Ca href=\"https:\u002F\u002Fnoorsplugin.com\u002Fwordpress-fancybox-plugin\u002F\" rel=\"nofollow ugc\">WordPress fancybox\u003C\u002Fa> plugin page\u003C\u002Fp>\n","View image, YouTube video, Vimeo video, inline HTML in lightbox. Add fancybox lightbox effect to your WordPress site.",16059,100,"2025-06-07T03:57:00.000Z","4.7",[21,22,56,24,57],"https:\u002F\u002Fnoorsplugin.com\u002Fwordpress-fancybox-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-fancybox.zip",74,1,"2025-07-04 00:00:00",{"slug":117,"name":118,"version":119,"author":120,"author_profile":121,"description":122,"short_description":123,"active_installs":11,"downloaded":124,"rating":60,"num_ratings":125,"last_updated":126,"tested_up_to":127,"requires_at_least":128,"requires_php":129,"tags":130,"homepage":133,"download_link":134,"security_score":107,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wp-imageviewer","WP ImageViewer","3.0.1","Marcel Pol","https:\u002F\u002Fprofiles.wordpress.org\u002Fmpol\u002F","\u003Cp>ImageViewer is an image viewer inspired by Google Photo’s.\u003Cbr \u002F>\nIt may also look familiar to users of Ebay.com or Tweakers.net.\u003C\u002Fp>\n\u003Cp>It provides a modal for images, similar to modals as lightbox, colorbox and fancybox, just in a somewhat more abstract way.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Smooth dragging and panning images.\u003C\u002Fli>\n\u003Cli>Support touch devices.\u003C\u002Fli>\n\u003Cli>Double tap to zoom in\u002Fzoom out.\u003C\u002Fli>\n\u003Cli>Pinch in \u002F pinch out to zoom in\u002Fout.\u003C\u002Fli>\n\u003Cli>Snap view for easier panning and zooming experience.\u003C\u002Fli>\n\u003Cli>Exposed API to control zoom programmatically.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Anti-Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Clean user interface, no bells, no whistles, no horns.\u003C\u002Fli>\n\u003Cli>Lightweight code (no PHP, 2 JS files and 1 CSS file).\u003C\u002Fli>\n\u003Cli>No settings page (really).\u003C\u002Fli>\n\u003Cli>No database queries.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Upstream Project\u003C\u002Fh4>\n\u003Cp>You can look at \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fs-yadav\u002Fiv-viewer\" rel=\"nofollow ugc\">Github\u003C\u002Fa> for the original code.\u003Cbr \u002F>\nThis project is integrated in this WordPress plugin and all ready to use.\u003C\u002Fp>\n\u003Ch4>Compatibility\u003C\u002Fh4>\n\u003Cp>This plugin is compatible with \u003Ca href=\"https:\u002F\u002Fwww.classicpress.net\" rel=\"nofollow ugc\">ClassicPress\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Contributions\u003C\u002Fh4>\n\u003Cp>This plugin is also available in \u003Ca href=\"https:\u002F\u002Fcodeberg.org\u002Fcyclotouriste\u002Fwp-imageviewer\" rel=\"nofollow ugc\">Codeberg\u003C\u002Fa>.\u003C\u002Fp>\n","A zooming and panning plugin inspired by google photos for your web images.",10911,10,"2026-02-04T22:20:00.000Z","6.9.4","4.1","7.0",[20,21,131,132,24],"imageviewer","iv-viewer","https:\u002F\u002Ftimelord.nl","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-imageviewer.3.0.1.zip",{"attackSurface":136,"codeSignals":170,"taintFlows":186,"riskAssessment":187,"analyzedAt":198},{"hooks":137,"ajaxHandlers":159,"restRoutes":167,"shortcodes":168,"cronEvents":169,"entryPointCount":61,"unprotectedCount":61},[138,144,147,149,153,156],{"type":139,"name":140,"callback":141,"priority":125,"file":142,"line":143},"action","upgrader_process_complete","closure","mpcx-lightbox.php",51,{"type":139,"name":145,"callback":141,"file":142,"line":146},"admin_init",64,{"type":139,"name":148,"callback":141,"file":142,"line":113},"admin_menu",{"type":150,"name":151,"callback":141,"priority":125,"file":142,"line":152},"filter","plugin_action_links",89,{"type":150,"name":154,"callback":141,"priority":125,"file":142,"line":155},"wp_get_attachment_link",114,{"type":139,"name":157,"callback":141,"file":142,"line":158},"wp_enqueue_scripts",159,[160,164],{"action":161,"nopriv":162,"callback":161,"hasNonce":162,"hasCapCheck":162,"file":142,"line":163},"lightbox_get_image_title",false,292,{"action":161,"nopriv":165,"callback":161,"hasNonce":162,"hasCapCheck":162,"file":142,"line":166},true,293,[],[],[],{"dangerousFunctions":171,"sqlUsage":172,"outputEscaping":174,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":185},[],{"prepared":28,"raw":28,"locations":173},[],{"escaped":175,"rawEcho":34,"locations":176},15,[177,181,183],{"file":178,"line":179,"context":180},"admin\\options.php",18,"raw output",{"file":178,"line":182,"context":180},111,{"file":178,"line":184,"context":180},120,[],[],{"summary":188,"deductions":189},"The mpcx-lightbox plugin v1.2.5 presents a significant security risk due to its unprotected AJAX endpoints. While the plugin exhibits good practices in other areas, such as using prepared statements for all SQL queries and a high percentage of properly escaped output, the lack of authentication on its AJAX handlers creates a substantial attack surface. This means that any unauthenticated user can potentially trigger these AJAX actions, leading to unintended consequences if the functionality they execute is sensitive or can be abused. The absence of nonce checks further exacerbates this risk, making Cross-Site Request Forgery (CSRF) attacks a viable threat against these endpoints.\n\nThe plugin's vulnerability history is clean, with no known CVEs or previous security issues. This suggests a developer who may be attentive to security or a plugin that has flown under the radar. However, the current static analysis reveals critical weaknesses that outweigh the positive aspects of its history. The lack of critical or high severity taint flows is a positive sign, indicating no immediate exploitation paths for code injection or similar critical vulnerabilities via unsanitized data. Nevertheless, the unprotected AJAX handlers represent a clear and present danger that must be addressed.\n\nIn conclusion, the mpcx-lightbox plugin has a mixed security posture. Its strengths lie in secure database interactions and output handling. However, the critical weakness of unprotected AJAX endpoints, compounded by missing nonce checks, makes it a high-risk plugin in its current state. Immediate remediation of these authentication and authorization deficiencies is strongly recommended to prevent potential security breaches.",[190,192,195],{"reason":191,"points":125},"Unprotected AJAX handlers",{"reason":193,"points":194},"Missing nonce checks on AJAX",8,{"reason":196,"points":197},"Low output escaping (83%)",4,"2026-03-16T19:23:27.386Z",{"wat":200,"direct":251},{"assetPaths":201,"generatorPatterns":223,"scriptPaths":224,"versionParams":240},[202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222],"\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fcss\u002Fcolorbox\u002F0\u002Fcolorbox.min.css","\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fcss\u002Fcolorbox\u002F1\u002Fcolorbox.min.css","\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fcss\u002Fcolorbox\u002F2\u002Fcolorbox.min.css","\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fcss\u002Ffancybox.min.css","\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fcss\u002Flightbox.min.css","\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fjs\u002Fcolorbox.min.js","\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fjs\u002Ffancybox.min.js","\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fjs\u002Flightbox.min.js","\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fjs\u002Fimages.min.js","\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fjs\u002Fi18n\u002Fcolorbox.en.min.js","\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fjs\u002Fi18n\u002Fcolorbox.es.min.js","\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fjs\u002Fi18n\u002Fcolorbox.fr.min.js","\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fjs\u002Fi18n\u002Fcolorbox.de.min.js","\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fjs\u002Fi18n\u002Fcolorbox.it.min.js","\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fjs\u002Fi18n\u002Fcolorbox.nl.min.js","\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fjs\u002Fi18n\u002Fcolorbox.pt.min.js","\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fjs\u002Fi18n\u002Fcolorbox.ru.min.js","\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fjs\u002Fi18n\u002Fcolorbox.zh-CN.min.js","\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fjs\u002Fi18n\u002Fcolorbox.zh-TW.min.js","\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fcss\u002Fjustifiedgallery.min.css","\u002Fwp-content\u002Fplugins\u002Fmpcx-lightbox\u002Fpublic\u002Fjs\u002Fjustifiedgallery.min.js",[],[225,226,227,228,229,230,231,232,233,234,235,236,237,238,239],"colorbox.min.js","fancybox.min.js","lightbox.min.js","images.min.js","i18n\u002Fcolorbox.en.min.js","i18n\u002Fcolorbox.es.min.js","i18n\u002Fcolorbox.fr.min.js","i18n\u002Fcolorbox.de.min.js","i18n\u002Fcolorbox.it.min.js","i18n\u002Fcolorbox.nl.min.js","i18n\u002Fcolorbox.pt.min.js","i18n\u002Fcolorbox.ru.min.js","i18n\u002Fcolorbox.zh-CN.min.js","i18n\u002Fcolorbox.zh-TW.min.js","justifiedgallery.min.js",[241,242,243,244,245,246,247,248,249,250],"mpcx-lightbox\u002Fpublic\u002Fcss\u002Fcolorbox\u002F","mpcx-lightbox\u002Fpublic\u002Fcss\u002Ffancybox.min.css?ver=","mpcx-lightbox\u002Fpublic\u002Fcss\u002Flightbox.min.css?ver=","mpcx-lightbox\u002Fpublic\u002Fjs\u002Fcolorbox.min.js?ver=","mpcx-lightbox\u002Fpublic\u002Fjs\u002Ffancybox.min.js?ver=","mpcx-lightbox\u002Fpublic\u002Fjs\u002Flightbox.min.js?ver=","mpcx-lightbox\u002Fpublic\u002Fjs\u002Fimages.min.js?ver=","mpcx-lightbox\u002Fpublic\u002Fjs\u002Fi18n\u002Fcolorbox.","mpcx-lightbox\u002Fpublic\u002Fcss\u002Fjustifiedgallery.min.css?ver=","mpcx-lightbox\u002Fpublic\u002Fjs\u002Fjustifiedgallery.min.js?ver=",{"cssClasses":252,"htmlComments":255,"htmlAttributes":256,"restEndpoints":260,"jsGlobals":262,"shortcodeOutput":264},[4,253,254,20,23],"cboxOverlay","cboxWrapper",[],[257,258,259],"data-lightbox","data-caption","data-title",[261],"\u002Fwp-json\u002Fmpcx-lightbox\u002F",[263],"lbData",[]]