[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhRFqBqLBix-UaD5mEa7CF-69nmWI2V9llqQo7hiAU64":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":23,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":34,"analysis":130,"fingerprints":219},"mtg-tutorde-cardlinker","MtG-Tutor.de CardLinker","0.1","pascalkleindienst","https:\u002F\u002Fprofiles.wordpress.org\u002Fpascalkleindienst\u002F","\u003Cp>(English description below German version!)\u003C\u002Fp>\n\u003Ch4>DE\u003C\u002Fh4>\n\u003Cp>Dieses Plugin enth&auml;t zwei Shortcodes mit denen man ganz einfach Magic the Gathering Karten oder komplette Magic Decks oder Listen verlinken kann.\u003Cbr \u002F>\nDie Karten werden mithilfe von \u003Ca href=\"http:\u002F\u002Fwww.mtg-tutor.de\" title=\"Deine Magic Kartendatenbank mit Kombos und mehr\" rel=\"nofollow ugc\">MtG-Tutor\u003C\u002Fa> verlinkt.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Enth&auml;lt Buttons f&uuml;r den Editor, um die Handhabung mit den Shortcodes zu vereinfachen\u003C\u002Fli>\n\u003Cli>Optional k&ouml;nnen Kartenbilder bei Karten oder Decks angezeigt werden, wenn man mit der Maus &uuml;ber die Kartennamen f&auml;hrt\u003C\u002Fli>\n\u003Cli>Optional kann die Starthand-Wahrscheinlichkeit bei Karten in einem Deck angezeigt werden\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Feedback\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Ich bin jederzeit offen f&uuml;r Vorschl&auml;ge und Korrekturen\u003C\u002Fli>\n\u003Cli>Kontakt via Website \u003Ca href=\"http:\u002F\u002Fwww.mtg-tutor.de\" title=\"Deine Magic Kartendatenbank mit Kombos und mehr\" rel=\"nofollow ugc\">MtG-Tutor\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Kontakt via Twitter \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Fmtg_tutor\" rel=\"nofollow ugc\">@mtg_tutor\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Folge mir auf meiner \u003Ca href=\"http:\u002F\u002Fde-de.facebook.com\u002Fmtg_tutor\" rel=\"nofollow ugc\">Facebook-Seite\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Oder folge mir \u003Ca href=\"https:\u002F\u002Fplus.google.com\u002Fu\u002F0\u002F114000458757848852888\u002Fposts\" rel=\"nofollow ugc\">+MtG-Tutor\u003C\u002Fa> bei Google Plus\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>EN\u003C\u002Fh4>\n\u003Cp>This plugin contains two shortcodes, which can be used to link Magic the Gathering cards or complete Magic Decks.\u003Cbr \u002F>\nThe cards will be linked to \u003Ca href=\"http:\u002F\u002Fwww.mtg-tutor.de\" rel=\"nofollow ugc\">MtG-Tutor\u003C\u002Fa>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Contains buttons for the WordPress Editor\u003C\u002Fli>\n\u003Cli>Optional mouseover card images\u003C\u002Fli>\n\u003Cli>Optional starting-hand probabillity\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Feedback\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>I am open for your suggestions and feedback \u003C\u002Fli>\n\u003Cli>Tweet me \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Fmtg_tutor\" rel=\"nofollow ugc\">@mtg_tutor\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Follow me on \u003Ca href=\"http:\u002F\u002Fde-de.facebook.com\u002Fmtg_tutor\" rel=\"nofollow ugc\">my Facebook page\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Or follow me on \u003Ca href=\"https:\u002F\u002Fplus.google.com\u002Fu\u002F0\u002F114000458757848852888\u002Fposts\" rel=\"nofollow ugc\">+MtG-Tutor\u003C\u002Fa> on Google Plus\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin provides some shortcode to easily link MtG Cards and Decks! - Ein Plugin mit dem man ganz leicht MtG Karten und Decks verlinken kann!",10,1587,0,"2012-10-07T17:23:00.000Z","3.4.2","3.0.1","",[19,20,21,22],"magic-the-gathering","mtg","tcg","trading-cards","http:\u002F\u002Fwww.mtg-tutor.de\u002Fgadgets","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmtg-tutorde-cardlinker.0.1.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},1,30,84,"2026-04-04T09:34:08.898Z",[35,57,71,91,107],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":43,"downloaded":44,"rating":32,"num_ratings":45,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":17,"tags":49,"homepage":52,"download_link":53,"security_score":54,"vuln_count":55,"unpatched_count":13,"last_vuln_date":56,"fetched_at":27},"magic-the-gathering-card-tooltips","Magic the Gathering Card Tooltips","3.8.0","grimdonkey","https:\u002F\u002Fprofiles.wordpress.org\u002Fgrimdonkey\u002F","\u003Cp>The plugin adds shortcodes that transform mtg card names and decks to provide a mouseover image. For cards use the [mtg_card][\u002Fmtg_card] shortcode (or the shortened version [c][\u002Fc]). When viewing the post, the card name will show up as a link to the card’s page on https:\u002F\u002Fdeckbox.org . Hovering over the link will show the card’s image in a tooltip.\u003C\u002Fp>\n\u003Cp>A similar tag can be used to quickly create deck listings: [mtg_deck][\u002Fmtg_deck] (or the shortened version [d][\u002Fd]). A deck listing should contain a list of cards and categories. All cards have a number before their name. All other lines are interpreted as category names. Do \u003Cem>not\u003C\u002Fem> include card numbers on the category name lines, they will automatically be computed and displayed by the plugin. A short example follows.\u003C\u002Fp>\n\u003Cp>The default style for displaying decks is a card listing with each card having a mouseover tooltip. This style can be changed to an embedded view, where the listing has a card image to the right of the deck. This can be toggled in the plugin settings for all decks, or specifically for a deck by setting the style attribute to the tag, as can be seen below.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[d title=\"Really Small Deck\" style=\"embedded\"]\n    Creatures\n    2 Bloodbraid Elf\n    4 Grizzly Bears\n\n    Spells\n    4 Lightning Bolt\n\n    Sideboard\n    4 Cultivate\n[\u002Fd]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>The screenshot section includes an image of the above deck listing.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Embedded Card Display\u003C\u002Fstrong>: Individual card shortcodes also support the embedded style, displaying the card image inline instead of as a tooltip:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[card style=\"embedded\"]Lightning Bolt[\u002Fcard]\n[c style=\"embedded\"]Tarmogoyf (FUT) 153[\u002Fc]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Arena Format Support\u003C\u002Fstrong>: You can now paste deck lists directly from MTG Arena (or other compatible exports – like Moxfield) with set codes and collector numbers:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[deck]\n4 Lightning Bolt (M10) 146\n4 Mountain (FIN)\n2 Snapcaster Mage\n[\u002Fdeck]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>The plugin will display only the card name and link to the specific printing when set code and number are provided. Set codes are case-insensitive. This format also works with the [card] shortcode: [card]Lightning Bolt (M10) 146[\u002Fcard]\u003C\u002Fp>\n","Easily transform Magic the Gathering card names into links that show the card image in a tooltip when hovering over them. You can also quickly create  &hellip;",100,11682,6,"2025-12-24T14:10:00.000Z","6.9.4","2.8.6",[50,51,19,20,21],"ccg","deckbox","https:\u002F\u002Fgithub.com\u002FSebastianZaha\u002Fwordpress_mtg_tooltips","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmagic-the-gathering-card-tooltips.3.8.0.zip",98,2,"2025-02-14 00:00:00",{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":11,"downloaded":65,"rating":43,"num_ratings":30,"last_updated":66,"tested_up_to":67,"requires_at_least":48,"requires_php":17,"tags":68,"homepage":69,"download_link":70,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"mtgpulse-magic-the-gathering-deckbox-plugin","MTGPulse deckbox embedding tool","1.0.3","perstilling","https:\u002F\u002Fprofiles.wordpress.org\u002Fperstilling\u002F","\u003Cp>The plugin adds any number of Magic: The Gathering deckboxes from mtgpulse.com to your wordpress site. The syntax for adding a deckbox is as follows:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[deckbox did=\"number\" size=\"small|normal\" width=\"number\" bgcolor=\"hexcolor\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cul>\n\u003Cli>did: Deck id from mtgpulse.com\u003C\u002Fli>\n\u003Cli>width: Width of the deckbox in pixels.\u003C\u002Fli>\n\u003Cli>size: small or normal (use small if width \u003C 800, normal if above). Difference is whether two or columns are used.\u003C\u002Fli>\n\u003Cli>bgcolor: the desired hex background color. For example FFFFFF for white.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For a custom decklist use the following syntax:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[deckboxcustom name=\"test deck\" size=\"small|normal\" width=\"number\" bgcolor=\"hexcolor\"]\n4 Glint Hawk Idol\n4 Origin Spellbomb\n4 Etched Champion\n4 Memnite\n4 Signal Pest\n4 Vault Skirge\n4 Glint Hawk\n1 Oblivion Ring\n4 Tempered Steel\n3 Dispatch\n4 Mox Opal\n9 Plains\n3 Gavony Township\n4 Inkmoth Nexus\n4 Razorverge Thicket\nSB:\n4 Shrine of Loyal Legions\n2 Spellskite\n4 Hero of Bladehold\n1 Oblivion Ring\n1 Celestial Purge\n1 Dispatch\n2 Mental Misstep\n[\u002Fdeckboxcustom]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Same meaning as above, but name is the deck name that will be displayed.\u003C\u002Fp>\n\u003Cp>For the three settings: size, width and color there is a settings page where you can apply the default value for these. This way you don’t have to specify these every time you use the deckbox.\u003C\u002Fp>\n","Facilitates embedding of MTGPulse.com deckboxes on your word press site",1844,"2012-02-07T17:29:00.000Z","3.3.2",[50,51,19,20,21],"http:\u002F\u002Fmtgpulse.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmtgpulse-magic-the-gathering-deckbox-plugin.zip",{"slug":72,"name":73,"version":74,"author":75,"author_profile":76,"description":77,"short_description":78,"active_installs":11,"downloaded":79,"rating":13,"num_ratings":13,"last_updated":80,"tested_up_to":81,"requires_at_least":82,"requires_php":17,"tags":83,"homepage":89,"download_link":90,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"tcg-card-links","TCG Card Links","1.0","Indrajeetpal","https:\u002F\u002Fprofiles.wordpress.org\u002Findrajeetpal\u002F","\u003Cp>The goal of this Plug-in is to provide an instantaneous way for you to turn all Magic: the Gathering card names within your blog posts into card information links with Low-Mid-Hi pricing! from over 30 of the internets cheapest vendors! click the “MTG Card Shortcode” button to genrate shortcode for links.\u003C\u002Fp>\n\u003Cp>WordPress plugin developed by Indrajeet Pal\u003C\u002Fp>\n\u003Cp>USE\u003C\u002Fp>\n\u003Cp>To use the TCG Card Links, you must first enter the settings Plug-in Option -> TCG Card Links and Enter a partner key for your Blog other than “WORDPRESS”. The name must contain between 6 and 10 capital letters.\u003C\u002Fp>\n\u003Ch3>CREDIT\u003C\u002Fh3>\n\u003Cp>This plugin was developed by Indrajeet Pal – http:\u002F\u002Fwww.indrajeet.pixub.com\u002F\u003C\u002Fp>\n\u003Ch3>CONTACT\u003C\u002Fh3>\n\u003Cp>Indrajeet Pal\u003Cbr \u002F>\nhttp:\u002F\u002Fwww.indrajeet.pixub.com\u002Fcontact-me\u002F\u003C\u002Fp>\n","The goal of this Plug-in is to provide an instantaneous way for you to turn all Magic: the Gathering card names within your blog posts into card infor &hellip;",1632,"2013-10-25T11:26:00.000Z","3.6.1","2.9.2",[84,85,86,87,88],"magic","mtg-card","pokemon","tcg-card","wowtcg","http:\u002F\u002Fwww.indrajeet.pixub.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftcg-card-links.zip",{"slug":92,"name":93,"version":94,"author":95,"author_profile":96,"description":97,"short_description":98,"active_installs":11,"downloaded":99,"rating":13,"num_ratings":13,"last_updated":100,"tested_up_to":94,"requires_at_least":101,"requires_php":17,"tags":102,"homepage":105,"download_link":106,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"wp-mtg-helper","WP MtG-Helper","1.2.7","distractedBySquirrels","https:\u002F\u002Fprofiles.wordpress.org\u002Fbackseatsurfer\u002F","\u003Cp>The goal of this plugin is to help you writing articels about Magic: the Gathering like tournament reports or draft walkthroughs and reducing the time you need for posting decks and link cards to their picture.\u003Cbr \u002F>\nAll this stuff is taken care of by the plugin and that’s not the enf of it. MtG-Helper does not only link cards for you it also creates good looking deck lists, sealed pools and booster drafts.\u003Cbr \u002F>\nThe only thing you have to do is typ in the cards.\u003Cbr \u002F>\nIf you still not convinced, take a look at the screenshots.\u003C\u002Fp>\n\u003Cp>If your have any questions how to use the plugin take a look into the FAQ (or readme-file). If this doesn’t help, \u003Ca href=\"http:\u002F\u002Fwww.backseatsurfer.de\u002Ffeedback\u002F\" rel=\"nofollow ugc\">contact me\u003C\u002Fa>. Maybe I could help\u003C\u002Fp>\n\u003Ch4>Upgrading from older version to 1.0+\u003C\u002Fh4>\n\u003Cp>\u003Cem>To save yourself trouble deactivate the plugin and remove it from your wordpress instalation before upgrading to a newer version!\u003C\u002Fem>\u003C\u002Fp>\n","The goal of this plugin is to help you writing articels about Magic: the Gathering like tournament reports or draft walkthroughs and reducing the time &hellip;",6186,"2013-05-25T08:06:00.000Z","2.5",[103,104,84,19,20],"deck","help","http:\u002F\u002Fwww.distractedbysquirrels.com\u002Fwork\u002F#work1178","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-mtg-helper.1.2.7.zip",{"slug":108,"name":109,"version":110,"author":111,"author_profile":112,"description":113,"short_description":114,"active_installs":115,"downloaded":116,"rating":117,"num_ratings":118,"last_updated":119,"tested_up_to":120,"requires_at_least":121,"requires_php":17,"tags":122,"homepage":128,"download_link":129,"security_score":43,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"nginx-helper","Nginx Helper","2.3.5","rtCamp","https:\u002F\u002Fprofiles.wordpress.org\u002Frtcamp\u002F","\u003Col>\n\u003Cli>Removes \u003Ccode>index.php\u003C\u002Fcode> from permalinks when using WordPress with nginx.\u003C\u002Fli>\n\u003Cli>Adds support for purging redis-cache when used as full-page cache created using \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fopenresty\u002Fsrcache-nginx-module#caching-with-redis\" rel=\"nofollow ugc\">nginx-srcache-module\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Adds support for nginx fastcgi_cache_purge & proxy_cache_purge directive from \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FFRiCKLE\u002Fngx_cache_purge\" title=\"ngx_cache_purge module\" rel=\"nofollow ugc\">module\u003C\u002Fa>. Provides settings so you can customize purging rules.\u003C\u002Fli>\n\u003Cli>Adds support for nginx \u003Ccode>map{..}\u003C\u002Fcode> on a WordPress-multisite network installation. Using it, Nginx can serve PHP file uploads even if PHP\u002FMySQL crashes. Please check the tutorial list below for related Nginx configurations.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Tutorials\u003C\u002Fh4>\n\u003Cp>You will need to follow one or more tutorials below to get desired functionality:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Feasyengine.io\u002Fwordpress-nginx\u002Ftutorials\u002Fmultisite\u002Fstatic-files-handling\u002F\" rel=\"nofollow ugc\">Nginx Map + WordPress-Multisite + Static Files Handling\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Feasyengine.io\u002Fwordpress-nginx\u002Ftutorials\u002Fsingle-site\u002Ffastcgi-cache-with-purging\u002F\" rel=\"nofollow ugc\">Nginx + WordPress + fastcgi_purge_cache\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Feasyengine.io\u002Fwordpress-nginx\u002Ftutorials\u002Fmultisite\u002Fsubdirectories\u002Ffastcgi-cache-with-purging\u002F\" rel=\"nofollow ugc\">Nginx + WordPress-Multisite (Subdirectories) + fastcgi_purge_cache\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Feasyengine.io\u002Fwordpress-nginx\u002Ftutorials\u002Fmultisite\u002Fsubdomains\u002Ffastcgi-cache-with-purging\u002F\" rel=\"nofollow ugc\">Nginx + WordPress-Multisite (Subdomains\u002Fdomain-mapping) + fastcgi_purge_cache\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Feasyengine.io\u002Fwordpress-nginx\u002Ftutorials\u002F\" rel=\"nofollow ugc\">Other WordPress-Nginx Tutorials\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Cleans nginx's fastcgi\u002Fproxy cache or redis-cache whenever a post is edited\u002Fpublished. Also does a few more things.",100000,6119694,88,31,"2025-08-21T06:49:00.000Z","6.8.5","3.0",[123,124,125,126,127],"cache-purge","fastcgi","nginx","permalinks","redis-cache","https:\u002F\u002Frtcamp.com\u002Fnginx-helper\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnginx-helper.2.3.5.zip",{"attackSurface":131,"codeSignals":176,"taintFlows":205,"riskAssessment":206,"analyzedAt":218},{"hooks":132,"ajaxHandlers":165,"restRoutes":166,"shortcodes":167,"cronEvents":175,"entryPointCount":55,"unprotectedCount":13},[133,139,144,149,153,157,161],{"type":134,"name":135,"callback":136,"file":137,"line":138},"action","admin_init","closure","includes\\mtutor_options_page.php",265,{"type":134,"name":140,"callback":141,"file":142,"line":143},"wp_footer","print_scripts","mtutor_cardlinker.php",122,{"type":145,"name":146,"callback":147,"file":142,"line":148},"filter","mce_external_plugins","add_tinymce_plugins",137,{"type":145,"name":150,"callback":151,"file":142,"line":152},"mce_buttons","register_buttons",138,{"type":134,"name":154,"callback":155,"file":142,"line":156},"init","mtgtutor_init_plugin",177,{"type":134,"name":158,"callback":159,"file":142,"line":160},"admin_menu","mtgtutor_admin_menu",187,{"type":145,"name":162,"callback":163,"file":142,"line":164},"tiny_mce_version","my_refresh_mce",199,[],[],[168,172],{"tag":169,"callback":170,"file":142,"line":171},"mt_card","card",111,{"tag":173,"callback":103,"file":142,"line":174},"mt_deck",112,[],{"dangerousFunctions":177,"sqlUsage":178,"outputEscaping":180,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":55,"bundledLibraries":204},[],{"prepared":13,"raw":13,"locations":179},[],{"escaped":181,"rawEcho":11,"locations":182},3,[183,186,188,190,192,194,196,198,200,202],{"file":137,"line":184,"context":185},72,"raw output",{"file":137,"line":187,"context":185},79,{"file":137,"line":189,"context":185},126,{"file":137,"line":191,"context":185},127,{"file":137,"line":193,"context":185},142,{"file":137,"line":195,"context":185},143,{"file":137,"line":197,"context":185},158,{"file":137,"line":199,"context":185},159,{"file":137,"line":201,"context":185},174,{"file":137,"line":203,"context":185},175,[],[],{"summary":207,"deductions":208},"The mtg-tutorde-cardlinker v0.1 plugin exhibits a mixed security posture. On the positive side, it demonstrates good practices by avoiding dangerous functions, file operations, and external HTTP requests. All SQL queries are prepared, and capability checks are in place for its entry points. The lack of known vulnerabilities in its history is also a positive indicator.\n\nHowever, there are significant concerns. The plugin has a very low percentage (23%) of properly escaped output, suggesting a high risk of Cross-Site Scripting (XSS) vulnerabilities. While the static analysis reported no critical taint flows, the lack of thorough taint analysis (0 flows analyzed) means that potential vulnerabilities could be missed. Furthermore, the absence of nonce checks on its entry points, combined with a notable portion of unescaped output, is a substantial security weakness that could be exploited.\n\nIn conclusion, while the plugin has a clean vulnerability history and avoids some common pitfalls, the severe lack of output escaping and the absence of nonce checks present critical risks. These issues indicate a need for significant improvement in secure coding practices, particularly concerning input validation and output sanitization, to mitigate potential XSS attacks.",[209,212,215],{"reason":210,"points":211},"Low output escaping percentage",15,{"reason":213,"points":214},"No nonce checks on entry points",8,{"reason":216,"points":217},"Limited taint analysis coverage",5,"2026-03-17T00:27:37.741Z",{"wat":220,"direct":233},{"assetPaths":221,"generatorPatterns":223,"scriptPaths":224,"versionParams":228},[222],"\u002Fwp-content\u002Fplugins\u002Fmtg-tutorde-cardlinker\u002Fcss\u002Fmt_deck.css",[],[225,226,227],"\u002Fwp-content\u002Fplugins\u002Fmtg-tutorde-cardlinker\u002Fjs\u002Fmt_card_hover.js","\u002Fwp-content\u002Fplugins\u002Fmtg-tutorde-cardlinker\u002Fjs\u002Fmt_card_editor_plugin.js","\u002Fwp-content\u002Fplugins\u002Fmtg-tutorde-cardlinker\u002Fjs\u002Fmt_deck_editor_plugin.js",[229,230,231,232],"mtg-tutorde-cardlinker\u002Fcss\u002Fmt_deck.css?ver=","mtg-tutorde-cardlinker\u002Fjs\u002Fmt_card_hover.js?ver=","mtg-tutorde-cardlinker\u002Fjs\u002Fmt_card_editor_plugin.js?ver=","mtg-tutorde-cardlinker\u002Fjs\u002Fmt_deck_editor_plugin.js?ver=",{"cssClasses":234,"htmlComments":235,"htmlAttributes":236,"restEndpoints":237,"jsGlobals":238,"shortcodeOutput":241},[],[],[],[],[239,240],"mt_cardlinker","mt_decklinker",[]]