[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fh0KY_cHMb3ZNokJ5LMSRH9nePWuXtYc_Au3VS2gJ_i8":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":35,"analysis":129,"fingerprints":291},"my-custom-ads","My Custom Ads Management","1.0.0","pixeltoweb","https:\u002F\u002Fprofiles.wordpress.org\u002Fpixeltoweb\u002F","\u003Ch4>Features\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Ads Management\u003C\u002Fstrong> \u003Cem>Plugin is an easy to use plugin to display custom advertising like google ads, banner ads on front-end side which includes any ads size ranging from 300×250, 160×600, 728×90 and etc..\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Ads Management Plugin\u003C\u002Fstrong> \u003Cem>is used For Marketing Banners and logos of Affiliates and Marketing Purpose.\u003C\u002Fem>\u003C\u002Fp>\n\u003Ch4>Ads Management Plugin will help you to Show Ads by Following way\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Create Ads from Admin Panel from Add New Ads Section.\u003C\u002Fli>\n\u003Cli>Create New Ads by Adding Title of the Ads, Short Description and Add Banner code with image tag or Google Adsense Code in to code box with status as “Available”.\u003C\u002Fli>\n\u003Cli>Admin will get Unique and Randomly Created Short Code which will be helpful to show custom ads on Front End.\u003C\u002Fli>\n\u003Cli>Copy Short Code example “[Customads id=123456]”.\u003C\u002Fli>\n\u003Cli>Admin can show Ads on Front End by Text Widget, Ads Widget, Short Code into Page \u002F Post Text Editor and PHP Short code in any Theme File.\u003C\u002Fli>\n\u003Cli>Then go to Widget Section and add Short code into WordPress Text Widget which will show added ads on Front End into that Sidebar.\u003C\u002Fli>\n\u003Cli>Admin can go to Widget Section and then add Custom Ads Widget and Select Ads with Checkbox as Show Title and Description on Front End.\u003C\u002Fli>\n\u003Cli>Admin can go to any Page or Post and then Add Short code into Editor Section then will see Ads into Content Section.\u003C\u002Fli>\n\u003Cli>To add in PHP file, go to Theme Page and add “startphptag echo do_shortcode(‘[Customads id=123456];endphptag” code into any theme file with replacing our custom code to show Custom Ads on Front End.\u003C\u002Fli>\n\u003C\u002Ful>\n","Ads Management helps you create Ads on front-end with many options like Text Widgets, Sidebar, Short Codes etc provided by Pixeltoweb.com",10,1361,0,"2018-07-03T06:03:00.000Z","4.9.29","3.0.1","",[19,20,21,22,23],"ads","adsense","advertising","image","sidebar","http:\u002F\u002Fpixeltoweb.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmy-custom-ads.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":26,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},3,30,84,"2026-04-05T00:07:12.758Z",[36,55,74,92,111],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":46,"num_ratings":31,"last_updated":47,"tested_up_to":48,"requires_at_least":49,"requires_php":17,"tags":50,"homepage":53,"download_link":54,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"adsense-in-post-ads-by-oizuled","In-Post Ads","2.0.4","AMP-MODE","https:\u002F\u002Fprofiles.wordpress.org\u002Fampmode\u002F","\u003Cp>The In-Post Ads plugin allows you to save your most used ad codes, and insert them as a shortcode in your pages or posts.\u003C\u002Fp>\n\u003Cp>You may already use a plugin to display your ads in a widgetized area of your page such as the left or right sidebars, or in the header or footer of your page. While this does get the ads on the page, your site visitors are not likely to click on them.\u003C\u002Fp>\n\u003Cp>This plugin creates shortcodes, which you can use inside the body of any page or post to display an advertisement. This is where your reader’s eyes are looking anyway, and it will increase the odds that they will click on the ad.\u003C\u002Fp>\n","A plugin to display ads inside your pages or posts.",700,68319,94,"2023-05-03T19:25:00.000Z","6.2.9","3.1",[51,19,20,21,52],"ad","google","https:\u002F\u002Famplifyplugins.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadsense-in-post-ads-by-oizuled.2.0.4.zip",{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":63,"downloaded":64,"rating":65,"num_ratings":31,"last_updated":66,"tested_up_to":67,"requires_at_least":49,"requires_php":17,"tags":68,"homepage":72,"download_link":73,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"sidebar-image-banner-ads-widget","Sidebar Image Banner Ads Widget","1.0.2","Suresh Kumar Mukhiya","https:\u002F\u002Fprofiles.wordpress.org\u002Fsureshhardiya\u002F","\u003Cp>This Plugins helps to add image banners on the sidebar. Allows to enter title, description, image on the sidebar and is very easy to use.\u003C\u002Fp>\n\u003Cp>This plugin intended for simplest use of image banners or small ads in the sidebar or any widget area in the WordPress theme. It adds image banners in following steps:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>You have to drag and drop the widget to your required widget area.\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Enter the image url and the link, title, description as per required. Choose your visibility settings.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Save & Close. It will fit to the container it is located in.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","This Plugins helps to add image banners on the sidebar. Allows to enter title, description, image on the sidebar and is very easy to use.",300,19216,86,"2017-09-09T11:04:00.000Z","4.8.28",[69,70,71],"ads-in-sidebar","image-banner-sidebar","sidebar-image","http:\u002F\u002Fskmukhiya.com.np\u002Fads-image-banner-widget-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsidebar-image-banner-ads-widget.zip",{"slug":75,"name":76,"version":49,"author":77,"author_profile":78,"description":79,"short_description":80,"active_installs":81,"downloaded":82,"rating":81,"num_ratings":83,"last_updated":84,"tested_up_to":15,"requires_at_least":85,"requires_php":17,"tags":86,"homepage":89,"download_link":90,"security_score":26,"vuln_count":83,"unpatched_count":13,"last_vuln_date":91,"fetched_at":28},"ad-buttons","Ad Buttons","mindnl","https:\u002F\u002Fprofiles.wordpress.org\u002Fmindnl\u002F","\u003Cp>The Ad Buttons plugin displays a number of graphical ads in a sidebar widget\u003C\u002Fp>\n\u003Cp>The current version contains the following functionality:\u003C\u002Fp>\n\u003Cp>Add new ad buttons:\u003Cbr \u002F>\nBy entering image URL, link URL and link text a new ad button will be created\u003C\u002Fp>\n\u003Cp>Enable\u002Fdisable individual ad buttons:\u003Cbr \u002F>\nEach ad button can be enabled or disabled from the admin panel\u003C\u002Fp>\n\u003Cp>Select how many ad buttons to display in the sidebar widget.\u003Cbr \u002F>\nDisplaying the ad buttons on your blog is done by randomly selecting ads from your total list of active ads. You can select how many ads are displayed on your blog.\u003C\u002Fp>\n\u003Cp>See how many times each ad button has been displayed and clicked.\u003Cbr \u002F>\nAd performance is an important measurement, especially when your ads link to affiliate programs. The number of views, clicks and CTR (click thru rate) are displayed for each ad button. Views by search engine bots are automatically filtered from the count.\u003C\u002Fp>\n\u003Cp>A Google AdSense 125 x 125 ad unit can be displayed by filling in your AdSense publisher ID. AdSense ad colors can be controlled right from the Ad Buttons admin panel.\u003C\u002Fp>\n","The Ad Buttons plugin displays a number of graphical ads in a sidebar widget.",100,58810,1,"2018-08-02T17:55:00.000Z","2.8.0",[19,20,21,87,88],"buttons","monetizing","http:\u002F\u002Fadbuttons.net\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fad-buttons.3.1.zip","2015-05-08 00:00:00",{"slug":93,"name":94,"version":95,"author":96,"author_profile":97,"description":98,"short_description":99,"active_installs":81,"downloaded":100,"rating":81,"num_ratings":31,"last_updated":101,"tested_up_to":102,"requires_at_least":103,"requires_php":104,"tags":105,"homepage":109,"download_link":110,"security_score":81,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"ad-commander","Ad Commander – Ad Manager for Banners, AdSense, Ad Networks","1.1.25","wildoperation","https:\u002F\u002Fprofiles.wordpress.org\u002Fwildoperation\u002F","\u003Cp>Ad Commander is a complete ad management plugin for WordPress. With Ad Commander, users can quickly create custom banner image ads, Google AdSense ads, Amazon Associates ads, and ads for other affiliate ad networks.\u003C\u002Fp>\n\u003Cp>Create groups of rotating banner ads or randomly displaying ads. Insert ads with shortcodes, template tags, blocks, or automatic placements. Inject scripts into the header or footer of your site.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>AdSense users:\u003C\u002Fstrong> Ad Commander integrates directly with your AdSense account to make implementing AdSense and AMP ads quick and easy. Simply connect an account and choose from a searchable, sortable list of ad units. Alternatively, build your ads manually or paste in code.\u003C\u002Fp>\n\u003Cp>Some key features of Ad Commander include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Create individual ads or groups of randomizing, rotating, or manually sorted ads\u003C\u002Fli>\n\u003Cli>AdSense ad type with direct AdSense account integration, manually built ad units, or simple code pasting\u003C\u002Fli>\n\u003Cli>Track impressions and clicks and generate reports for ads\u003C\u002Fli>\n\u003Cli>Support for AMP ads with amp-pixel and amp-analytics tracking\u003C\u002Fli>\n\u003Cli>Inject ads or groups using shortcodes, template tags, blocks, or automatic placements\u003C\u002Fli>\n\u003Cli>Conditionally display ads with content targeting options\u003C\u002Fli>\n\u003Cli>Display required labels above ads\u003C\u002Fli>\n\u003Cli>Add custom code before and after ads or groups\u003C\u002Fli>\n\u003Cli>Dynamically create an ads.txt and manage it in the WordPress admin\u003C\u002Fli>\n\u003Cli>Familiar WordPress interface\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpadcommander.com\u002Fdocumentation\u002F?utm_source=wordpressorg&utm_medium=link&utm_campaign=readme\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwpadcommander.com\u002Fsupport\u002F?utm_source=wordpressorg&utm_medium=link&utm_campaign=readme\" rel=\"nofollow ugc\">Support\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Demo Video\u003C\u002Fh3>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FdCQHwTIxfjM?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch3>Connecting AdSense\u003C\u002Fh3>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FTTR95aFhLls?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&start=4&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch3>Creating rotating banner ads\u003C\u002Fh3>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FNpPgFlP0T0g?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>Ad Commander core is free to download and use. Ad Commander Pro has additional advanced features. \u003Ca href=\"https:\u002F\u002Fwpadcommander.com\u002F?utm_source=wordpressorg&utm_medium=link&utm_campaign=readme\" rel=\"nofollow ugc\">Visit our website to learn more about Ad Commander Pro.\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Some Pro features include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Priority email support\u003C\u002Fli>\n\u003Cli>Automatically convert AdSense ads to AMP ads\u003C\u002Fli>\n\u003Cli>Google Analytics (GA4) or other third-party analytics tracking for impressions and clicks\u003C\u002Fli>\n\u003Cli>Expire ads by date or maximum stats\u003C\u002Fli>\n\u003Cli>Advanced automatic placement positions\u003C\u002Fli>\n\u003Cli>Automatic placements for bbPress and BuddyPress\u003C\u002Fli>\n\u003Cli>Lazy load ads when they enter the viewport\u003C\u002Fli>\n\u003Cli>Popup ads\u003C\u002Fli>\n\u003Cli>Visitor targeting options\u003C\u002Fli>\n\u003Cli>Geotargeting with MaxMind IP databases\u003C\u002Fli>\n\u003Cli>Content and visitor targeting for groups and automatic placements\u003C\u002Fli>\n\u003Cli>Display groups in a grid layout\u003C\u002Fli>\n\u003Cli>Weighted or evenly distributed ad impressions\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpadcommander.com\u002Ffeatures\u002F?utm_source=wordpressorg&utm_medium=link&utm_campaign=readme\" rel=\"nofollow ugc\">All Features\u003C\u002Fa>\u003C\u002Fp>\n","Insert image banner ads, Google AdSense, Amazon, affiliate ad networks. Rotate and randomize ad groups. Track impressions and clicks. Create ads.txt.",4113,"2026-03-09T20:13:00.000Z","6.9.4","6.2","7.4",[20,21,106,107,108],"amp","banners","rotate","https:\u002F\u002Fwpadcommander.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fad-commander.1.1.25.zip",{"slug":112,"name":113,"version":114,"author":115,"author_profile":116,"description":117,"short_description":118,"active_installs":81,"downloaded":119,"rating":81,"num_ratings":83,"last_updated":120,"tested_up_to":121,"requires_at_least":122,"requires_php":123,"tags":124,"homepage":17,"download_link":127,"security_score":128,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"setupad","Setupad WP Ads","1.6.2","Setupad","https:\u002F\u002Fprofiles.wordpress.org\u002Fsetupad\u002F","\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F3e9a1w2uKfQ?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>Looking for an ultimate solution for managing and displaying ads, including seamless ad insertion capabilities, on your WordPress site? Look no further! Introducing the Setupad WP Ads – a simple and powerful plugin for WordPress suitable for both beginners in website monetization and experienced website owners.\u003C\u002Fp>\n\u003Cp>With this plugin, you can:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Insert all kinds of ads, including Google AdSense and Google Ad Manager (GAM), through code snippets or utilize advanced ad inserter options.\u003C\u002Fli>\n\u003Cli>Insert ad placements (HTML\u002FJS) or images in multiple positions, including before and after posts, content, paragraphs, images, comments, and excerpts.\u003C\u002Fli>\n\u003Cli>Insert placements on different pages and choose which devices to display them on (desktop, tablet, mobile).\u003C\u002Fli>\n\u003Cli>Align ad placements.\u003C\u002Fli>\n\u003Cli>Add custom CSS.\u003C\u002Fli>\n\u003Cli>Insert ads.txt lines.\u003C\u002Fli>\n\u003Cli>Add a related posts section with multiple grid options.\u003C\u002Fli>\n\u003Cli>Insert ad placements between related post categories.\u003C\u002Fli>\n\u003Cli>Insert header scripts.\u003C\u002Fli>\n\u003Cli>Insert footer scripts.\u003C\u002Fli>\n\u003Cli>Enable lazy-load ad placements, which will speed up your website.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Setupad is brought to you by a team of professionals with 10+ years of experience in programmatic advertising. In addition to basic functionalities, the plugin offers built-in integration with the Setupad header bidding monetization platform.\u003C\u002Fp>\n\u003Cp>Want to know what the best part is? Our plugin comes with all these advanced features completely free of charge.\u003C\u002Fp>\n\u003Cp>Get the Setupad WP Ads plugin for your WordPress site and take full control over your ad management today!\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fsetupad.github.io\u002FSetupad-WP-Plugin-Documentation\u002Ffeatures\" rel=\"nofollow ugc\">Full feature list and documentation\u003C\u002Fa>\u003C\u002Fp>\n","Simple and powerful ad insertion tool for WordPress users with a wide range of features to insert, manage, and optimize your ad inventory.",5603,"2024-12-05T12:08:00.000Z","6.6.5","4.4","5.6",[125,19,20,21,126],"ad-manager","wordpress-ads","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsetupad.1.6.2.zip",92,{"attackSurface":130,"codeSignals":159,"taintFlows":229,"riskAssessment":274,"analyzedAt":290},{"hooks":131,"ajaxHandlers":152,"restRoutes":153,"shortcodes":154,"cronEvents":158,"entryPointCount":83,"unprotectedCount":13},[132,138,142,147],{"type":133,"name":134,"callback":135,"file":136,"line":137},"action","admin_menu","customads_menu","mycustomads.php",24,{"type":133,"name":139,"callback":140,"file":136,"line":141},"admin_enqueue_scripts","customads_adminscripts",25,{"type":143,"name":144,"callback":145,"file":136,"line":146},"filter","widget_text","do_shortcode",29,{"type":133,"name":148,"callback":149,"file":150,"line":151},"widgets_init","mycustomads_load_widget","mycustomads_function.php",195,[],[],[155],{"tag":156,"callback":156,"file":136,"line":157},"Customads",28,[],{"dangerousFunctions":160,"sqlUsage":161,"outputEscaping":176,"fileOperations":83,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":228},[],{"prepared":162,"raw":163,"locations":164},6,4,[165,169,172,174],{"file":166,"line":167,"context":168},"admin\\ads_inventory_details.php",11,"$wpdb->get_results() with variable interpolation",{"file":150,"line":170,"context":171},122,"$wpdb->get_row() with variable interpolation",{"file":150,"line":173,"context":168},161,{"file":150,"line":175,"context":171},203,{"escaped":137,"rawEcho":177,"locations":178},27,[179,182,184,187,189,191,192,194,196,198,200,202,204,206,208,210,212,213,214,216,218,219,221,222,224,225,227],{"file":166,"line":180,"context":181},165,"raw output",{"file":166,"line":183,"context":181},166,{"file":185,"line":186,"context":181},"admin\\edit_customads.php",14,{"file":185,"line":188,"context":181},16,{"file":185,"line":190,"context":181},17,{"file":185,"line":157,"context":181},{"file":185,"line":193,"context":181},66,{"file":185,"line":195,"context":181},101,{"file":185,"line":197,"context":181},102,{"file":150,"line":199,"context":181},115,{"file":150,"line":201,"context":181},118,{"file":150,"line":203,"context":181},119,{"file":150,"line":205,"context":181},120,{"file":150,"line":207,"context":181},138,{"file":150,"line":209,"context":181},141,{"file":150,"line":211,"context":181},164,{"file":150,"line":180,"context":181},{"file":150,"line":180,"context":181},{"file":150,"line":215,"context":181},167,{"file":150,"line":217,"context":181},168,{"file":150,"line":217,"context":181},{"file":150,"line":220,"context":181},170,{"file":150,"line":220,"context":181},{"file":150,"line":223,"context":181},174,{"file":150,"line":223,"context":181},{"file":150,"line":226,"context":181},175,{"file":150,"line":226,"context":181},[],[230,247],{"entryPoint":231,"graph":232,"unsanitizedCount":83,"severity":246},"\u003Cads_inventory_details> (admin\\ads_inventory_details.php:0)",{"nodes":233,"edges":243},[234,238],{"id":235,"type":236,"label":237,"file":166,"line":180},"n0","source","$_GET['page']",{"id":239,"type":240,"label":241,"file":166,"line":180,"wp_function":242},"n1","sink","echo() [XSS]","echo",[244],{"from":235,"to":239,"sanitized":245},false,"low",{"entryPoint":248,"graph":249,"unsanitizedCount":31,"severity":273},"\u003Cedit_customads> (admin\\edit_customads.php:0)",{"nodes":250,"edges":268},[251,254,257,260,262,265],{"id":235,"type":236,"label":252,"file":185,"line":253},"$_REQUEST['id']",2,{"id":239,"type":240,"label":255,"file":185,"line":253,"wp_function":256},"get_results() [SQLi]","get_results",{"id":258,"type":236,"label":259,"file":185,"line":253},"n2","$_REQUEST (x2)",{"id":261,"type":240,"label":241,"file":185,"line":190,"wp_function":242},"n3",{"id":263,"type":236,"label":264,"file":185,"line":253},"n4","$_REQUEST (x3)",{"id":266,"type":240,"label":241,"file":185,"line":267,"wp_function":242},"n5",39,[269,270,271],{"from":235,"to":239,"sanitized":245},{"from":258,"to":261,"sanitized":245},{"from":263,"to":266,"sanitized":272},true,"high",{"summary":275,"deductions":276},"The \"my-custom-ads\" v1.0.0 plugin exhibits a mixed security posture. While it boasts a limited attack surface with no direct AJAX handlers or REST API routes exposed without authentication, and no known vulnerabilities in its history, several concerning aspects are present in its static analysis.  A significant portion of SQL queries (40%) are not using prepared statements, posing a risk of SQL injection if user-supplied data is not properly sanitized before being incorporated into these queries. Furthermore, a considerable percentage of output (53%) is not properly escaped, creating a strong potential for Cross-Site Scripting (XSS) vulnerabilities, especially given that there are no explicit nonce checks or capability checks implemented across its entry points. The taint analysis reveals a critical flow with unsanitized paths, which is a serious concern as it suggests data is being passed through the application without adequate security validation, potentially leading to exploitable vulnerabilities.",[277,280,282,285,288],{"reason":278,"points":279},"SQL queries without prepared statements",7,{"reason":281,"points":162},"Improper output escaping",{"reason":283,"points":284},"Critical severity taint flow",12,{"reason":286,"points":287},"No nonce checks",8,{"reason":289,"points":287},"No capability checks","2026-03-17T00:48:36.071Z",{"wat":292,"direct":299},{"assetPaths":293,"generatorPatterns":296,"scriptPaths":297,"versionParams":298},[294,295],"\u002Fwp-content\u002Fplugins\u002Fmycustomads\u002Fcss\u002Fcustomads_css.css","\u002Fwp-content\u002Fplugins\u002Fmycustomads\u002Fjs\u002Fcustomads_js.js",[],[295],[],{"cssClasses":300,"htmlComments":304,"htmlAttributes":305,"restEndpoints":309,"jsGlobals":310,"shortcodeOutput":312},[301,302,303],"customads","customads_title","customads_description",[],[306,307,308],"id=\"customads\"","id=\"customads_title\"","id=\"customads_description\"",[],[311],"MYCUSTOMADS_PLUGIN_PATH",[313],"[Customads]"]