[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4JTVZsGY9WeJOkH_OMUh3y44vF53DOeAx9r-kBYdLIA":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":36,"analysis":131,"fingerprints":172},"notifications-to-all-administrators","Notifications to all Administrators","1.0","Mehdi Kabab","https:\u002F\u002Fprofiles.wordpress.org\u002Fpioupioum\u002F","\u003Cp>By default WordPress sends moderation request of new comments to the e-mail address defined in the \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FSettings_General_SubPanel\" title=\"Settings General SubPanel &laquo; WordPress Codex\" rel=\"nofollow ugc\">General Settings Subpanel\u003C\u002Fa>. However, you do not have an email address shared between your administrators or a mailing list. In this case, the plugin Notification to all Administrators has been created for you!\u003C\u002Fp>\n\u003Cp>Also, WordPress sends notifications to the author of the post only. With the plugin Notification to all Administrators, all your administrators receive this notification.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Note:\u003C\u002Fstrong> This plugin does not overwrites functions like \u003Ccode>wp_mail\u003C\u002Fcode>, or \u003Ccode>wp_notify_moderator\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cp>Notification to all Administrators requires \u003Ccode>PHP5\u003C\u002Fcode>.\u003C\u002Fp>\n","Enable moderation requests and notifications by email to all administrators.",10,2958,0,"2009-05-27T16:09:00.000Z","2.8","",[18,19,20,21,22],"admin","administrator","author","comment","comments","http:\u002F\u002Fpioupioum.fr\u002Fwordpress\u002Fplugins\u002Fadministrator-comments-notification.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnotifications-to-all-administrators.1.0.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":25,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"pioupioum",3,720,30,84,"2026-04-04T18:21:28.800Z",[37,56,74,91,112],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":48,"last_updated":49,"tested_up_to":50,"requires_at_least":51,"requires_php":16,"tags":52,"homepage":54,"download_link":55,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"simple-author-highlighter","Simple Author Highlighter","0.6.5","jimaek","https:\u002F\u002Fprofiles.wordpress.org\u002Fjimaek\u002F","\u003Cp>Simple Author Highlighter is a simple WordPress plug-in that can customize the color of the author’s comments or any selected users (for example the admins). The installation process is extremely simple and accessible and after install, Simple Author Highlighter can be found in the “Plugins” menu in WordPress.\u003C\u002Fp>\n","Simple Author Highlighter is a wordpress plugin that allows you to easy highlight authors comments. More on our website www.dakulov.eu",70,13304,100,1,"2011-03-30T11:09:00.000Z","3.1.4","2.8.0",[18,20,21,22,53],"highlight","http:\u002F\u002Fwww.dakulov.eu#page5","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-author-highlighter.0.6.5.zip",{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":11,"downloaded":64,"rating":13,"num_ratings":13,"last_updated":65,"tested_up_to":66,"requires_at_least":67,"requires_php":16,"tags":68,"homepage":72,"download_link":73,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"comment-count-admin","Comment Count Admin (by URL)","1.5","Jan Teriete","https:\u002F\u002Fprofiles.wordpress.org\u002Fleisurelarry\u002F","\u003Ch4>ENGLISH:\u003C\u002Fh4>\n\u003Cp>This plugin adds a handy feature to the WordPress admin pages to allow you to quickly identify anonymous first-time\u003Cbr \u002F>\ncomment authors by comment url. The comment count appears next to the comment authors name in the “Edit Comments”\u003Cbr \u002F>\nlisting of comments and in the “Discussion” box of the “Edit Post” page for a post with comments. Anonymous comment\u003Cbr \u002F>\nauthors are identified by the url they provided when commenting, all WordPress users are identified by their user id.\u003C\u002Fp>\n","Displays a count of each comment authors total number of comments next to their name on the admin pages.",3243,"2014-07-18T17:06:00.000Z","3.9.40","3.9",[18,69,70,71,22],"comment-author","comment-count","comment-url","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcomment-count-admin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcomment-count-admin.zip",{"slug":75,"name":76,"version":77,"author":78,"author_profile":79,"description":80,"short_description":81,"active_installs":11,"downloaded":82,"rating":13,"num_ratings":13,"last_updated":83,"tested_up_to":84,"requires_at_least":51,"requires_php":16,"tags":85,"homepage":89,"download_link":90,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"export-comment-authors","Export Comment Authors","1.3","bjplink","https:\u002F\u002Fprofiles.wordpress.org\u002Fbjplink\u002F","\u003Cp>Export Comment Authors lets you extract the Names, Email Addresses and more of your Comment Authors into a CSV file. This plugin is a great way to jump start a newsletter by importing the resulting CSV file into any of the popular newsletter services like MailChimp, AWeber or Campaign Monitor. It can also be used to extract information on a per post basis for things like contests.\u003C\u002Fp>\n","Export Comment Authors lets you extract the Names, Email Addresses and more of your Comment Authors into a CSV file.",11078,"2010-11-29T16:58:00.000Z","3.0.5",[18,86,22,87,88],"authors","csv","export","http:\u002F\u002Fwww.brianjlink.com\u002Fexport-comment-authors","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fexport-comment-authors.1.3.zip",{"slug":92,"name":93,"version":94,"author":95,"author_profile":96,"description":97,"short_description":98,"active_installs":99,"downloaded":100,"rating":101,"num_ratings":11,"last_updated":102,"tested_up_to":103,"requires_at_least":104,"requires_php":16,"tags":105,"homepage":108,"download_link":109,"security_score":110,"vuln_count":48,"unpatched_count":13,"last_vuln_date":111,"fetched_at":27},"one-click-close-comments","One Click Close Comments","3.0","Scott Reilly","https:\u002F\u002Fprofiles.wordpress.org\u002Fcoffee2code\u002F","\u003Cp>From the admin listing of posts (‘Edit Posts’) and pages (‘Edit Pages’), a user can close or open comments to any posts to which they have sufficient privileges to make such changes (essentially admins and post authors for their own posts). This is done via an AJAX-powered color-coded indicator. The color-coding gives instant feedback on the current status of the post for comments: green means the post\u002Fpage is open to comments, red means the post\u002Fpage is closed to comments. Being AJAX-powered means that the change is submitted in the background after being clicked without requiring a page reload.\u003C\u002Fp>\n\u003Cp>This plugin will only function for administrative users in the admin who have JavaScript enabled.\u003C\u002Fp>\n\u003Cp>Links: \u003Ca href=\"https:\u002F\u002Fcoffee2code.com\u002Fwp-plugins\u002Fone-click-close-comments\u002F\" rel=\"nofollow ugc\">Plugin Homepage\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fone-click-close-comments\u002F\" rel=\"ugc\">Plugin Directory Page\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcoffee2code\u002Fone-click-close-comments\u002F\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fcoffee2code.com\" rel=\"nofollow ugc\">Author Homepage\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Developer Documentation\u003C\u002Fh3>\n\u003Cp>Developer documentation can be found in \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcoffee2code\u002Fone-click-close-comments\u002Fblob\u002Fmaster\u002FDEVELOPER-DOCS.md\" rel=\"nofollow ugc\">DEVELOPER-DOCS.md\u003C\u002Fa>. That documentation covers the hooks provided by the plugin.\u003C\u002Fp>\n\u003Cp>As an overview, these are the hooks provided by the plugin:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>c2c_one_click_close_comments_click_char\u003C\u002Fcode> : Filter to customize the character, string, or markup used as the indicator used to toggle a post’s comment status.\u003C\u002Fli>\n\u003C\u002Ful>\n","Conveniently close or open comments for a post or page with one click from the admin listing of posts.",6000,159941,98,"2025-04-17T20:29:00.000Z","6.8.5","4.7",[18,106,21,22,107],"coffee2code","status","https:\u002F\u002Fcoffee2code.com\u002Fwp-plugins\u002Fone-click-close-comments\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-close-comments.3.0.zip",99,"2024-07-26 13:12:00",{"slug":113,"name":114,"version":115,"author":116,"author_profile":117,"description":118,"short_description":119,"active_installs":120,"downloaded":121,"rating":34,"num_ratings":122,"last_updated":123,"tested_up_to":124,"requires_at_least":125,"requires_php":16,"tags":126,"homepage":129,"download_link":130,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"relative-url","Relative URL","0.1.8","Sparanoid","https:\u002F\u002Fprofiles.wordpress.org\u002Fsparanoid\u002F","\u003Cp>Relative URL applies the \u003Ccode>wp_make_link_relative\u003C\u002Fcode> function to links (posts, categories, pages, etc.) to convert them to relative URLs. Useful for developers when debugging local WordPress instance on a mobile device (iPad, iPhone, etc.).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Notice\u003C\u002Fstrong>: This plugin SHOULD be used for local development only. I haven’t tested on a production environment; it \u003Cstrong>may\u003C\u002Fstrong> work with some issues, like unwanted URLs in RSS feed or sharing URLs are replaced with relative URLs, etc.\u003C\u002Fp>\n\u003Cp>More information please visit my \u003Ca href=\"https:\u002F\u002Fsparanoid.com\u002Fwork\u002Frelative-url\u002F\" rel=\"nofollow ugc\">site\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For example:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>http:\u002F\u002Flocalhost:8080\u002Fwp\u002F\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Will be converted to:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002Fwp\u002F\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>And..\u003C\u002Fp>\n\u003Cpre>\u003Ccode>http:\u002F\u002Flocalhost:8080\u002Fwp\u002F2012\u002F09\u002F01\u002Fhello-world\u002F\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Will be converted to:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002Fwp\u002F2012\u002F09\u002F01\u002Fhello-world\u002F\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>And..\u003C\u002Fp>\n\u003Cpre>\u003Ccode>http:\u002F\u002Flocalhost:8080\u002Fwp\u002Fwp-content\u002Fthemes\u002Ftwentyeleven\u002Fstyle.css\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Will be converted to:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002Fwp\u002Fwp-content\u002Fthemes\u002Ftwentyeleven\u002Fstyle.css\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Then after activating this plugin, you can simply access your local instance using \u003Ccode>http:\u002F\u002F10.0.1.5:8888\u002Fwp\u002F\u003C\u002Fcode> on your iPad or other mobile devices without having styles and navigation issue.\u003C\u002Fp>\n","Relative URL applies wp_make_link_relative function to links to convert them to relative URLs.",3000,108283,26,"2021-08-11T18:45:00.000Z","5.8.13","2.1.0",[18,127,21,22,128],"administration","content","https:\u002F\u002Fsparanoid.com\u002Fwork\u002Frelative-url\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frelative-url.0.1.8.zip",{"attackSurface":132,"codeSignals":156,"taintFlows":163,"riskAssessment":164,"analyzedAt":171},{"hooks":133,"ajaxHandlers":152,"restRoutes":153,"shortcodes":154,"cronEvents":155,"entryPointCount":13,"unprotectedCount":13},[134,140,146,149],{"type":135,"name":136,"callback":137,"file":138,"line":139},"action","plugins_loaded","bootstrap","notifications-to-all-administrators.php",32,{"type":141,"name":142,"callback":143,"priority":144,"file":138,"line":145},"filter","comment_moderation_subject","dispatch",500,67,{"type":141,"name":147,"callback":143,"priority":144,"file":138,"line":148},"comment_notification_subject",68,{"type":141,"name":150,"callback":143,"priority":144,"file":138,"line":151},"wp_mail",69,[],[],[],[],{"dangerousFunctions":157,"sqlUsage":158,"outputEscaping":160,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":162},[],{"prepared":13,"raw":13,"locations":159},[],{"escaped":13,"rawEcho":13,"locations":161},[],[],[],{"summary":165,"deductions":166},"The static analysis of the \"notifications-to-all-administrators\" v1.0 plugin reveals a remarkably clean codebase with no identified vulnerabilities or dangerous functions. The absence of SQL queries that are not properly prepared, along with 100% output escaping, demonstrates good coding practices. Furthermore, the plugin has no recorded history of CVEs, suggesting a stable and well-maintained component. The limited attack surface, with zero entry points and no unprotected handlers, is also a significant strength.\n\nHowever, the complete lack of nonce checks and capability checks across all identified entry points (even though there are none reported) is a notable concern. While the current version may not expose these vulnerabilities due to its limited attack surface, it indicates a potential weakness if new functionalities are added without implementing proper authentication and authorization mechanisms. This could lead to security risks in future versions if not addressed.\n\nIn conclusion, the \"notifications-to-all-administrators\" v1.0 plugin currently presents a low-risk profile due to its clean code and lack of historical vulnerabilities. The primary weakness lies in the absence of security checks for authorization and integrity, which, while not exploitable in the current version, represents a potential future risk. Developers should prioritize implementing these checks if the plugin is to be expanded or maintained.",[167,169],{"reason":168,"points":11},"Missing nonce checks on entry points",{"reason":170,"points":11},"Missing capability checks on entry points","2026-03-16T23:40:46.101Z",{"wat":173,"direct":178},{"assetPaths":174,"generatorPatterns":175,"scriptPaths":176,"versionParams":177},[],[],[],[],{"cssClasses":179,"htmlComments":180,"htmlAttributes":183,"restEndpoints":184,"jsGlobals":185,"shortcodeOutput":186},[],[181,182]," ***** BEGIN LICENSE BLOCK *****"," ***** END LICENSE BLOCK ***** ",[],[],[],[]]