[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fC4yC_z7ROXtP5bbmTd9rXYbeXzAdY51KKJGr1j6KGXM":3,"$fbLHgcHWoLZ6HypFG70I4l-HWy2blcu4OOe64vwQzpOk":234,"$fcIy8nnRovTTtg0ecsc9UMNY3yrx9VGjXCNxOrzR6jSY":239},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"discovery_status":32,"vulnerabilities":33,"developer":51,"crawl_stats":39,"alternatives":58,"analysis":149,"fingerprints":208},"one-click-close-comments","One Click Close Comments","3.0","Scott Reilly","https:\u002F\u002Fprofiles.wordpress.org\u002Fcoffee2code\u002F","\u003Cp>From the admin listing of posts (‘Edit Posts’) and pages (‘Edit Pages’), a user can close or open comments to any posts to which they have sufficient privileges to make such changes (essentially admins and post authors for their own posts). This is done via an AJAX-powered color-coded indicator. The color-coding gives instant feedback on the current status of the post for comments: green means the post\u002Fpage is open to comments, red means the post\u002Fpage is closed to comments. Being AJAX-powered means that the change is submitted in the background after being clicked without requiring a page reload.\u003C\u002Fp>\n\u003Cp>This plugin will only function for administrative users in the admin who have JavaScript enabled.\u003C\u002Fp>\n\u003Cp>Links: \u003Ca href=\"https:\u002F\u002Fcoffee2code.com\u002Fwp-plugins\u002Fone-click-close-comments\u002F\" rel=\"nofollow ugc\">Plugin Homepage\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fone-click-close-comments\u002F\" rel=\"ugc\">Plugin Directory Page\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcoffee2code\u002Fone-click-close-comments\u002F\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fcoffee2code.com\" rel=\"nofollow ugc\">Author Homepage\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Developer Documentation\u003C\u002Fh3>\n\u003Cp>Developer documentation can be found in \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcoffee2code\u002Fone-click-close-comments\u002Fblob\u002Fmaster\u002FDEVELOPER-DOCS.md\" rel=\"nofollow ugc\">DEVELOPER-DOCS.md\u003C\u002Fa>. That documentation covers the hooks provided by the plugin.\u003C\u002Fp>\n\u003Cp>As an overview, these are the hooks provided by the plugin:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>c2c_one_click_close_comments_click_char\u003C\u002Fcode> : Filter to customize the character, string, or markup used as the indicator used to toggle a post’s comment status.\u003C\u002Fli>\n\u003C\u002Ful>\n","Conveniently close or open comments for a post or page with one click from the admin listing of posts.",6000,160184,98,10,"2025-04-17T20:29:00.000Z","6.8.5","4.7","",[20,21,22,23,24],"admin","coffee2code","comment","comments","status","https:\u002F\u002Fcoffee2code.com\u002Fwp-plugins\u002Fone-click-close-comments\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-close-comments.3.0.zip",91,1,0,"2024-07-26 13:12:00","2026-04-16T10:56:18.058Z","no_bundle",[34],{"id":35,"url_slug":36,"title":37,"description":38,"plugin_slug":4,"theme_slug":39,"affected_versions":40,"patched_in_version":6,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48,"patch_diff_files":49,"patch_trac_url":39,"research_status":39,"research_verified":50,"research_rounds_completed":29,"research_plan":39,"research_summary":39,"research_vulnerable_code":39,"research_fix_diff":39,"research_exploit_outline":39,"research_model_used":39,"research_started_at":39,"research_completed_at":39,"research_error":39,"poc_status":39,"poc_video_id":39,"poc_summary":39,"poc_steps":39,"poc_tested_at":39,"poc_wp_version":39,"poc_php_version":39,"poc_playwright_script":39,"poc_exploit_code":39,"poc_has_trace":50,"poc_model_used":39,"poc_verification_depth":39},"CVE-2024-6546","one-click-close-comments-unauthenticated-full-path-disclosure","One Click Close Comments \u003C= 2.7.1 - Unauthenticated Full Path Disclosure","The One Click Close Comments plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.7.1. This is due to the plugin utilizing bootstrap and leaving test files with display_errors on. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website.",null,"\u003C=2.7.1","medium",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N","Exposure of Sensitive Information to an Unauthorized Actor","2025-04-23 17:23:03",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Ffeb63b10-fe23-4f89-9ef3-0a61b4190320?source=api-prod",271,[],false,{"slug":21,"display_name":7,"profile_url":8,"plugin_count":52,"total_installs":53,"avg_security_score":54,"avg_patch_time_days":55,"trust_score":56,"computed_at":57},63,91830,88,374,71,"2026-05-20T01:11:15.626Z",[59,78,96,115,129],{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":67,"downloaded":68,"rating":29,"num_ratings":29,"last_updated":69,"tested_up_to":70,"requires_at_least":18,"requires_php":18,"tags":71,"homepage":18,"download_link":76,"security_score":77,"vuln_count":29,"unpatched_count":29,"last_vuln_date":39,"fetched_at":31},"kd-submissions","KD Submissions","2.1.0","keydigital1","https:\u002F\u002Fprofiles.wordpress.org\u002Fkeydigital1\u002F","\u003Cp>The KD Submissions plugin provides an all-in-one solution for managing and filtering submissions created by Elementor Submissions directly from the WordPress admin panel. It comes with features for efficient submission tracking and status management:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Assign multiple statuses to each submission.\u003C\u002Fli>\n\u003Cli>Filter submissions by form type, status, and creation date.\u003C\u002Fli>\n\u003Cli>Add, edit, or delete custom statuses.\u003C\u002Fli>\n\u003Cli>Include comments for submissions, displayed as customizable pills for clarity.\u003C\u002Fli>\n\u003Cli>Real-time updates for all actions, ensuring a smooth user experience.\u003C\u002Fli>\n\u003Cli>AJAX-powered operations for dynamic functionality without page reloads.\u003C\u002Fli>\n\u003Cli>Real-time WHMCS sync for submissions and contact clicks with rate limiting and aggregation.\u003C\u002Fli>\n\u003Cli>Daily reconciliation sync so WHMCS metrics stay aligned with WordPress as the source of truth.\u003C\u002Fli>\n\u003C\u002Ful>\n","An intuitive WordPress plugin for managing submissions created by Elementor Submissions, statuses, comments, and WHMCS analytics sync. ---",90,1533,"2026-04-09T19:17:00.000Z","6.7.5",[72,23,73,74,75],"admin-tools","management","statuses","submissions","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkd-submissions.2.1.0.zip",100,{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":14,"downloaded":86,"rating":29,"num_ratings":29,"last_updated":87,"tested_up_to":88,"requires_at_least":89,"requires_php":18,"tags":90,"homepage":93,"download_link":94,"security_score":95,"vuln_count":29,"unpatched_count":29,"last_vuln_date":39,"fetched_at":31},"show-pending-comments-count","Show Pending Comments Count","1.3","Kónståntîn český คำถาม 問題和答案 Поделитьс","https:\u002F\u002Fprofiles.wordpress.org\u002Fcode2coffee\u002F","\u003Cp>\u003Cstrong>NOTE: This plugin is deprecated as of WordPress 4.3, which now includes a display of the count of pending comments alongside the regular count of comments. And it does so in a more aesthetically pleasing fashion than this plugin ever did, so if you are using WP 4.3 or later, there’s no need to use this plugin. In fact, it won’t do anything for you if you try to use it. The plugin is still fully functional for WP 4.2 and earlier.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>By default, in the admin listing of posts, each post has its count of approved comments displayed within a word bubble. If you hover over a comment count, the tooltip hover text indicates the number of pending comments. This plugin utilizes JavaScript to change the post listings so that the pending comments count is displayed next to the approved comments count inside the same word bubble (though with a separator).\u003C\u002Fp>\n\u003Cp>The pending comments count will appear next to post comment counts in:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>The “Posts” listing of posts (formerly called “Edit Posts”)\u003C\u002Fli>\n\u003Cli>The “Pages” listing of pages (formerly called “Edit Pages”)\u003C\u002Fli>\n\u003Cli>The “Comments” listing of comments (formerly called “Edit Comments”)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plugin will only function for users in the admin who have JavaScript enabled.\u003C\u002Fp>\n\u003Cp>Links: \u003Ca href=\"http:\u002F\u002Fcoffee2code.com\u002Fwp-plugins\u002Fshow-pending-comments-count\u002F\" rel=\"nofollow ugc\">Plugin Homepage\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fshow-pending-comments-count\u002F\" rel=\"ugc\">Plugin Directory Page\u003C\u002Fa> | \u003Ca href=\"http:\u002F\u002Fcoffee2code.com\" rel=\"nofollow ugc\">Author Homepage\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Filters\u003C\u002Fh3>\n\u003Cp>The plugin is further customizable via two filters. Typically, these customizations would be put into your active theme’s functions.php file, or used by another plugin.\u003C\u002Fp>\n\u003Ch4>c2c_show_pending_comments_count_column_width\u003C\u002Fh4>\n\u003Cp>The ‘c2c_show_pending_comments_count_column_width’ filter allows you to customize the column width used for the comment column when pending comments are also being displayed. The WP default is “4em”, which is not sufficient to display a possible 3 digits for approved comments in addition to a possible 2 digits in pending comments. The default defined by the plugin is “5em” which should handle most cases sufficiently. Use the filter if you want to change the width.\u003C\u002Fp>\n\u003Cp>Arguments:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>$comment_column_width (string): The width of the comment column. Default is “5em”. Express as a width measurement recognized by CSS.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Example:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php\n\u002F\u002F Make it even wider\nfunction my_c2c_show_pending_comments_count_column_width( $comment_column_width ) {\n    return '6em';\n}\nadd_filter( 'c2c_show_pending_comments_count_column_width', 'my_c2c_show_pending_comments_count_column_width' );\n?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>c2c_show_pending_comments_count_separator\u003C\u002Fh4>\n\u003Cp>The ‘c2c_show_pending_comments_count_separator’ filter allows you to specify the character used as the separator between the count of approved comments and the count of pending comments. By default this is ‘ &bull; ‘ (a bullet, with space on either side).\u003C\u002Fp>\n\u003Cp>Arguments:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>$separator (string): The character or string to be used as the separator. By default this is ‘ &bull; ‘ (note space of either side).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","Display the pending comments count next to the approved comments count in the admin listing of posts.",4122,"2015-08-08T06:42:00.000Z","4.2.39","2.6",[20,21,23,91,92],"edit-posts","pending-comments","http:\u002F\u002Fcoffee2code.com\u002Fwp-plugins\u002Fshow-pending-comments-count\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshow-pending-comments-count.1.3.zip",85,{"slug":97,"name":98,"version":99,"author":100,"author_profile":101,"description":102,"short_description":103,"active_installs":104,"downloaded":105,"rating":106,"num_ratings":107,"last_updated":108,"tested_up_to":109,"requires_at_least":62,"requires_php":18,"tags":110,"homepage":113,"download_link":114,"security_score":95,"vuln_count":29,"unpatched_count":29,"last_vuln_date":39,"fetched_at":31},"relative-url","Relative URL","0.1.8","Sparanoid","https:\u002F\u002Fprofiles.wordpress.org\u002Fsparanoid\u002F","\u003Cp>Relative URL applies the \u003Ccode>wp_make_link_relative\u003C\u002Fcode> function to links (posts, categories, pages, etc.) to convert them to relative URLs. Useful for developers when debugging local WordPress instance on a mobile device (iPad, iPhone, etc.).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Notice\u003C\u002Fstrong>: This plugin SHOULD be used for local development only. I haven’t tested on a production environment; it \u003Cstrong>may\u003C\u002Fstrong> work with some issues, like unwanted URLs in RSS feed or sharing URLs are replaced with relative URLs, etc.\u003C\u002Fp>\n\u003Cp>More information please visit my \u003Ca href=\"https:\u002F\u002Fsparanoid.com\u002Fwork\u002Frelative-url\u002F\" rel=\"nofollow ugc\">site\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For example:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>http:\u002F\u002Flocalhost:8080\u002Fwp\u002F\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Will be converted to:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002Fwp\u002F\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>And..\u003C\u002Fp>\n\u003Cpre>\u003Ccode>http:\u002F\u002Flocalhost:8080\u002Fwp\u002F2012\u002F09\u002F01\u002Fhello-world\u002F\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Will be converted to:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002Fwp\u002F2012\u002F09\u002F01\u002Fhello-world\u002F\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>And..\u003C\u002Fp>\n\u003Cpre>\u003Ccode>http:\u002F\u002Flocalhost:8080\u002Fwp\u002Fwp-content\u002Fthemes\u002Ftwentyeleven\u002Fstyle.css\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Will be converted to:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002Fwp\u002Fwp-content\u002Fthemes\u002Ftwentyeleven\u002Fstyle.css\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Then after activating this plugin, you can simply access your local instance using \u003Ccode>http:\u002F\u002F10.0.1.5:8888\u002Fwp\u002F\u003C\u002Fcode> on your iPad or other mobile devices without having styles and navigation issue.\u003C\u002Fp>\n","Relative URL applies wp_make_link_relative function to links to convert them to relative URLs.",3000,108607,84,26,"2021-08-11T18:45:00.000Z","5.8.13",[20,111,22,23,112],"administration","content","https:\u002F\u002Fsparanoid.com\u002Fwork\u002Frelative-url\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frelative-url.0.1.8.zip",{"slug":116,"name":117,"version":118,"author":100,"author_profile":101,"description":119,"short_description":120,"active_installs":121,"downloaded":122,"rating":77,"num_ratings":123,"last_updated":124,"tested_up_to":109,"requires_at_least":125,"requires_php":18,"tags":126,"homepage":127,"download_link":128,"security_score":95,"vuln_count":29,"unpatched_count":29,"last_vuln_date":39,"fetched_at":31},"quotmarks-replacer","Quotmarks Replacer","2.6.21","\u003Cp>Quotmarks Replacer disables \u003Ccode>wptexturize\u003C\u002Fcode> function that keeps all quotation marks and suspension points in half-width form. This plugin also works fine with multisite enabled WordPress (aka. WordPress Mu).\u003C\u002Fp>\n\u003Cp>More information please visit my \u003Ca href=\"https:\u002F\u002Fsparanoid.com\u002Fwork\u002Fquotmarks-replacer\u002F\" rel=\"nofollow ugc\">site\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Quotmarks Replacer 通過禁用 \u003Ccode>wptexturize\u003C\u002Fcode> 函數，解決 WordPress 自動將半形的單引號、雙引號和省略號轉換爲全形標點的問題。使後台輸入的標點格式與前台讀者瀏覽的標點格式保持一致。並且對 multisite 多站點（WordPress Mu）有良好的支持\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Reviews（用戶評價）\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>我──一個網絡民工──當然有人會覺得這是謙虛，終於擁有了強悍的標點符號插件──也可能是世界上最棒的！我可以這樣雙引號“”，也可以這樣””，還可以這樣”──無論是哪一樣，都是最自由的表達！ ── 和菜頭\u003C\u002Fp>\n\u003Cp>It’s absolutely amazing. One of my all-time favorites. ── Steve Jobs\u003C\u002Fp>\n\u003Cp>Shut up, Matt. ──  WordPress\u003C\u002Fp>\n\u003C\u002Fblockquote>\n","Quotmarks Replacer disables wptexturize function that keeps all quotation marks and suspension points in half-width form.",300,24383,3,"2021-08-11T17:08:00.000Z","1.5",[20,111,22,23,112],"https:\u002F\u002Fsparanoid.com\u002Fwork\u002Fquotmarks-replacer\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fquotmarks-replacer.2.6.21.zip",{"slug":130,"name":131,"version":132,"author":133,"author_profile":134,"description":135,"short_description":136,"active_installs":137,"downloaded":138,"rating":77,"num_ratings":139,"last_updated":140,"tested_up_to":141,"requires_at_least":142,"requires_php":18,"tags":143,"homepage":147,"download_link":148,"security_score":95,"vuln_count":29,"unpatched_count":29,"last_vuln_date":39,"fetched_at":31},"nofollow-case-by-case","Nofollow Case by Case","1.5.6","fob","https:\u002F\u002Fprofiles.wordpress.org\u002Ffob\u002F","\u003Cp>For unmodified links Nofollow Case by Case works like a (do)follow plugin for WordPress. It simply removes rel=”nofollow” from your comment links.\u003C\u002Fp>\n\u003Cp>Whenever you get the feeling that one of your comment links might be able to harm your own website reputation, if you think about SEO and found a link that looks a bit like spam but should not be deleted, you can replace nofollow to every single comment link at any time. If you want to replace nofollow for a link like that you simply add \u002Fdontfollow at the end of the link. You can do this for author links in comments as well as for the links you find in the text.\u003C\u002Fp>\n\u003Ch4>This is what the plugin will do automatically:\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>1. Clean up some code:\u003C\u002Fstrong>\u003Cbr \u002F>\nIt tries to remove all variants of rel=”nofollow”, target=”blank” and rel=”external” from comment author links and other links in comments first. A link will become a “real link” no matter if it is a pingback, a trackback or a “real comment”.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>2. Fix semantical incorrectness:\u003C\u002Fstrong>\u003Cbr \u002F>\nThe plugin now applies rel=”external” – but ONLY for external links!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>3. jQuery functions of Nofollow Case by Case:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>a) The plugin detects rel=”external” in comments and opens those links in a new window.\u003Cbr \u002F>\nNo need for target=”_blank” which would not validate in XMTML. jQuery replacement does.\u003C\u002Fp>\n\u003Cp>b) The plugin tries to correct author urls that could not be fully replaced before.\u003Cbr \u002F>\nThis has something to do with template development. Find more information on this within the FAQ.\u003C\u002Fp>\n\u003Ch4>Add on\u003C\u002Fh4>\n\u003Cp>You can try this \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fnfcbc-seo-plugin-add-on\u002F\" title=\"NFCBC SEO Plugin Add-on\" rel=\"ugc\">NFCBC SEO Plugin ADD-on\u003C\u002Fa> for easier comment management. The plugin is an old one using javascript but still works. I currently do not have the time to rebuild it. A new version should later support Ajax and nonces and on the other hand will not support old versions of WordPress anymore.\u003C\u002Fp>\n\u003Ch4>Alternative Tool\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fnfcbc-seo-light\u002F\" title=\"NFCBC SEO Light\" rel=\"ugc\">NFCBC SEO Light\u003C\u002Fa> could be used alternatively. It suggests “follow” or “nofollow” or “no link” automatically, depending on comments length. This plugin might be updated soon. I personally prefer Nofollow Case by Case.\u003C\u002Fp>\n\u003Ch4>Need more information?\u003C\u002Fh4>\n\u003Cp>I have updated the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fnofollow-case-by-case\u002Ffaq\u002F\" title=\"FAQ for Nofollow Case by Case\" rel=\"ugc\">FAQ for Nofollow Case by Case\u003C\u002Fa> and the German description can be found at the old place as well:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.fob-marketing.de\u002Fmarketing-seo-blog\u002Fwordpress-nofollow-seo-plugin-nofollow-case-by-case.html\" title=\"Nofollow Case by Case SEO Plugin\" rel=\"nofollow ugc\">Deutsche Plugin-Beschreibung auf fob-marketing.de\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.fob-marketing.de\u002Fmarketing-seo-blog\u002Fantworten-zu-nofollow-case-by-case-und-relexternal-nofollow.html\" title=\"FAQ bei fob marketing\" rel=\"nofollow ugc\">Deutsche FAQ auf fob-marketing.de\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Contact\u003C\u002Fh3>\n\u003Cp>For further information please send me an \u003Ca href=\"http:\u002F\u002Fwww.fob-marketing.de\u002Ffob\u002Fueber-fob-marketing\u002Ffob-marketing-kontakt\u002F\" title=\"Send an email to Oliver Bockelmann\" rel=\"nofollow ugc\">email\u003C\u002Fa>.\u003C\u002Fp>\n","\"Dofollow\" but Nofollow Case by Case allows you to selectively apply nofollow to your comments as well.",200,38554,2,"2013-12-10T17:07:00.000Z","3.7.41","2.0",[111,23,144,145,146],"dofollow","links","nofollow","http:\u002F\u002Fwww.fob-marketing.de\u002Fmarketing-blog-184-wordpress-nofollow-seo-plugin-nofollow-case-by-case.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnofollow-case-by-case.1.5.6.zip",{"attackSurface":150,"codeSignals":194,"taintFlows":201,"riskAssessment":202,"analyzedAt":207},{"hooks":151,"ajaxHandlers":190,"restRoutes":191,"shortcodes":192,"cronEvents":193,"entryPointCount":29,"unprotectedCount":29},[152,158,161,164,169,173,176,179,183,186],{"type":153,"name":154,"callback":155,"file":156,"line":157},"action","load-edit.php","do_init","one-click-close-comments.php",131,{"type":153,"name":154,"callback":159,"file":156,"line":160},"enqueue_scripts_and_styles",132,{"type":153,"name":162,"callback":155,"file":156,"line":163},"admin_init",137,{"type":165,"name":166,"callback":167,"file":156,"line":168},"filter","manage_posts_columns","add_post_column",162,{"type":153,"name":170,"callback":171,"priority":14,"file":156,"line":172},"manage_posts_custom_column","handle_column_data",163,{"type":165,"name":174,"callback":167,"file":156,"line":175},"manage_pages_columns",164,{"type":153,"name":177,"callback":171,"priority":14,"file":156,"line":178},"manage_pages_custom_column",165,{"type":153,"name":180,"callback":181,"file":156,"line":182},"admin_enqueue_scripts","enqueue_admin_js",210,{"type":153,"name":180,"callback":184,"file":156,"line":185},"enqueue_admin_css",214,{"type":153,"name":187,"callback":188,"file":156,"line":189},"plugins_loaded","init",396,[],[],[],[],{"dangerousFunctions":195,"sqlUsage":196,"outputEscaping":198,"fileOperations":29,"externalRequests":29,"nonceChecks":28,"capabilityChecks":139,"bundledLibraries":200},[],{"prepared":29,"raw":29,"locations":197},[],{"escaped":14,"rawEcho":29,"locations":199},[],[],[],{"summary":203,"deductions":204},"The \"one-click-close-comments\" v3.0 plugin exhibits a generally strong security posture based on the provided static analysis.  The complete absence of detectable attack surface entry points such as AJAX handlers, REST API routes, shortcodes, and cron events is a significant positive.  Furthermore, the code demonstrates good practices with 100% of SQL queries utilizing prepared statements, all output being properly escaped, and the presence of nonce and capability checks.  There are no indications of dangerous functions, file operations, or external HTTP requests, which are common vectors for exploitation.\n\nDespite the promising static analysis, a historical vulnerability of \"Exposure of Sensitive Information to an Unauthorized Actor\" with a medium severity is noted, with the last instance occurring very recently. While this specific vulnerability is currently unpatched, the fact that it's the only reported CVE and it's marked as unpatched (although the data states 'Currently unpatched: 0' but then lists a recent vulnerability) warrants attention. This suggests a potential for undiscovered vulnerabilities or a recurring pattern of security weaknesses that, while not critical, could still pose a risk. The absence of taint analysis results in this specific run is neutral, but combined with the historical vulnerability, it's prudent to be cautiously optimistic.\n\nIn conclusion, the plugin's codebase for v3.0 appears robust and follows many security best practices. However, the presence of a past medium-severity vulnerability, particularly one related to information exposure, cannot be ignored. While the current code shows no immediate red flags, the historical context suggests that vigilance and potentially more in-depth security testing, beyond this static analysis snapshot, would be beneficial to ensure ongoing security.",[205],{"reason":206,"points":14},"Recent medium severity vulnerability reported","2026-03-16T18:02:25.568Z",{"wat":209,"direct":218},{"assetPaths":210,"generatorPatterns":213,"scriptPaths":214,"versionParams":215},[211,212],"\u002Fwp-content\u002Fplugins\u002Fone-click-close-comments\u002Fcss\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fone-click-close-comments\u002Fjs\u002Fscript.js",[],[212],[216,217],"one-click-close-comments\u002Fcss\u002Fstyle.css?ver=","one-click-close-comments\u002Fjs\u002Fscript.js?ver=",{"cssClasses":219,"htmlComments":221,"htmlAttributes":222,"restEndpoints":224,"jsGlobals":225,"shortcodeOutput":233},[220],"comment_state",[],[223],"data-post-id",[],[226,227,228,229,230,231,232],"c2c_one_click_close_comments_ajax_url","c2c_one_click_close_comments_nonce","c2c_one_click_close_comments_post_id","c2c_one_click_close_comments_field","c2c_one_click_close_comments_field_title","c2c_one_click_close_comments_help_text","c2c_one_click_close_comments_click_char",[],{"error":235,"url":236,"statusCode":237,"statusMessage":238,"message":238},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fone-click-close-comments\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":240,"versions":241},19,[242,247,255,263,271,278,286,294,302,310,318,326,334,342,350,358,366,374,382],{"version":6,"download_url":26,"svn_tag_url":243,"released_at":39,"has_diff":50,"diff_files_changed":244,"diff_lines":39,"trac_diff_url":245,"vulnerabilities":246,"is_current":235},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fone-click-close-comments\u002Ftags\u002F3.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fone-click-close-comments%2Ftags%2F2.7.1&new_path=%2Fone-click-close-comments%2Ftags%2F3.0",[],{"version":248,"download_url":249,"svn_tag_url":250,"released_at":39,"has_diff":50,"diff_files_changed":251,"diff_lines":39,"trac_diff_url":252,"vulnerabilities":253,"is_current":50},"2.7.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-close-comments.2.7.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fone-click-close-comments\u002Ftags\u002F2.7.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fone-click-close-comments%2Ftags%2F2.7&new_path=%2Fone-click-close-comments%2Ftags%2F2.7.1",[254],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":256,"download_url":257,"svn_tag_url":258,"released_at":39,"has_diff":50,"diff_files_changed":259,"diff_lines":39,"trac_diff_url":260,"vulnerabilities":261,"is_current":50},"2.7","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-close-comments.2.7.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fone-click-close-comments\u002Ftags\u002F2.7\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fone-click-close-comments%2Ftags%2F2.6.1&new_path=%2Fone-click-close-comments%2Ftags%2F2.7",[262],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":264,"download_url":265,"svn_tag_url":266,"released_at":39,"has_diff":50,"diff_files_changed":267,"diff_lines":39,"trac_diff_url":268,"vulnerabilities":269,"is_current":50},"2.6.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-close-comments.2.6.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fone-click-close-comments\u002Ftags\u002F2.6.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fone-click-close-comments%2Ftags%2F2.6&new_path=%2Fone-click-close-comments%2Ftags%2F2.6.1",[270],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":89,"download_url":272,"svn_tag_url":273,"released_at":39,"has_diff":50,"diff_files_changed":274,"diff_lines":39,"trac_diff_url":275,"vulnerabilities":276,"is_current":50},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-close-comments.2.6.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fone-click-close-comments\u002Ftags\u002F2.6\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fone-click-close-comments%2Ftags%2F2.5&new_path=%2Fone-click-close-comments%2Ftags%2F2.6",[277],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":279,"download_url":280,"svn_tag_url":281,"released_at":39,"has_diff":50,"diff_files_changed":282,"diff_lines":39,"trac_diff_url":283,"vulnerabilities":284,"is_current":50},"2.5","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-close-comments.2.5.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fone-click-close-comments\u002Ftags\u002F2.5\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fone-click-close-comments%2Ftags%2F2.4&new_path=%2Fone-click-close-comments%2Ftags%2F2.5",[285],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":287,"download_url":288,"svn_tag_url":289,"released_at":39,"has_diff":50,"diff_files_changed":290,"diff_lines":39,"trac_diff_url":291,"vulnerabilities":292,"is_current":50},"2.4","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-close-comments.2.4.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fone-click-close-comments\u002Ftags\u002F2.4\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fone-click-close-comments%2Ftags%2F2.3.5&new_path=%2Fone-click-close-comments%2Ftags%2F2.4",[293],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":295,"download_url":296,"svn_tag_url":297,"released_at":39,"has_diff":50,"diff_files_changed":298,"diff_lines":39,"trac_diff_url":299,"vulnerabilities":300,"is_current":50},"2.3.5","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-close-comments.2.3.5.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fone-click-close-comments\u002Ftags\u002F2.3.5\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fone-click-close-comments%2Ftags%2F2.3.4&new_path=%2Fone-click-close-comments%2Ftags%2F2.3.5",[301],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":303,"download_url":304,"svn_tag_url":305,"released_at":39,"has_diff":50,"diff_files_changed":306,"diff_lines":39,"trac_diff_url":307,"vulnerabilities":308,"is_current":50},"2.3.4","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-close-comments.2.3.4.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fone-click-close-comments\u002Ftags\u002F2.3.4\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fone-click-close-comments%2Ftags%2F2.3.3&new_path=%2Fone-click-close-comments%2Ftags%2F2.3.4",[309],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":311,"download_url":312,"svn_tag_url":313,"released_at":39,"has_diff":50,"diff_files_changed":314,"diff_lines":39,"trac_diff_url":315,"vulnerabilities":316,"is_current":50},"2.3.3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-close-comments.2.3.3.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fone-click-close-comments\u002Ftags\u002F2.3.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fone-click-close-comments%2Ftags%2F2.3.2&new_path=%2Fone-click-close-comments%2Ftags%2F2.3.3",[317],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":319,"download_url":320,"svn_tag_url":321,"released_at":39,"has_diff":50,"diff_files_changed":322,"diff_lines":39,"trac_diff_url":323,"vulnerabilities":324,"is_current":50},"2.3.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-close-comments.2.3.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fone-click-close-comments\u002Ftags\u002F2.3.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fone-click-close-comments%2Ftags%2F2.3&new_path=%2Fone-click-close-comments%2Ftags%2F2.3.2",[325],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":327,"download_url":328,"svn_tag_url":329,"released_at":39,"has_diff":50,"diff_files_changed":330,"diff_lines":39,"trac_diff_url":331,"vulnerabilities":332,"is_current":50},"2.3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-close-comments.2.3.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fone-click-close-comments\u002Ftags\u002F2.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fone-click-close-comments%2Ftags%2F2.2.1&new_path=%2Fone-click-close-comments%2Ftags%2F2.3",[333],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":335,"download_url":336,"svn_tag_url":337,"released_at":39,"has_diff":50,"diff_files_changed":338,"diff_lines":39,"trac_diff_url":339,"vulnerabilities":340,"is_current":50},"2.2.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-close-comments.2.2.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fone-click-close-comments\u002Ftags\u002F2.2.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fone-click-close-comments%2Ftags%2F2.2&new_path=%2Fone-click-close-comments%2Ftags%2F2.2.1",[341],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":343,"download_url":344,"svn_tag_url":345,"released_at":39,"has_diff":50,"diff_files_changed":346,"diff_lines":39,"trac_diff_url":347,"vulnerabilities":348,"is_current":50},"2.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-close-comments.2.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fone-click-close-comments\u002Ftags\u002F2.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fone-click-close-comments%2Ftags%2F2.1.1&new_path=%2Fone-click-close-comments%2Ftags%2F2.2",[349],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":351,"download_url":352,"svn_tag_url":353,"released_at":39,"has_diff":50,"diff_files_changed":354,"diff_lines":39,"trac_diff_url":355,"vulnerabilities":356,"is_current":50},"2.1.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-close-comments.2.1.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fone-click-close-comments\u002Ftags\u002F2.1.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fone-click-close-comments%2Ftags%2F2.1&new_path=%2Fone-click-close-comments%2Ftags%2F2.1.1",[357],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":359,"download_url":360,"svn_tag_url":361,"released_at":39,"has_diff":50,"diff_files_changed":362,"diff_lines":39,"trac_diff_url":363,"vulnerabilities":364,"is_current":50},"2.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-close-comments.2.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fone-click-close-comments\u002Ftags\u002F2.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fone-click-close-comments%2Ftags%2F2.0.1&new_path=%2Fone-click-close-comments%2Ftags%2F2.1",[365],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":367,"download_url":368,"svn_tag_url":369,"released_at":39,"has_diff":50,"diff_files_changed":370,"diff_lines":39,"trac_diff_url":371,"vulnerabilities":372,"is_current":50},"2.0.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-close-comments.2.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fone-click-close-comments\u002Ftags\u002F2.0.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fone-click-close-comments%2Ftags%2F1.1&new_path=%2Fone-click-close-comments%2Ftags%2F2.0.1",[373],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":375,"download_url":376,"svn_tag_url":377,"released_at":39,"has_diff":50,"diff_files_changed":378,"diff_lines":39,"trac_diff_url":379,"vulnerabilities":380,"is_current":50},"1.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-close-comments.1.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fone-click-close-comments\u002Ftags\u002F1.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fone-click-close-comments%2Ftags%2F1.0&new_path=%2Fone-click-close-comments%2Ftags%2F1.1",[381],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6},{"version":383,"download_url":384,"svn_tag_url":385,"released_at":39,"has_diff":50,"diff_files_changed":386,"diff_lines":39,"trac_diff_url":39,"vulnerabilities":387,"is_current":50},"1.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-close-comments.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fone-click-close-comments\u002Ftags\u002F1.0\u002F",[],[388],{"id":35,"url_slug":36,"title":37,"severity":41,"cvss_score":42,"vuln_type":44,"patched_in_version":6}]