[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSWAI7Q5d99MTPRttbhh8YFuxp6jmHX3_JIBrwTAkG2U":3,"$fWGgzBG9QmMFaDb23bIlzQiL55U7mfGvPkm085Tat2YM":383,"$flOeaLcTu_zUCW33ZceIqNSG0EU1hE109L25r0fr5_jk":387},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"discovery_status":31,"vulnerabilities":32,"developer":50,"crawl_stats":38,"alternatives":57,"analysis":162,"fingerprints":358},"page-transition","Page Transition","1.3","numixtech","https:\u002F\u002Fprofiles.wordpress.org\u002Fnumixtech\u002F","\u003Cp>Page Transition is a simple and easy wordpress plugin used to add page transition using CSS3 animations. Show your page with modern animations.\u003C\u002Fp>\n\u003Cp>Set different animations effects for page in (on load) and page out (on unload). You can also set value to “None” to disable page in or page out animation.\u003C\u002Fp>\n\u003Cp>Available options and features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Set Page In Animation\u003C\u002Fli>\n\u003Cli>Set Page Out Animation\u003C\u002Fli>\n\u003Cli>Set Page In Animation Duration\u003C\u002Fli>\n\u003Cli>Set Page Out Animation Duration\u003C\u002Fli>\n\u003Cli>Set whether to show loading or not\u003C\u002Fli>\n\u003Cli>Set loading text color\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>9 different transition effects available\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Fade\u003C\u002Fli>\n\u003Cli>Fade Down\u003C\u002Fli>\n\u003Cli>Fade Up\u003C\u002Fli>\n\u003Cli>Fade Left\u003C\u002Fli>\n\u003Cli>Fade Right\u003C\u002Fli>\n\u003Cli>Rotate\u003C\u002Fli>\n\u003Cli>Flip X\u003C\u002Fli>\n\u003Cli>Flip Y\u003C\u002Fli>\n\u003Cli>Zoom\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plugin is using jquery animsition plugin by Bilvesta. Please check demo at \u003Ca href=\"http:\u002F\u002Fgit.blivesta.com\u002Fanimsition\u002F\" rel=\"nofollow ugc\">http:\u002F\u002Fgit.blivesta.com\u002Fanimsition\u002F\u003C\u002Fa>\u003C\u002Fp>\n","Page Transition is a simple and easy wordpress plugin used to add page transition using CSS3 animations. Show your page with modern animations.",800,31459,90,33,"2014-09-15T11:15:00.000Z","4.0.38","3.6","",[20,21,22,23,24],"animate","animations","css3","effects","fade","http:\u002F\u002Fnumixtech.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpage-transition.1.3.zip",63,1,"2025-08-19 00:00:00","2026-04-16T10:56:18.058Z","no_bundle",[33],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":38,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":29,"updated_date":44,"references":45,"days_to_patch":38,"patch_diff_files":47,"patch_trac_url":38,"research_status":38,"research_verified":48,"research_rounds_completed":49,"research_plan":38,"research_summary":38,"research_vulnerable_code":38,"research_fix_diff":38,"research_exploit_outline":38,"research_model_used":38,"research_started_at":38,"research_completed_at":38,"research_error":38,"poc_status":38,"poc_video_id":38,"poc_summary":38,"poc_steps":38,"poc_tested_at":38,"poc_wp_version":38,"poc_php_version":38,"poc_playwright_script":38,"poc_exploit_code":38,"poc_has_trace":48,"poc_model_used":38,"poc_verification_depth":38},"CVE-2025-49412","page-transition-authenticated-administrator-stored-cross-site-scripting","Page Transition \u003C= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting","The Page Transition plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only impacts multi-site installations and installations where unfiltered_html has been disabled.",null,"\u003C=1.3","medium",4.4,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-08-25 18:08:29",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fa94dfee0-217f-4c83-8ec5-660fb174a5c5?source=api-prod",[],false,0,{"slug":7,"display_name":7,"profile_url":8,"plugin_count":51,"total_installs":52,"avg_security_score":53,"avg_patch_time_days":54,"trust_score":55,"computed_at":56},2,900,74,30,76,"2026-05-19T22:37:16.405Z",[58,82,100,122,142],{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":66,"downloaded":67,"rating":68,"num_ratings":69,"last_updated":70,"tested_up_to":71,"requires_at_least":72,"requires_php":18,"tags":73,"homepage":78,"download_link":79,"security_score":80,"vuln_count":51,"unpatched_count":49,"last_vuln_date":81,"fetched_at":30},"image-hover-effects","Image Hover Effects – WordPress Plugin","5.6","Labib Ahmed","https:\u002F\u002Fprofiles.wordpress.org\u002Flabibahmed42\u002F","\u003Cp>\u003Cstrong>Image Hover Effects – WordPress Plugin\u003C\u002Fstrong> helps you display beautiful hover animations on your images with stylish captions and overlays. Perfect for portfolios, galleries, team sections, and product showcases.\u003C\u002Fp>\n\u003Cp>Simply upload your image, choose an effect, and you’re ready to go. The plugin is fully responsive, mobile-friendly, and built using fast-loading CSS animations.\u003C\u002Fp>\n\u003Cp>No bloated code. No complex setup. Just clean visuals that make your images interactive and professional.\u003C\u002Fp>\n\u003Cdiv class=\"embed-vimeo\" style=\"text-align: center;\">\u003Ciframe loading=\"lazy\" src=\"https:\u002F\u002Fplayer.vimeo.com\u002Fvideo\u002F137003711\" width=\"750\" height=\"422\" frameborder=\"0\" webkitallowfullscreen mozallowfullscreen allowfullscreen>\u003C\u002Fiframe>\u003C\u002Fdiv>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>30+ built-in image hover animation styles  \u003C\u002Fli>\n\u003Cli>Add captions, overlays, and links to your images  \u003C\u002Fli>\n\u003Cli>Fully responsive and mobile-ready design  \u003C\u002Fli>\n\u003Cli>Lightweight and fast performance (CSS-only)  \u003C\u002Fli>\n\u003Cli>Works with all modern themes  \u003C\u002Fli>\n\u003Cli>No coding knowledge required\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cblockquote>\n\u003Cp>\n        \u003Ca href=\"http:\u002F\u002Fdemo.webdevocean.com\u002F\" rel=\"nofollow ugc\">Main DEMO Here\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fdemo.webdevocean.com\u002F#image-over-image-section\" rel=\"nofollow ugc\">Image Over Image Demo\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fdemo.webdevocean.com\u002F#circle-style\" rel=\"nofollow ugc\">Circle Style\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fdemo.webdevocean.com\u002F#square-effects\" rel=\"nofollow ugc\">Square Style\u003C\u002Fa>\n    \u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>Once activated, you can begin adding images with hover effects using the visual interface provided in your WordPress editor. Choose from multiple hover styles, set your caption text, and publish.\u003C\u002Fp>\n","Create stunning image hover effects with animated captions and overlays. Fully responsive, lightweight, and easy to use.",3000,141152,88,42,"2025-07-07T20:30:00.000Z","6.8.5","3.5",[74,75,76,59,77],"animated-image-overlay","css3-hover-effects","hover-caption","responsive-image-hover","http:\u002F\u002Fwebdevocean.com\u002Fimage-hover-effects","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fimage-hover-effects.5.6.zip",99,"2023-11-07 00:00:00",{"slug":83,"name":84,"version":85,"author":62,"author_profile":63,"description":86,"short_description":87,"active_installs":66,"downloaded":88,"rating":89,"num_ratings":90,"last_updated":91,"tested_up_to":71,"requires_at_least":72,"requires_php":18,"tags":92,"homepage":96,"download_link":97,"security_score":98,"vuln_count":28,"unpatched_count":49,"last_vuln_date":99,"fetched_at":30},"image-hover-effects-visual-composer-extension","Image Hover Effects For WPBakery Page Builder","5.0","\u003Cp>The Image Hover Effects for WPBakery Page Builder is an essential extension that enhances the capabilities of WPBakery Page Builder by allowing users to effortlessly add captivating CSS3 hover effects to images with accompanying captions. With a wide range of hover effects available, including animations triggered on hover, users can create visually stunning image displays that engage and captivate visitors. This plugin provides a seamless integration with WPBakery Page Builder, making it easy for users to add and customize hover effects directly within the familiar WPBakery interface. Whether you’re showcasing products, portfolios, testimonials, or team members, the Image Hover Effects plugin adds an extra layer of visual appeal to your website, elevating the overall user experience.\u003C\u002Fp>\n\u003Cp>Note: This plugin requires \u003Ca href=\"https:\u002F\u002F1.envato.market\u002F93O7W\" rel=\"nofollow ugc\">WPBakery Page Builder\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fdemo.webdevocean.com\u002Fimage-hover-effects-vc-extension-demo\u002F\" rel=\"nofollow ugc\">See DEMO Here\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002F1.envato.market\u002FBW2Yx\" rel=\"nofollow ugc\">Get Pro\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Pure CSS3 Effects\u003C\u002Fli>\n\u003Cli>Fully Responsive\u003C\u002Fli>\n\u003Cli>40+ Hover Effects\u003C\u002Fli>\n\u003Cli>Image Upload from media\u003C\u002Fli>\n\u003Cli>Fast performance\u003C\u002Fli>\n\u003Cli>Easy to Use\u003C\u002Fli>\n\u003Cli>Change Caption Heading and Description Color\u003C\u002Fli>\n\u003Cli>Both transition support left_to_right, right_to_left, top_to_bottom and bottom_to_top.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>PRO Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>100% Responsive\u003C\u002Fli>\n\u003Cli>Custom Width\u003C\u002Fli>\n\u003Cli>Custom Height\u003C\u002Fli>\n\u003Cli>Custom Font Sizes\u003C\u002Fli>\n\u003Cli>Custom Caption Colors\u003C\u002Fli>\n\u003Cli>Heading Background Colors\u003C\u002Fli>\n\u003Cli>Caption Background Colour\u003C\u002Fli>\n\u003Cli>Caption Background Image\u003C\u002Fli>\n\u003Cli>Custom Border Width\u003C\u002Fli>\n\u003Cli>Custom Border Color\u003C\u002Fli>\n\u003Cli>Title Over Image\u003C\u002Fli>\n\u003Cli>Support with in 12 hours\u003C\u002Fli>\n\u003C\u002Ful>\n","Add stylish CSS3 hover effects with captions to images in WPBakery Page Builder. Create engaging animations that enhance your site’s visual appeal.",135256,86,14,"2025-09-17T19:10:00.000Z",[21,22,93,94,95],"hover-effects","images","wpbakery","http:\u002F\u002Fwebdevocean.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fimage-hover-effects-visual-composer-extension.5.0.zip",100,"2023-01-20 00:00:00",{"slug":101,"name":102,"version":103,"author":104,"author_profile":105,"description":106,"short_description":107,"active_installs":108,"downloaded":109,"rating":98,"num_ratings":110,"last_updated":111,"tested_up_to":112,"requires_at_least":113,"requires_php":114,"tags":115,"homepage":120,"download_link":121,"security_score":98,"vuln_count":49,"unpatched_count":49,"last_vuln_date":38,"fetched_at":30},"animated-blocks","Animated Blocks on Scroll","1.1.4","Virgildia","https:\u002F\u002Fprofiles.wordpress.org\u002Fvirgildia\u002F","\u003Cp>Add scroll based animations to WordPress Gutenberg blocks.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Choose from 76 cross-browser CSS3 animations or add your own\u003C\u002Fli>\n\u003Cli>Preview animations in the editor\u003C\u002Fli>\n\u003Cli>Adjust the animation duration, delay, scroll threshold, and offset\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Settings\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Duration: The speed of the animation in milliseconds.\u003C\u002Fli>\n\u003Cli>Delay: How many milliseconds to wait before animating the element.\u003C\u002Fli>\n\u003Cli>Threshold: Add animation when x% of the element enters the screen.\u003C\u002Fli>\n\u003Cli>Start with opacity 0: Set the element to opacity 0 when the page loads. The option works for elements transitioning to 100% opacity through CSS.\u003C\u002Fli>\n\u003Cli>Offset Top (available in the block’s advanced settings): Number of pixels to offset the animated block from the top of the page. Useful when a page has a fixed top navigation bar.\u003C\u002Fli>\n\u003Cli>Class name “ab-animation-end” is added to the animated block after the CSS animation has ended. This class name can be used to add custom styles.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Requirements\u003C\u002Fh3>\n\u003Cp>PHP 5.6+ is recommended, WordPress 5.0+, and Gutenberg must be active.\u003C\u002Fp>\n\u003Ch3>Documentation\u003C\u002Fh3>\n\u003Cp>Select Animated Block from the Layout Elements group and add any content blocks within it. Select an animation from the dropdown list or add your own custom CSS class. The selected animation or custom CSS class will be added to the block when the user scrolls to it.\u003C\u002Fp>\n\u003Cp>Animated Block is a parent block (a container), nesting as many blocks as you want.\u003C\u002Fp>\n","Add scroll based animations to WordPress Gutenberg blocks.",2000,25738,9,"2026-03-04T11:18:00.000Z","6.9.4","5.9","7.0",[116,117,118,119,22],"animated-block","animation","blocks","css-animations","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fanimated-blocks\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fanimated-blocks.zip",{"slug":123,"name":124,"version":125,"author":126,"author_profile":127,"description":128,"short_description":129,"active_installs":108,"downloaded":130,"rating":131,"num_ratings":132,"last_updated":133,"tested_up_to":71,"requires_at_least":134,"requires_php":135,"tags":136,"homepage":138,"download_link":139,"security_score":140,"vuln_count":51,"unpatched_count":28,"last_vuln_date":141,"fetched_at":30},"easy-textillate","Easy Textillate","2.02","Flector","https:\u002F\u002Fprofiles.wordpress.org\u002Fflector\u002F","\u003Cp>The plugin allows you to add animation to any text using shortcodes in posts, pages or site widgets. You can also use PHP code to add text animations directly in theme files.\u003C\u002Fp>\n\u003Cp>The plugin fully utilizes the capabilities of the \u003Cstrong>Textillate.js\u003C\u002Fstrong> script and is very easy to use – you don’t need to spend time including scripts and style files. Just create a shortcode with the necessary animation and paste it into your post.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Easy Textillate\u003C\u002Fstrong> uses the following libraries:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fjschr.github.io\u002Ftextillate\u002F\" rel=\"nofollow ugc\">textillate.js\u003C\u002Fa> by Jordan Schroter\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fdaneden.github.io\u002Fanimate.css\u002F\" rel=\"nofollow ugc\">animate.css\u003C\u002Fa> by Daniel Eden\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fletteringjs.com\u002F\" rel=\"nofollow ugc\">lettering.js\u003C\u002Fa> by Dave Rupert\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you liked my plugin, please \u003Cstrong>rate\u003C\u002Fstrong> it.\u003C\u002Fp>\n","Very beautiful text animations (shortcodes in posts and widgets or PHP code in theme files).",28797,96,15,"2025-05-19T09:37:00.000Z","3.3","5.3",[20,117,21,22,137],"css3-animations","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Feasy-textillate\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-textillate.zip",79,"2024-04-15 00:00:00",{"slug":143,"name":144,"version":145,"author":146,"author_profile":147,"description":148,"short_description":149,"active_installs":150,"downloaded":151,"rating":98,"num_ratings":28,"last_updated":152,"tested_up_to":153,"requires_at_least":72,"requires_php":18,"tags":154,"homepage":159,"download_link":160,"security_score":161,"vuln_count":49,"unpatched_count":49,"last_vuln_date":38,"fetched_at":30},"ultimate-image-hover-effects-css3-photo-gallery-pro","Ultimate Image Hover Effects CSS3 – Photo Gallery Pro","1.0","shahzaib795","https:\u002F\u002Fprofiles.wordpress.org\u002Fshahzaib795\u002F","\u003Cblockquote>\n\u003Cp>\n        \u003Cstrong>Best Image Hover Effects or Captions Hover Plugin for WordPress\u003C\u002Fstrong>\n    \u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>Image Hover Effect is an impressive hover effects collection. It is Fastest and Simplest plugin which apply over 70+ hover effects to images on front end. A bunch of options can be made by admin to customize these hover effects. Pure CSS3 is used to render apply effect fastly.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fgudh.github.io\u002Fihover\u002Fdist\u002Findex.html\" rel=\"nofollow ugc\">Live Demo \u003C\u002Fa> | \u003Ca href=\"http:\u002F\u002Fwww.topdigitaltrends.net\u002Fcontact\u002F\" rel=\"nofollow ugc\">Contact\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fultimate-image-hover-effects-css3\" rel=\"nofollow ugc\">Support forum\u003C\u002Fa> | \u003Ca href=\"#\" rel=\"nofollow ugc\">Blog\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch3>Qucik Links\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fgudh.github.io\u002Fihover\u002Fdist\u002Findex.html\" rel=\"nofollow ugc\">Demo (Features)\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>70+ Hover Effects\u003C\u002Fli>\n\u003Cli>Import & Export XML\u003C\u002Fli>\n\u003Cli>Based on iHover.css\u003C\u002Fli>\n\u003Cli>Drag Drop Compatibility\u003C\u002Fli>\n\u003Cli>Super easy Installation\u003C\u002Fli>\n\u003Cli>Pure CSS3 Animations\u003C\u002Fli>\n\u003Cli>Multiple and Unlimited Shortcodes\u003C\u002Fli>\n\u003Cli>Custom Settings for every Single Image\u003C\u002Fli>\n\u003Cli>Custom font size both heading & description\u003C\u002Fli>\n\u003Cli>Custom Background Color for Caption\u003C\u002Fli>\n\u003Cli>External link for each hover item\u003C\u002Fli>\n\u003Cli>Open link in new tab\u003C\u002Fli>\n\u003Cli>100% Responsive\u003C\u002Fli>\n\u003Cli>Easy and Fastest to Setup\u003C\u002Fli>\n\u003Cli>Grid Option\u003C\u002Fli>\n\u003Cli>Shortcode Generator\u003C\u002Fli>\n\u003Cli>All Major browser supported\u003C\u002Fli>\n\u003C\u002Ful>\n","An ultimate and Flexible way to add images anywhere in your site with 70+ css3 Image hover effects.",10,1463,"2018-08-31T17:09:00.000Z","4.9.29",[155,156,137,157,158],"amazing-hover-effects","best-hover-effect-plugin","css3-hover-effect","css3-transition","http:\u002F\u002Fwww.topdigitaltrends.net\u002Fultimate-image-hover-effects-css3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fultimate-image-hover-effects-css3-photo-gallery-pro.1.0.zip",85,{"attackSurface":163,"codeSignals":212,"taintFlows":245,"riskAssessment":345,"analyzedAt":357},{"hooks":164,"ajaxHandlers":208,"restRoutes":209,"shortcodes":210,"cronEvents":211,"entryPointCount":49,"unprotectedCount":49},[165,171,175,180,185,188,192,196,200,203],{"type":166,"name":167,"callback":168,"file":169,"line":170},"action","admin_menu","plugin_admin_menu","class-page-transition.php",124,{"type":166,"name":172,"callback":173,"file":169,"line":174},"admin_enqueue_scripts","admin_scripts",128,{"type":176,"name":177,"callback":178,"file":169,"line":179},"filter","wp_headers","add_ie_compatible_header",131,{"type":166,"name":181,"callback":182,"priority":183,"file":169,"line":184},"wp_enqueue_scripts","enqueue_styles",1000,133,{"type":166,"name":181,"callback":186,"file":169,"line":187},"enqueue_scripts",134,{"type":166,"name":189,"callback":190,"file":169,"line":191},"wp_head","head_scripts",135,{"type":166,"name":193,"callback":194,"file":169,"line":195},"wp_footer","footer_scripts",136,{"type":176,"name":197,"callback":198,"priority":98,"file":169,"line":199},"body_class","body_class_names",137,{"type":166,"name":189,"callback":201,"file":169,"line":202},"head_styles",139,{"type":166,"name":204,"callback":205,"file":206,"line":207},"plugins_loaded","get_instance","page-transition.php",32,[],[],[],[],{"dangerousFunctions":213,"sqlUsage":214,"outputEscaping":216,"fileOperations":49,"externalRequests":49,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":244},[],{"prepared":49,"raw":49,"locations":215},[],{"escaped":51,"rawEcho":217,"locations":218},12,[219,222,224,226,228,230,232,234,236,238,240,242],{"file":169,"line":220,"context":221},230,"raw output",{"file":169,"line":223,"context":221},244,{"file":169,"line":225,"context":221},248,{"file":169,"line":227,"context":221},256,{"file":169,"line":229,"context":221},267,{"file":169,"line":231,"context":221},375,{"file":169,"line":233,"context":221},391,{"file":169,"line":235,"context":221},392,{"file":169,"line":237,"context":221},393,{"file":169,"line":239,"context":221},394,{"file":169,"line":241,"context":221},395,{"file":169,"line":243,"context":221},397,[],[246,316],{"entryPoint":247,"graph":248,"unsanitizedCount":49,"severity":315},"page_transition_options (class-page-transition.php:193)",{"nodes":249,"edges":305},[250,255,260,264,266,270,272,276,278,282,284,288,290,294,298,301],{"id":251,"type":252,"label":253,"file":169,"line":254},"n0","source","$_POST['page_in_transition']",200,{"id":256,"type":257,"label":258,"file":169,"line":254,"wp_function":259},"n1","sink","update_option() [Settings Manipulation]","update_option",{"id":261,"type":252,"label":262,"file":169,"line":263},"n2","$_POST['page_out_transition']",201,{"id":265,"type":257,"label":258,"file":169,"line":263,"wp_function":259},"n3",{"id":267,"type":252,"label":268,"file":169,"line":269},"n4","$_POST['page_in_duration']",202,{"id":271,"type":257,"label":258,"file":169,"line":269,"wp_function":259},"n5",{"id":273,"type":252,"label":274,"file":169,"line":275},"n6","$_POST['page_out_duration']",203,{"id":277,"type":257,"label":258,"file":169,"line":275,"wp_function":259},"n7",{"id":279,"type":252,"label":280,"file":169,"line":281},"n8","$_POST['show_loading']",205,{"id":283,"type":257,"label":258,"file":169,"line":281,"wp_function":259},"n9",{"id":285,"type":252,"label":286,"file":169,"line":287},"n10","$_POST['loading_color']",209,{"id":289,"type":257,"label":258,"file":169,"line":287,"wp_function":259},"n11",{"id":291,"type":252,"label":292,"file":169,"line":293},"n12","$_GET['page']",211,{"id":295,"type":257,"label":296,"file":169,"line":293,"wp_function":297},"n13","wp_redirect() [Open Redirect]","wp_redirect",{"id":299,"type":252,"label":292,"file":169,"line":300},"n14",218,{"id":302,"type":257,"label":303,"file":169,"line":300,"wp_function":304},"n15","echo() [XSS]","echo",[306,308,309,310,311,312,313,314],{"from":251,"to":256,"sanitized":307},true,{"from":261,"to":265,"sanitized":307},{"from":267,"to":271,"sanitized":307},{"from":273,"to":277,"sanitized":307},{"from":279,"to":283,"sanitized":307},{"from":285,"to":289,"sanitized":307},{"from":291,"to":295,"sanitized":307},{"from":299,"to":302,"sanitized":307},"low",{"entryPoint":317,"graph":318,"unsanitizedCount":49,"severity":315},"\u003Cclass-page-transition> (class-page-transition.php:0)",{"nodes":319,"edges":336},[320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335],{"id":251,"type":252,"label":253,"file":169,"line":254},{"id":256,"type":257,"label":258,"file":169,"line":254,"wp_function":259},{"id":261,"type":252,"label":262,"file":169,"line":263},{"id":265,"type":257,"label":258,"file":169,"line":263,"wp_function":259},{"id":267,"type":252,"label":268,"file":169,"line":269},{"id":271,"type":257,"label":258,"file":169,"line":269,"wp_function":259},{"id":273,"type":252,"label":274,"file":169,"line":275},{"id":277,"type":257,"label":258,"file":169,"line":275,"wp_function":259},{"id":279,"type":252,"label":280,"file":169,"line":281},{"id":283,"type":257,"label":258,"file":169,"line":281,"wp_function":259},{"id":285,"type":252,"label":286,"file":169,"line":287},{"id":289,"type":257,"label":258,"file":169,"line":287,"wp_function":259},{"id":291,"type":252,"label":292,"file":169,"line":293},{"id":295,"type":257,"label":296,"file":169,"line":293,"wp_function":297},{"id":299,"type":252,"label":292,"file":169,"line":300},{"id":302,"type":257,"label":303,"file":169,"line":300,"wp_function":304},[337,338,339,340,341,342,343,344],{"from":251,"to":256,"sanitized":307},{"from":261,"to":265,"sanitized":307},{"from":267,"to":271,"sanitized":307},{"from":273,"to":277,"sanitized":307},{"from":279,"to":283,"sanitized":307},{"from":285,"to":289,"sanitized":307},{"from":291,"to":295,"sanitized":307},{"from":299,"to":302,"sanitized":307},{"summary":346,"deductions":347},"The \"page-transition\" plugin v1.3 exhibits a mixed security posture. On the positive side, the static analysis reveals no identified dangerous functions, no raw SQL queries, and the presence of at least one nonce and capability check, which are good security practices. The attack surface is also reported as zero entry points, which is highly encouraging. However, a significant concern is the very low percentage of properly escaped output (14%). This indicates a high risk of Cross-Site Scripting (XSS) vulnerabilities, especially given that the plugin's historical vulnerability is also an XSS type.\n\nThe vulnerability history reveals one known medium severity CVE, which is currently unpatched and was identified relatively recently. The prevalence of XSS in its history, coupled with the current low output escaping, strongly suggests that further XSS vulnerabilities are likely to exist or re-emerge in unpatched versions. While the lack of direct attack vectors like unprotected AJAX handlers or REST API routes is a strength, the unescaped output creates a significant indirect risk that could be exploited through other means. \n\nIn conclusion, the plugin has some fundamental security strengths, particularly in its limited attack surface and use of prepared statements. Nevertheless, the critical lack of output escaping and the presence of an unpatched XSS vulnerability represent substantial security risks that need immediate attention. The developer should prioritize addressing the unpatched CVE and significantly improving output sanitization.",[348,351,354],{"reason":349,"points":350},"Unpatched CVE exists",18,{"reason":352,"points":353},"Low output escaping (14%)",6,{"reason":355,"points":356},"Historical XSS vulnerability",5,"2026-03-16T19:18:14.763Z",{"wat":359,"direct":368},{"assetPaths":360,"generatorPatterns":363,"scriptPaths":364,"versionParams":365},[361,362],"\u002Fwp-content\u002Fplugins\u002Fpage-transition\u002Fcss\u002Fpage-transition.css","\u002Fwp-content\u002Fplugins\u002Fpage-transition\u002Fjs\u002Fpage-transition.js",[],[362],[366,367],"page-transition\u002Fcss\u002Fpage-transition.css?ver=","page-transition\u002Fjs\u002Fpage-transition.js?ver=",{"cssClasses":369,"htmlComments":370,"htmlAttributes":372,"restEndpoints":379,"jsGlobals":380,"shortcodeOutput":382},[],[371],"\u003C!-- Page Transition Settings -->",[373,374,375,376,377,378],"data-transition","data-animation-in","data-animation-out","data-animation-in-duration","data-animation-out-duration","data-loading-color",[],[381],"pageTransitionSettings",[],{"error":307,"url":384,"statusCode":385,"statusMessage":386,"message":386},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fpage-transition\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":388,"versions":389},4,[390,396,404,412],{"version":6,"download_url":26,"svn_tag_url":391,"released_at":38,"has_diff":48,"diff_files_changed":392,"diff_lines":38,"trac_diff_url":393,"vulnerabilities":394,"is_current":307},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fpage-transition\u002Ftags\u002F1.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fpage-transition%2Ftags%2F1.2&new_path=%2Fpage-transition%2Ftags%2F1.3",[395],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38},{"version":397,"download_url":398,"svn_tag_url":399,"released_at":38,"has_diff":48,"diff_files_changed":400,"diff_lines":38,"trac_diff_url":401,"vulnerabilities":402,"is_current":48},"1.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpage-transition.1.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fpage-transition\u002Ftags\u002F1.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fpage-transition%2Ftags%2F1.1&new_path=%2Fpage-transition%2Ftags%2F1.2",[403],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38},{"version":405,"download_url":406,"svn_tag_url":407,"released_at":38,"has_diff":48,"diff_files_changed":408,"diff_lines":38,"trac_diff_url":409,"vulnerabilities":410,"is_current":48},"1.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpage-transition.1.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fpage-transition\u002Ftags\u002F1.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fpage-transition%2Ftags%2F1.0&new_path=%2Fpage-transition%2Ftags%2F1.1",[411],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38},{"version":145,"download_url":413,"svn_tag_url":414,"released_at":38,"has_diff":48,"diff_files_changed":415,"diff_lines":38,"trac_diff_url":38,"vulnerabilities":416,"is_current":48},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpage-transition.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fpage-transition\u002Ftags\u002F1.0\u002F",[],[417],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38}]