[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fd1yFtFKt1SpdTXAW_aKqbhlqOMLepWICm3EF0PSjDPI":3,"$fLoiRv7nZHh80YMPgpdibAUDoyR6utpwAFmLN4jlwJVw":277,"$fyZ9CPjnAvr_ngYs7P3NfHxNqcnnPSbVcQSomIfzgE-8":282},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"discovery_status":30,"vulnerabilities":31,"developer":32,"crawl_stats":28,"alternatives":39,"analysis":144,"fingerprints":238},"phpinfo","Phpinfo","1.1","Roland Rust","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpdprx\u002F","\u003Cp>Prints out your webservers php settings as well as other information about your WordPress installation.\u003Cbr \u002F>\nImportant for posting at various WordPress support forums.\u003C\u002Fp>\n","Prints out your webservers php settings as well as other information about your WordPress installation.",100,16371,70,2,"2007-09-14T07:38:00.000Z","2.2.2","1.5","",[20,21,4,22,23],"configuration","debugging","server","troubleshooting","http:\u002F\u002Fwordpress.designpraxis.at","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fphpinfo.zip",85,0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":35,"avg_security_score":26,"avg_patch_time_days":36,"trust_score":37,"computed_at":38},"wpdprx",9,180,30,84,"2026-05-19T18:13:00.683Z",[40,61,84,106,126],{"slug":41,"name":42,"version":43,"author":44,"author_profile":45,"description":46,"short_description":47,"active_installs":48,"downloaded":49,"rating":50,"num_ratings":51,"last_updated":52,"tested_up_to":53,"requires_at_least":54,"requires_php":18,"tags":55,"homepage":59,"download_link":60,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"wp-serverinfo","WP-ServerInfo","1.66","Lester Chan","https:\u002F\u002Fprofiles.wordpress.org\u002Fgamerz\u002F","\u003Ch3>Build Status\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Ftravis-ci.org\u002Flesterchan\u002Fwp-serverinfo\" rel=\"nofollow ugc\">\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Development\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Flesterchan\u002Fwp-serverinfo\" title=\"https:\u002F\u002Fgithub.com\u002Flesterchan\u002Fwp-serverinfo\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Flesterchan\u002Fwp-serverinfo\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fwp-serverinfo\" title=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fwp-serverinfo\" rel=\"nofollow ugc\">https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fwp-serverinfo\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Plugin icon by \u003Ca href=\"http:\u002F\u002Fpicol.org\" rel=\"nofollow ugc\">Picol\u003C\u002Fa> from \u003Ca href=\"http:\u002F\u002Fwww.flaticon.com\" rel=\"nofollow ugc\">Flaticon\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Donations\u003C\u002Fh3>\n\u003Cp>I spent most of my free time creating, updating, maintaining and supporting these plugins, if you really love my plugins and could spare me a couple of bucks, I will really appreciate it. If not feel free to use it without any obligations.\u003C\u002Fp>\n\u003Ch3>Upgrading\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Deactivate \u003Ccode>WP-ServerInfo\u003C\u002Fcode> Plugin\u003C\u002Fli>\n\u003Cli>Open \u003Ccode>wp-content\u002Fplugins\u003C\u002Fcode> Folder\u003C\u002Fli>\n\u003Cli>Put\u002FOverwrite: \u003Ccode>Folder: wp-serverinfo\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Activate \u003Ccode>WP-ServerInfo\u003C\u002Fcode> Plugin\u003C\u002Fli>\n\u003C\u002Fol>\n","Display your host's PHP, MYSQL & memcached (if installed) information on your WordPress dashboard.",10000,224042,96,17,"2023-08-09T03:06:00.000Z","6.3.8","4.0",[56,57,4,22,58],"mysql","php","serverinfo","https:\u002F\u002Flesterchan.net\u002Fportfolio\u002Fprogramming\u002Fphp\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-serverinfo.1.66.zip",{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":69,"downloaded":70,"rating":37,"num_ratings":71,"last_updated":72,"tested_up_to":73,"requires_at_least":74,"requires_php":75,"tags":76,"homepage":80,"download_link":81,"security_score":82,"vuln_count":14,"unpatched_count":27,"last_vuln_date":83,"fetched_at":29},"phpinfo-wp","phpinfo() WP","6.1","Exeebit","https:\u002F\u002Fprofiles.wordpress.org\u002Fexeebit\u002F","\u003Cp>A simple wordpress plugin to look up information about server and PHP’s configuration and manage server configurations.\u003C\u002Fp>\n\u003Cp>This plugin gives a large amount of information about the current state of PHP. This includes information about PHP compilation options and extensions, the PHP version, server information and environment (if compiled as a module), the PHP environment, OS version information, paths, master and local values of configuration options, HTTP headers. For making information concise, PHP license has been removed.\u003C\u002Fp>\n\u003Cp>You can see what extensions are enabled in your server through this plugin. Except these, you can edit or set Server configuration values like max_file_uploads, upload_max_filesize, etc. You can edit or set any directive values through this plugin easily.\u003C\u002Fp>\n\u003Ch3>Updates\u003C\u002Fh3>\n\u003Cp>Added an option to look up some basic information like root directory size, a number of activated and installed plugin, media directory size etc.\u003C\u002Fp>\n","A simple plugin to look up server info and manage server configuration of wordpress site",3000,43985,5,"2025-05-03T17:53:00.000Z","6.8.5","4.7","5.0",[77,78,4,79],"apache","htaccess","server-info","http:\u002F\u002Fexeebit.com\u002Fwordpress-plugins\u002Fphpinfo-wp","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fphpinfo-wp.zip",91,"2024-06-19 00:00:00",{"slug":85,"name":86,"version":87,"author":88,"author_profile":89,"description":90,"short_description":91,"active_installs":92,"downloaded":93,"rating":94,"num_ratings":95,"last_updated":96,"tested_up_to":73,"requires_at_least":97,"requires_php":98,"tags":99,"homepage":103,"download_link":104,"security_score":105,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"wp-safe-mode","WP Safe Mode","1.3","Marcus (aka @msykes)","https:\u002F\u002Fprofiles.wordpress.org\u002Fnetweblogic\u002F","\u003Cp>WP Safe Mode allows you to view your site temporarily with certain plugins disabled\u002Fenabled as well as switching to another theme.\u003C\u002Fp>\n\u003Cp>This is particularly useful if you are experiencing problems with a specific plugin or theme and need troubleshoot without it affecting the rest of your site visitors.\u003C\u002Fp>\n\u003Cp>Additionally, a loader file can be directly installed via FTP to help you access an inaccessible site due to PHP errors (e.g. blank screens or white screen of death) to help restore it from the admin panel.\u003C\u002Fp>\n\u003Ch4>Main Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Enter Safe Mode for just yourself whilst logged in.\u003C\u002Fli>\n\u003Cli>Enable Safe Mode for the whole site.\u003C\u002Fli>\n\u003Cli>Admin Bar shortcuts for enabling\u002Fdisabling Safe Mode.\u003C\u002Fli>\n\u003Cli>Restrict Safe Mode to certain IP addresses.\u003C\u002Fli>\n\u003Cli>Automatic installation (if file permissions allow).\u003C\u002Fli>\n\u003Cli>Fallback to a default WordPress theme or one of your choice in Safe Mode.\u003C\u002Fli>\n\u003Cli>Prevent or allow Must-Use plugins from loading in Safe-Mode.\u003C\u002Fli>\n\u003Cli>Handy loader file via FTP when your site is completely inaccessible.\u003C\u002Fli>\n\u003Cli>MultiSite Support\n\u003Cul>\n\u003Cli>Network-wide Safe Mode (for just you, or everyone)\u003C\u002Fli>\n\u003Cli>Restrict Network-wide Safe Mode to certain IP address\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>MultiSite Site-Specific Safe Modes\n\u003Cul>\n\u003Cli>Override Network-wide Safe Mode settings for an individual site\u003C\u002Fli>\n\u003Cli>Network Admins can deactivate Network-Active and Must-Use plugins.\u003C\u002Fli>\n\u003Cli>Allow individual site admins from enabling safe mode for their own site.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Data Privacy and GDPR Compliance\u003C\u002Fh4>\n\u003Cp>No personal data is used or stored by this plugin. For those entering user-only mode, a cookie is loaded to identify that user.\u003C\u002Fp>\n","Disable plugins or switch themes for just you or the whole site for debugging, troubleshooting or accessing and restoring a broken website.",2000,24440,86,8,"2025-04-23T09:57:00.000Z","4.6","5.2.6",[100,21,101,102,23],"debug","recovery","safe-mode","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-safe-mode\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-safe-mode.1.3.zip",92,{"slug":107,"name":108,"version":109,"author":110,"author_profile":111,"description":112,"short_description":113,"active_installs":114,"downloaded":115,"rating":11,"num_ratings":14,"last_updated":116,"tested_up_to":117,"requires_at_least":118,"requires_php":119,"tags":120,"homepage":124,"download_link":125,"security_score":11,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"atec-system-info","atec System Info","1.2.32","docjojo","https:\u002F\u002Fprofiles.wordpress.org\u002Fdocjojo\u002F","\u003Cp>This plugin provides detailed system information, such as operating system, server, memory, PHP and database details. It will also show PHPinfo, php.ini and PHP extensions.\u003C\u002Fp>\n\u003Ch3>Third-Party Services\u003C\u002Fh3>\n\u003Cp>Once, when activating the plugin, an integrity check is requested from our server – if you give your permission.\u003Cbr \u002F>\nSource: https:\u002F\u002Fatecplugins.com\u002F\u003Cbr \u002F>\nPrivacy policy: https:\u002F\u002Fatecplugins.com\u002Fprivacy-policy\u002F\u003C\u002Fp>\n\u003Cp>This plugin requests the server geo location (country, city) by sending the server IPinfo, a IP2GEO location service at to https:\u002F\u002Fipinfo.io\u002F.\u003Cbr \u002F>\nPrivacy policy: https:\u002F\u002Fipinfo.io\u002Fprivacy-policy\u003Cbr \u002F>\nTerms: https:\u002F\u002Fipinfo.io\u002Fterms-of-service\u003C\u002Fp>\n","atec System Info (Operating system, server, memory, PHP and database details)",300,11936,"2026-03-24T00:11:00.000Z","6.9.4","4.9","7.4",[121,122,123],"highly-detailed-system-information-system-health-status","memory-db-and-comprehensive-server-and-php-configuration-details","server-info-os","https:\u002F\u002Fatecplugins.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fatec-system-info.1.2.32.zip",{"slug":127,"name":128,"version":129,"author":130,"author_profile":131,"description":132,"short_description":133,"active_installs":134,"downloaded":135,"rating":11,"num_ratings":136,"last_updated":137,"tested_up_to":138,"requires_at_least":139,"requires_php":18,"tags":140,"homepage":142,"download_link":143,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"php-server-info","PHP Server Info","1.0","ray.viljoen","https:\u002F\u002Fprofiles.wordpress.org\u002Frayviljoen\u002F","\u003Cp>Adds custom menu under WordPress Admin to view all PHP info as produced with the standard phpinfo function, but without breaking the page strucure.\u003C\u002Fp>\n\u003Cp>Developed by \u003Ca href=\"http:\u002F\u002Fwww.catn.com\" rel=\"nofollow ugc\">PHP Hosting Experts CatN\u003C\u002Fa>\u003C\u002Fp>\n","A very simple plugin for displaying full PHP Info from within the WordPress Admin menu.",200,11079,1,"2011-07-13T15:49:00.000Z","3.2.1","3.1",[57,141,4,22,79],"php-info","http:\u002F\u002Fcatn.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fphp-server-info.zip",{"attackSurface":145,"codeSignals":162,"taintFlows":197,"riskAssessment":224,"analyzedAt":237},{"hooks":146,"ajaxHandlers":158,"restRoutes":159,"shortcodes":160,"cronEvents":161,"entryPointCount":27,"unprotectedCount":27},[147,154],{"type":148,"name":149,"callback":150,"priority":151,"file":152,"line":153},"action","init","dprx_phpinfo_init_locale",98,"phpinfo.php",11,{"type":148,"name":155,"callback":156,"file":152,"line":157},"admin_menu","dprx_phpinfo_add_admin_pages",18,[],[],[],[],{"dangerousFunctions":163,"sqlUsage":164,"outputEscaping":166,"fileOperations":27,"externalRequests":27,"nonceChecks":27,"capabilityChecks":27,"bundledLibraries":196},[],{"prepared":27,"raw":27,"locations":165},[],{"escaped":27,"rawEcho":167,"locations":168},14,[169,172,174,176,178,179,181,182,184,186,188,190,192,194],{"file":152,"line":170,"context":171},75,"raw output",{"file":152,"line":173,"context":171},78,{"file":152,"line":175,"context":171},81,{"file":152,"line":177,"context":171},94,{"file":152,"line":177,"context":171},{"file":152,"line":180,"context":171},99,{"file":152,"line":11,"context":171},{"file":152,"line":183,"context":171},101,{"file":152,"line":185,"context":171},102,{"file":152,"line":187,"context":171},103,{"file":152,"line":189,"context":171},104,{"file":152,"line":191,"context":171},126,{"file":152,"line":193,"context":171},127,{"file":152,"line":195,"context":171},128,[],[198,215],{"entryPoint":199,"graph":200,"unsanitizedCount":136,"severity":214},"dprx_phpinfo_manage_page (phpinfo.php:24)",{"nodes":201,"edges":211},[202,206],{"id":203,"type":204,"label":205,"file":152,"line":195},"n0","source","$_SERVER['HTTP_USER_AGENT']",{"id":207,"type":208,"label":209,"file":152,"line":195,"wp_function":210},"n1","sink","echo() [XSS]","echo",[212],{"from":203,"to":207,"sanitized":213},false,"medium",{"entryPoint":216,"graph":217,"unsanitizedCount":136,"severity":223},"\u003Cphpinfo> (phpinfo.php:0)",{"nodes":218,"edges":221},[219,220],{"id":203,"type":204,"label":205,"file":152,"line":195},{"id":207,"type":208,"label":209,"file":152,"line":195,"wp_function":210},[222],{"from":203,"to":207,"sanitized":213},"low",{"summary":225,"deductions":226},"The \"phpinfo\" v1.1 plugin presents a concerning security posture despite a clean vulnerability history.  While the static analysis shows a minimal attack surface and no dangerous functions or direct SQL injection risks, the complete lack of output escaping for all 14 outputs is a significant vulnerability. This means any dynamic data displayed by the plugin is susceptible to cross-site scripting (XSS) attacks. Additionally, the taint analysis revealing two flows with unsanitized paths, although not classified as critical or high severity, suggests potential for unexpected behavior or information leakage if the plugin interacts with user-supplied data in ways not immediately obvious. The absence of vulnerability history is a positive indicator, but it does not mitigate the immediate risks identified in the code analysis.\n\nOverall, the plugin's strengths lie in its limited attack surface and lack of known exploitable vulnerabilities. However, the critical flaw of unescaped output creates a significant XSS risk that could be leveraged by an attacker. The presence of unsanitized paths, while not high severity, warrants further investigation. The plugin is best avoided or heavily audited and modified before deployment in a production environment, prioritizing the implementation of proper output escaping mechanisms.",[227,230,233,235],{"reason":228,"points":229},"100% of outputs are unescaped",20,{"reason":231,"points":232},"Taint analysis shows unsanitized paths",10,{"reason":234,"points":71},"No nonce checks",{"reason":236,"points":71},"No capability checks","2026-03-16T20:56:32.033Z",{"wat":239,"direct":244},{"assetPaths":240,"generatorPatterns":241,"scriptPaths":242,"versionParams":243},[],[],[],[],{"cssClasses":245,"htmlComments":247,"htmlAttributes":248,"restEndpoints":250,"jsGlobals":251,"shortcodeOutput":252},[246],"wrap",[],[249],"id=\"bkpwp_manage_backups_table\"",[],[],[253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276],"\u003Ctextarea style=\"width:100%; height: 260px;\">","\u003Ch2>\u003C?php _e('Phpinfo') ?>\u003C\u002Fh2>","\u003Cth scope=\"col\">\u003C?php _e(\"Configuration\",\"dprx_phpinfo\"); ?>\u003C\u002Fth>","\u003Cth scope=\"col\">\u003C?php _e(\"php_ini\",\"dprx_phpinfo\"); ?>\u003C\u002Fth>","\u003Cth scope=\"col\">\u003C?php _e(\"value\",\"dprx_phpinfo\"); ?>\u003C\u002Fth>","\u003Cp>\u003Cb>\u003C?php _e(\"Copy the contents of the field below for posting within support forums\",\"dprx_phpinfo\"); ?>\u003C\u002Fb>\u003C\u002Fp>","\u003Cp>\n\t\t\u003C?php _e(\"Running into Troubles? Features to suggest?\",\"dprx_phpinfo\"); ?>","\u003Ca href=\"http:\u002F\u002Fwordpress.designpraxis.at\u002F\">","\u003C?php _e(\"Drop me a line\",\"dprx_phpinfo\"); ?> »","\u003Cdiv style=\"display: block; height:30px;\">","\u003Cdiv style=\"float:left; font-size: 16px; padding:5px 5px 5px 0;\">","\u003C?php _e(\"Do you like this Plugin?\",\"dprx_phpinfo\"); ?>","\u003C?php _e(\"Consider to\",\"dprx_phpinfo\"); ?>","\u003Cform action=\"https:\u002F\u002Fwww.paypal.com\u002Fcgi-bin\u002Fwebscr\" method=\"post\">","\u003Cinput type=\"hidden\" name=\"cmd\" value=\"_xclick\">","\u003Cinput type=\"hidden\" name=\"business\" value=\"rol@rm-r.at\">","\u003Cinput type=\"hidden\" name=\"no_shipping\" value=\"0\">","\u003Cinput type=\"hidden\" name=\"no_note\" value=\"1\">","\u003Cinput type=\"hidden\" name=\"currency_code\" value=\"EUR\">","\u003Cinput type=\"hidden\" name=\"tax\" value=\"0\">","\u003Cinput type=\"hidden\" name=\"lc\" value=\"AT\">","\u003Cinput type=\"hidden\" name=\"bn\" value=\"PP-DonationsBF\">","\u003Cinput type=\"image\" src=\"https:\u002F\u002Fwww.paypal.com\u002Fen_US\u002Fi\u002Fbtn\u002Fx-click-but21.gif\" border=\"0\" name=\"submit\" alt=\"Please donate via PayPal!\">","\u003Cimg alt=\"\" border=\"0\" src=\"https:\u002F\u002Fwww.paypal.com\u002Fen_US\u002Fi\u002Fscr\u002Fpixel.gif\" width=\"1\" height=\"1\">",{"error":278,"url":279,"statusCode":280,"statusMessage":281,"message":281},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fphpinfo\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":14,"versions":283},[284,290],{"version":6,"download_url":285,"svn_tag_url":286,"released_at":28,"has_diff":213,"diff_files_changed":287,"diff_lines":28,"trac_diff_url":288,"vulnerabilities":289,"is_current":278},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fphpinfo.1.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fphpinfo\u002Ftags\u002F1.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fphpinfo%2Ftags%2F1.0&new_path=%2Fphpinfo%2Ftags%2F1.1",[],{"version":129,"download_url":291,"svn_tag_url":292,"released_at":28,"has_diff":213,"diff_files_changed":293,"diff_lines":28,"trac_diff_url":28,"vulnerabilities":294,"is_current":213},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fphpinfo.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fphpinfo\u002Ftags\u002F1.0\u002F",[],[]]