[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjn8zrJu4tsiUGsr_pszIQ9D5O2JdrhpTrLJAF_Ww3og":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":36,"analysis":121,"fingerprints":210},"pingcrawl","Pingcrawl","3.1","mikegogulski","https:\u002F\u002Fprofiles.wordpress.org\u002Fmikegogulski\u002F","\u003Cp>Pingcrawl aims to replicate WordPress.com’s “Possibly related posts” capability. It queries Google Blog Search for related blog posts (based on tags, or the post title if there are no tags), tries to verify that they are pingback\u002Ftrackback compatible sites and, if so, adds links to such posts to the end of each blog post where it is invoked.\u003C\u002Fp>\n\u003Cp>Scope-limiting configuration options are included to enable Pingcrawl to fit any WordPress installation’s memory\u002Fexecution time budget.\u003C\u002Fp>\n\u003Ch3>Licence\u003C\u002Fh3>\n\u003Cp>Pingcrawl is free software released under the GPL. If you find it valuable, you’re invited to make a \u003Ca href=\"http:\u002F\u002Fwww.nostate.com\u002Fsupport-nostatecom\u002F\" title=\"Donate with PayPal, MoneyBookers, etc.\" rel=\"nofollow ugc\">small donation\u003C\u002Fa> toward its ongoing support and maintenance.\u003C\u002Fp>\n","Pingcrawl adds a \"Possibly related posts\" capability by querying Google Blog Search for post tags and pinging the results.",10,9449,0,"2009-10-04T04:53:00.000Z","2.8.4","2.8","",[19,20,21,22,23],"google","pingback","seo","tags","trackback","http:\u002F\u002Fwww.nostate.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpingcrawl.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":26,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},3,90,30,84,"2026-04-04T11:16:53.680Z",[37,57,74,90,106],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":48,"last_updated":49,"tested_up_to":50,"requires_at_least":51,"requires_php":17,"tags":52,"homepage":55,"download_link":56,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"news-keywords","News Keywords","1.0.1","John Sear","https:\u002F\u002Fprofiles.wordpress.org\u002Fjohn_sear\u002F","\u003Cp>Adds the Google-specific metatag “news_keywords” with Post Tags into wp_head() to improve your chances of appearing in Google search results for relevant queries. See also http:\u002F\u002Fsupport.google.com\u002Fnews\u002Fpublisher\u002Fbin\u002Fanswer.py?answer=68297 🙂\u003C\u002Fp>\n","Adds easily the Google-specific metatag \"news_keywords\" with Post Tags into wp_head().",40,3886,100,1,"2015-11-19T11:14:00.000Z","4.3.34","3.4",[19,53,54,21,22],"meta","post","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fnews-keywords\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnews-keywords.zip",{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":11,"downloaded":65,"rating":13,"num_ratings":13,"last_updated":66,"tested_up_to":67,"requires_at_least":68,"requires_php":17,"tags":69,"homepage":17,"download_link":73,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"add-metadata-free","Add Metadata","1.1.0","Syed Ebraiz Ali Chishti","https:\u002F\u002Fprofiles.wordpress.org\u002Febraiz\u002F","\u003Cp>This is a free plugin for adding meta tag on each post of your website, this meta tags include title, description, image, author, post URL and site name of your published post which later helps while sharing post on social media and for search engines to recognize the post. If you have no featured image on your post, it will also ask for a default image for metadata, which can be set through settings page. Meta tags are invisible from the front-end, but can be viewed from the source code. Meta tags has a great importance in SEO (Search Engine Optimization) and Google Page Rank.\u003C\u002Fp>\n\u003Cp>Major features of Add Metadata include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Automatically get post title, description, image, author, url, site name from the post and uses them as a meta tags.\u003C\u002Fli>\n\u003Cli>Allow us to set default image for metadata which can use if no featured image found on the post.\u003C\u002Fli>\n\u003Cli>Allow us to customize the css and js file.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>PS: You don’t need any API key or Serial key to use it, because Add meta data are free to use.\u003C\u002Fp>\n","This Plugin adds meta tags on each post of your website and allow us to set default image for metadata, if no featured image found on your post.",2083,"2017-03-02T11:08:00.000Z","4.7.32","3.0",[70,71,72,21],"google-page-ranks","metadata","metatags","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadd-metadata-free.1.1.0.zip",{"slug":75,"name":76,"version":77,"author":78,"author_profile":79,"description":80,"short_description":81,"active_installs":11,"downloaded":82,"rating":13,"num_ratings":13,"last_updated":83,"tested_up_to":84,"requires_at_least":85,"requires_php":17,"tags":86,"homepage":88,"download_link":89,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"external-related-posts","External Related Posts","1.2.1","Gabriel Koen","https:\u002F\u002Fprofiles.wordpress.org\u002Fmintindeed\u002F","\u003Cp>** This plugin now works! ** It broke shortly after I originally uploaded it last year.  People are still downloading it, so I decided to make it work.  I revamped it and made it totally compatible with the latest version of WordPress.\u003C\u002Fp>\n\u003Cp>External Related Posts takes the category, tags or custom taxonomy from your post (or custom post type) and searches Google Blog Search for related posts.  External Related Posts then adds a link to that blog to your post and pings them, letting them know you made a relevant post on their subject.\u003C\u002Fp>\n\u003Cp>Controls exist for how many blogs to search for, whether to only post links to blogs that accept pingbacks, how many pingbacks to perform, and a randomizer for how often External Related Posts activates (e.g., every post, 50% of your posts, 25% of your posts).\u003C\u002Fp>\n\u003Cp>Github: https:\u002F\u002Fgithub.com\u002Fmintindeed\u002Fexternal-related-posts\u003C\u002Fp>\n\u003Cp>WordPress.org: https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fexternal-related-posts\u002F\u003C\u002Fp>\n\u003Cp>Image by \u003Ca href=\"http:\u002F\u002Fwww.flickr.com\u002Fphotos\u002Ftobanblack\u002F3773116901\u002F\" rel=\"nofollow ugc\">Toban Black\u003C\u002Fa>; some rights reserved.  See link for details.\u003C\u002Fp>\n\u003Ch3>Licence\u003C\u002Fh3>\n\u003Cp>External Related Posts is released under GPL v2.\u003C\u002Fp>\n","Grabs related links from Google Blog Search, inserts a link to them into your post and gives them a pingback.",9648,"2012-03-14T16:55:00.000Z","3.2.1","3.2",[87,20,54,21,23],"automated-links","http:\u002F\u002Fgabrielkoen.com\u002Fwordpress-plugins\u002Fexternal-related-posts\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fexternal-related-posts.1.2.1.zip",{"slug":91,"name":92,"version":93,"author":94,"author_profile":95,"description":96,"short_description":97,"active_installs":11,"downloaded":98,"rating":13,"num_ratings":13,"last_updated":99,"tested_up_to":100,"requires_at_least":17,"requires_php":17,"tags":101,"homepage":104,"download_link":105,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"improved-meta-description-snippets","Improved Meta Description Snippets","0.1","microkid","https:\u002F\u002Fprofiles.wordpress.org\u002Fmicrokid\u002F","\u003Cp>This generates meta descriptions for your posts automatically, using the format explained on the Official Google Webmaster Central blog in \u003Ca href=\"http:\u002F\u002Fgooglewebmastercentral.blogspot.com\u002F2007\u002F09\u002Fimprove-snippets-with-meta-description.html\" title=\"Improve Snippets With Meta Descriptions\" rel=\"nofollow ugc\">this article\u003C\u002Fa>. It uses author, post date, categories, number of comments and, when available, tags.\u003C\u002Fp>\n\u003Ch3>Compatibility\u003C\u002Fh3>\n\u003Cp>Although this plugin is still in BETA it should work with these other plugins:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Ultimate Tag Warrior – If you are using WP 2.3+ with native tag support my plugin will use those tags, if you have a lower version and UTW installed it will use those.\u003C\u002Fli>\n\u003Cli>All in One SEO Pack – Make sure you switch of the “Autogenerate descriptions” option for this plugin or you will have two meta descriptions in your page, which can’t be good!\u003C\u002Fli>\n\u003Cli>TDO Mini Forms – My plugin will grab the author of the article when it’s been submitted through this plugin.\u003C\u002Fli>\n\u003C\u002Ful>\n","This generates meta descriptions as advised by the Official Google Webmaster Central blog.",4998,"2007-12-16T21:56:00.000Z","2.2.3",[19,102,103,21],"meta-description","meta-tags","http:\u002F\u002Fwww.microkid.net\u002Fwordpress-plugins\u002Fimproved-meta-description-snippets\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fimproved-meta-description-snippets.zip",{"slug":107,"name":108,"version":93,"author":109,"author_profile":110,"description":111,"short_description":112,"active_installs":11,"downloaded":113,"rating":13,"num_ratings":13,"last_updated":114,"tested_up_to":67,"requires_at_least":115,"requires_php":17,"tags":116,"homepage":119,"download_link":120,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"tags-als-news-keywords","Tags als news_keywords","Vladimir Simović","https:\u002F\u002Fprofiles.wordpress.org\u002Fperun\u002F","\u003Cp>\u003Cstrong>English:\u003C\u002Fstrong> include the WordPress Tags as \u003Ccode>\u003Cmeta name=\"news_keywords\" content=\"...\" \u002F>\u003C\u002Fcode> in the head of the page.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Deutsch:\u003C\u002Fstrong> Die Tags aus WordPress werden im \u003Ccode>\u003Chead>\u003C\u002Fcode> als \u003Ccode>\u003Cmeta name=\"news_keywords\" content=\"...\" \u002F>\u003C\u002Fcode> eingefügt. Das ist wichtig für Websites, die bei Google News gelistet sind.\u003C\u002Fp>\n","English: include the WordPress Tags as `` in the head of the page.",1921,"2016-12-12T02:43:00.000Z","3.3",[19,117,118,21,22],"keywords","news_keywords","http:\u002F\u002Fwww.perun.net\u002F2012\u002F10\u002F14\u002Fgoogle-news-wordpress-tags-als-news_keywords\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftags-als-news-keywords.zip",{"attackSurface":122,"codeSignals":151,"taintFlows":191,"riskAssessment":192,"analyzedAt":209},{"hooks":123,"ajaxHandlers":147,"restRoutes":148,"shortcodes":149,"cronEvents":150,"entryPointCount":13,"unprotectedCount":13},[124,130,134,138,142],{"type":125,"name":126,"callback":127,"priority":47,"file":128,"line":129},"action","publish_post","init","pingcrawl.php",38,{"type":125,"name":131,"callback":132,"file":128,"line":133},"plugins_loaded","anonymous",158,{"type":125,"name":135,"callback":136,"file":128,"line":137},"admin_menu","pingcrawl_menu",163,{"type":125,"name":139,"callback":140,"file":128,"line":141},"admin_init","register_pingcrawl_settings",164,{"type":143,"name":144,"callback":145,"priority":11,"file":128,"line":146},"filter","plugin_row_meta","register_plugin_links",165,[],[],[],[],{"dangerousFunctions":152,"sqlUsage":156,"outputEscaping":158,"fileOperations":13,"externalRequests":48,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":190},[153],{"fn":154,"file":128,"line":133,"context":155},"create_function","add_action( 'plugins_loaded', create_function( '', 'global $pc; $pc = new Pingcrawl();' ) );",{"prepared":13,"raw":13,"locations":157},[],{"escaped":13,"rawEcho":159,"locations":160},14,[161,164,166,168,170,172,174,176,178,180,182,184,186,188],{"file":128,"line":162,"context":163},192,"raw output",{"file":128,"line":165,"context":163},193,{"file":128,"line":167,"context":163},212,{"file":128,"line":169,"context":163},213,{"file":128,"line":171,"context":163},214,{"file":128,"line":173,"context":163},215,{"file":128,"line":175,"context":163},216,{"file":128,"line":177,"context":163},217,{"file":128,"line":179,"context":163},218,{"file":128,"line":181,"context":163},219,{"file":128,"line":183,"context":163},269,{"file":128,"line":185,"context":163},270,{"file":128,"line":187,"context":163},271,{"file":128,"line":189,"context":163},272,[],[],{"summary":193,"deductions":194},"The pingcrawl plugin v3.1 exhibits a mixed security posture. On the positive side, there are no known vulnerabilities (CVEs) associated with this plugin, and its SQL queries are all properly prepared, indicating good database interaction practices. The absence of a significant attack surface in terms of AJAX handlers, REST API routes, shortcodes, and cron events is also a strength, as it limits potential entry points for attackers.  Furthermore, the taint analysis shows no identified flows with unsanitized data, which is a very positive sign.\n\nHowever, several significant concerns emerge from the static analysis. The presence of the `create_function` function is a critical red flag, as it can be a source of arbitrary code execution vulnerabilities if not handled with extreme care and sanitization. The fact that 100% of output is not properly escaped is another major vulnerability. This means that any dynamic data displayed by the plugin is susceptible to cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts into user browsers. The plugin also makes external HTTP requests, and without further analysis, the security of these requests and the target endpoints is unknown.  The complete lack of nonce checks and capability checks on any identified entry points, combined with the fact that the attack surface is technically zero (meaning it's hard to assess these checks directly), suggests a potential oversight in securing any future or hidden entry points.\n\nGiven the absence of historical vulnerabilities and the clean taint analysis, the plugin doesn't have a pattern of past security failures. However, the identified code signals point to immediate and serious risks. The use of `create_function` and the widespread lack of output escaping are critical weaknesses that expose the plugin to severe attacks. While the limited attack surface is good, it does not mitigate the inherent dangers within the code itself. Therefore, while the plugin has some good practices, the immediate risks associated with unescaped output and the dangerous `create_function` necessitate urgent attention.",[195,198,201,204,206],{"reason":196,"points":197},"100% of output not properly escaped",16,{"reason":199,"points":200},"Dangerous function: create_function used",15,{"reason":202,"points":203},"No nonce checks",7,{"reason":205,"points":203},"No capability checks",{"reason":207,"points":208},"External HTTP requests without context",5,"2026-03-17T00:41:22.558Z",{"wat":211,"direct":224},{"assetPaths":212,"generatorPatterns":221,"scriptPaths":222,"versionParams":223},[213,214,215,216,217,218,219,220],"\u002Fwp-content\u002Fplugins\u002Fpingcrawl\u002Fimg\u002Ficon-paypal.gif","\u002Fwp-content\u002Fplugins\u002Fpingcrawl\u002Fimg\u002Ficon-amazon.gif","\u002Fwp-content\u002Fplugins\u002Fpingcrawl\u002Fimg\u002Ficon-revmoney.gif","\u002Fwp-content\u002Fplugins\u002Fpingcrawl\u002Fimg\u002Ficon-pecunix.gif","\u002Fwp-content\u002Fplugins\u002Fpingcrawl\u002Fimg\u002Ficon-moneybookers.gif","\u002Fwp-content\u002Fplugins\u002Fpingcrawl\u002Fimg\u002Ficon-nostate.gif","\u002Fwp-content\u002Fplugins\u002Fpingcrawl\u002Fimg\u002Ficon-wordpress.gif","\u002Fwp-content\u002Fplugins\u002Fpingcrawl\u002Fimg\u002Ficon-trac.gif",[],[],[],{"cssClasses":225,"htmlComments":236,"htmlAttributes":237,"restEndpoints":238,"jsGlobals":239,"shortcodeOutput":240},[226,227,228,229,230,231,232,233,234,235],"pc-padded","pc_giftPayPal","pc_giftAmazon","pc_giftRevmoney","pc_giftPecunix","pc_giftMoneybookers","pc_pluginHome","pc_pluginSupport","pc_pluginBugs","pc_button",[],[],[],[],[241],"\u003Ch4>Possibly related posts: (automatically generated)\u003C\u002Fh4>"]