[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8ntlXRyl0o18KSJopMYFDES-9p_oBkhKmDQHGszjDwM":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":38,"analysis":132,"fingerprints":202},"poplogin","PopLogin","1.0.0","tradesouthwest","https:\u002F\u002Fprofiles.wordpress.org\u002Ftradesouthwestgmailcom\u002F","\u003Cp>Create a basic yet stylable pop-up modal or page for users to login with that replaces the standard white screen WP Login page.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Add company logo or personal image to login page\u003C\u002Fli>\n\u003Cli>Choose between a login page or a popup box that displays login page.\u003C\u002Fli>\n\u003Cli>Personal login page give your site that personal touch\u003C\u002Fli>\n\u003Cli>Choose which menu to add login popup link on to.\u003C\u002Fli>\n\u003Cli>Choose what font the title will use.\u003C\u002Fli>\n\u003Cli>Create and change at any time, a welcome message or title.\u003C\u002Fli>\n\u003Cli>Shortcode included for creating login page.\u003C\u002Fli>\n\u003C\u002Ful>\n","Stylish Pop-up login for login and register using wp-login core assets.",10,2084,0,"2019-05-04T23:31:00.000Z","5.1.22","4.2","",[19,20,21,22,23],"login","login-popup","pop-up","popup","register","http:\u002F\u002Fthemes.tradesouthwest.com\u002Fplugins\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpoplogin.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":34,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},"tradesouthwestgmailcom",17,2400,92,30,88,"2026-04-04T06:05:21.668Z",[39,56,79,99,116],{"slug":40,"name":41,"version":6,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":11,"downloaded":46,"rating":13,"num_ratings":13,"last_updated":47,"tested_up_to":48,"requires_at_least":49,"requires_php":50,"tags":51,"homepage":54,"download_link":55,"security_score":34,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"mx-custom-login-popup","Mx Custom Login Popup","王超","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpdiary\u002F","\u003Cp>This plugin provides login, registration, and password reset pop-ups with customizable designs and security features.\u003C\u002Fp>\n\u003Ch3>Key Features:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Simply add the \u003Ccode>onclick\u003C\u002Fcode> event for the login, register, and password reset pop-ups to any link or button you choose to use them.  \u003C\u002Fli>\n\u003Cli>The plugin also includes custom page forms, allowing you to replace the default WordPress login page with custom login, registration, and password reset pages.  \u003C\u002Fli>\n\u003Cli>Customize the theme colors, logo, enable CAPTCHA, email verification, password confirmation, and “remember me” functionality.  \u003C\u002Fli>\n\u003Cli>Supports graphic CAPTCHA and email verification for login, registration, and password reset forms.  \u003C\u002Fli>\n\u003Cli>Available in both Chinese and English languages.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Ch3>Form Shortcodes\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Login Form Shortcode: \u003Ccode>[mxclpopup_login redirect=\"\"]\u003C\u002Fcode>  \u003C\u002Fli>\n\u003Cli>Register Form Shortcode: \u003Ccode>[mxclpopup_register redirect=\"\"]\u003C\u002Fcode>  \u003C\u002Fli>\n\u003Cli>Password Reset Form Shortcode: \u003Ccode>[mxclpopup_reset redirect=\"\"]\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Popup Onclick Functions\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Login Form Function: \u003Ccode>onclick=\"window.mxclpopup_show_login_popup();\"\u003C\u002Fcode>  \u003C\u002Fli>\n\u003Cli>Register Form Function: \u003Ccode>onclick=\"window.mxclpopup_show_register_popup();\"\u003C\u002Fcode>  \u003C\u002Fli>\n\u003Cli>Password Reset Form Function: \u003Ccode>onclick=\"window.mxclpopup_show_reset_popup();\"\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support, please visit: https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fmx-custom-login-popup\u002F\u003Cbr \u002F>\nOr email: support@wp-diary.com\u003C\u002Fp>\n","Custom login, registration, and password reset pop-ups for WordPress, with a custom default login page.",478,"2025-03-11T08:52:00.000Z","6.6.5","5.8","7.4",[19,20,52,23,53],"password-reset","register-popup","https:\u002F\u002Fwww.wp-diary.com\u002Fwordpress-custom-login-pop-up-plug-mcl.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmx-custom-login-popup.zip",{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":64,"downloaded":65,"rating":66,"num_ratings":67,"last_updated":68,"tested_up_to":69,"requires_at_least":70,"requires_php":17,"tags":71,"homepage":74,"download_link":75,"security_score":76,"vuln_count":77,"unpatched_count":13,"last_vuln_date":78,"fetched_at":28},"easy-login-woocommerce","Login & Register Customizer – Popup | Slider | Inline | WooCommerce","3.1.2","xootix","https:\u002F\u002Fprofiles.wordpress.org\u002Fxootix\u002F","\u003Cp>\u003Cstrong>🚀 \u003Ca href=\"http:\u002F\u002Fdemo.xootix.com\u002Feasy-login-for-woocommerce\u002F\" rel=\"nofollow ugc\">Live Demo »\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Login & Register Customizer is a lightweight and powerful plugin that replaces the default WordPress login and registration experience with modern, fully customizable popup, slider, or inline forms.\u003C\u002Fp>\n\u003Cp>Whether you’re running a simple blog or a WooCommerce store, this plugin helps you create a seamless login\u002Fsignup experience — with no page reloads, field manager support, and shortcodes.\u003C\u002Fp>\n\u003Ch3>💡 Features:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Fully AJAX-based (no page reloads)\u003C\u002Fli>\n\u003Cli>Login, Register, Lost Password & Reset Password forms\u003C\u002Fli>\n\u003Cli>Three layouts: Popup, Slider and Inline (with shortcodes)\u003C\u002Fli>\n\u003Cli>Field Manager – add or remove form fields\u003C\u002Fli>\n\u003Cli>Fully customizable appearance\u003C\u002Fli>\n\u003Cli>WooCommerce compatible\u003C\u002Fli>\n\u003Cli>WPML compatible\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Replace your outdated forms and deliver a modern, smooth login experience your users will love.\u003C\u002Fp>\n\u003Ch3>Add-ons:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fxootix.com\u002Fplugins\u002Feasy-login-for-woocommerce#sp-addons\" rel=\"nofollow ugc\">Custom Registration Fields\u003C\u002Fa> – Add extra fields to registration form , display them on user profile & myaccount page.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fxootix.com\u002Fplugins\u002Feasy-login-for-woocommerce#sp-addons\" rel=\"nofollow ugc\">Social Login\u003C\u002Fa> – A single click login & registration with Google, Facebook, Apple & X(Twitter).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fxootix.com\u002Fplugins\u002Feasy-login-for-woocommerce#sp-addons\" rel=\"nofollow ugc\">Two Factor Authentication (2FA) & One time Password (SMS) Login\u003C\u002Fa> – Allow users to login with OTP ( sent on their phone or email) removing the need to remember a password.\u003Cbr \u002F>\nEnable users to enhance their account security with two-factor authentication (2FA).\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fxootix.com\u002Fplugins\u002Feasy-login-for-woocommerce#sp-addons\" rel=\"nofollow ugc\">Recaptcha\u003C\u002Fa> – Protect your form from bots using recaptcha. Choose from google recaptcha(v2\u002Fv3), Cloudflare Turnstile or Friendly GDPR. + Password strength meter + Limit login attempts\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fxootix.com\u002Fplugins\u002Feasy-login-for-woocommerce#sp-addons\" rel=\"nofollow ugc\">Email Verification\u003C\u002Fa> – Sends verification email on registration & restricts login access until email is verified.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fxootix.com\u002Fplugins\u002Feasy-login-for-woocommerce#sp-addons\" rel=\"nofollow ugc\">Profile Builder\u003C\u002Fa> – Replace the old WooCommerce\u002FWordPress interface for updating fields with a new, modern design similar to the signup form. Use a shortcode to display and allow users to update their profile fields.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fxootix.com\u002Fplugins\u002Feasy-login-for-woocommerce#sp-addons\" rel=\"nofollow ugc\">Auto Complete Address\u003C\u002Fa> – Get the full and accurate address using Google Places Autocomplete.\u003Cbr \u002F>\nCollect billing and shipping addresses seamlessly in your registration form.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","Replace your old login\u002Fregistration form with an interactive popup & inline form design",40000,1110336,96,251,"2026-03-03T08:51:00.000Z","6.9.4","3.0.1",[19,22,23,72,73],"signup","woocommerce","http:\u002F\u002Fxootix.com\u002Feasy-login-for-woocommerce","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-login-woocommerce.3.1.2.zip",94,6,"2025-06-19 00:00:00",{"slug":80,"name":81,"version":82,"author":83,"author_profile":84,"description":85,"short_description":86,"active_installs":87,"downloaded":88,"rating":76,"num_ratings":89,"last_updated":90,"tested_up_to":91,"requires_at_least":92,"requires_php":93,"tags":94,"homepage":97,"download_link":98,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"stranoweb-ajax-login","StranoWeb Ajax Login","2.0.4","beeky2","https:\u002F\u002Fprofiles.wordpress.org\u002Fbeeky2\u002F","\u003Cp>Stranoweb Ajax Login replaces default WordPress login, register and lost password forms with a beautiful ajax modal popup and comes with a lot of amazing features.\u003Cbr \u002F>\nIt’s fully customizable and responsive, includes several social logins and allows you to disable new user registration and restrict wordpress admin dashboard to certain user roles.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Ajax login, register and lost password modal popup (same functions are working even on non-popup mode);\u003C\u002Fli>\n\u003Cli>Fully customizable login, register, lost password and logout popups and pages;\u003C\u002Fli>\n\u003Cli>Drag and Drop Registration Form builder (Premium version);\u003C\u002Fli>\n\u003Cli>User verification by administrator approval and email verification (Premium version);\u003C\u002Fli>\n\u003Cli>Different popup layouts with image and text over image option (2 on free version, 8 on Premium);\u003C\u002Fli>\n\u003Cli>Custom Logo on the forms (Premium version);\u003C\u002Fli>\n\u003Cli>Custom css setting;\u003C\u002Fli>\n\u003Cli>Social logins (Facebook, Twitter, Google, Linkedin, Amazon) with several icon styles and position displacement (Only twitter on free version);\u003C\u002Fli>\n\u003Cli>Logged in Menu item: Once logged in the plugin adds a menu item to the selected menu with optional user thumbnail and additional submenu Thumbnail style, menu item text and submenu are fully customizable;\u003C\u002Fli>\n\u003Cli>Customizable redirects and permalinks;\u003C\u002Fli>\n\u003Cli>Option to redirect not logged-in users to login page (Premium version);\u003C\u002Fli>\n\u003Cli>WordPress admin dashboard access restriction to users with specific roles (Premium version);\u003C\u002Fli>\n\u003Cli>Password length, you can choose the minimum length required;\u003C\u002Fli>\n\u003Cli>Optional reCAPTCHA v2 and reCAPTCHA v3 for new user registration form;\u003C\u002Fli>\n\u003Cli>Shortcode Support;\u003C\u002Fli>\n\u003Cli>Emails Customizer;\u003C\u002Fli>\n\u003Cli>Shortcodes to add StranoWeb Ajax Login forms to any page or post;\u003C\u002Fli>\n\u003Cli>Hooks to help developers to integrate additional functions;\u003C\u002Fli>\n\u003C\u002Ful>\n","Stranoweb Ajax Login replaces default Wordpress login, register and lost password forms with a beautiful ajax modal popup and comes with a lot of amaz &hellip;",100,13430,25,"2023-12-19T09:53:00.000Z","6.4.8","4.4","5.2.4",[95,19,96,22,23],"ajax","logout","https:\u002F\u002Fwww.ajaxlogin.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstranoweb-ajax-login.zip",{"slug":100,"name":101,"version":102,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":13,"downloaded":107,"rating":87,"num_ratings":108,"last_updated":17,"tested_up_to":109,"requires_at_least":110,"requires_php":111,"tags":112,"homepage":17,"download_link":114,"security_score":87,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":115},"loginova","LogiNova","1.8","PlaceTheCode","https:\u002F\u002Fprofiles.wordpress.org\u002Fmultfilm\u002F","\u003Cp>LogiNova transforms the standard WordPress login and registration experience by providing stylish popup windows. Users can login, register, and recover passwords without leaving the page they’re on. The plugin is also fully adaptive for WooCommerce, ensuring smooth integration with product pages, carts, and checkout flows.\u003Cbr \u002F>\nWhy LogiNova is convenient: Even users who have no programming knowledge can easily configure LogiNova thanks to its wide range of styling and customization options. The plugin allows complete control over the appearance of the login and registration popups through an intuitive admin panel. From colors, fonts, and sizes to custom messages, everything can be adjusted visually, in real time.\u003C\u002Fp>\n\u003Cp>LogiNova also gives flexibility for how login and registration are handled – you can allow users to sign up with or without an email address, depending on your site’s requirements.\u003C\u002Fp>\n\u003Cp>Key Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>AJAX-powered login and registration – no page reloads\u003C\u002Fli>\n\u003Cli>Wide range of login and registration options (with or without Name)\u003C\u002Fli>\n\u003Cli>Customizable popup design with extensive styling options\u003C\u002Fli>\n\u003Cli>Redirect users to specific pages after login\u002Flogout\u003C\u002Fli>\n\u003Cli>Custom error messages\u003C\u002Fli>\n\u003Cli>Terms and conditions consent option\u003C\u002Fli>\n\u003Cli>Password recovery functionality\u003C\u002Fli>\n\u003Cli>Responsive design works on all devices\u003Cbr \u002F>\n*Beginner-friendly: no coding knowledge required\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Privacy Policy\u003C\u002Fh3>\n\u003Cp>LogiNova uses cookies to keep users logged in and may store IP addresses for security purposes. It does not share any data with external services.\u003C\u002Fp>\n","LogiNova adds elegant ajax popup login and registration functionality to your WordPress site.",234,1,"6.8.5","5.0","7.0",[95,113,19,22,23],"custom-login","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Floginova.1.8.zip","2026-03-15T10:48:56.248Z",{"slug":117,"name":118,"version":119,"author":120,"author_profile":121,"description":122,"short_description":123,"active_installs":13,"downloaded":124,"rating":13,"num_ratings":13,"last_updated":125,"tested_up_to":69,"requires_at_least":110,"requires_php":111,"tags":126,"homepage":130,"download_link":131,"security_score":87,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"ts-login","TS Login – Frontend Login & Registration","1.0.5","Modulout","https:\u002F\u002Fprofiles.wordpress.org\u002Fmodulout\u002F","\u003Cp>With the TS Login plugin, your users can log in, register, and reset their passwords directly from the frontend, eliminating the need to access the WordPress wp-admin area. This provides a cleaner user experience and improves security for membership and subscription-based websites.\u003C\u002Fp>\n\u003Cp>The plugin offers a lightweight popup-based login and registration system. You can trigger login or registration from any element on your website by applying predefined CSS classes — no shortcodes required.\u003C\u002Fp>\n\u003Cp>TS Login works seamlessly with the latest WordPress versions and includes admin-side styling options, allowing you to adjust colors and layout for a consistent look and feel across your website.\u003C\u002Fp>\n\u003Ch4>Performance & Stability (Version 1.0.5)\u003C\u002Fh4>\n\u003Cp>Starting from version 1.0.5, TS Login has been rebuilt with a strong focus on performance and compatibility:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Complete frontend UI rewrite\u003C\u002Fli>\n\u003Cli>Removed Bootstrap and Font Awesome dependencies\u003C\u002Fli>\n\u003Cli>No conflicts with themes or plugins using different framework versions\u003C\u002Fli>\n\u003Cli>Login and registration popup loaded via AJAX\u003C\u002Fli>\n\u003Cli>No unnecessary HTML output in the DOM\u003C\u002Fli>\n\u003Cli>Faster page load and improved stability\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Additionally, TS Login integrates seamlessly with Tipster Script — a professional WordPress solution for managing tipster and subscription platforms. It is also the official login plugin used by the OwnTheGame service.\u003C\u002Fp>\n\u003Cp>Learn more:\u003Cbr \u002F>\nTipster Script: https:\u002F\u002Ftipsterscript.com\u003Cbr \u002F>\nOwnTheGame: https:\u002F\u002Fownthegame.app\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Frontend login, registration, and password reset in popup form\u003C\u002Fli>\n\u003Cli>Lightweight, framework-free implementation\u003C\u002Fli>\n\u003Cli>AJAX-loaded popup for optimal performance\u003C\u002Fli>\n\u003Cli>Fully responsive design\u003C\u002Fli>\n\u003Cli>Customizable colors and layout via wp-admin\u003C\u002Fli>\n\u003Cli>Multi-language ready\u003C\u002Fli>\n\u003Cli>Works with any modern WordPress theme\u003C\u002Fli>\n\u003Cli>Official integration with Tipster Script and OwnTheGame\u003C\u002Fli>\n\u003C\u002Ful>\n","Frontend login, registration, and password recovery without using wp-admin.",1387,"2025-12-25T18:26:00.000Z",[127,128,19,129,23],"ajax-login","frontend-login","popup-login","https:\u002F\u002Fgithub.com\u002Fmodulout\u002Fts_login","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fts-login.zip",{"attackSurface":133,"codeSignals":171,"taintFlows":190,"riskAssessment":191,"analyzedAt":201},{"hooks":134,"ajaxHandlers":164,"restRoutes":165,"shortcodes":166,"cronEvents":170,"entryPointCount":108,"unprotectedCount":13},[135,141,145,150,154,159],{"type":136,"name":137,"callback":138,"file":139,"line":140},"action","admin_menu","poplogin_add_options_page","admin\\poplogin-tswplugin-admin.php",12,{"type":136,"name":142,"callback":143,"file":139,"line":144},"admin_init","poplogin_register_settings",13,{"type":136,"name":146,"callback":147,"file":148,"line":149},"plugins_loaded","poplogin_load_plugin_textdomain","includes\\poplogin-tswplugin.php",24,{"type":136,"name":151,"callback":152,"file":148,"line":153},"wp_enqueue_scripts","poplogin_define_public_scripts",52,{"type":136,"name":155,"callback":156,"priority":11,"file":157,"line":158},"wp_footer","poplogin_login_form_render","public\\poplogin-tswplugin-public.php",37,{"type":160,"name":161,"callback":162,"priority":11,"file":157,"line":163},"filter","wp_nav_menu_items","poplogin_add_popup_link",38,[],[],[167],{"tag":168,"callback":156,"file":157,"line":169},"poplogin_form",126,[],{"dangerousFunctions":172,"sqlUsage":173,"outputEscaping":175,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":189},[],{"prepared":13,"raw":13,"locations":174},[],{"escaped":149,"rawEcho":176,"locations":177},5,[178,181,183,185,187],{"file":139,"line":179,"context":180},134,"raw output",{"file":139,"line":182,"context":180},155,{"file":139,"line":184,"context":180},175,{"file":139,"line":186,"context":180},272,{"file":157,"line":188,"context":180},105,[],[],{"summary":192,"deductions":193},"The 'poplogin' v1.0.0 plugin exhibits a generally strong security posture based on the provided static analysis. The absence of dangerous functions, raw SQL queries, file operations, and external HTTP requests is commendable.  The high percentage of properly escaped output further contributes to a positive security assessment, indicating that the developers have taken steps to prevent cross-site scripting vulnerabilities.\n\nHowever, there are notable areas for improvement. The complete lack of nonce checks and capability checks is a significant concern, especially given the presence of a shortcode which can serve as an entry point. While the static analysis reports zero unprotected entry points, the absence of these critical security mechanisms leaves the plugin vulnerable to potential CSRF attacks or unauthorized actions if the shortcode's functionality is not inherently protected through other means. The zero taint flows and zero known CVEs are positive indicators, suggesting no severe or publicly known vulnerabilities at this time. This, combined with the good practices in other areas, suggests a developer who is security-conscious but may have overlooked crucial authentication and authorization checks for their shortcode.\n\nIn conclusion, 'poplogin' v1.0.0 is a plugin with a solid foundation in secure coding practices, particularly concerning SQL injection and output escaping. The main weakness lies in the insufficient implementation of security checks for its shortcode. While the vulnerability history is clean, the lack of nonce and capability checks represents a potential avenue for exploitation that could lead to future vulnerabilities. Addressing these specific missing checks should be a priority to further harden the plugin.",[194,196,198],{"reason":195,"points":176},"Missing nonce checks",{"reason":197,"points":176},"Missing capability checks",{"reason":199,"points":200},"Unescaped output (some instances)",3,"2026-03-17T00:32:37.218Z",{"wat":203,"direct":208},{"assetPaths":204,"generatorPatterns":205,"scriptPaths":206,"versionParams":207},[],[],[],[],{"cssClasses":209,"htmlComments":210,"htmlAttributes":211,"restEndpoints":212,"jsGlobals":213,"shortcodeOutput":214},[],[],[],[],[],[]]