[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhpVRlYciLioeNpRxEzCo79s66mueHe6cpz3ScQ1_O7E":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":38,"analysis":145,"fingerprints":313},"post-ratings","Post Ratings","3.0","digitalnature","https:\u002F\u002Fprofiles.wordpress.org\u002Fdigitalnature\u002F","\u003Cp>\u003Ca href=\"http:\u002F\u002Fwww.dfactory.eu\u002Fplugins\u002Fpost-ratings\u002F\" rel=\"nofollow ugc\">Post Ratings\u003C\u002Fa> is a simple, developer-friendly, straightforward post rating plugin. Relies on post meta to store avg. rating \u002F vote count.\u003C\u002Fp>\n\u003Cp>For more information, check out plugin page at \u003Ca href=\"http:\u002F\u002Fwww.dfactory.eu\u002F\" rel=\"nofollow ugc\">dFactory\u003C\u002Fa> or plugin \u003Ca href=\"http:\u002F\u002Fwww.dfactory.eu\u002Fsupport\u002Fforum\u002Fpost-ratings\u002F\" rel=\"nofollow ugc\">support forum\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Features include:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Allow your site users to rate posts (of any kind)\u003C\u002Fli>\n\u003Cli>Display the average post rating, vote count or weighted (bayesian) rating within your posts\u003C\u002Fli>\n\u003Cli>Display a widget with the top rated posts in your sidebar\u003C\u002Fli>\n\u003Cli>Allow you to create your own rating formula\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Why another rating plugin? Because the existing ones are either outdated, bloated with useless functionality, or just too buggy 🙂\u003C\u002Fp>\n","Simple, developer-friendly, straightforward post rating plugin. Relies on post meta to store avg. rating \u002F vote count.",700,76678,90,23,"2017-11-28T21:37:00.000Z","4.5.33","4.0.0","",[20,21,22,23,24],"ajax","post","postrating","rating","ratings","http:\u002F\u002Fwww.dfactory.eu\u002Fplugins\u002Fpost-ratings\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpost-ratings.3.0.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":34,"avg_security_score":27,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},2,800,30,84,"2026-04-04T07:04:35.828Z",[39,66,89,109,127],{"slug":40,"name":41,"version":42,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":49,"num_ratings":50,"last_updated":51,"tested_up_to":52,"requires_at_least":53,"requires_php":54,"tags":55,"homepage":61,"download_link":62,"security_score":63,"vuln_count":64,"unpatched_count":28,"last_vuln_date":65,"fetched_at":30},"kk-star-ratings","kk Star Ratings – Rate Post & Collect User Feedbacks","5.4.10.4","properfraction","https:\u002F\u002Fprofiles.wordpress.org\u002Fproperfraction\u002F","\u003Cp>kk Star Ratings is a widely used star rating plugin for wordpress. Here are some highlighted features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>User defined amount of star ratings (5 as default) in your \u003Cstrong>posts\u003C\u002Fstrong>, \u003Cstrong>pages\u003C\u002Fstrong> and publicly accesible \u003Cstrong>custom post types\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Structured data supporting \u003Cstrong>google rich snippets\u003C\u002Fstrong> showing the star ratings in search results which has the potential to drive more traffic to your website.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Widespread coverage of custom hooks.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Full control via options page. You can,\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>Enable or disable globally.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Disable star ratings in posts that belong to certain categories.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Choose where to show the star ratings. It can be on the \u003Cstrong>homepage\u003C\u002Fstrong>, in \u003Cstrong>archives\u003C\u002Fstrong>, in \u003Cstrong>posts\u003C\u002Fstrong>, in \u003Cstrong>pages\u003C\u002Fstrong> and\u002For in \u003Cstrong>custom post types\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Control the structured data schema and type.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Restrict votings per unique ip.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Allow voting in archives.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Allow guests to vote.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Customize position within the post content.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Adjust the amount of stars.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>And much more…\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","kk Star Ratings allows blog visitors to involve and interact more effectively with your website by rating posts.",80000,2197646,78,171,"2026-03-04T12:53:00.000Z","6.9.4","5.0","7.4",[56,57,58,59,60],"ajax-ratings","feedback","rate-post","star-ratings","voting","https:\u002F\u002Ffeedbackwp.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkk-star-ratings.5.4.10.4.zip",96,4,"2024-12-20 16:25:44",{"slug":67,"name":68,"version":69,"author":70,"author_profile":71,"description":72,"short_description":73,"active_installs":74,"downloaded":75,"rating":76,"num_ratings":77,"last_updated":78,"tested_up_to":79,"requires_at_least":80,"requires_php":18,"tags":81,"homepage":84,"download_link":85,"security_score":86,"vuln_count":87,"unpatched_count":28,"last_vuln_date":88,"fetched_at":30},"wp-postratings","WP-PostRatings","1.91.2","Lester Chan","https:\u002F\u002Fprofiles.wordpress.org\u002Fgamerz\u002F","\u003Ch3>Usage\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Open \u003Ccode>wp-content\u002Fthemes\u002F\u003CYOUR THEME NAME>\u002Findex.php\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>You may place it in archive.php, single.php, post.php or page.php also.\u003C\u002Fli>\n\u003Cli>Find: \u003Ccode>\u003C?php while (have_posts()) : the_post(); ?>\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Add Anywhere Below It (The Place You Want The Ratings To Show): \u003Ccode>\u003C?php if(function_exists('the_ratings')) { the_ratings(); } ?>\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cul>\n\u003Cli>If you DO NOT want the ratings to appear in every post\u002Fpage, DO NOT use the code above. Just type in \u003Ccode>[ratings]\u003C\u002Fcode> into the selected post\u002Fpage content and it will embed ratings into that post\u002Fpage only.\u003C\u002Fli>\n\u003Cli>If you want to embed other post ratings use \u003Ccode>[ratings id=\"1\"]\u003C\u002Fcode>, where 1 is the ID of the post\u002Fpage ratings that you want to display.\u003C\u002Fli>\n\u003Cli>If you want to embed other post ratings results, use \u003Ccode>[ratings id=\"1\" results=\"true\"]\u003C\u002Fcode>, where 1 is the ID of the post\u002Fpage ratings results that you want to display.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Development\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Flesterchan\u002Fwp-postratings\" title=\"https:\u002F\u002Fgithub.com\u002Flesterchan\u002Fwp-postratings\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Flesterchan\u002Fwp-postratings\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Plugin icon by \u003Ca href=\"http:\u002F\u002Fwww.freepik.com\" rel=\"nofollow ugc\">Freepik\u003C\u002Fa> from \u003Ca href=\"http:\u002F\u002Fwww.flaticon.com\" rel=\"nofollow ugc\">Flaticon\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Icons courtesy of \u003Ca href=\"http:\u002F\u002Fwww.famfamfam.com\u002F\" title=\"FamFamFam\" rel=\"nofollow ugc\">FamFamFam\u003C\u002Fa> and \u003Ca href=\"http:\u002F\u002Fwww.everaldo.com\" title=\"Everaldo\" rel=\"nofollow ugc\">Everaldo\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Donations\u003C\u002Fh3>\n\u003Cp>I spent most of my free time creating, updating, maintaining and supporting these plugins, if you really love my plugins and could spare me a couple of bucks, I will really appreciate it. If not feel free to use it without any obligations.\u003C\u002Fp>\n","Adds an AJAX rating system for your WordPress site's content.",30000,2263058,86,179,"2024-07-16T13:07:00.000Z","6.6.5","4.9.6",[22,82,23,24,83],"postratings","vote","https:\u002F\u002Flesterchan.net\u002Fportfolio\u002Fprogramming\u002Fphp\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-postratings.1.91.2.zip",88,5,"2024-08-01 00:00:00",{"slug":90,"name":91,"version":92,"author":93,"author_profile":94,"description":95,"short_description":96,"active_installs":97,"downloaded":98,"rating":99,"num_ratings":64,"last_updated":100,"tested_up_to":101,"requires_at_least":102,"requires_php":18,"tags":103,"homepage":107,"download_link":108,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"kento-star-rate","Kento Star Rate","1.1","PluginsPoint","https:\u002F\u002Fprofiles.wordpress.org\u002Fkentothemes\u002F","\u003Cp>very lightweight plugin for five star ratings to post, page, excerpt and custom post type\u003C\u002Fp>\n\u003Cp>Live Preview: http:\u002F\u002Fkentothemes.com\u002Fdemo\u002Fkento-star-rate\u002F\u003C\u002Fp>\n\u003Cp>Plugin Features\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Unlimited Color(Hover, active, rated)\u003C\u002Fli>\n\u003Cli>Unlimited Design for Star\u003C\u002Fli>\n\u003Cli>Unlimited size of Star\u003C\u002Fli>\n\u003Cli>Login warring if not logged\u003C\u002Fli>\n\u003Cli>Already rated warring\u003C\u002Fli>\n\u003Cli>Thanks note for rate\u003Cbr \u002F>\nmany more…\u003C\u002Fli>\n\u003C\u002Ful>\n","Ajax Five Star Ratings for Post, Page or Excerpt",10,4541,70,"2015-06-09T06:16:00.000Z","4.2.39","3.8",[56,104,105,106,59],"ajax-star-rate","five-star","post-star","http:\u002F\u002Fkentothemes.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkento-star-rate.1.1.zip",{"slug":110,"name":111,"version":112,"author":113,"author_profile":114,"description":115,"short_description":116,"active_installs":97,"downloaded":117,"rating":118,"num_ratings":64,"last_updated":119,"tested_up_to":101,"requires_at_least":120,"requires_php":18,"tags":121,"homepage":124,"download_link":125,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":126},"pixelpost-importer","Pixelpost Importer","0.1.2","Pierre Bodilis","https:\u002F\u002Fprofiles.wordpress.org\u002Fkerlu\u002F","\u003Cp>Set up your PixelPost database info, and let it work for a while. It’ll import categories, posts and comments. It leaves a new table in the database, used by the provided index.php (see FAQ) to keep the old link alive, by redirecting them to the new uri.\u003C\u002Fp>\n\u003Cp>Imported posts are imported as posts with an “image” format in wordpress, the image attached to the imported post. A “more” separator is inserted between the image and the post content.\u003C\u002Fp>\n","Import your PixelPost database in WordPress (categories, posts, comments, and ratings).",3042,100,"2015-07-08T12:08:00.000Z","3.3",[122,123,22,82],"importer","pixelpost","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fpixelpost-importer\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpixelpost-importer.1.0.zip","2026-03-15T14:54:45.397Z",{"slug":128,"name":129,"version":130,"author":131,"author_profile":132,"description":133,"short_description":134,"active_installs":97,"downloaded":135,"rating":118,"num_ratings":33,"last_updated":136,"tested_up_to":137,"requires_at_least":138,"requires_php":139,"tags":140,"homepage":143,"download_link":144,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wp-post-rating","Wp Post Rating","1.2.2","shmidtelson","https:\u002F\u002Fprofiles.wordpress.org\u002Fshmidtelson\u002F","\u003Ch3>WP-POST-RATING is powerful rating plugin with ajax security requests.\u003C\u002Fh3>\n\u003Ch3>Features:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>Very faster\u003Cbr \u002F>\n\u003Cem>Plugin use OOP and Vanilla JS, svg icons and CSS variables\u003C\u002Fem>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Seo-friendly\u003Cbr \u002F>\n\u003Cem>Plugin use Schema for show stars rating in google search results\u003C\u002Fem>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Without jQuery (Native js)\u003Cbr \u002F>\n\u003Cem>Native js is very fast\u003C\u002Fem>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Customize color of stars\u003Cbr \u002F>\n\u003Cem>You can customize color of stars and the second color will generate automatic\u003C\u002Fem>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>MultiLanguages\u003Cbr \u002F>\n+English\u003Cbr \u002F>\n+Russian\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Functional:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Widget for show latest (any sort) votes in sidebar (other place)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Shortcodes:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ccode>[wp_rating]\u003C\u002Fcode> show rating\u003C\u002Fli>\n\u003Cli>\u003Ccode>[wp_rating_total]\u003C\u002Fcode> show total votes for current post\u003C\u002Fli>\n\u003Cli>\u003Ccode>[wp_rating_avg]\u003C\u002Fcode> show total votes for current post\u003C\u002Fli>\n\u003C\u002Ful>\n","WP-POST-RATING is powerful rating plugin with ajax security requests.",2053,"2021-07-18T14:15:00.000Z","5.7.15","4.9.8","7.2",[141,142,22,23,24],"5-star","google-rating","https:\u002F\u002Fgithub.com\u002Fshmidtelson\u002Fwp-post-rating","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-post-rating.1.2.2.zip",{"attackSurface":146,"codeSignals":234,"taintFlows":304,"riskAssessment":305,"analyzedAt":312},{"hooks":147,"ajaxHandlers":215,"restRoutes":223,"shortcodes":224,"cronEvents":233,"entryPointCount":64,"unprotectedCount":28},[148,155,159,162,165,169,173,176,180,184,188,192,196,199,202,205,209,212],{"type":149,"name":150,"callback":151,"priority":152,"file":153,"line":154},"action","pre_get_posts","extend_pre_query",1,"includes\\query.php",15,{"type":156,"name":157,"callback":157,"priority":97,"file":153,"line":158},"filter","posts_join",18,{"type":156,"name":160,"callback":160,"priority":97,"file":153,"line":161},"posts_orderby",19,{"type":156,"name":163,"callback":163,"priority":97,"file":153,"line":164},"posts_fields",20,{"type":149,"name":166,"callback":167,"file":168,"line":154},"admin_menu","options_page","includes\\settings.php",{"type":149,"name":170,"callback":171,"file":168,"line":172},"admin_init","register_settings",16,{"type":149,"name":174,"callback":174,"file":168,"line":175},"admin_enqueue_scripts",17,{"type":149,"name":177,"callback":178,"file":179,"line":63},"plugins_loaded","load_textdomain","post-ratings.php",{"type":156,"name":181,"callback":182,"priority":97,"file":179,"line":183},"plugin_row_meta","plugin_extend_links",141,{"type":156,"name":185,"callback":186,"priority":97,"file":179,"line":187},"plugin_action_links","plugin_settings_link",142,{"type":149,"name":189,"callback":190,"file":179,"line":191},"wp","run",144,{"type":149,"name":193,"callback":194,"file":179,"line":195},"widgets_init","register_widgets",152,{"type":156,"name":197,"callback":197,"priority":97,"file":179,"line":198},"user_has_cap",155,{"type":156,"name":200,"callback":200,"priority":97,"file":179,"line":201},"map_meta_cap",156,{"type":149,"name":203,"callback":203,"file":179,"line":204},"wp_enqueue_scripts",463,{"type":156,"name":206,"callback":207,"priority":164,"file":179,"line":208},"the_content","control_block",470,{"type":156,"name":210,"callback":207,"file":179,"line":211},"bbp_get_topic_content",473,{"type":156,"name":213,"callback":207,"file":179,"line":214},"bbp_get_reply_content",474,[216,221],{"action":217,"nopriv":218,"callback":217,"hasNonce":218,"hasCapCheck":219,"file":179,"line":220},"rate_post",false,true,148,{"action":217,"nopriv":219,"callback":217,"hasNonce":218,"hasCapCheck":219,"file":179,"line":222},149,[],[225,229],{"tag":226,"callback":227,"file":179,"line":228},"rate","rate_shortcode",159,{"tag":230,"callback":231,"file":179,"line":232},"top_rated","top_rated_shortcode",160,[],{"dangerousFunctions":235,"sqlUsage":236,"outputEscaping":238,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":302,"bundledLibraries":303},[],{"prepared":28,"raw":28,"locations":237},[],{"escaped":239,"rawEcho":240,"locations":241},8,29,[242,245,247,249,251,253,255,257,259,261,263,265,267,269,271,273,275,278,279,281,283,286,289,291,293,294,296,298,300],{"file":243,"line":220,"context":244},"includes\\functions.php","raw output",{"file":243,"line":246,"context":244},162,{"file":243,"line":248,"context":244},174,{"file":168,"line":250,"context":244},61,{"file":168,"line":252,"context":244},64,{"file":168,"line":254,"context":244},95,{"file":168,"line":256,"context":244},99,{"file":168,"line":258,"context":244},102,{"file":168,"line":260,"context":244},139,{"file":168,"line":262,"context":244},166,{"file":168,"line":264,"context":244},181,{"file":168,"line":266,"context":244},205,{"file":168,"line":268,"context":244},209,{"file":168,"line":270,"context":244},212,{"file":168,"line":272,"context":244},231,{"file":168,"line":274,"context":244},293,{"file":276,"line":277,"context":244},"includes\\widgets.php",74,{"file":276,"line":198,"context":244},{"file":179,"line":280,"context":244},577,{"file":179,"line":282,"context":244},649,{"file":284,"line":285,"context":244},"templates\\post-ratings-control.php",32,{"file":287,"line":288,"context":244},"templates\\post-ratings-widget.php",31,{"file":287,"line":290,"context":244},34,{"file":287,"line":292,"context":244},37,{"file":287,"line":292,"context":244},{"file":287,"line":295,"context":244},40,{"file":287,"line":297,"context":244},44,{"file":287,"line":299,"context":244},48,{"file":287,"line":301,"context":244},52,3,[],[],{"summary":306,"deductions":307},"The 'post-ratings' v3.0 plugin exhibits a generally positive security posture, with no known vulnerabilities and a well-defined attack surface. The absence of SQL injection risks due to prepared statements and a lack of file operations or external HTTP requests are strong indicators of good development practices. However, a significant concern arises from the low percentage of properly escaped output. With 37 output operations and only 22% properly escaped, there's a high likelihood of Cross-Site Scripting (XSS) vulnerabilities being present, especially since taint analysis did not find any flows to analyze. The lack of explicit nonce checks on its AJAX handlers, while categorized as 'Unprotected: 0' in the attack surface, still presents a potential area for brute-force or automated attacks if not adequately protected by other means (e.g., capability checks). The plugin's clean vulnerability history is encouraging, suggesting it has been maintained with security in mind, but the current static analysis findings on output escaping warrant immediate attention.",[308,310],{"reason":309,"points":154},"Low percentage of properly escaped output",{"reason":311,"points":87},"Missing nonce checks on AJAX handlers","2026-03-16T19:26:20.550Z",{"wat":314,"direct":323},{"assetPaths":315,"generatorPatterns":318,"scriptPaths":319,"versionParams":320},[316,317],"\u002Fwp-content\u002Fplugins\u002Fpost-ratings\u002Fassets\u002Fcss\u002Ffrontend.css","\u002Fwp-content\u002Fplugins\u002Fpost-ratings\u002Fassets\u002Fjs\u002Ffrontend.js",[],[317],[321,322],"post-ratings\u002Fassets\u002Fcss\u002Ffrontend.css?ver=","post-ratings\u002Fassets\u002Fjs\u002Ffrontend.js?ver=",{"cssClasses":324,"htmlComments":333,"htmlAttributes":334,"restEndpoints":339,"jsGlobals":340,"shortcodeOutput":342},[325,326,327,328,329,330,331,332],"post-ratings-widget-wrapper","post-ratings-item-wrapper","post-ratings-average","post-ratings-count","post-ratings-item","post-ratings-star","post-ratings-star-empty","post-ratings-star-filled",[],[335,336,337,338],"data-post-id","data-rating","data-max-rating","data-rate-nonce",[],[341],"post_ratings_params",[343,344],"[rate]","[top_rated]"]