[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2mUB8rNMhrBRzwAlfZanXFtmKnuROxI2DLKIUtnbOd0":3,"$ffyQHmjeyhyXKrQO4nHCngd5v4QlB_iKPt7W6Z2poAH4":190,"$fvfMLVYK7cFVzuG36Qu6voUG9RycY0gmSiCFVKYdz2VE":195},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":16,"tags":17,"homepage":21,"download_link":22,"security_score":23,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25,"discovery_status":26,"vulnerabilities":27,"developer":28,"crawl_stats":24,"alternatives":35,"analysis":148,"fingerprints":175},"post-word-count","Post Word Count","1.2","Nick Momrik","https:\u002F\u002Fprofiles.wordpress.org\u002Fnickmomrik\u002F","\u003Cp>Counts the total number of words in all posts or the number of words in a single post.\u003C\u002Fp>\n\u003Ch3>Configuration\u003C\u002Fh3>\n\u003Cp>The default is to count the total number of words in all posts. If you would like the number of words displayed for a particular post or page, use the following inside “the loop”\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php mdv_post_word_count(true); ?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Counts the total number of words in all posts or the number of words in a single post.",10,6492,0,"2015-12-08T22:53:00.000Z","4.4.34","",[18,19,20],"count","posts","words","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fpost-word-count\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpost-word-count.1.2.zip",85,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":29,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":23,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},"nickmomrik",12,3080,30,84,"2026-07-15T04:01:39.984Z",[36,63,85,107,130],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":46,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":58,"download_link":59,"security_score":60,"vuln_count":61,"unpatched_count":13,"last_vuln_date":62,"fetched_at":25},"custom-facebook-feed","Smash Balloon Social Post Feed – Simple Social Feeds for WordPress","4.7.6","Syed Balkhi","https:\u002F\u002Fprofiles.wordpress.org\u002Fsmub\u002F","\u003Cp>Display Facebook posts on your WordPress site in an attractive feed. \u003Cstrong>Completely customizable\u003C\u002Fstrong>, \u003Cstrong>responsive\u003C\u002Fstrong>, \u003Cstrong>search engine crawlable\u003C\u002Fstrong>, and \u003Cstrong>GDPR compliant\u003C\u002Fstrong> feeds. Automatically powers any Facebook oEmbeds on your site.\u003C\u002Fp>\n\u003Cp>\u003Cem>“The perfect Facebook plugin with amazing support! What else do you want? Get it!”\u003C\u002Fem> – \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Ftopic\u002Fyou-dont-already-have-this?facebook\" rel=\"ugc\">JoeJeffries\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cem>“I honestly cannot recommend this Facebook plugin enough. The plugin itself is gorgeous and super customizable, and if you run into trouble…support will get you out of it. Five Stars across the board.”\u003C\u002Fem> – \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Ftopic\u002Flove-this-plugin-w-awesome-support?facebook\" rel=\"ugc\">pamsavoybarnett\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Please note:\u003C\u002Fstrong> This free Facebook plugin allows you to display text and links from Facebook posts. To display \u003Cstrong>photos, videos, comments,\u003C\u002Fstrong> and more, we offer a Pro version of the plugin.  See the Pro Version section below for more information.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>NEW: Now Supports Facebook oEmbeds\u003C\u002Fstrong>\u003Cbr \u002F>\nWordPress is no longer able to support Facebook oEmbeds without the use of a plugin. Install Custom Facebook Feeds on your website to support oEmbeds. No developer app required.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Super Simple to Set Up\u003C\u002Fstrong>\u003Cbr \u002F>\nOne of our main priorities has always been to make our Facebook plugin as easy as possible to setup and use. Get up and running in less than 1 minute with our signature quick setup – no Facebook Developer App required.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Display Feeds from Your Facebook Page\u003C\u002Fstrong>\u003Cbr \u002F>\nUse the plugin to display Facebook feeds from a Facebook page that you are an admin of.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Completely Customizable\u003C\u002Fstrong>\u003Cbr \u002F>\nBy default the feed will adopt the styles of your WordPress theme, but your feeds can be completely customized to look however you like using our visual feed customizer – with tons of options to customize every part of your feed.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Elementor and Divi Ready\u003C\u002Fstrong>\u003Cbr \u002F>\nCustom Facebook Feeds has a built-in Elementor and Divi block for easy page building. Simply launch your Elementor or Divi builder and find the related Custom Facebook Feed block in the sidebar like any other block.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>SEO Friendly\u003C\u002Fstrong>\u003Cbr \u002F>\nThe Facebook feed content is crawlable by search engines adding SEO value to your site. This is unlike other Facebook plugins embed the feed using iframes which are not crawlable.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>GDPR Compliant\u003C\u002Fstrong>\u003Cbr \u002F>\nAutomatically integrates with many of the popular GDPR cookie consent plugins and includes a 1-click easy GDPR setting.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Responsive and Mobile Optimized\u003C\u002Fstrong>\u003Cbr \u002F>\nThe plugin layouts look great on any screen size and in any container width.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Unlimited Feeds from Unlimited Different Facebook Pages\u003C\u002Fstrong>\u003Cbr \u002F>\nWe don’t limit how many Facebook feeds you can display on your site. With the use of a shortcode or block you can insert a feed into posts or widgets anywhere on your site.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Built for Speed\u003C\u002Fstrong>\u003Cbr \u002F>\nBuilt-in caching means that your Facebook feeds load lightning fast. Set how long the cache lasts until the feed updates again.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Like Box Widget and Visual Header\u003C\u002Fstrong>\u003Cbr \u002F>\nInclude the official Facebook Like Box widget at the top or bottom of your Facebook feed and display a beautiful visual header with your Facebook page or cover photo, profile picture, bio, and number of likes.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>So Much More\u003C\u002Fstrong>\u003Cbr \u002F>\nShow and hide certain parts of each Facebook post, choose whose posts to show in the feed, customize colors, font sizes and styles, the number of Facebook posts to display, set max text lengths, translate text, custom CSS, and much, much more.\u003C\u002Fp>\n\u003Ch3>Pro Version (Custom Facebook Feed Pro)\u003C\u002Fh3>\n\u003Cp>In order to maintain the free version of the Custom Facebook Feed plugin on an ongoing basis, and to provide quick and effective support for free, we offer a Pro version of the plugin. Custom Facebook Feed Pro allows you to display photos, videos, the number of likes, shares, reactions and comments for each Facebook post, choose from multiple layout options, filter Facebook posts by type or #hashtag\u002Fstring, load more Facebook posts into your feed, and more. \u003Ca href=\"https:\u002F\u002Fsmashballoon.com\u002Fdifferences-between-the-free-version-and-pro-version-of-the-custom-facebook-feed-plugin\u002F\" title=\"Differences between free and Pro version of Custom Facebook Feed plugin\" rel=\"nofollow ugc\">Click here\u003C\u002Fa> for a full list of all differences between the Custom Facebook Feed free and Pro versions.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsmashballoon.com\u002Fcustom-facebook-feed\u002F?utm_campaign=facebook-free&utm_source=readme&utm_medium=findout\" title=\"Custom Facebook Feed Pro\" rel=\"nofollow ugc\">Find out more about Custom Facebook Feed Pro\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsmashballoondemo.com\u002F?utm_campaign=facebook-free&utm_source=readme&utm_medium=demo\" title=\"Custom Facebook Feed Pro Demo\" rel=\"nofollow ugc\">Try out the Custom Facebook Feed Pro demo\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Benefits of Displaying a Facebook Feed on Your Website\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Increase social engagement\u003C\u002Fstrong> between you and your users, customers, or fans\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Save time\u003C\u002Fstrong> by using the Custom Facebook Feed to generate dynamic, search engine crawlable content on your website\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Get more likes\u003C\u002Fstrong> by displaying your Facebook content directly on your site\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Improve your SEO\u003C\u002Fstrong> as all of that quality keyword-rich Facebook content from posts and Facebook comments is directly embedded into your website\u003C\u002Fli>\n\u003Cli>Display your Facebook content your way to perfectly match your website’s style\u003C\u002Fli>\n\u003Cli>\u003Cstrong>No Coding Required\u003C\u002Fstrong> – choose from tons of built-in customization options to create a truly unique feed of your Facebook content.\u003C\u002Fli>\n\u003Cli>The Custom Facebook Feed plugin is \u003Cstrong>updated regularly\u003C\u002Fstrong> with new features, bug-fixes and Facebook API changes\u003C\u002Fli>\n\u003Cli>Support is quick and effective\u003C\u002Fli>\n\u003Cli>We’re dedicated to providing the \u003Cstrong>most customizable\u003C\u002Fstrong>, \u003Cstrong>robust\u003C\u002Fstrong> and \u003Cstrong>well supported\u003C\u002Fstrong> Facebook feed plugin in the world!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>How to use the Custom Facebook Feed plugin\u003C\u002Fh3>\n\u003Cp>Once you’ve installed the plugin there are only a few steps to get up and running:\u003C\u002Fp>\n\u003Cp>1) Use the button on the ‘Facebook Feed’ settings page to log into your Facebook account and authorize the plugin.\u003Cbr \u002F>\n2) Save the plugin settings and add the \u003Ccode>[custom-facebook-feed]\u003C\u002Fcode> shortcode to any page, post, or widget where you want the Facebook feed to be displayed.\u003C\u002Fp>\n\u003Cp>That’s it!  You can then customize the Facebook feed as needed using the settings on the Facebook Feed > Customize page.\u003C\u002Fp>\n\u003Cp>For full step-by-step setup directions with screenshots, see \u003Ca href=\"https:\u002F\u002Fsmashballoon.com\u002Fcustom-facebook-feed\u002Fdocs\u002Ffree\u002F?utm_campaign=facebook-free-readme&utm_source=howto&utm_medium=setup\" title=\"Custom Facebook Feed Free Setup Doc\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Requesting support\u003C\u002Fh3>\n\u003Cp>Customer support is a huge deal to us. We pride ourselves on always providing quick, effective, and courteous support to all of our users. If you’re having an issue using the Custom Facebook Feed plugin then just let us know and we’ll be there to help as soon as possible.  You can either open a ticket on the support forum on \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fcustom-facebook-feed\u002F\" title=\"Custom Facebook Feed Free support forum\" rel=\"ugc\">WordPress.org\u003C\u002Fa>, or directly on the Custom Facebook Feed section of \u003Ca href=\"https:\u002F\u002Fsmashballoon.com\u002Fcustom-facebook-feed\u002Fsupport\u002F\" title=\"Custom Facebook Feed website support form\" rel=\"nofollow ugc\">our website\u003C\u002Fa>.  We also have a large collection of help documentation and FAQs \u003Ca href=\"https:\u002F\u002Fsmashballoon.com\u002Fcustom-facebook-feed\u002Ffaq\u002F\" title=\"Custom Facebook Feed support FAQs\" rel=\"nofollow ugc\">on our website\u003C\u002Fa> for all common issues related to the Custom Facebook Feed plugin.\u003C\u002Fp>\n\u003Ch4>At Smash Balloon we have two goals:\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Creating and maintaining the most useful, functional, customizable, robust and down-right awesomist Facebook feed plugin your website has ever seen.\u003C\u002Fli>\n\u003Cli>To provide the quickest, friendliest and most mind-blowingly amazing product support you have ever experienced.\u003C\u002Fli>\n\u003C\u002Fol>\n","Formerly \"Custom Facebook Feed\". Display completely customizable Facebook feeds of a Facebook page. Supports Facebook oEmbeds.",200000,8869209,94,1502,"2026-03-12T17:56:00.000Z","6.9.4","4.1","7.4",[53,54,55,56,57],"facebook","facebook-account","facebook-feed","facebook-page","facebook-posts","https:\u002F\u002Fsmashballoon.com\u002Fcustom-facebook-feed","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-facebook-feed.4.7.6.zip",96,8,"2025-10-09 00:00:00",{"slug":64,"name":65,"version":66,"author":67,"author_profile":68,"description":69,"short_description":70,"active_installs":71,"downloaded":72,"rating":60,"num_ratings":73,"last_updated":74,"tested_up_to":75,"requires_at_least":76,"requires_php":16,"tags":77,"homepage":82,"download_link":83,"security_score":84,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25},"reading-time-wp","Reading Time WP","2.0.17","yingles","https:\u002F\u002Fprofiles.wordpress.org\u002Fyingles\u002F","\u003Cp>WP Reading Time let’s you easily add an estimated reading time to your WordPress posts. Activating the plugin will automatically add the reading time to the beginning of your post’s content. This can be deactivated in the Reading Time settings which can be accessed from your Dashboard’s Settings menu. You can also edit the label and postfix from this menu.\u003C\u002Fp>\n\u003Cp>If you’d prefer more control over where you add your reading time you can use the the [rt_reading_time] shortcode to insert the time into a post. This shortcode also excepts values for label and postfix. These are optional. Ex. [rt_reading_time label=”Reading Time:” postfix=”minutes” postfix_singular=”minute”].\u003C\u002Fp>\n","Reading Time WP creates an estimated reading time of your posts that is inserted above the content or by using a shortcode.",30000,427181,20,"2024-11-17T15:46:00.000Z","6.7.5","3.0.1",[78,19,79,80,81],"estimated-time","reading-time","time","word-count","https:\u002F\u002Fjasonyingling.me\u002Freading-time-wp\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Freading-time-wp.2.0.17.zip",92,{"slug":86,"name":87,"version":76,"author":88,"author_profile":89,"description":90,"short_description":91,"active_installs":92,"downloaded":93,"rating":94,"num_ratings":95,"last_updated":96,"tested_up_to":97,"requires_at_least":98,"requires_php":16,"tags":99,"homepage":105,"download_link":106,"security_score":23,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25},"wc-password-strength-settings","Password Strength Settings for WooCommerce","Danny Santoro","https:\u002F\u002Fprofiles.wordpress.org\u002Fdanielsantoro\u002F","\u003Cp>Help secure your WooCommerce site by enforcing stronger passwords and taking additional control of your strength requirements.\u003C\u002Fp>\n\u003Ch3>What does this plugin do?\u003C\u002Fh3>\n\u003Cp>WooCommerce has an integrated Password Strength Meter which forces users to use strong passwords. Sometimes this isn’t desirable – with this plugin, you can choose between five password levels ranging from “Anything Goes” to “Strong Passwords Only”. In addition, you can modify the colors and appearance of these custom messages, as well as modify or remove the password hint. For details on how the password strength is determined, \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FDanielSantoro\u002Fwc-password-strength-settings\u002Fwiki\u002FHow-Password-Strength-is-Determined\" rel=\"nofollow ugc\">please read the documentation here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>What’s New?\u003C\u002Fh4>\n\u003Cp>Version 3.0.0 is a bit of a rewrite to bring the plugin up to modern coding standards. Functionality should not be impacted, but if it is, please reach out on the support forums.\u003C\u002Fp>\n\u003Cp>Version 3.0.1 is simply a hotfix declaring compatibility with WooCommerce HPOS. Since this plugin doesn’t touch anything with the orders or order metadata, it shouldn’t be impacted at all. \u003Cem>However\u003C\u002Fem>, if you notice any issues then please reach out via the contact form on my website.\u003C\u002Fp>\n\u003Ch4>Notes\u003C\u002Fh4>\n\u003Cp>While this does allow for user accounts to have weaker passwords, it’s a good idea to still encourage strong password use – \u003Cem>especially\u003C\u002Fem> for administrators!\u003C\u002Fp>\n\u003Ch4>Planned Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Option to remove “- Please enter a stronger password.” that is added by WordPress.\u003C\u002Fli>\n\u003Cli>Nothing else at the moment, but let me know if you have any ideas.\u003C\u002Fli>\n\u003C\u002Ful>\n","Help secure your WooCommerce site by enforcing stronger passwords and taking additional control of your strength requirements.",10000,177306,90,24,"2023-10-11T20:51:00.000Z","6.3.8","5.8",[100,101,102,103,104],"accounts","passwords","security","users","woocommerce","https:\u002F\u002Fdanielsantoro.com\u002Fproject\u002Fwoocommerce-password-strength-settings-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwc-password-strength-settings.zip",{"slug":108,"name":109,"version":110,"author":111,"author_profile":112,"description":113,"short_description":114,"active_installs":115,"downloaded":116,"rating":117,"num_ratings":118,"last_updated":119,"tested_up_to":49,"requires_at_least":120,"requires_php":16,"tags":121,"homepage":126,"download_link":127,"security_score":128,"vuln_count":30,"unpatched_count":13,"last_vuln_date":129,"fetched_at":25},"wp-auto-affiliate-links","Auto Affiliate Links","6.8.7","Lucian Apostol","https:\u002F\u002Fprofiles.wordpress.org\u002Fthedark\u002F","\u003Cp>Auto Affiliate Links will automatically add affiliate links into your content. You can manually set affiliate links and keywords where they should be added into your content, or you can let the plugin to automatically extract and display links from Amazon, Clickbank, Shareasale, Ebay, Walmart, Commission Junction, BestBuy and Envato Marketplace.\u003C\u002Fp>\n\u003Cp>IMPORTANT: Your content won’t be modified in any way. The links are added when the content is displayed.\u003C\u002Fp>\n\u003Cp>If you prefer to select your keywords and add your links manually, you can do this from “Auto Affiliate Links” menu in your administration panel. In “General Settings” you can set if you want the links to be cloaked, if you want them to be added on your homepage or not and several other options.\u003C\u002Fp>\n\u003Cp>Also, you will have options to make the links nofollow or dofollow, to open in new page or same page and to cloak links. The plugin will give you the most used 100 keywords from your content si you can easily add affiliate links to appear when they are displayed.\u003C\u002Fp>\n\u003Cp>You can limit the number of links that are shown in every article. The frequency range from “Very Low” to “Very High”. At Very Low level only 1 link will be displayed in every article. At “Very High” frequency a maximum of 5 links will be added to every article.\u003C\u002Fp>\n\u003Cp>If you choose to automatically generate and display links from Amazon, Clickbank or Shareasale you have to first request an API key, and then to activate each module. The links will be added trough javascript so you do not have to worry about nofollowing and search engines.\u003C\u002Fp>\n","Automatically display affiliate links in your website content so you can make more money. It is also working well for internal linking.",3000,970115,82,39,"2026-04-05T23:10:00.000Z","3.5",[122,123,124,125,19],"affiliate","keywords","links","marketing","https:\u002F\u002Fautoaffiliatelinks.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-auto-affiliate-links.6.8.7.zip",80,"2026-05-25 00:00:00",{"slug":131,"name":132,"version":133,"author":134,"author_profile":135,"description":136,"short_description":137,"active_installs":138,"downloaded":139,"rating":140,"num_ratings":141,"last_updated":142,"tested_up_to":75,"requires_at_least":143,"requires_php":16,"tags":144,"homepage":146,"download_link":147,"security_score":84,"vuln_count":13,"unpatched_count":13,"last_vuln_date":24,"fetched_at":25},"article-word-count-column","Article Word Count","1.4.1","pk2000","https:\u002F\u002Fprofiles.wordpress.org\u002Fpk2000\u002F","\u003Cp>This plugin adds a custom column to the list of posts and pages in the WordPress admin area, and displays the word count for each post and page in the column. It also makes the column sortable, so you can easily sort the posts and pages by their word count.\u003C\u002Fp>\n\u003Ch3>New Feature\u003C\u002Fh3>\n\u003Cp>• If a “word_count” postmeta exists, sorting by “Word Count” uses it for precise numeric ordering.\u003Cbr \u002F>\n• Otherwise, sorting uses an approximate calculation based on spaces.\u003C\u002Fp>\n\u003Cp>Adds the word count of each post to the post list in the admin area and makes the column sortable.\u003C\u002Fp>\n\u003Ch3>Images\u003C\u002Fh3>\n\u003Cp>banner-772×250.png\u003Cbr \u002F>\nbanner-1544×500.png\u003Cbr \u002F>\nicon-128×128.png\u003Cbr \u002F>\nicon-256×256.png\u003Cbr \u002F>\nicon.svg\u003C\u002Fp>\n","Displays the word count for each post and page in the WordPress admin panel.",2000,13386,100,3,"2025-02-16T13:16:00.000Z","4.5",[145,19,81],"pages","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Farticle-word-count-column","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Farticle-word-count-column.1.4.1.zip",{"attackSurface":149,"codeSignals":155,"taintFlows":167,"riskAssessment":168,"analyzedAt":174},{"hooks":150,"ajaxHandlers":151,"restRoutes":152,"shortcodes":153,"cronEvents":154,"entryPointCount":13,"unprotectedCount":13},[],[],[],[],[],{"dangerousFunctions":156,"sqlUsage":157,"outputEscaping":159,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":166},[],{"prepared":141,"raw":13,"locations":158},[],{"escaped":13,"rawEcho":160,"locations":161},1,[162],{"file":163,"line":164,"context":165},"post-word-count.php",35,"raw output",[],[],{"summary":169,"deductions":170},"The \"post-word-count\" plugin v1.2 exhibits a generally positive security posture based on the static analysis provided.  The absence of any AJAX handlers, REST API routes, shortcodes, or cron events with or without authentication significantly limits the attack surface. Furthermore, the plugin does not utilize dangerous functions, perform file operations, or make external HTTP requests, which are common vectors for exploits. The use of prepared statements for all SQL queries is a strong indication of secure database interaction practices.\n\nHowever, a significant concern arises from the \"Output escaping\" signal, which shows that 100% of the total outputs are not properly escaped. This presents a substantial risk of Cross-Site Scripting (XSS) vulnerabilities, where malicious code could be injected into the WordPress site and executed by users. While the taint analysis shows no identified flows with unsanitized paths, this is likely due to the lack of any analyzed flows to begin with, rather than a proven absence of such issues. The plugin also has no recorded vulnerability history, which is a positive indicator, but does not negate the risk posed by the unescaped output.\n\nIn conclusion, the plugin demonstrates good practices in terms of limiting its attack surface and handling database queries securely. The complete lack of identified vulnerabilities in its history is also reassuring. Nevertheless, the critical issue of unescaped output must be addressed as it represents a direct and exploitable security risk. Addressing this single vulnerability would significantly improve the plugin's overall security.",[171],{"reason":172,"points":173},"Unescaped output detected",7,"2026-03-16T23:40:41.214Z",{"wat":176,"direct":181},{"assetPaths":177,"generatorPatterns":178,"scriptPaths":179,"versionParams":180},[],[],[],[],{"cssClasses":182,"htmlComments":183,"htmlAttributes":184,"restEndpoints":185,"jsGlobals":186,"shortcodeOutput":187},[],[],[],[],[],[188,189],"[post_word_count]","[post_word_count single=true]",{"error":191,"url":192,"statusCode":193,"statusMessage":194,"message":194},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fpost-word-count\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":141,"versions":196},[197,205,210],{"version":198,"download_url":199,"svn_tag_url":200,"released_at":24,"has_diff":201,"diff_files_changed":202,"diff_lines":24,"trac_diff_url":203,"vulnerabilities":204,"is_current":201},"1.02","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpost-word-count.1.02.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fpost-word-count\u002Ftags\u002F1.02\u002F",false,[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fpost-word-count%2Ftags%2F1.2&new_path=%2Fpost-word-count%2Ftags%2F1.02",[],{"version":6,"download_url":22,"svn_tag_url":206,"released_at":24,"has_diff":201,"diff_files_changed":207,"diff_lines":24,"trac_diff_url":208,"vulnerabilities":209,"is_current":191},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fpost-word-count\u002Ftags\u002F1.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fpost-word-count%2Ftags%2F1.1&new_path=%2Fpost-word-count%2Ftags%2F1.2",[],{"version":211,"download_url":212,"svn_tag_url":213,"released_at":24,"has_diff":201,"diff_files_changed":214,"diff_lines":24,"trac_diff_url":24,"vulnerabilities":215,"is_current":201},"1.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpost-word-count.1.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fpost-word-count\u002Ftags\u002F1.1\u002F",[],[]]