[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJDZdlxGHbvN02-VPYL_nLTPZqxykNC0Jd7QtSlZ2ozg":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":35,"analysis":127,"fingerprints":233},"qq-weibo-plugin-for-wordpress","QQ Weibo Plugin for WordPress","1.1","shapherd","https:\u002F\u002Fprofiles.wordpress.org\u002Fshapherd\u002F","\u003Cp>一个很简单的在Wordpress首页显示你的最近的腾讯微博的插件\u003C\u002Fp>\n\u003Ch4>The features in English\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>It has a widget, you can drag it drop it where you want in the side.Also you can set it how many tweetes you want to show.\u003C\u002Fli>\n\u003Cli>You do not need to input you qq account and password, you just tell qq that you want to use this plugin by click a link.\u003C\u002Fli>\n\u003Cli>It automaticly generate the link of the urls and @xxx in tweets.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If any help is needed, please checkout my tech blog: http:\u002F\u002Fwww.l-da.com\u003C\u002Fp>\n\u003Ch4>The features in Chinese\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>自带一个WordPress”小工具”, 你可使用拖拽的方式直接指定插件显示的位置\u003C\u002Fli>\n\u003Cli>使用腾讯微博的授权, 不需要用户名和密码, 保证了你帐号的安全\u003C\u002Fli>\n\u003Cli>自动转换微博中的URL和@符号\u003C\u002Fli>\n\u003Cli>显示 热门话题 的URL\u003C\u002Fli>\n\u003Cli>可以设定显示微博的数量\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>如果使用上需要什么帮助请, 查看我的博客: http:\u002F\u002Fwww.l-da.com\u003C\u002Fp>\n","A very simple plugin shows the recent tweets from your QQ Weibo.",10,5896,0,"2013-04-03T03:43:00.000Z","3.1.4","2.7","",[19,20,21,22,23],"%e8%85%be%e8%ae%af","%e8%85%be%e8%ae%af%e5%be%ae%e5%8d%9a","qq","sns","weibo","http:\u002F\u002Fl-da.com\u002F94\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fqq-weibo-plugin-for-wordpress.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},1,30,84,"2026-04-05T04:22:24.542Z",[36,53,69,85,107],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":11,"downloaded":44,"rating":13,"num_ratings":13,"last_updated":45,"tested_up_to":46,"requires_at_least":47,"requires_php":17,"tags":48,"homepage":51,"download_link":52,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"qqpress","微博同步工具","1.5","cooiky","https:\u002F\u002Fprofiles.wordpress.org\u002Fcooiky\u002F","\u003Cp>发布日志时，支持选择是否同步一条该日志标题和链接到腾讯微博，并可指定文章内容预览字数。\u003Cbr \u002F>\n支持自定义消息前缀。\u003Cbr \u002F>\n腾讯微博OAuth授权。\u003Cbr \u002F>\n在日志中提及微博用户，则会通知这些用户。格式为@+username+空格。\u003C\u002Fp>\n","支持将新日志标题和链接同步到腾讯微博，同时支持自定义文章内容预览长度。",3574,"2011-11-03T01:07:00.000Z","3.2.1","3.0",[20,49,21,23,50],"%e8%85%be%e8%ae%af%e5%be%ae%e5%8d%9a%e5%90%8c%e6%ad%a5","wordpress%e5%90%8c%e6%ad%a5","http:\u002F\u002Fapp.hencuo.com\u002Fqqpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fqqpress.zip",{"slug":54,"name":55,"version":56,"author":57,"author_profile":58,"description":59,"short_description":60,"active_installs":11,"downloaded":61,"rating":13,"num_ratings":13,"last_updated":62,"tested_up_to":46,"requires_at_least":16,"requires_php":17,"tags":63,"homepage":67,"download_link":68,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"sina-weibo-plugin-for-wordpress","Sina Weibo Plugin for WordPress","0.3.1","zhlwish","https:\u002F\u002Fprofiles.wordpress.org\u002Fzhlwish\u002F","\u003Cp>一个很简单的在Wordpress首页显示你的最近的新浪微博的插件\u003C\u002Fp>\n\u003Ch4>The features in English\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>It has a widget, you can drag it drop it where you want in the side.Also you can set it how many tweetes you want to show.\u003C\u002Fli>\n\u003Cli>You do not need to input you Sina account and password, you just tell Sina that you want to use this plugin by click a link.\u003C\u002Fli>\n\u003Cli>It automaticly generate the link of the urls and @xxx in tweets.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If any help is needed, please checkout my tech blog: http:\u002F\u002Fwww.zhlwish.com\u003C\u002Fp>\n\u003Ch4>The features in Chinese\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>自带一个WordPress”小工具”, 你可使用拖拽的方式直接指定插件显示的位置\u003C\u002Fli>\n\u003Cli>使用新浪微博的授权, 不需要用户名和密码, 保证了你帐号的安全\u003C\u002Fli>\n\u003Cli>自动转换微博中的URL和@符号\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>如果使用上需要什么帮助请, 查看我的博客: http:\u002F\u002Fwww.zhlwish.com\u003C\u002Fp>\n","A very simple plugin shows the recent tweets from your Sina Weibo.",11163,"2011-11-13T06:00:00.000Z",[64,22,23,65,66],"sina","%e6%96%b0%e6%b5%aa","%e6%96%b0%e6%b5%aa%e5%be%ae%e5%8d%9a","http:\u002F\u002Fwww.zhlwish.com\u002Fwp-plugin-for-sina-weibo","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsina-weibo-plugin-for-wordpress.0.3.1.zip",{"slug":70,"name":71,"version":72,"author":73,"author_profile":74,"description":75,"short_description":76,"active_installs":11,"downloaded":77,"rating":78,"num_ratings":31,"last_updated":79,"tested_up_to":80,"requires_at_least":47,"requires_php":17,"tags":81,"homepage":83,"download_link":84,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"weibo2wp","weibo2wp plugin","1.2.2","donggua211","https:\u002F\u002Fprofiles.wordpress.org\u002Fdonggua211\u002F","\u003Cp>The goal of this plugin is to help people Synchronize their Weibo( which is a very popular light blog in China) to WP\u003C\u002Fp>\n","The goal of this plugin is to help people Synchronize their Weibo( which is a very popular light blog in China) to WP",2405,100,"2014-01-06T23:13:00.000Z","3.7.41",[21,23,82],"weibo-to-wordpress","http:\u002F\u002Fdonggua211.emma-paipai.com\u002Findex.php\u002Fweibo2wp\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fweibo2wp.zip",{"slug":86,"name":87,"version":88,"author":89,"author_profile":90,"description":91,"short_description":92,"active_installs":93,"downloaded":94,"rating":95,"num_ratings":96,"last_updated":97,"tested_up_to":98,"requires_at_least":99,"requires_php":17,"tags":100,"homepage":105,"download_link":106,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"sns-count-cache","SNS Count Cache","1.1.3","marubon","https:\u002F\u002Fprofiles.wordpress.org\u002Fmarubon\u002F","\u003Cp>SNS Count Cache is a plugin which helps you to shorten page loading time displaying share and follower counts through the use of cache mechanism.\u003C\u002Fp>\n\u003Cp>Notice:\u003Cbr \u002F>\nIn the upgrade from Ver. 0.11.1 or below, Reregistration of information such as client ID, client secret, and access token is needed in the setting page.\u003C\u002Fp>\n\u003Cp>The plugin gets share counts for the following SNS and caches these counts in the background.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Twitter\u003C\u002Fli>\n\u003Cli>Facebook\u003C\u002Fli>\n\u003Cli>Pocket\u003C\u002Fli>\n\u003Cli>Pinterest\u003C\u002Fli>\n\u003Cli>Linkedin\u003C\u002Fli>\n\u003Cli>Hatena Bookmark\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Note: You can select alternative Twitter API for share count retrieval from the following alternatives.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>widgetoon.js & count.jsoon\u003C\u002Fli>\n\u003Cli>OpenShareCount\u003C\u002Fli>\n\u003Cli>TwitCount\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The plugin also caches follower counts for the following SNS in the same way.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Twitter\u003C\u002Fli>\n\u003Cli>Facebook\u003C\u002Fli>\n\u003Cli>Feedly\u003C\u002Fli>\n\u003Cli>Instagram\u003C\u002Fli>\n\u003Cli>OneSignal\u003C\u002Fli>\n\u003Cli>Push7\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The share and follower counts can be retrieved quickly not through network but through the cache using given functions.\u003C\u002Fp>\n\u003Cp>The following shows functions to get share count from the cache:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>scc_get_share_twitter()\u003C\u002Fli>\n\u003Cli>scc_get_share_facebook()\u003C\u002Fli>\n\u003Cli>scc_get_share_pocket()\u003C\u002Fli>\n\u003Cli>scc_get_share_pinterest()\u003C\u002Fli>\n\u003Cli>scc_get_share_linkedin()\u003C\u002Fli>\n\u003Cli>scc_get_share_hatebu()\u003C\u002Fli>\n\u003Cli>scc_get_share_total()\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The following shows functions to get follower count from the cache:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>scc_get_follow_feedly()\u003C\u002Fli>\n\u003Cli>scc_get_follow_twitter()\u003C\u002Fli>\n\u003Cli>scc_get_follow_facebook()\u003C\u002Fli>\n\u003Cli>scc_get_follow_instagram()\u003C\u002Fli>\n\u003Cli>scc_get_follow_onesignal()\u003C\u002Fli>\n\u003Cli>scc_get_follow_push7()\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The following describes meta keys to get share count from custom field.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>scc_share_count_twitter\u003C\u002Fli>\n\u003Cli>scc_share_count_facebook\u003C\u002Fli>\n\u003Cli>scc_share_count_pocket\u003C\u002Fli>\n\u003Cli>scc_share_count_pinterest\u003C\u002Fli>\n\u003Cli>scc_share_count_linkedin\u003C\u002Fli>\n\u003Cli>scc_share_count_hatebu\u003C\u002Fli>\n\u003Cli>scc_share_count_total\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The following describes meta keys to get delta of share count from custom field.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>scc_share_delta_twitter\u003C\u002Fli>\n\u003Cli>scc_share_delta_facebook\u003C\u002Fli>\n\u003Cli>scc_share_delta_pocket\u003C\u002Fli>\n\u003Cli>scc_share_delta_pinterest\u003C\u002Fli>\n\u003Cli>scc_share_delta_linkedin\u003C\u002Fli>\n\u003Cli>scc_share_delta_hatebu\u003C\u002Fli>\n\u003Cli>scc_share_delta_total\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Arbitrary section\u003C\u002Fh3>\n","This plugin gets and caches SNS counts in the background, and help you to shorten page loading time through the use of cache mechanism.",8000,149557,80,4,"2019-06-06T11:21:00.000Z","5.2.24","3.7",[101,102,103,22,104],"cache","performance","share","social","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsns-count-cache\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsns-count-cache.zip",{"slug":108,"name":109,"version":110,"author":111,"author_profile":112,"description":113,"short_description":114,"active_installs":115,"downloaded":116,"rating":13,"num_ratings":13,"last_updated":117,"tested_up_to":118,"requires_at_least":119,"requires_php":120,"tags":121,"homepage":17,"download_link":126,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"cc-addon-pack","Saitama Addon Pack","1.0.8","communitycom","https:\u002F\u002Fprofiles.wordpress.org\u002Fcommunitycom\u002F","\u003Cp>This plug-in is an integrated plug-in with a variety of features that make it powerful your web site.\u003C\u002Fp>\n\u003Cp>[ Powerful　Widgets ]\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Recent Posts – display the link text and the date of the latest article title.\u003C\u002Fli>\n\u003Cli>FB Page Plugin – display the Facebook Page Plugin.\u003C\u002Fli>\n\u003Cli>topic area – display the topic area.\u003C\u002Fli>\n\u003Cli>Contact widget – display contact area.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>[ Social media ]\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Print OG Tags\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>[ Others ]\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Print Google Analytics tag\u003C\u002Fli>\n\u003Cli>Print meta keyword tag\u003C\u002Fli>\n\u003Cli>Print meta description tag\u003C\u002Fli>\n\u003Cli>Set Default Thumbnail\u003C\u002Fli>\n\u003Cli>Set Favicon\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>and more.\u003C\u002Fp>\n","This plug-in is an integrated plug-in with a variety of features that make it powerful your web site.",1000,17975,"2023-11-30T23:49:00.000Z","6.3.8","4.4","7.4",[122,123,124,125,22],"default-thumbnail","disable-emoji","google-analytics","new-posts","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcc-addon-pack.1.0.8.zip",{"attackSurface":128,"codeSignals":148,"taintFlows":189,"riskAssessment":217,"analyzedAt":232},{"hooks":129,"ajaxHandlers":144,"restRoutes":145,"shortcodes":146,"cronEvents":147,"entryPointCount":13,"unprotectedCount":13},[130,136,140],{"type":131,"name":132,"callback":133,"file":134,"line":135},"action","widgets_init","anonymous","qqweiboplugin.php",254,{"type":131,"name":137,"callback":138,"file":134,"line":139},"admin_menu","qq_weibo_admin_page",264,{"type":131,"name":141,"callback":142,"file":134,"line":143},"wp_head","qq_weibo_include_css",279,[],[],[],[],{"dangerousFunctions":149,"sqlUsage":153,"outputEscaping":155,"fileOperations":156,"externalRequests":31,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":188},[150],{"fn":151,"file":134,"line":135,"context":152},"create_function","add_action('widgets_init', create_function('', 'return register_widget(\"qqWeibo_Widget\");'));",{"prepared":13,"raw":13,"locations":154},[],{"escaped":156,"rawEcho":157,"locations":158},2,16,[159,162,164,166,168,170,172,174,176,178,179,180,182,184,185,186],{"file":134,"line":160,"context":161},104,"raw output",{"file":134,"line":163,"context":161},114,{"file":134,"line":165,"context":161},143,{"file":134,"line":167,"context":161},182,{"file":134,"line":169,"context":161},210,{"file":134,"line":171,"context":161},213,{"file":134,"line":173,"context":161},225,{"file":134,"line":175,"context":161},235,{"file":134,"line":177,"context":161},236,{"file":134,"line":177,"context":161},{"file":134,"line":177,"context":161},{"file":134,"line":181,"context":161},239,{"file":134,"line":183,"context":161},240,{"file":134,"line":183,"context":161},{"file":134,"line":183,"context":161},{"file":134,"line":187,"context":161},275,[],[190,209],{"entryPoint":191,"graph":192,"unsanitizedCount":156,"severity":208},"get_access_token (qqweiboplugin.php:55)",{"nodes":193,"edges":205},[194,199],{"id":195,"type":196,"label":197,"file":134,"line":198},"n0","source","$_REQUEST (x2)",58,{"id":200,"type":201,"label":202,"file":134,"line":203,"wp_function":204},"n1","sink","update_option() [Settings Manipulation]",61,"update_option",[206],{"from":195,"to":200,"sanitized":207},false,"low",{"entryPoint":210,"graph":211,"unsanitizedCount":156,"severity":208},"\u003Cqqweiboplugin> (qqweiboplugin.php:0)",{"nodes":212,"edges":215},[213,214],{"id":195,"type":196,"label":197,"file":134,"line":198},{"id":200,"type":201,"label":202,"file":134,"line":203,"wp_function":204},[216],{"from":195,"to":200,"sanitized":207},{"summary":218,"deductions":219},"The \"qq-weibo-plugin-for-wordpress\" v1.1 plugin presents a mixed security posture. On one hand, the lack of known CVEs and a clean vulnerability history is a positive indicator, suggesting a relatively stable codebase concerning documented security flaws. The plugin also demonstrates good practices in SQL query handling, with 100% of queries using prepared statements, and no critical or high-severity taint flows found during static analysis. However, significant security concerns arise from the code signals. The presence of the `create_function` dangerous function, coupled with a very low percentage of properly escaped output (11%), indicates a high risk of Cross-Site Scripting (XSS) vulnerabilities. Furthermore, the absence of nonce checks and capability checks on what appears to be an attack surface of 0 entry points, while seemingly safe, could become a critical weakness if any entry points were to be introduced or if existing file operations or external HTTP requests are not properly secured against unauthorized access or manipulation. The unsanitized paths in taint analysis also warrant attention, despite their classification as not critical or high. In conclusion, while the plugin avoids common documented vulnerabilities, its internal code quality and lack of robust authorization and input sanitization present substantial inherent risks.",[220,222,225,228,230],{"reason":221,"points":11},"Presence of dangerous function create_function",{"reason":223,"points":224},"Low percentage of properly escaped output",8,{"reason":226,"points":227},"No nonce checks",5,{"reason":229,"points":227},"No capability checks",{"reason":231,"points":96},"Flows with unsanitized paths","2026-03-17T00:45:01.585Z",{"wat":234,"direct":243},{"assetPaths":235,"generatorPatterns":238,"scriptPaths":239,"versionParams":240},[236,237],"\u002Fwp-content\u002Fplugins\u002Fqq-weibo-plugin-for-wordpress\u002Fcss\u002Fqqweibo.css","\u002Fwp-content\u002Fplugins\u002Fqq-weibo-plugin-for-wordpress\u002Fjs\u002Fqqweibo.js",[],[237],[241,242],"qq-weibo-plugin-for-wordpress\u002Fcss\u002Fqqweibo.css?ver=","qq-weibo-plugin-for-wordpress\u002Fjs\u002Fqqweibo.js?ver=",{"cssClasses":244,"htmlComments":248,"htmlAttributes":249,"restEndpoints":251,"jsGlobals":252,"shortcodeOutput":254},[245,246,247],"weibo_link","follow_me","clear",[],[250],"id=\"weibo\"",[],[253],"qqWeibo_Widget",[]]