[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f578U93_8_nb9CucibbhnBDKzOGvT_2SBiGPp-1VzxFw":3,"$fi32C9yST-peUqaOFTUV6scSRDqG-fmSsVoCHESatiJA":406,"$f_hVBr9uZpSgfUqh4SOuqW9xYXHTrtEVqQk_Fq87_sAI":410},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":18,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"discovery_status":30,"vulnerabilities":31,"developer":32,"crawl_stats":28,"alternatives":39,"analysis":138,"fingerprints":358},"reward-for-comment","Reward for Comment","1.0.0","trof","https:\u002F\u002Fprofiles.wordpress.org\u002Ftrof\u002F","\u003Cp>Reward users for creating unique content for your website\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Demos\u003C\u002Fstrong>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwmexp.com\u002Freward-for-comment\u002F\" rel=\"nofollow ugc\">Posts and Comments\u003C\u002Fa> – Working example\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features\u003C\u002Fstrong>\u003Cbr \u002F>\n* You can use tiny amounts of money. \u003Cbr \u002F>\n* Instant payouts. \u003Cbr \u002F>\n* Configurable pre-calculations.\u003C\u002Fp>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>English – included\u003C\u002Fli>\n\u003Cli>Russian- included\u003C\u002Fli>\n\u003C\u002Ful>\n","Reward users for creating unique content for your website",10,1423,80,1,"2020-09-09T09:53:00.000Z","5.5.18","2.0","",[20,21,22,23,24],"bitcoin","comment","content","reward","satoshi","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Freward-for-comment.zip",85,0,null,"2026-07-22T17:31:50.256Z","no_bundle",[],{"slug":7,"display_name":33,"profile_url":8,"plugin_count":34,"total_installs":35,"avg_security_score":26,"avg_patch_time_days":36,"trust_score":37,"computed_at":38},"Matthew Petroff",16,1760,30,84,"2026-08-29T19:40:23.209Z",[40,60,84,98,121],{"slug":41,"name":42,"version":43,"author":44,"author_profile":45,"description":46,"short_description":47,"active_installs":48,"downloaded":49,"rating":37,"num_ratings":50,"last_updated":51,"tested_up_to":52,"requires_at_least":53,"requires_php":18,"tags":54,"homepage":58,"download_link":59,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"relative-url","Relative URL","0.1.8","Sparanoid","https:\u002F\u002Fprofiles.wordpress.org\u002Fsparanoid\u002F","\u003Cp>Relative URL applies the \u003Ccode>wp_make_link_relative\u003C\u002Fcode> function to links (posts, categories, pages, etc.) to convert them to relative URLs. Useful for developers when debugging local WordPress instance on a mobile device (iPad, iPhone, etc.).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Notice\u003C\u002Fstrong>: This plugin SHOULD be used for local development only. I haven’t tested on a production environment; it \u003Cstrong>may\u003C\u002Fstrong> work with some issues, like unwanted URLs in RSS feed or sharing URLs are replaced with relative URLs, etc.\u003C\u002Fp>\n\u003Cp>More information please visit my \u003Ca href=\"https:\u002F\u002Fsparanoid.com\u002Fwork\u002Frelative-url\u002F\" rel=\"nofollow ugc\">site\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>For example:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>http:\u002F\u002Flocalhost:8080\u002Fwp\u002F\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Will be converted to:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002Fwp\u002F\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>And..\u003C\u002Fp>\n\u003Cpre>\u003Ccode>http:\u002F\u002Flocalhost:8080\u002Fwp\u002F2012\u002F09\u002F01\u002Fhello-world\u002F\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Will be converted to:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002Fwp\u002F2012\u002F09\u002F01\u002Fhello-world\u002F\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>And..\u003C\u002Fp>\n\u003Cpre>\u003Ccode>http:\u002F\u002Flocalhost:8080\u002Fwp\u002Fwp-content\u002Fthemes\u002Ftwentyeleven\u002Fstyle.css\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Will be converted to:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002Fwp\u002Fwp-content\u002Fthemes\u002Ftwentyeleven\u002Fstyle.css\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Then after activating this plugin, you can simply access your local instance using \u003Ccode>http:\u002F\u002F10.0.1.5:8888\u002Fwp\u002F\u003C\u002Fcode> on your iPad or other mobile devices without having styles and navigation issue.\u003C\u002Fp>\n","Relative URL applies wp_make_link_relative function to links to convert them to relative URLs.",3000,109525,26,"2021-08-11T18:45:00.000Z","5.8.13","2.1.0",[55,56,21,57,22],"admin","administration","comments","https:\u002F\u002Fsparanoid.com\u002Fwork\u002Frelative-url\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frelative-url.0.1.8.zip",{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":68,"downloaded":69,"rating":70,"num_ratings":71,"last_updated":72,"tested_up_to":73,"requires_at_least":74,"requires_php":75,"tags":76,"homepage":82,"download_link":83,"security_score":70,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"bulk-delete-all-in-one","SiteEase Bulk Delete Manager","1.1.3","iflairwebtechnologies","https:\u002F\u002Fprofiles.wordpress.org\u002Fiflairwebtechnologies\u002F","\u003Cp>\u003Cstrong>SiteEase Bulk Delete Manager\u003C\u002Fstrong> is a content management utility designed for WordPress administrators who need to clean up large volumes of site content quickly and efficiently.\u003C\u002Fp>\n\u003Cp>The plugin allows bulk deletion of pages, posts, media files, and comments from a centralized admin interface. All actions are handled using AJAX, ensuring smooth operation without page reloads.\u003C\u002Fp>\n\u003Cp>This plugin is ideal for:\u003Cbr \u002F>\n– Cleaning test or demo content\u003Cbr \u002F>\n– Removing unused media files\u003Cbr \u002F>\n– Managing large sites with frequent content updates\u003Cbr \u002F>\n– Administrators who need precise control over bulk deletion actions\u003C\u002Fp>\n\u003Cp>No coding knowledge is required, and all actions are performed directly from the WordPress admin dashboard.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Ch4>Page Management\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Delete all pages with a single action from the \u003Cstrong>Page Settings\u003C\u002Fstrong> tab\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Post Management\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Delete all posts easily from the \u003Cstrong>Post Settings\u003C\u002Fstrong> tab\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Media Management\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Delete all media files at once\u003C\u002Fli>\n\u003Cli>Delete media by \u003Cstrong>month-year upload folders\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>View and manage:\n\u003Cul>\n\u003Cli>Total images and storage size\u003C\u002Fli>\n\u003Cli>Attached images\u003C\u002Fli>\n\u003Cli>Unattached images\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Filter media by:\n\u003Cul>\n\u003Cli>Date range\u003C\u002Fli>\n\u003Cli>Month and year\u003C\u002Fli>\n\u003Cli>Year\u003C\u002Fli>\n\u003Cli>Author\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Remove media entries stored in the WordPress options table\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Comment Management\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Delete all comments quickly from the \u003Cstrong>Comments Settings\u003C\u002Fstrong> tab\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>All deletion actions are clearly separated by section to prevent accidental data loss.\u003C\u002Fp>\n","SiteEase Bulk Delete Manager helps administrators safely and efficiently delete large amounts of WordPress content using a simple, AJAX-powered interf …",900,4222,100,2,"2026-01-06T13:56:00.000Z","6.9.5","4.7","5.6",[77,78,79,80,81],"bulk-delete","comment-delete","content-cleanup","media-delete","post-delete","https:\u002F\u002Fprofiles.wordpress.org\u002Fiflairwebtechnologies","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbulk-delete-all-in-one.1.1.3.zip",{"slug":85,"name":86,"version":87,"author":44,"author_profile":45,"description":88,"short_description":89,"active_installs":90,"downloaded":91,"rating":70,"num_ratings":92,"last_updated":93,"tested_up_to":52,"requires_at_least":94,"requires_php":18,"tags":95,"homepage":96,"download_link":97,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"quotmarks-replacer","Quotmarks Replacer","2.6.21","\u003Cp>Quotmarks Replacer disables \u003Ccode>wptexturize\u003C\u002Fcode> function that keeps all quotation marks and suspension points in half-width form. This plugin also works fine with multisite enabled WordPress (aka. WordPress Mu).\u003C\u002Fp>\n\u003Cp>More information please visit my \u003Ca href=\"https:\u002F\u002Fsparanoid.com\u002Fwork\u002Fquotmarks-replacer\u002F\" rel=\"nofollow ugc\">site\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Quotmarks Replacer 通過禁用 \u003Ccode>wptexturize\u003C\u002Fcode> 函數，解決 WordPress 自動將半形的單引號、雙引號和省略號轉換爲全形標點的問題。使後台輸入的標點格式與前台讀者瀏覽的標點格式保持一致。並且對 multisite 多站點（WordPress Mu）有良好的支持\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Reviews（用戶評價）\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>我──一個網絡民工──當然有人會覺得這是謙虛，終於擁有了強悍的標點符號插件──也可能是世界上最棒的！我可以這樣雙引號“”，也可以這樣””，還可以這樣”──無論是哪一樣，都是最自由的表達！ ── 和菜頭\u003C\u002Fp>\n\u003Cp>It’s absolutely amazing. One of my all-time favorites. ── Steve Jobs\u003C\u002Fp>\n\u003Cp>Shut up, Matt. ──  WordPress\u003C\u002Fp>\n\u003C\u002Fblockquote>\n","Quotmarks Replacer disables wptexturize function that keeps all quotation marks and suspension points in half-width form.",300,24686,3,"2021-08-11T17:08:00.000Z","1.5",[55,56,21,57,22],"https:\u002F\u002Fsparanoid.com\u002Fwork\u002Fquotmarks-replacer\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fquotmarks-replacer.2.6.21.zip",{"slug":99,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":106,"downloaded":107,"rating":108,"num_ratings":109,"last_updated":110,"tested_up_to":111,"requires_at_least":112,"requires_php":113,"tags":114,"homepage":118,"download_link":119,"security_score":120,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"truncate-comments","Truncate Comments","2.00","Flector","https:\u002F\u002Fprofiles.wordpress.org\u002Fflector\u002F","\u003Cp>Truncate Comments is a plugin that hides a part of a long comment under a “\u003Cstrong>Read more\u003C\u002Fstrong>” link that, when clicked, reveals the hidden part of the comment. The plugin provides the functionality of Amazon.com comments.\u003C\u002Fp>\n\u003Cp>If you liked my plugin, please \u003Cstrong>rate\u003C\u002Fstrong> it.\u003C\u002Fp>\n\u003Cp>The plugin uses \u003Ca href=\"http:\u002F\u002Fwww.aakashweb.com\u002Fjquery-plugins\u002Fcollapser\u002F\" rel=\"nofollow ugc\">jQuery Collapser\u003C\u002Fa> by Aakash Chakravarthy.\u003C\u002Fp>\n","The plugin uses Javascript to hide long comments (Amazon-style comments).",90,4612,96,6,"2025-05-19T09:41:00.000Z","6.8.6","3.0","5.3",[115,116,21,57,117],"amazon","collapse","hide-content","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftruncate-comments\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftruncate-comments.zip",92,{"slug":122,"name":123,"version":124,"author":44,"author_profile":45,"description":125,"short_description":126,"active_installs":127,"downloaded":128,"rating":108,"num_ratings":129,"last_updated":130,"tested_up_to":52,"requires_at_least":131,"requires_php":18,"tags":132,"homepage":136,"download_link":137,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"space-lover","Space Lover","1.1.6","\u003Cp>A must-have plugin if you’re running a Chinese blog. This plugin also works fine with multisite enabled WordPress (aka. WordPress Mu).\u003C\u002Fp>\n\u003Cp>No options, no additional database inserts, no stupid banners and shitty ads, install and go.\u003C\u002Fp>\n\u003Cp>你客戶／合作夥伴不光文案寫的爛，而且還不會排版？Space Lover 可以幫到你。它會神奇的在中文、日文和英文、數字、符號之間自動加入空白，讓客戶網站的文案、文章看上去規範整潔。\u003C\u002Fp>\n\u003Cp>無選項、無 MySQL 插入，無廣告，安裝即用。\u003C\u002Fp>\n\u003Cp>覺得這招治標不治本？也可以試試 \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fsparanoid\u002Fchinese-copywriting-guidelines\" rel=\"nofollow ugc\">sparanoid\u002Fchinese-copywriting-guidelines\u003C\u002Fa>，讓你的客戶／合作夥伴學會如何正確的排版。\u003C\u002Fp>\n\u003Cp>Before:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>今天出去買菜花了5000元\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>After:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>今天出去買菜花了 5000 元\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Magically add an extra space between Chinese characters and English letters \u002F numbers \u002F common punctuation marks",60,4788,4,"2021-08-11T18:31:00.000Z","3.5.1",[133,134,57,22,135],"china","chinese","copywriting","https:\u002F\u002Fsparanoid.com\u002Fwork\u002Fspace-lover\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fspace-lover.1.1.6.zip",{"attackSurface":139,"codeSignals":204,"taintFlows":262,"riskAssessment":346,"analyzedAt":357},{"hooks":140,"ajaxHandlers":186,"restRoutes":201,"shortcodes":202,"cronEvents":203,"entryPointCount":92,"unprotectedCount":14},[141,146,150,153,156,161,164,169,173,177,182],{"type":142,"name":143,"callback":143,"file":144,"line":145},"action","init","reward-for-comment.php",42,{"type":142,"name":147,"callback":148,"file":144,"line":149},"plugins_loaded","load_plugin_textdomain",43,{"type":142,"name":151,"callback":151,"file":144,"line":152},"admin_menu",44,{"type":142,"name":154,"callback":154,"file":144,"line":155},"admin_init",45,{"type":142,"name":157,"callback":158,"priority":159,"file":144,"line":160},"wp_enqueue_scripts","enqueue_scripts_and_styles",99999,49,{"type":142,"name":162,"callback":158,"priority":159,"file":144,"line":163},"admin_enqueue_scripts",50,{"type":165,"name":166,"callback":167,"file":144,"line":168},"filter","manage_edit-comments_columns","process_comments_add_backend_column",51,{"type":165,"name":170,"callback":171,"priority":11,"file":144,"line":172},"manage_comments_custom_column","process_comments_backend_column",52,{"type":142,"name":174,"callback":175,"priority":11,"file":144,"line":176},"wp_set_comment_status","process_change_comment_status",53,{"type":165,"name":178,"callback":179,"priority":180,"file":144,"line":181},"comment_text","process_parse_comments",200,54,{"type":165,"name":183,"callback":184,"file":144,"line":185},"wp_mail_from_name","email_replace_name_from",394,[187,192,197],{"action":188,"nopriv":189,"callback":190,"hasNonce":189,"hasCapCheck":189,"file":144,"line":191},"RFCX1994R_get_satoshi_balance",false,"get_satoshi_balance",46,{"action":193,"nopriv":189,"callback":194,"hasNonce":195,"hasCapCheck":189,"file":144,"line":196},"RFCX1994R_save_admin_settings","save_admin_settings",true,47,{"action":198,"nopriv":189,"callback":199,"hasNonce":195,"hasCapCheck":189,"file":144,"line":200},"RFCX1994R_send_reward","send_reward",55,[],[],[],{"dangerousFunctions":205,"sqlUsage":206,"outputEscaping":208,"fileOperations":14,"externalRequests":129,"nonceChecks":71,"capabilityChecks":27,"bundledLibraries":261},[],{"prepared":27,"raw":27,"locations":207},[],{"escaped":209,"rawEcho":210,"locations":211},17,24,[212,215,217,219,221,223,225,227,229,231,233,235,237,239,241,243,245,247,249,251,253,255,257,259],{"file":144,"line":213,"context":214},158,"raw output",{"file":144,"line":216,"context":214},161,{"file":144,"line":218,"context":214},444,{"file":144,"line":220,"context":214},470,{"file":144,"line":222,"context":214},474,{"file":144,"line":224,"context":214},476,{"file":144,"line":226,"context":214},478,{"file":144,"line":228,"context":214},509,{"file":144,"line":230,"context":214},513,{"file":144,"line":232,"context":214},526,{"file":144,"line":234,"context":214},530,{"file":144,"line":236,"context":214},541,{"file":144,"line":238,"context":214},542,{"file":144,"line":240,"context":214},543,{"file":144,"line":242,"context":214},545,{"file":144,"line":244,"context":214},641,{"file":144,"line":246,"context":214},668,{"file":144,"line":248,"context":214},731,{"file":144,"line":250,"context":214},737,{"file":144,"line":252,"context":214},746,{"file":144,"line":254,"context":214},806,{"file":144,"line":256,"context":214},807,{"file":144,"line":258,"context":214},808,{"file":144,"line":260,"context":214},844,[],[263,286,317],{"entryPoint":264,"graph":265,"unsanitizedCount":71,"severity":285},"send_reward (reward-for-comment.php:58)",{"nodes":266,"edges":282},[267,272,276],{"id":268,"type":269,"label":270,"file":144,"line":271},"n0","source","$_POST (x2)",61,{"id":273,"type":274,"label":275,"file":144,"line":271},"n1","transform","→ log()",{"id":277,"type":278,"label":279,"file":144,"line":280,"wp_function":281},"n2","sink","file_put_contents() [File Write]",867,"file_put_contents",[283,284],{"from":268,"to":273,"sanitized":189},{"from":273,"to":277,"sanitized":189},"medium",{"entryPoint":287,"graph":288,"unsanitizedCount":92,"severity":285},"save_admin_settings (reward-for-comment.php:644)",{"nodes":289,"edges":311},[290,293,297,300,302,304,307,309],{"id":268,"type":269,"label":291,"file":144,"line":292},"$_REQUEST (x18)",648,{"id":273,"type":278,"label":294,"file":144,"line":295,"wp_function":296},"update_option() [Settings Manipulation]",656,"update_option",{"id":277,"type":269,"label":298,"file":144,"line":299},"$_REQUEST",650,{"id":301,"type":274,"label":275,"file":144,"line":299},"n3",{"id":303,"type":278,"label":279,"file":144,"line":280,"wp_function":281},"n4",{"id":305,"type":269,"label":270,"file":144,"line":306},"n5",670,{"id":308,"type":274,"label":275,"file":144,"line":306},"n6",{"id":310,"type":278,"label":279,"file":144,"line":280,"wp_function":281},"n7",[312,313,314,315,316],{"from":268,"to":273,"sanitized":195},{"from":277,"to":301,"sanitized":189},{"from":301,"to":303,"sanitized":189},{"from":305,"to":308,"sanitized":189},{"from":308,"to":310,"sanitized":189},{"entryPoint":318,"graph":319,"unsanitizedCount":109,"severity":285},"\u003Creward-for-comment> (reward-for-comment.php:0)",{"nodes":320,"edges":339},[321,324,327,328,329,331,332,333,335,337],{"id":268,"type":269,"label":322,"file":144,"line":323},"$_REQUEST (x2)",73,{"id":273,"type":278,"label":325,"file":144,"line":216,"wp_function":326},"echo() [XSS]","echo",{"id":277,"type":269,"label":291,"file":144,"line":292},{"id":301,"type":278,"label":294,"file":144,"line":295,"wp_function":296},{"id":303,"type":269,"label":330,"file":144,"line":271},"$_POST (x4)",{"id":305,"type":274,"label":275,"file":144,"line":271},{"id":308,"type":278,"label":279,"file":144,"line":280,"wp_function":281},{"id":310,"type":269,"label":322,"file":144,"line":334},397,{"id":336,"type":274,"label":275,"file":144,"line":334},"n8",{"id":338,"type":278,"label":279,"file":144,"line":280,"wp_function":281},"n9",[340,341,342,343,344,345],{"from":268,"to":273,"sanitized":195},{"from":277,"to":301,"sanitized":195},{"from":303,"to":305,"sanitized":189},{"from":305,"to":308,"sanitized":189},{"from":310,"to":336,"sanitized":189},{"from":336,"to":338,"sanitized":189},{"summary":347,"deductions":348},"The \"reward-for-comment\" plugin v1.0.0 exhibits a mixed security posture. On the positive side, it demonstrates good practices by utilizing prepared statements for all SQL queries and has no recorded vulnerability history, suggesting a generally secure development approach. However, there are notable areas of concern. The static analysis reveals a significant attack surface, with one of the three AJAX handlers lacking authentication checks. While taint analysis did not flag any critical or high-severity issues, the presence of unsanitized paths in all analyzed flows is a warning sign. Furthermore, the plugin has a low percentage of properly escaped output (41%), increasing the risk of cross-site scripting (XSS) vulnerabilities, especially in conjunction with the unprotected AJAX endpoint.",[349,352,354],{"reason":350,"points":351},"AJAX handler without auth checks",8,{"reason":353,"points":109},"Low percentage of properly escaped output",{"reason":355,"points":356},"Unsanitized paths in taint flows",5,"2026-03-16T23:25:48.111Z",{"wat":359,"direct":368},{"assetPaths":360,"generatorPatterns":363,"scriptPaths":364,"versionParams":365},[361,362],"\u002Fwp-content\u002Fplugins\u002Freward-for-comment\u002Fassets\u002Fjs\u002Fmain.js","\u002Fwp-content\u002Fplugins\u002Freward-for-comment\u002Fassets\u002Fcss\u002Fstyle.css",[],[361],[366,367],"reward-for-comment\u002Fassets\u002Fcss\u002Fstyle.css?ver=","reward-for-comment\u002Fassets\u002Fjs\u002Fmain.js?ver=",{"cssClasses":369,"htmlComments":375,"htmlAttributes":397,"restEndpoints":400,"jsGlobals":401,"shortcodeOutput":405},[370,371,372,373,374],"RFCX1994R_inline_wrap","RFCX1994R_satoshi_input_div","RFCX1994R_admin_menu","RFCX1994R_rewards_div","RFCX1994R_send_reward_button",[376,377,378,379,380,381,381,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396],"admin only ajax!","better safe than sorry","send_reward() called not from admin, POST:","send_reward() empty REQUEST","send_reward() nonce failed, POST:","need to notify admin","need to notify commenter","to send satoshi","bad htttp code","Failed to send the reward to %s. Service did not respond, please try again later.","code 200 - cryptoo.me is ok","failed to  send for some reason","Failed to send the reward to %s.\u003Cbr>\u003Cb>%s\u003C\u002Fb>","everythin is ok","Commenter %s rewarded %u satoshi","looks like $comment is never null","TODO pay on approve \u002F pay only manually  ($wp_comment_object->comment_approved == 1)","You are in admin mode","may be 'left';'right'","may be 'top'; 'bottom'","this.box_size x this.box_size 24px;36px;40px; etc.",[398,399],"data-comment-id","data-nonce",[],[402,403,404],"RFCX1994R_assets_path","RFCX1994R_ajax_url","RFCX1994R_nonce",[],{"error":195,"url":407,"statusCode":408,"statusMessage":409,"message":409},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Freward-for-comment\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":27,"versions":411},[]]