[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5vF6NNLEppmDF6pYC8WAwfWwClvZp_p4_47b5q6lbh8":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":37,"analysis":127,"fingerprints":162},"rtl-tester-mirror","RTL Tester Mirror by WebMan","1.0.5","WebMan Design | Oliver Juhas","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebmandesign\u002F","\u003Cp>This plugin simply mirrors the Right To Left (RTL) website layout using a CSS transform making it look like Left To Right (LTR) website.\u003C\u002Fp>\n\u003Cp>This is a great tool for LTR language speakers for testing RTL layouts of WordPress themes and plugins, making the testing process much easier for you eyes and brain 😉\u003C\u002Fp>\n\u003Cp>Works great with \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Frtl-tester\u002F\" rel=\"ugc\">RTL Tester\u003C\u002Fa> plugin.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Mirrors RTL website layout to make it look like LTR layout\u003C\u002Fli>\n\u003Cli>Plugin adds a blue notification with “Mirrored RTL” text at the top when the RTL website is mirrored\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Plugin Localization\u003C\u002Fh4>\n\u003Cp>Translate the plugin by clicking the \u003Cstrong>“Translate RTL Tester Mirror”\u003C\u002Fstrong> button under the “Translations” section in the sidebar.\u003C\u002Fp>\n\u003Ch4>Additional Resources\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fview\u002Fplugin-reviews\u002Frtl-tester-mirror\u002F#postform\" rel=\"ugc\">Write a review\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Frtl-tester-mirror\u002F\" rel=\"ugc\">Have a question?\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fwebmandesign\u002F#content-themes\" rel=\"nofollow ugc\">Grab a free theme\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Fwebmandesigneu\u002F\" rel=\"nofollow ugc\">Follow @webmandesigneu\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.webmandesign.eu\" rel=\"nofollow ugc\">Visit WebMan Design\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Makes it easy for LTR language speaker to test the RTL website layout by mirroring it so it looks like LTR.",20,6282,0,"2025-12-13T09:28:00.000Z","6.9.4","6.0","7.0",[19,20,21,22,23],"ltr","mirror","rtl","testing","transform","https:\u002F\u002Fwww.webmandesign.eu\u002Fportfolio\u002Frtl-tester-mirror-wordpress-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frtl-tester-mirror.1.0.5.zip",100,null,"2026-03-15T15:16:48.613Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":26,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"webmandesign",21,14090,2137,79,"2026-04-04T01:15:52.831Z",[38,59,78,97,115],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":26,"num_ratings":11,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":56,"download_link":57,"security_score":58,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"wp-rtl","WP-RTL","1.0","Fahad Alduraibi","https:\u002F\u002Fprofiles.wordpress.org\u002Ffduraibi\u002F","\u003Cp>\u003Cstrong>Do you write posts in different languages that have different directions?\u003C\u002Fstrong>\u003Cbr \u002F>\nThis plugin enables a feature in the post editor which allow writing texts in Left-to-Right and Right-to-Left directions in the same post (or page) so you can write in English (and any other LTR language) and also RTL languages like Arabic, Persian and Hebrew.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Simply look for the new buttons added to the post editor after installing the plugin.\u003C\u002Fstrong> (See the screenshots for better understanding)\u003C\u002Fp>\n\u003Cp>اضافة زرارين لشريط التحرير لتمكين تحويل النص للقراءة من اليمين لليسار مثل اللغة العربية والفارسية والعبرية\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fwww.fadvisor.net\u002Fblog\u002F2008\u002F10\u002Fwp-rtl\u002F\" rel=\"nofollow ugc\">More details\u003C\u002Fa>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Note: This plugin will not change the direction of the post title, since that is controlled by the theme.\u003C\u002Fli>\n\u003C\u002Ful>\n","Adds two buttons to the TinyMCE editor to enable writing text in Left to Right (LTR) and Right to Left (RTL) directions.",2000,56994,"2017-11-28T19:40:00.000Z","4.5.33","2.6","",[53,19,21,54,55],"formatting","tinymce","wysiwyg","http:\u002F\u002Fwww.fadvisor.net\u002Fblog\u002F2008\u002F10\u002Fwp-rtl\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-rtl.1.0.zip",85,{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":67,"downloaded":68,"rating":26,"num_ratings":11,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":51,"tags":72,"homepage":73,"download_link":74,"security_score":75,"vuln_count":76,"unpatched_count":76,"last_vuln_date":77,"fetched_at":28},"rtl-tester","RTL Tester","1.2","Yoav Farhi","https:\u002F\u002Fprofiles.wordpress.org\u002Fyoavf\u002F","\u003Cp>This plugin adds a button to the admin bar that allow admins to switch the text direction of the site. It can be used to test WordPress themes and plugins with Right To Left (RTL) text direction.\u003C\u002Fp>\n","Test your themes and plugins in RTL mode.",1000,229522,"2020-08-11T19:13:00.000Z","5.5.18","3.3",[21,22],"http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Frtl-tester\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frtl-tester.1.2.zip",63,1,"2025-12-11 00:00:00",{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":26,"downloaded":86,"rating":26,"num_ratings":76,"last_updated":87,"tested_up_to":88,"requires_at_least":89,"requires_php":17,"tags":90,"homepage":94,"download_link":95,"security_score":96,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"atr-inline-rtl-ltr","Atr Inline Rtl Ltr","1.0.1","yehudaT","https:\u002F\u002Fprofiles.wordpress.org\u002Fyehudat\u002F","\u003Cp>Block editor toolbar addition for mixed Rtl Ltr writing directions. It wrap words (or sentences) in paragraph block with span element and change their direction from rtl->ltr or ltr->rtl as you need.\u003C\u002Fp>\n\u003Cp>Uses dir=”rtl” or dir=”ltr”. See also \u003Ca href=\"https:\u002F\u002Fwww.w3.org\u002FInternational\u002Farticles\u002Finline-bidi-markup\u002F\" rel=\"nofollow ugc\">Inline bidi markup at www.w3.org\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Note that the wrapping element is \u003C span dir=”rtl” || dir=”ltr” class=”atr-inline-direction-rtl” || class=”atr-inline-direction-ltr” > so you can control it through your site CSS as well. i.e. .atr-inline-direction-rtl{direction: rtl;display:inline-block}\u003C\u002Fp>\n","Block editor toolbar addition for mixed Rtl Ltr writing directions. Wrap string with span element and change direction from rtl to ltr and vice versa",3442,"2025-01-18T07:44:00.000Z","6.7.5","5.8",[91,92,19,21,93],"block","gutenberg","text-direction","https:\u002F\u002Fatarimtr.co.il","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fatr-inline-rtl-ltr.1.0.1.zip",92,{"slug":98,"name":99,"version":100,"author":101,"author_profile":102,"description":103,"short_description":104,"active_installs":105,"downloaded":106,"rating":13,"num_ratings":13,"last_updated":107,"tested_up_to":108,"requires_at_least":109,"requires_php":51,"tags":110,"homepage":113,"download_link":114,"security_score":58,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"wp-mailtrap","WP Mailtrap","1.0.0","Renato Alves","https:\u002F\u002Fprofiles.wordpress.org\u002Fespellcaste\u002F","\u003Cp>WP Mailtrap is a simple plugin to test emails in WordPress with the Mailtrap API.\u003C\u002Fp>\n\u003Cp>The plugin was created to non-developers who wishes to test if wp_mail is working or to test newsletters or simple text email in WordPress with the simple Mailtrap API.\u003C\u002Fp>\n","WP Mailtrap is a simple plugin to test emails in WordPress with the Mailtrap API.",10,4886,"2015-07-23T03:20:00.000Z","4.2.39","3.8",[111,22,112],"mailtrap","wpmail","http:\u002F\u002Fralv.es","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-mailtrap.1.0.zip",{"slug":116,"name":117,"version":41,"author":118,"author_profile":119,"description":120,"short_description":121,"active_installs":13,"downloaded":122,"rating":13,"num_ratings":13,"last_updated":51,"tested_up_to":70,"requires_at_least":123,"requires_php":51,"tags":124,"homepage":51,"download_link":125,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":126},"wp-sarahspell","WP-SARAHSPELL","Arab Spell Checker Team","https:\u002F\u002Fprofiles.wordpress.org\u002Farabspellchecker\u002F","\u003Cp>Enables Arabic Spell Checking in the TinyMCE editor.\u003Cbr \u002F>\nThe plugin relies on our spell checking API server to check words and generate suggestions. For that a single API request is done, and the response will contain all the presumably misspelled words and their correction suggestions. The plugin also uses an API endpoint to check the validity of the API keys used for spell checking. No other info is sent or exchanged with the API.\u003C\u002Fp>\n\u003Cp>This plugin relies on Classic Editor plugin (https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fclassic-editor\u002F) and must be installed before enabling this plugin.\u003C\u002Fp>\n\u003Cp>Service website (In Arabic only): https:\u002F\u002Farabicspellchecker.com\u002F\u003Cbr \u002F>\nService’s Terms of use link (In Arabic only) : https:\u002F\u002Farabicspellchecker.com\u002Fterms.html\u003C\u002Fp>\n","Enables Arabic Spell Checking in the TinyMCE editor.",996,"3.9",[53,19,21,54,55],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-sarahspell.1.0.zip","2026-03-15T10:48:56.248Z",{"attackSurface":128,"codeSignals":144,"taintFlows":154,"riskAssessment":155,"analyzedAt":161},{"hooks":129,"ajaxHandlers":140,"restRoutes":141,"shortcodes":142,"cronEvents":143,"entryPointCount":13,"unprotectedCount":13},[130,137],{"type":131,"name":132,"callback":133,"priority":134,"file":135,"line":136},"action","wp_head","rtl_tester_mirror_styles",9999,"rtl-tester-mirror.php",86,{"type":131,"name":138,"callback":133,"priority":134,"file":135,"line":139},"admin_print_styles",87,[],[],[],[],{"dangerousFunctions":145,"sqlUsage":146,"outputEscaping":148,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":153},[],{"prepared":13,"raw":13,"locations":147},[],{"escaped":13,"rawEcho":76,"locations":149},[150],{"file":135,"line":151,"context":152},82,"raw output",[],[],{"summary":156,"deductions":157},"Based on the static analysis, the 'rtl-tester-mirror' v1.0.5 plugin appears to have a minimal attack surface with no identified entry points such as AJAX handlers, REST API routes, shortcodes, or cron events. The code analysis also indicates no usage of dangerous functions, direct SQL queries, file operations, or external HTTP requests. This suggests a generally good security posture in terms of avoiding common web vulnerabilities. However, a significant concern arises from the output escaping analysis, which shows that 100% of outputs are not properly escaped. This could lead to Cross-Site Scripting (XSS) vulnerabilities if user-supplied data is displayed without proper sanitization.\n\nThe vulnerability history shows no recorded CVEs, which is a positive sign. This, combined with the lack of critical or high-severity findings in the taint analysis, suggests that the plugin has historically been well-behaved or has not been a target for significant exploits. Despite the lack of a large attack surface and historical vulnerabilities, the pervasive issue with unescaped output remains a notable weakness. Therefore, while the plugin shows promising signs of secure coding practices in many areas, the unescaped output represents a clear and present risk that needs to be addressed.",[158],{"reason":159,"points":160},"100% of outputs not properly escaped",7,"2026-03-16T22:58:07.239Z",{"wat":163,"direct":168},{"assetPaths":164,"generatorPatterns":165,"scriptPaths":166,"versionParams":167},[],[],[],[],{"cssClasses":169,"htmlComments":170,"htmlAttributes":171,"restEndpoints":172,"jsGlobals":173,"shortcodeOutput":174},[],[],[],[],[],[175],"\u003Cstyle type=\"text\u002Fcss\" media=\"screen\">html {\n\t\t\t\t\ttransform: scaleX(-1);\n\t\t\t\t}\n\t\t\t\thtml::after {\n\t\t\t\t\tcontent: \"Mirrored RTL\";\n\t\t\t\t\tposition: fixed;\n\t\t\t\tdisplay: inline-block;\n\t\t\t\tleft: 50%;\n\t\t\ttop: -3px;\n\t\t\tpadding: 10px 20px;\n\t\t\tfont-size: 12px;\n\t\t\tfont-family: sans-serif;\n\t\t\ttext-transform: uppercase;\n\t\t\tbackground: #21759b;\n\t\t\tcolor: #fff;\n\t\t\twhite-space: nowrap;\n\t\t\tz-index: 9999999;\n\t\t\tborder-radius: 3px;\n\t\t\ttransform: scaleX(-1) translateX(50%);\n\t\t\ttransform-origin: 50% 0;\n\t\t}\n\t\t\t#wpadminbar { margin-top: -32px; }\n\t\t\t.wp-admin #wpadminbar { margin-top: 0; }\u003C\u002Fstyle>"]