[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9Lcutbm6P096YBhA4S56BxnWK0Rb8w2cVCAFZV8OIt0":3,"$ffmNoV3MezBT9NskOZ01hPkv63zfu1efg-cp-9WShiUo":222,"$fzcSfRedb5YvTRb1AqfxjNtFy0LByZ51n_zUOnVZpYVo":227},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"discovery_status":29,"vulnerabilities":30,"developer":31,"crawl_stats":27,"alternatives":36,"analysis":140,"fingerprints":197},"safe-php-code-widget","Safe PHP Code Widget","1.0","k0tik","https:\u002F\u002Fprofiles.wordpress.org\u002Fk0tik\u002F","\u003Cp>The usual Text widget allows you to insert arbitrary Text and\u002For HTML code. This allows that too, but also parses any PHP or JavaScript code in the text widget and executes it.\u003C\u002Fp>\n\u003Cp>This plugin is based on “PHP Code Widget”, but now available for use by site administrators ONLY, which makes it more secure.\u003C\u002Fp>\n\u003Cp>All PHP code must be enclosed in the standard php opening and closing tags ( \u003Ccode>\u003C?php\u003C\u002Fcode> and \u003Ccode>?>\u003C\u002Fcode> ) for it to be recognized and executed. Also JavaScript code must be enclosed in the \u003Ccode>\u003Cscript>\u003C\u002Fcode> and \u003Ccode>\u003C\u002Fscript>\u003C\u002Fcode> tags, as usual.\u003C\u002Fp>\n","Adds a secure and simple widget in which you can use PHP and JavaScript code. Also you can use unfiltered HTML or just Text. Admin Use Only.",70,2292,0,"2019-01-09T01:28:00.000Z","5.0.25","2.8","",[19,20,21,22,23],"code","html","javascript","php","widget","https:\u002F\u002Fnewbiz.online\u002Fwp","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsafe-php-code-widget.zip",85,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},1,30,84,"2026-05-19T18:13:04.372Z",[37,57,77,98,120],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":48,"last_updated":49,"tested_up_to":50,"requires_at_least":51,"requires_php":52,"tags":53,"homepage":55,"download_link":56,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"code-widget","Code Widget","1.0.15","Sharaz Shahid","https:\u002F\u002Fprofiles.wordpress.org\u002Fsharaz\u002F","\u003Cp>Code Widget is simple widget allows you to insert any arbitrary Text\u002FHTML  and run  PHP Code or Short Code. This Widget parses PHP code  into simple text and much more.\u003C\u002Fp>\n\u003Cp>Only users with the unfiltered_html role will be allowed to insert unfiltered HTML. This includes PHP code, so users without admin or editor permissions will not be able to use this to execute code, even if they have widget editing permissions.\u003Cbr \u002F>\nThis plugin is developed and maintained by \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Fsharazghouri1\" rel=\"nofollow ugc\">Sharaz Shahid\u003C\u002Fa>\u003C\u002Fp>\n","Code widget help  to  add  Short Code, PHP Code, HTML, and Simple Text in widget.",4000,60404,98,35,"2022-06-11T11:06:00.000Z","6.1.0","4.0","7.0",[19,20,22,54,23],"short-code","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcode-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcode-widget.1.0.15.zip",{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":13,"num_ratings":13,"last_updated":67,"tested_up_to":68,"requires_at_least":69,"requires_php":70,"tags":71,"homepage":74,"download_link":75,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":76},"insert-shortcode-pattern","Insert ShortCode Pattern","1.1.1","3vweb","https:\u002F\u002Fprofiles.wordpress.org\u002F3vweb\u002F","\u003Cp>Этот плагин позволяет создавать шаблоны и вставлять заданный текст на страницу при помощи использования короткого кода (шорткода). В качестве места размещения можно указать подвал сайта (footer), либо в месте вставки короткого кода (шорткода) на странице. В качестве шаблона можно использовать любые HTML теги (в т.ч. javascript) без нарушения целостности, а также PHP код.\u003C\u002Fp>\n","Шаблонный текст вставляемый на страницу при помощи шорткода. HTML теги, PHP код",10,1452,"2019-08-30T16:49:00.000Z","5.2.24","4.6.1","5.2.4",[20,21,72,22,73],"%d1%88%d0%b0%d0%b1%d0%bb%d0%be%d0%bd","shortcode","http:\u002F\u002F3v-web.ru","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Finsert-shortcode-pattern.zip","2026-03-15T15:16:48.613Z",{"slug":78,"name":79,"version":80,"author":81,"author_profile":82,"description":83,"short_description":84,"active_installs":85,"downloaded":86,"rating":47,"num_ratings":87,"last_updated":88,"tested_up_to":89,"requires_at_least":90,"requires_php":91,"tags":92,"homepage":94,"download_link":95,"security_score":47,"vuln_count":96,"unpatched_count":13,"last_vuln_date":97,"fetched_at":28},"shortcoder","Shortcoder — Create Shortcodes for Anything","6.5.2","vaakash","https:\u002F\u002Fprofiles.wordpress.org\u002Fvaakash\u002F","\u003Cp>Shortcoder plugin allows to create a custom shortcodes for HTML, JavaScript, CSS and other code snippets. Now the shortcodes can be used in posts\u002Fpages and the snippet will be replaced in place.\u003C\u002Fp>\n\u003Ch3>✍ Create shortcodes easily\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Give a name for the shortcode\u003C\u002Fli>\n\u003Cli>Paste the HTML\u002FJavaScript\u002FCSS as shortcode content\u003C\u002Fli>\n\u003Cli>Save !\u003C\u002Fli>\n\u003Cli>Now insert the shortcode \u003Ccode>[sc name=\"my_shortcode\"]\u003C\u002Fcode> in your post\u002Fpage.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Voila !\u003C\u002Fstrong> You got the HTML\u002FJavascript\u002FCSS in your post.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>✨ Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Create \u003Cstrong>custom shortcodes\u003C\u002Fstrong> easily and use them in any place where shortcode is supported.\u003C\u002Fli>\n\u003Cli>Have any \u003Cstrong>HTML\u003C\u002Fstrong>, \u003Cstrong>Javascript\u003C\u002Fstrong>, \u003Cstrong>CSS\u003C\u002Fstrong> as Shortcode content.\u003C\u002Fli>\n\u003Cli>Insert: \u003Cstrong>Custom parameters\u003C\u002Fstrong> in shortcode\u003C\u002Fli>\n\u003Cli>Insert: \u003Cstrong>WordPress parameters\u003C\u002Fstrong> in shortcode\u003C\u002Fli>\n\u003Cli>Multiple editors: Code, Visual and text modes.\u003C\u002Fli>\n\u003Cli>Globally disable the shortcode when not needed.\u003C\u002Fli>\n\u003Cli>Disable shortcode on desktop, mobile devices.\u003C\u002Fli>\n\u003Cli>A button in post editor to pick the shortcodes to insert.\u003C\u002Fli>\n\u003Cli>Execute blocks HTML in shortcode content.\u003C\u002Fli>\n\u003Cli>Insert shortcodes in Gutenberg\u002Fblock editor.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🎲 An example usage\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Create a shortcode named “adsenseAd” in the Shortcoder admin page.\u003C\u002Fli>\n\u003Cli>Paste the adsense code in the box given and save it.\u003C\u002Fli>\n\u003Cli>Use \u003Ccode>[sc name=\"adsenseAd\"]\u003C\u002Fcode> in your posts and pages.\u003C\u002Fli>\n\u003Cli>Tada !!! the ad code is replaced and it appears in the post.\u003C\u002Fli>\n\u003Cli>Now you can edit the ad code at one place and the code is updated in all the locations where the shortcode is used.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Similarly shortcodes can be created for frequently used snippets.\u003C\u002Fp>\n\u003Cp>You can also add \u003Ca href=\"https:\u002F\u002Fwww.aakashweb.com\u002Fdocs\u002Fshortcoder\u002F\" rel=\"nofollow ugc\">custom parameters\u003C\u002Fa> (like \u003Ccode>%%id%%\u003C\u002Fcode>) inside the snippets, and change it’s value like \u003Ccode>[sc name=\"youtube\" id=\"GrlRADfvjII\"]\u003C\u002Fcode> when using them.\u003C\u002Fp>\n\u003Ch3>🧱 Using in block editor\u003C\u002Fh3>\n\u003Cp>Though shortcodes can be used in \u003Cstrong>any\u003C\u002Fstrong> place manually, Shortcoder provides below options to select and insert the shortcodes created easily when working with the block editor.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Shortcoder block\u003C\u002Fli>\n\u003Cli>Toolbar button to select and insert shortcodes inline (under “more”)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>💎 Upgrade to PRO\u003C\u002Fh3>\n\u003Cp>Shortcoder also provides a \u003Ca href=\"https:\u002F\u002Fwww.aakashweb.com\u002Fwordpress-plugins\u002Fshortcoder\u002F\" rel=\"nofollow ugc\">PRO version\u003C\u002Fa> which has additional features to further enhance the experience. Below features are offered in the PRO version.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Custom editor\u003C\u002Fstrong> – Edit Shortcode content using block editor or page builder plugins like Elementor and WPBakery.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>(New) Translation with WPML\u003C\u002Fstrong> – Translate Shortcode content with WPML.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Revisions\u003C\u002Fstrong> – Revisions support for Shortcode content.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Locate shortcode\u003C\u002Fstrong> – Search posts and pages where a shortcode is used.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Extra code\u003C\u002Fstrong> – Include extra code to the footer when a shortcode is used in a page.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.aakashweb.com\u002Fwordpress-plugins\u002Fshortcoder\u002F\" rel=\"nofollow ugc\">Get started with Shortcoder – PRO\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Links\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.aakashweb.com\u002Fdocs\u002Fshortcoder\u002F\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.aakashweb.com\u002Fdocs\u002Fshortcoder\u002Ffaq\u002F\" rel=\"nofollow ugc\">FAQs\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.aakashweb.com\u002Fforum\u002F\" rel=\"nofollow ugc\">Support forum\u002FReport bugs\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.aakashweb.com\u002Fwordpress-plugins\u002Fshortcoder\u002F#pro\" rel=\"nofollow ugc\">PRO features\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Create custom \"Shortcodes\" easily for HTML, JavaScript, CSS code snippets and use the shortcodes within posts, pages & widgets",100000,1903638,226,"2026-03-01T17:44:00.000Z","6.9.4","4.9.0","5.3",[19,20,21,73,93],"snippets","https:\u002F\u002Fwww.aakashweb.com\u002Fwordpress-plugins\u002Fshortcoder\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshortcoder.6.5.2.zip",2,"2026-01-09 00:00:00",{"slug":99,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":106,"downloaded":107,"rating":108,"num_ratings":26,"last_updated":109,"tested_up_to":110,"requires_at_least":111,"requires_php":112,"tags":113,"homepage":115,"download_link":116,"security_score":117,"vuln_count":118,"unpatched_count":13,"last_vuln_date":119,"fetched_at":28},"css-javascript-toolbox","CSS & JavaScript Toolbox","12.0.6","wipeoutmedia","https:\u002F\u002Fprofiles.wordpress.org\u002Fwipeoutmedia\u002F","\u003Cp>Safely add CSS, JavaScript, PHP or HTML to unique code blocks, then choose where it goes on your site. For even more power, get our free AI-powered snippet plugin here: \u003Ca href=\"https:\u002F\u002Fwpsnippets.ai\u002F?utm_source=cjt_free_on_wordpress&utm_medium=readme_txt_description&utm_campaign=click_for_premium_link\" rel=\"nofollow ugc\">WP Snippets AI\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>IDEAL FOR:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Making CSS front-end changes\u003C\u002Fstrong> – No need to modify theme files or work with tedious built-in theme options. Just create a CSS code block.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Adding site functionality\u003C\u002Fstrong> – Stop adding plugins for simple tasks as they can slow down your site. Create a JavaScript or PHP code block instead.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Adding widgets, code snippets and third-party scripts\u003C\u002Fstrong> – Code blocks are perfect for adding scripts such as Google Analytics and chat widgets to your website.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>CJT is built on the concept of a code block. Each code block is more than just a code editor. It also contains a location editor so you can click the sections of your website you want your code to run.\u003C\u002Fp>\n\u003Cp>It was designed for super-fast development without any cumbersome page refreshing. Create as many code blocks as you need and see all of your code and locations in the one dashboard. Don’t worry, CJT has been optimised to handle 100’s of code blocks and thousands of locations (i.e. Pages, Posts, Categories, Custom Posts, etc).\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcss-javascript-toolbox.com\u002F?utm_source=cjt_free_on_wordpress&utm_medium=readme_txt_description&utm_campaign=click_for_premium_link\" rel=\"nofollow ugc\">Click for CSS & JavaScript Toolbox PLUS\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>FEATURES:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Easy to use ‘code blocks’ interface\u003C\u002Fli>\n\u003Cli>Powerful code editor\u003C\u002Fli>\n\u003Cli>Intuitive assignment panel (click where your code goes)\u003C\u002Fli>\n\u003Cli>Code\u002Fscript library management\u003C\u002Fli>\n\u003Cli>Add code to the header or footer hook\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PREMIUM\u003C\u002Fstrong> Add code to entire website, all posts, etc\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PREMIUM\u003C\u002Fstrong> Add code via shortcodes, widgets, Gutenburg blocks, etc\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PREMIUM\u003C\u002Fstrong> Add code via tags, URLs, regular expressions\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PREMIUM\u003C\u002Fstrong> 8 additional hooks for more precise assignments\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PREMIUM\u003C\u002Fstrong> Invert feature (run code everywhere but …)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PREMIUM\u003C\u002Fstrong> Editor tools (code auto complete, beautify\u002Fminify, etc)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PREMIUM\u003C\u002Fstrong> Code revisions system\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PREMIUM\u003C\u002Fstrong> Backup and export\u002Fimport system\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcss-javascript-toolbox.com\u002F?utm_source=cjt_free_on_wordpress&utm_medium=readme_txt_description&utm_campaign=click_for_premium_link\" rel=\"nofollow ugc\">Click for CSS & JavaScript Toolbox PLUS\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>OVERVIEW VIDEO\u003C\u002Fh3>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FvYAKePVgJqE?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n","Add CSS, JavaScript, PHP and HTML code snippets to your site. For AI-powered snippets, get our free plugin here: wpsnippets.ai",10000,537235,94,"2025-10-28T13:57:00.000Z","6.8.5","5.0","7.4.0",[19,21,22,114,93],"scripts","https:\u002F\u002Fcss-javascript-toolbox.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcss-javascript-toolbox.12.0.6.zip",95,4,"2025-10-31 00:00:00",{"slug":121,"name":122,"version":123,"author":124,"author_profile":125,"description":126,"short_description":127,"active_installs":106,"downloaded":128,"rating":129,"num_ratings":130,"last_updated":131,"tested_up_to":89,"requires_at_least":132,"requires_php":133,"tags":134,"homepage":137,"download_link":138,"security_score":117,"vuln_count":118,"unpatched_count":13,"last_vuln_date":139,"fetched_at":28},"simple-embed-code","Code Embed","2.5.2","David Artiss","https:\u002F\u002Fprofiles.wordpress.org\u002Fdartiss\u002F","\u003Cp>Code Embed allows you to embed code (JavaScript, CSS and HTML – it can’t be used for server-side code, such as PHP) in a post, without the content being changed by the editor. This is incredibly useful for embedding third-party scripts, etc. The plugin is used by many large sites, including Mozilla.\u003C\u002Fp>\n\u003Cp>Key features include…\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Add HTML or JavaScript to posts or pages – particularly useful for embedding videos!\u003C\u002Fli>\n\u003Cli>Embed in widgets using the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fwidget-logic\u002F\" title=\"Widget Logic\" rel=\"ugc\">Widget Logic\u003C\u002Fa> plugin\u003C\u002Fli>\n\u003Cli>Global embedding allows you set up some code in one post or page and then access it from another\u003C\u002Fli>\n\u003Cli>Modify the keywords or identifiers used for embedding the code to your own choice\u003C\u002Fli>\n\u003Cli>Search for embedding code via a simple search option\u003C\u002Fli>\n\u003Cli>Add a simple suffix to the embed code to convert videos to responsive output\u003C\u002Fli>\n\u003Cli>Embed an external script directly using just the URL\u003C\u002Fli>\n\u003Cli>And much, much more!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Iconography is courtesy of the very talented \u003Ca href=\"https:\u002F\u002Fwww.fiverr.com\u002Fjankirathore\" rel=\"nofollow ugc\">Janki Rathod\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Please visit the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fdartiss\u002Fcode-embed\" title=\"Github\" rel=\"nofollow ugc\">Github page\u003C\u002Fa> for the latest code development, planned enhancements and known issues\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>Getting Started\u003C\u002Fh3>\n\u003Cp>To use this plugin, you need to have custom fields enabled on your site. If you’re using the block editor, you may need to switch this on first – please scroll down to the next section to learn how to do this. If you’re using the classic editor then you’ll find the custom fields at the bottom of the editor screen.\u003C\u002Fp>\n\u003Cp>Although this plugin works for both posts and pages for simplicity I will simply refer to posts – bear in mind that pages work in the same way.\u003C\u002Fp>\n\u003Cp>Once you have custom fields switched on, here’s how easy it is to use…\u003C\u002Fp>\n\u003Col>\n\u003Cli>Once you have the plugin installed start a new post.\u003C\u002Fli>\n\u003Cli>Scroll down to the bottom of the screen and look for the “Custom Fields” section.\u003C\u002Fli>\n\u003Cli>Under “Add New Custom Field” enter a name of \u003Ccode>CODE1\u003C\u002Fcode> and your embed code as the value\u003C\u002Fli>\n\u003Cli>In your post content add \u003Ccode>{{CODE1}}\u003C\u002Fcode> where you wish the embed code to appear.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>And that’s it – when the post viewed or previewed \u003Ccode>{{CODE1}}\u003C\u002Fcode> will be replaced with the code that you asked to be embedded.\u003C\u002Fp>\n\u003Cp>This should get you started – for more information and advanced options please see below.. Alternatively, there’s a fantastic guide at \u003Ca href=\"http:\u002F\u002Fwww.elftronix.com\u002Ffree-easy-plugin-add-javascript-to-wordpress-posts-pages\u002F\" title=\"Free Easy Plugin! Add Javascript to WordPress Posts & Pages\" rel=\"nofollow ugc\">Elftronix\u003C\u002Fa> which I would recommend.\u003C\u002Fp>\n\u003Ch3>Using this plugin with the block editor (aka Gutenberg)\u003C\u002Fh3>\n\u003Cp>By default, custom fields are hidden inside the block editor but can be revealed.\u003C\u002Fp>\n\u003Col>\n\u003Cli>Edit or create a post\u003C\u002Fli>\n\u003Cli>Click the settings button (three dots) in the top, right-hand corner\u003C\u002Fli>\n\u003Cli>Go to Preferences\u003C\u002Fli>\n\u003Cli>Click the Panels tab\u003C\u002Fli>\n\u003Cli>You will find a button to toggle the ‘Custom Fields’ meta box – make sure this is toggled to “on”\u003C\u002Fli>\n\u003Cli>A button should appear titled “Enable & Reload” – you’ll need to click on that and wait for the page to reload before the custom fields will appear\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Check out the screenshots for how the custom fields should look.\u003C\u002Fp>\n\u003Ch3>I can’t find the custom fields\u003C\u002Fh3>\n\u003Cp>For block editor users, I’m assuming you’ve done the above. For classic editor users, the custom fields should be present by default. In all cases they should appear at the bottom of the editor screen.\u003C\u002Fp>\n\u003Cp>From version 2.4, anyone without the “unfiltered HTML” capability won’t be able to see custom fields, for added security. Please see the section “Custom Field Security”, below, for more details.\u003C\u002Fp>\n\u003Cp>If none of the above applies then you may have a theme or plugin that removes this or may have a problem with your WordPress installation – you will need to try the usual diagnostics to try and resolve this, including requesting help on \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fforum\u002Fhow-to-and-troubleshooting\u002F\" title=\"Fixing WordPress Forum\" rel=\"ugc\">the WordPress support forum\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Please bear in mind that the custom fields functionality is part of WordPress so it would be greatly appreciated if you don’t give me poor reviews in this situation as, I say, this component is not part of this plugin but, by using it, keeps this plugin simple to use and bloat-free 🙂\u003C\u002Fp>\n\u003Ch3>The Code Embed Options Screen\u003C\u002Fh3>\n\u003Cp>Whilst in WP Admin, if you go to Settings -> Code Embed, you’ll be able to access the options that are available for this plugin.\u003C\u002Fp>\n\u003Cp>Code embedding is performed via a special keyword that you must use to uniquely identify where you wish the code to appear. This consist of an opening identifier (some that that goes at the beginning), a keyword and then a closing identifier. You may also add a suffix to the end of the keyword if you wish to embed multiple pieces of code within the same post.\u003C\u002Fp>\n\u003Cp>From this options screen you can specify the above identifier that you wish to use. By default the opening and closing identifiers are percentage signs and the keyword is \u003Ccode>CODE\u003C\u002Fcode>. During these instructions these will be used in all examples.\u003C\u002Fp>\n\u003Cp>The options screen is only available to those that with a capability of able to manage options or greater. All the other Code Embed menu options are available to users with a capability to edit posts or greater.\u003C\u002Fp>\n\u003Ch3>How to Embed Code\u003C\u002Fh3>\n\u003Cp>To embed in a post you need to find the meta box under the post named “Custom Fields”. If this is missing you may need to add it by clicking on the “Screen Options” tab at the top of the new post screen.\u003C\u002Fp>\n\u003Cp>Now create a new custom field with the name of your keyword – e.g. \u003Ccode>CODE\u003C\u002Fcode>. The value of this field will be the code that you wish to embed. Save this custom field.\u003C\u002Fp>\n\u003Cp>Now, wherever you wish the code to appear in your post, simply put the full identifier (opening, keyword and closing characters). For example, \u003Ccode>{{CODE}}\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cp>If you wish to embed multiple pieces of code within a post you can add a suffix to the keyword. So we may set up 2 custom fields named \u003Ccode>CODE1\u003C\u002Fcode> and \u003Ccode>CODE2\u003C\u002Fcode>. Then in our post we would specify either \u003Ccode>{{CODE1}}\u003C\u002Fcode> or \u003Ccode>{{CODE2}}\u003C\u002Fcode> depending on which you wish to display.\u003C\u002Fp>\n\u003Cp>Don’t forget – via the options screen you can change any part of this identifier to your own taste.\u003C\u002Fp>\n\u003Ch3>How to Embed Code from an External URL\u003C\u002Fh3>\n\u003Cp>If you specify a URL within your post, surrounded by your choice of identifiers, then the contents of the URL will be embedded within your post.\u003C\u002Fp>\n\u003Cp>Obviously, be careful when embedding a URL that you have no control over, as this may be used to hijack your post by injecting, for example, dangerous JavaScript.\u003C\u002Fp>\n\u003Cp>For example, using the default options you could embed the contents of a URL using the following method…\u003C\u002Fp>\n\u003Cpre>\u003Ccode>{{http:\u002F\u002Fwww.example.com\u002Fcode.php}}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>or\u003C\u002Fp>\n\u003Cpre>\u003Ccode>{{https:\u002F\u002Fwww.example.com\u002Fcode.html}}\u003Ch3>How to Use Global Embedding\u003C\u002Fh3>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>You can also create global embeds – that is creating one piece of embed code and using it in multiple posts or pages.\u003C\u002Fp>\n\u003Cp>To do this simply make reference to an already defined (but unique) piece of embed code from another post or page.\u003C\u002Fp>\n\u003Cp>So, let’s say in one post you define a custom field named \u003Ccode>CODE1\u003C\u002Fcode>. You can, if you wish, place \u003Ccode>{{CODE1}}\u003C\u002Fcode> not just in that post but also in another and it will work.\u003C\u002Fp>\n\u003Cp>However, bear in mind that the embed code name must be unique – you can’t have defined it in multiple posts otherwise the plugin won’t know which one you’re referring to (although it will report this and list the posts that it has been used in).\u003C\u002Fp>\n\u003Cp>In the administration menu there is a sidebar menu named “Tools”. Under this is a sub-menu named “Code Search”. Use this to search for specific embed names and it will list all the posts\u002Fpages that they’re used on, along with the code for each.\u003C\u002Fp>\n\u003Ch3>Embedding in Widgets\u003C\u002Fh3>\n\u003Cp>Natively you cannot use the embed facilities within sidebar widgets. However, if you install the plugin \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fwidget-logic\u002F\" title=\"Widget Logic\" rel=\"ugc\">Widget Logic\u003C\u002Fa> then Code Embed has been set up to make use of this and add the ability.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Install \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fwidget-logic\u002F\" title=\"Widget Logic\" rel=\"ugc\">Widget Logic\u003C\u002Fa> and activate.\u003C\u002Fli>\n\u003Cli>In Administration, select the Widgets page from the Appearance menu. At the bottom there will be a set of Widget Logic options.\u003C\u002Fli>\n\u003Cli>Ensure Use ‘widget_content’ filter is ticked and press Save.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Although you cannot set up embed code within a widget you can make reference to it, for example by writing \u003Ccode>{{CODE1}}\u003C\u002Fcode> in the widget.\u003C\u002Fp>\n\u003Ch3>Responsive Output Conversion\u003C\u002Fh3>\n\u003Cp>Responsive output is where an element on a web page dynamically resizes depending upon the current available size. Most video embeds, for instance, will be a fixed size. This is fine if your website is also of a fixed size, however if you have a responsive site then this is not suitable.\u003C\u002Fp>\n\u003Cp>Code Embed provides a simple suffix that can be added to an embed code and will convert the output to being responsive. This works best with videos.\u003C\u002Fp>\n\u003Cp>To use, when adding the embed code onto the page, simply add \u003Ccode>_RES\u003C\u002Fcode> to the end, before the final identifier. For example, \u003Ccode>{{CODE1_RES}}\u003C\u002Fcode>. The \u003Ccode>_RES\u003C\u002Fcode> should not be added to the custom fields definition.\u003C\u002Fp>\n\u003Cp>This will now output the embedded code full width, but a width that is dynamic and will resize when required.\u003C\u002Fp>\n\u003Cp>If you don’t wish the output to be full width you can specify a maximum width by adding an additional \u003Ccode>_x\u003C\u002Fcode> on the end, where \u003Ccode>x\u003C\u002Fcode> is the required width in pixels. For example, \u003Ccode>{{CODE1_RES_500}}\u003C\u002Fcode> this will output \u003Ccode>CODE1\u003C\u002Fcode> as responsive but with a maximum width of 500 pixels.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>It should be noted that this is an experimental addition and will not work in all circumstances.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>Embedding in excerpts\u003C\u002Fh3>\n\u003Cp>By default embed code will not appear in excerpts. However, you can switch this ability on via the Code Embed options screen. If you do this then the standard rules of excerpts will still apply, but now once the code embed has applied – for example, excerpts are just text, a specific length, etc.\u003C\u002Fp>\n\u003Ch3>Filtering of code\u003C\u002Fh3>\n\u003Cp>By default, WordPress allows unfiltered HTML to be used by users in post custom fields, even if their role it set up otherwise. This opens up the possibility of leaving a site vulnerable, if any plugins that uses this data doesn’t check it appropriately.\u003C\u002Fp>\n\u003Cp>“Out of the box”, neither the contributor and author roles have unfiltered HTML capabilities but can access custom post fields.\u003C\u002Fp>\n\u003Cp>As this plugin requires the use unfiltered HTML, we need to ensure that the only users who use it, should be using it. From version 2.5, any users without this permission that update a post containing embeds from this plugin will cause the code to be filtered.\u003C\u002Fp>\n\u003Ch3>Reviews & Mentions\u003C\u002Fh3>\n\u003Cp>“Works like a dream. Fantastic!” – Anita.\u003C\u002Fp>\n\u003Cp>“Thank you for this plugin. I tried numerous other iframe plugins and none of them would work for me! This plugin worked like a charm the FIRST time.” – KerryAnn May.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fwsdblog.westbrook.k12.me.us\u002Fblog\u002F2009\u002F12\u002F24\u002Fembedding-content\u002F\" title=\"Embedding content\" rel=\"nofollow ugc\">Embedding content\u003C\u002Fa> – WSD Blogging Server.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fcomohago.conectandonos.gov.ar\u002F2009\u002F08\u002F05\u002Fanimando-imagenes-con-photopeach\u002F\" title=\"Animando imágenes con PhotoPeach\" rel=\"nofollow ugc\">Animating images with PhotoPeach\u003C\u002Fa> – Cómo hago.\u003C\u002Fp>\n","Code Embed provides a very easy and efficient way to embed code (JavaScript, CSS and HTML) in your posts and pages.",516191,88,45,"2026-03-15T10:00:00.000Z","4.6","7.4",[19,135,136,20,21],"css","embed","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsimple-embed-code\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-embed-code.2.5.2.zip","2026-03-17 00:00:00",{"attackSurface":141,"codeSignals":153,"taintFlows":184,"riskAssessment":185,"analyzedAt":196},{"hooks":142,"ajaxHandlers":149,"restRoutes":150,"shortcodes":151,"cronEvents":152,"entryPointCount":13,"unprotectedCount":13},[143],{"type":144,"name":145,"callback":146,"file":147,"line":148},"action","widgets_init","anonymous","safe-php-code-widget.php",62,[],[],[],[],{"dangerousFunctions":154,"sqlUsage":158,"outputEscaping":160,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":32,"bundledLibraries":183},[155],{"fn":156,"file":147,"line":148,"context":157},"create_function","add_action('widgets_init', create_function('', 'return register_widget(\"Safe_PHP_Code_Widget\");'));",{"prepared":13,"raw":13,"locations":159},[],{"escaped":96,"rawEcho":161,"locations":162},12,[163,166,168,170,172,174,175,177,178,179,181,182],{"file":147,"line":164,"context":165},24,"raw output",{"file":147,"line":167,"context":165},25,{"file":147,"line":169,"context":165},33,{"file":147,"line":171,"context":165},52,{"file":147,"line":173,"context":165},53,{"file":147,"line":173,"context":165},{"file":147,"line":176,"context":165},55,{"file":147,"line":176,"context":165},{"file":147,"line":176,"context":165},{"file":147,"line":180,"context":165},57,{"file":147,"line":180,"context":165},{"file":147,"line":180,"context":165},[],[],{"summary":186,"deductions":187},"The 'safe-php-code-widget' plugin, version 1.0, exhibits a mixed security posture. On the positive side, it demonstrates a strong adherence to secure coding practices by avoiding common vulnerabilities like SQL injection and external HTTP requests, and by utilizing prepared statements for all its SQL queries. The absence of known CVEs and a clean vulnerability history further suggest a currently well-maintained or low-risk profile.\n\nHowever, the static analysis reveals a critical concern: the presence of the `create_function` dangerous function. This function is known to be a significant security risk as it can lead to arbitrary code execution if used with unsanitized input, effectively bypassing many security controls. Although the taint analysis shows zero flows with unsanitized paths, this does not negate the inherent risk of `create_function` itself. Additionally, the extremely low percentage of properly escaped output (14%) indicates a high likelihood of cross-site scripting (XSS) vulnerabilities, particularly if any user-provided data indirectly reaches an output sink without proper sanitization.\n\nIn conclusion, while the plugin's overall architecture appears to have a limited attack surface and no publicly known vulnerabilities, the use of `create_function` and the significant lack of output escaping are substantial weaknesses. These issues introduce potential for critical vulnerabilities, especially if the widget is ever exposed to user-controlled input that is not rigorously validated before being passed to `create_function` or rendered in the output.",[188,191,193],{"reason":189,"points":190},"Use of dangerous function create_function",15,{"reason":192,"points":65},"Low percentage of properly escaped output",{"reason":194,"points":195},"No nonce checks detected",5,"2026-03-16T21:31:43.081Z",{"wat":198,"direct":207},{"assetPaths":199,"generatorPatterns":202,"scriptPaths":203,"versionParams":204},[200,201],"\u002Fwp-content\u002Fplugins\u002Fsafe-php-code-widget\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fsafe-php-code-widget\u002Fexecphp.js",[],[201],[205,206],"safe-php-code-widget\u002Fstyle.css?ver=","safe-php-code-widget\u002Fexecphp.js?ver=",{"cssClasses":208,"htmlComments":211,"htmlAttributes":212,"restEndpoints":219,"jsGlobals":220,"shortcodeOutput":221},[209,210],"widget_execphp","execphpwidget",[],[213,214,215,216,217,218],"id=\"safephpcode-title-","name=\"safephpcode-title-","id=\"safephpcode-text-","name=\"safephpcode-text-","id=\"safephpcode-filter-","name=\"safephpcode-filter-",[],[],[],{"error":223,"url":224,"statusCode":225,"statusMessage":226,"message":226},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fsafe-php-code-widget\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":13,"versions":228},[]]