[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3acslJ6NMhDoB4mkazf9qEu3mi6N5c4yxfVdBazAtYA":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":13,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":47,"crawl_stats":36,"alternatives":50,"analysis":164,"fingerprints":299},"seo-metrics-helper","SEO Metrics","1.0.18","seometricsplugin","https:\u002F\u002Fprofiles.wordpress.org\u002Fseometricsplugin\u002F","\u003Cp>Connect your WordPress website to the SEO Metrics Dashboard and efficiently manage all SEO Metrics products and services.\u003C\u002Fp>\n\u003Cp>Discover the magical components the SEO Metrics platform offers through one unified dashboard!\u003C\u002Fp>\n\u003Ch4>Unified dashboard for all your WordPress websites\u003C\u002Fh4>\n\u003Cp>SEO Metrics offers a convenient and elegant way to the analytics for your WordPress website and provide one-click secure login to WP.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Update WordPress core to keep your websites secure and supporting the latest versions of all premium plugins and themes.\u003C\u002Fli>\n\u003Cli>Installing and managing your websites plugins & themes is not an everyday hassle anymore.\u003C\u002Fli>\n\u003Cli>Access all your WordPress websites from the dashboard with 1 click.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Privacy Policy\u003C\u002Fh3>\n\u003Cp>SEO Metrics Helper asks for your consent when signing up and connecting your website to SEO Metrics services. \u003Ca href=\"https:\u002F\u002Fwww.seometrics.net\u002Fprivacy-policy\u002F\" rel=\"nofollow ugc\">Read our GDPR Compliant Privacy Policy\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Explanation of User Creation\u003C\u002Fh3>\n\u003Cp>The creation of a user within the context of the SEO Metrics plugin is aimed at enhancing user experience and security within the SEO Reporting Automation Software ecosystem. This feature was implemented in response to identified demand for passwordless login functionality.\u003C\u002Fp>\n\u003Cp>When a user initiates a connection with the SEO Metrics plugin through the WordPress dashboard, they are presented with a consent form. Upon agreement, a user account is created for them with the username ‘seo-metrics’ and the email ‘helper@seometrics.net’. The password is randomly generated using WordPress’s default \u003Ccode>wp_generate_password()\u003C\u002Fcode> function.\u003C\u002Fp>\n\u003Cp>The primary purpose of creating an administrative user is to streamline the login process for SEO Metrics users by eliminating the need for passwords. Additionally, it facilitates the provision of temporary, passwordless access to selected users or developers via the SEO Metrics Dashboard. This functionality empowers website owners to exercise precise control over access permissions, determining who can access the system and for how long. Ultimately, the objective is to enable SEO executives to efficiently perform website-related tasks within a specified timeframe, all while maintaining stringent security measures.\u003C\u002Fp>\n","Connect your WordPress website to the SEO Metrics Dashboard and efficiently manage all SEO Metrics products and services.",400,2760,0,"2025-09-16T04:47:00.000Z","6.8.5","4.7","7.0",[19,20,21,22,23],"analytics-seometrics","hosting","performance","seo","service","https:\u002F\u002Fwww.seometrics.net\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fseo-metrics-helper.zip",98,1,"2025-08-01 18:49:47","2026-03-15T15:16:48.613Z",[31],{"id":32,"url_slug":33,"title":34,"description":35,"plugin_slug":4,"theme_slug":36,"affected_versions":37,"patched_in_version":38,"severity":39,"cvss_score":40,"cvss_vector":41,"vuln_type":42,"published_date":28,"updated_date":43,"references":44,"days_to_patch":46},"CVE-2025-6754","seo-metrics-missing-authorization-to-authenticated-subscriber-privilege-escalation","SEO Metrics \u003C= 1.0.15 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation","The SEO Metrics plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks in both the seo_metrics_handle_connect_button_click() AJAX handler and the seo_metrics_handle_custom_endpoint() function in all versions up to, and including, 1.0.15. Because the AJAX action only verifies a nonce, without checking the caller’s capabilities, a subscriber-level user can retrieve the token and then access the custom endpoint to obtain full administrator cookies.",null,"\u003C=1.0.15","1.0.16","high",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","Missing Authorization","2025-09-05 15:34:36",[45],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F48658b33-ae53-4919-8180-1188f72553f7?source=api-prod",35,{"slug":7,"display_name":7,"profile_url":8,"plugin_count":27,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":46,"trust_score":48,"computed_at":49},87,"2026-04-04T05:58:52.962Z",[51,76,100,122,144],{"slug":52,"name":53,"version":54,"author":55,"author_profile":56,"description":57,"short_description":58,"active_installs":59,"downloaded":60,"rating":61,"num_ratings":62,"last_updated":63,"tested_up_to":64,"requires_at_least":65,"requires_php":66,"tags":67,"homepage":71,"download_link":72,"security_score":73,"vuln_count":74,"unpatched_count":13,"last_vuln_date":75,"fetched_at":29},"litespeed-cache","LiteSpeed Cache","7.8","LiteSpeed Technologies","https:\u002F\u002Fprofiles.wordpress.org\u002Flitespeedtech\u002F","\u003Cp>LiteSpeed Cache for WordPress (LSCWP) is an all-in-one site acceleration plugin, featuring an exclusive server-level cache and a collection of optimization features.\u003C\u002Fp>\n\u003Cp>LSCWP supports WordPress Multisite and is compatible with most popular plugins, including WooCommerce, bbPress, and Yoast SEO.\u003C\u002Fp>\n\u003Cp>LiteSpeed Cache for WordPress is compatible with ClassicPress.\u003C\u002Fp>\n\u003Ch3>Requirements\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>General Features\u003C\u002Fstrong> may be used by anyone with any web server (LiteSpeed, Apache, NGINX, etc.).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>LiteSpeed Exclusive Features\u003C\u002Fstrong> require one of the following: OpenLiteSpeed, commercial LiteSpeed products, LiteSpeed-powered hosting, or QUIC.cloud CDN. \u003Ca href=\"https:\u002F\u002Fdocs.litespeedtech.com\u002Flscache\u002Flscwp\u002Ffaq\u002F#why-do-the-cache-features-require-a-litespeed-server\" rel=\"nofollow ugc\">Why?\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Plugin Features\u003C\u002Fh3>\n\u003Ch4>General Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Free QUIC.cloud CDN Cache\u003C\u002Fli>\n\u003Cli>Object Cache (Memcached\u002FLSMCD\u002FRedis) Support+\u003C\u002Fli>\n\u003Cli>Image Optimization (Lossless\u002FLossy)\u003C\u002Fli>\n\u003Cli>Minify CSS, JavaScript, and HTML\u003C\u002Fli>\n\u003Cli>Minify inline & external CSS\u002FJS\u003C\u002Fli>\n\u003Cli>Combine CSS\u002FJS\u003C\u002Fli>\n\u003Cli>Automatically generate Critical CSS\u003C\u002Fli>\n\u003Cli>Lazy-load images\u002Fiframes\u003C\u002Fli>\n\u003Cli>Responsive Image Placeholders\u003C\u002Fli>\n\u003Cli>Multiple CDN Support+\u003C\u002Fli>\n\u003Cli>Load CSS Asynchronously\u003C\u002Fli>\n\u003Cli>Defer\u002Fdelay JS loading\u003C\u002Fli>\n\u003Cli>Browser Cache Support+\u003C\u002Fli>\n\u003Cli>Database Cleaner and Optimizer\u003C\u002Fli>\n\u003Cli>PageSpeed score (including Core Web Vitals) optimization\u003C\u002Fli>\n\u003Cli>OPcode Cache Support+\u003C\u002Fli>\n\u003Cli>HTTP\u002F2 Push for CSS\u002FJS (on web servers that support it)\u003C\u002Fli>\n\u003Cli>DNS Prefetch\u003C\u002Fli>\n\u003Cli>Cloudflare API\u003C\u002Fli>\n\u003Cli>Single Site and Multisite (Network) support\u003C\u002Fli>\n\u003Cli>Import\u002FExport settings\u003C\u002Fli>\n\u003Cli>Attractive, easy-to-understand interface\u003C\u002Fli>\n\u003Cli>AVIF\u002FWebP image format support\u003C\u002Fli>\n\u003Cli>Heartbeat control\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>+ This service is not provided by the LSCache plugin, nor is it guaranteed to be installed by your service provider. However, the plugin is compatible with the service if it is in use on your site.\u003C\u002Fp>\n\u003Ch4>LiteSpeed Exclusive Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Automatic page caching to greatly improve site performance\u003C\u002Fli>\n\u003Cli>Automatic purge of related pages based on certain events\u003C\u002Fli>\n\u003Cli>Private cache for logged-in users\u003C\u002Fli>\n\u003Cli>Caching of WordPress REST API calls\u003C\u002Fli>\n\u003Cli>Separate caching of desktop and mobile views\u003C\u002Fli>\n\u003Cli>Ability to schedule purge for specified URLs\u003C\u002Fli>\n\u003Cli>WooCommerce and bbPress support\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdocs.litespeedtech.com\u002Flscache\u002Flscwp\u002Fcli\u002F\" rel=\"nofollow ugc\">WordPress CLI\u003C\u002Fa> commands\u003C\u002Fli>\n\u003Cli>API system for easy cache integration\u003C\u002Fli>\n\u003Cli>Exclude from cache by URI, Category, Tag, Cookie, User Agent\u003C\u002Fli>\n\u003Cli>Smart preload crawler with support for SEO-friendly sitemap\u003C\u002Fli>\n\u003Cli>Multiple crawlers for cache varies\u003C\u002Fli>\n\u003Cli>HTTP\u002F2 support\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.litespeedtech.com\u002Fhttp3-faq\" rel=\"nofollow ugc\">HTTP\u002F3 & QUIC\u003C\u002Fa> support\u003C\u002Fli>\n\u003Cli>ESI (Edge Side Includes) support*\u003C\u002Fli>\n\u003Cli>Widgets and Shortcodes as ESI blocks* (requires Classic Widgets plugin for WP 5.8+)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>* Feature not available in OpenLiteSpeed\u003C\u002Fp>\n\u003Ch3>LSCWP Resources\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Flitespeedtech.com\u002Fslack\" rel=\"nofollow ugc\">Join our Slack community\u003C\u002Fa> to connect with other LiteSpeed users.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Flitespeed-cache\u002F\" rel=\"ugc\">Ask a question on our support forum\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdocs.litespeedtech.com\u002Flscache\u002Flscwp\u002F\" rel=\"nofollow ugc\">View detailed documentation\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fblog.litespeedtech.com\u002Ftag\u002Fwordpress\u002F\" rel=\"nofollow ugc\">Read about LSCWP and WordPress on our blog\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Flitespeed-cache\u002F\" rel=\"nofollow ugc\">Help translate LSCWP\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Flitespeedtech\u002Flscache_wp\" rel=\"nofollow ugc\">Contribute to the LSCWP GitHub repo\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Third Party Compatibility\u003C\u002Fh3>\n\u003Cp>The vast majority of plugins and themes are compatible with LSCache. \u003Ca href=\"https:\u002F\u002Fdocs.litespeedtech.com\u002Flscache\u002Flscwp\u002Fapi\u002F\" rel=\"nofollow ugc\">Our API\u003C\u002Fa> is available for those that are not. Use the API to customize smart purging, customize cache rules, create cache varies, and make WP nonce cacheable, among other things.\u003C\u002Fp>\n\u003Ch3>Privacy\u003C\u002Fh3>\n\u003Cp>This plugin includes some suggested text that you can add to your site’s Privacy Policy via the Guide in the WordPress Privacy settings.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>For your own information:\u003C\u002Fstrong> LiteSpeed Cache for WordPress potentially stores a duplicate copy of every web page on display on your site. The pages are stored locally on the system where LiteSpeed server software is installed and are not transferred to or accessed by LiteSpeed employees in any way, except as necessary in providing routine technical support if you request it. All cache files are temporary, and may easily be purged before their natural expiration, if necessary, via a Purge All command. It is up to individual site administrators to come up with their own cache expiration rules.\u003C\u002Fp>\n\u003Cp>In addition to caching, our WordPress plugin has online features provided by QUIC.cloud for Image Optimization and Page Optimization services. When one of these optimizations is requested, data is transmitted to a remote QUIC.cloud server, processed, and then transmitted back for use on your site. QUIC.cloud keeps copies of that data for up to 7 days and then permanently deletes it. Similarly, the WordPress plugin has a Reporting feature whereby a site owner can transmit an environment report to LiteSpeed so that we may better provide technical support. None of these features collects any visitor data. Only server and site data are involved.\u003C\u002Fp>\n\u003Cp>QUIC.cloud CDN, if enabled, uses LSCache technology to access your site, and serve your content from remote global nodes. Your data is not accessed by QUIC.cloud employees in any way, except as necessary in providing maintenance or technical support.\u003C\u002Fp>\n\u003Cp>Please see the \u003Ca href=\"https:\u002F\u002Fquic.cloud\u002Fprivacy-policy\u002F\" rel=\"nofollow ugc\">QUIC.cloud Privacy Policy\u003C\u002Fa> for our complete Privacy\u002FGDPR statement.\u003C\u002Fp>\n","All-in-one unbeatable acceleration & PageSpeed improvement: caching, image\u002FCSS\u002FJS optimization...",7000000,126174082,96,2718,"2026-03-03T18:24:00.000Z","6.9.4","5.3","7.2",[68,69,70,21,22],"caching","optimize","pagespeed","https:\u002F\u002Fwww.litespeedtech.com\u002Fproducts\u002Fcache-plugins\u002Fwordpress-acceleration","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flitespeed-cache.7.8.zip",82,18,"2025-10-28 00:00:00",{"slug":77,"name":78,"version":79,"author":80,"author_profile":81,"description":82,"short_description":83,"active_installs":84,"downloaded":85,"rating":86,"num_ratings":87,"last_updated":88,"tested_up_to":89,"requires_at_least":90,"requires_php":17,"tags":91,"homepage":96,"download_link":97,"security_score":98,"vuln_count":27,"unpatched_count":13,"last_vuln_date":99,"fetched_at":29},"a2-optimized-wp","A2 Optimized WP – Turbocharge and secure your WordPress site","3.0.13","A2 Hosting","https:\u002F\u002Fprofiles.wordpress.org\u002Fa2hosting\u002F","\u003Cp>Boosting performance and securing your WordPress site has never been easier with the A2 Optimized WP plugin from \u003Ca href=\"https:\u002F\u002Fwww.a2hosting.com\u002F\" rel=\"nofollow ugc\">A2 Hosting\u003C\u002Fa>. Get customized desktop and mobile performance scores for your site, including:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Server speed (Time to First Byte)\u003C\u002Fli>\n\u003Cli>Page load speed (Largest Contentful Paint)\u003C\u002Fli>\n\u003Cli>User perception (First Contentful Paint)\u003C\u002Fli>\n\u003Cli>Visual stability (Cumulative Layout Shift)\u003C\u002Fli>\n\u003Cli>Website browser speed (First Input Delay)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Using these scores, A2 Optimized WP generates specific, personalized recommendations for improving your site:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Performance\u003C\u002Fli>\n\u003Cli>Security\u003C\u002Fli>\n\u003Cli>Best practices compliance\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>With just a few clicks you’ll give your WordPress site the boost it needs with stable, industry-proven optimizations and improvements.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpatchstack.com\u002Fdatabase\u002Fvdp\u002Fa2-optimized-wp\u002F\" rel=\"nofollow ugc\">Vulnerability disclosure program\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Performance optimizations\u003C\u002Fh4>\n\u003Cp>Our plugin is optimized to work best in the A2 Hosting environment, so items marked with an asterisk (*) are only available for sites hosted at A2 Hosting. If you are not an A2 Hosting customer, \u003Ca href=\"https:\u002F\u002Fwww.a2hosting.com\" rel=\"nofollow ugc\">join today\u003C\u002Fa>!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Page caching\u003C\u002Fstrong>\u003Cbr \u002F>\n* Allows site visitors to save copies of your web pages on their device or browser. When they return to your website in the future, your site files load faster.\u003Cbr \u002F>\n* This optimization improves Time to First Byte (TTFB) and reduces bandwidth usage.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Gzip compression\u003C\u002Fstrong>\u003Cbr \u002F>\n* Turns on Gzip compression to make text files smaller.\u003Cbr \u002F>\n* This optimization improves Time to First Byte (TTFB) and reduces bandwidth usage.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Redis object caching (*)\u003C\u002Fstrong>\u003Cbr \u002F>\n* Stores commonly used elements such as menus, widgets, and database sets in memory.\u003Cbr \u002F>\n* This optimization improves Time to First Byte (TTFB).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Minify HTML pages\u003C\u002Fstrong>\u003Cbr \u002F>\n* Removes extra spaces, tabs, comments, and line breaks from HTML pages.\u003Cbr \u002F>\n* This optimization improves First Contentful Paint (FCP) and First Input Delay (FID).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Automatic database optimizations\u003C\u002Fstrong>\u003Cbr \u002F>\n* Periodically cleans MySQL databases of expired transients (a type of cached data used in WordPress) as well as trashed and spam comments. Also optimizes database tables.\u003Cbr \u002F>\n* This optimization improves Time to First Byte (TTFB) for uncached pages.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Compress images on upload (*)\u003C\u002Fstrong>\u003Cbr \u002F>\n* Automatically compresses images when they are uploaded to your site.\u003Cbr \u002F>\n* This optimization improves First Contentful Paint (FCP), Largest Contentful Paint (LCP), and First Input Delay (FID).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Turbo Web Hosting (*)\u003C\u002Fstrong>\u003Cbr \u002F>\n*Takes advantage of A2 Hosting’s Turbo Web Hosting platform to provide faster serving of static files, pre-compiled .htaccess files for improved performance, PHP opcode caching, and more.\u003Cbr \u002F>\n*This optimization can improve multiple benchmarks.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Use system cron instead of WordPress cron (*)\u003C\u002Fstrong>\u003Cbr \u002F>\n* Replaces the WordPress virtual “cron job” with a genuine, system-defined cron job.\u003Cbr \u002F>\n* This optimization reduces the load on WordPress and ensures scheduled tasks run at precise, correct intervals.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Minify inline CSS and JavaScript\u003C\u002Fstrong>\u003Cbr \u002F>\n* Removes extra spaces, tabs, comments, and line breaks from inline CSS and JavaScript.\u003Cbr \u002F>\n* This optimization improves First Contentful Paint (FCP) and First Input Delay (FID).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Disable WooCommerce AJAX Cart Fragments\u003C\u002Fstrong>\u003Cbr \u002F>\n* Disables WooCommerce AJAX Cart Fragments on your homepage and enables the “redirect to cart page” option.\u003Cbr \u002F>\n* This optimization improves WooCommerce performance.\u003C\u002Fp>\n\u003Ch4>Security optimizations\u003C\u002Fh4>\n\u003Cp>Our plugin is optimized to work best in the A2 Hosting environment, so items marked with an asterisk (*) are only available for sites hosted at A2 Hosting. If you are not an A2 Hosting customer, \u003Ca href=\"https:\u002F\u002Fwww.a2hosting.com\" rel=\"nofollow ugc\">join today\u003C\u002Fa>!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Lock editing of plugins and themes from wp-admin\u003C\u002Fstrong>\u003Cbr \u002F>\n* Prevents misuse of built-in editing capabilities for the WordPress admin.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Change login URL (*)\u003C\u002Fstrong>\u003Cbr \u002F>\n* Changes the login page URL from the default wp-login.php to a random URL.\u003Cbr \u002F>\n* Helps prevent bots from brute-force attacking your login page.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Add CAPTCHA for comments and login (*)\u003C\u002Fstrong>\u003Cbr \u002F>\n* Adds a CAPTCHA to comment forms and login pages to deter bots from posting spam comments and running brute-force attacks..\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Block unauthorized XML-RPC requests\u003C\u002Fstrong>\u003Cbr \u002F>\n* Rejects XML-RPC requests except for whitelisted services, such as Jetpack.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Deny direct access to configuration files\u003C\u002Fstrong>\u003Cbr \u002F>\n* Displays a “403 Forbidden” error when visitors or bots try to access WordPress configuration files.\u003C\u002Fp>\n\u003Ch4>Best practices recommendations\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Regenerate wp-config salts\u003C\u002Fstrong>\u003Cbr \u002F>\n* Generates new values for wp-config.php salts and security keys for increased security.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Recent post limit\u003C\u002Fstrong>\u003Cbr \u002F>\n*Checks the number of recent posts per page, which should be less than 15 for most sites.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>RSS post limit\u003C\u002Fstrong>\u003Cbr \u002F>\n* Checks the number of posts in RSS feeds, which should be less than 20 for most sites.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Recent posts showing on home page\u003C\u002Fstrong>\u003Cbr \u002F>\n* Checks whether the home page displays recent posts, and offers to use a static page instead for faster performance.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Permalink structure\u003C\u002Fstrong>\u003Cbr \u002F>\n* Checks that the permalink structure is configured to fully optimize page caching and get additional SEO benefits.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Unused themes\u003C\u002Fstrong>\u003Cbr \u002F>\n* Checks if there are any non-default, unused themes that should be deleted.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Inactive plugins\u003C\u002Fstrong>\u003Cbr \u002F>\n* Checks if there are any inactive plugins that should be deleted.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Hosted with A2 Hosting\u003C\u002Fstrong>\u003Cbr \u002F>\n* Checks if your site is hosted with \u003Ca href=\"https:\u002F\u002Fwww.a2hosting.com\u002F\" rel=\"nofollow ugc\">A2 Hosting\u003C\u002Fa> for faster page load times and more optimizations.\u003C\u002Fp>\n","Make your site faster and more secure with the click of a few buttons",70000,2039848,62,43,"2025-02-10T18:07:00.000Z","6.7.5","",[92,93,69,94,95],"a2-hosting","cache","site-performancerequires-at-least-5-1","speed","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fa2-optimized\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fa2-optimized-wp.3.0.13.zip",92,"2023-02-06 00:00:00",{"slug":101,"name":102,"version":103,"author":104,"author_profile":105,"description":106,"short_description":107,"active_installs":108,"downloaded":109,"rating":61,"num_ratings":110,"last_updated":111,"tested_up_to":112,"requires_at_least":113,"requires_php":90,"tags":114,"homepage":117,"download_link":118,"security_score":119,"vuln_count":120,"unpatched_count":13,"last_vuln_date":121,"fetched_at":29},"google-pagespeed-insights","Insights from Google PageSpeed","4.0.8","Matt Keys","https:\u002F\u002Fprofiles.wordpress.org\u002Fmattkeys\u002F","\u003Cp>Google Pagespeed Insights is a tool that empowers you to make decisions that increase the performance of your website. Recommendations from Google Pagespeed are based upon current industry best practices for desktop and mobile web performance.\u003C\u002Fp>\n\u003Cp>Through the addition of advanced data visualization, tagging, filtering, and snapshot technology, Insights from Google PageSpeed provides a comprehensive solution for any webmaster looking to increase their site performance, their search engine ranking, and their visitors browsing experience.\u003C\u002Fp>\n\u003Ch4>Detailed Page Reporting\u003C\u002Fh4>\n\u003Cp>Sort your page reports by their Page Speed Score to prioritize the largest areas of opportunity on your site. Page reports utilize easy to read visualizations that allow you to quickly focus in on the most important data to improve your sites performance.\u003C\u002Fp>\n\u003Ch4>Report Summaries\u003C\u002Fh4>\n\u003Cp>Report Summaries are a powerful and exclusive feature of Insights from Google PageSpeed. Summaries display your average Page Score, largest areas for improvement across ALL reports, as well as best and lowest performing pages. Report summaries can be filtered to narrow results by: Pages, Posts, Categories, Custom URLs, and Custom Post Types.\u003C\u002Fp>\n\u003Cp>Using Report Summaries allows you to ‘zoom out’ from the page-level and better understand the big picture of your sites performance.\u003C\u002Fp>\n\u003Ch4>Desktop and Mobile Page Reports\u003C\u002Fh4>\n\u003Cp>Best practices for site performance differ greatly between Desktop and Mobile device usage. Configure Insights from Google PageSpeed to generate Desktop reports, Mobile reports, or both!\u003C\u002Fp>\n\u003Cp>Toggle back and forth between report types to see specific suggestions for improving the performance and experience on each platform.\u003C\u002Fp>\n\u003Ch4>Report Snapshots\u003C\u002Fh4>\n\u003Cp>The Report Snapshot tool builds on the power of Report Summaries, to provide historical “Point In Time” data about your website.\u003C\u002Fp>\n\u003Cp>Take a snapshot of any Report Summary screen to store that data for future retrieval. Add comments to your snapshots to provide additional meaning, such as “Before Installing W3 Total Cache.” Additionally, filter a Report Summary before taking a Snapshot to save a summary of the filtered data.\u003C\u002Fp>\n\u003Ch4>Snapshot Comparison Tool\u003C\u002Fh4>\n\u003Cp>The Snapshot Comparison Tool is an amazing utility that lets you visualize side-by-side results from any two similar Report Snapshots.\u003C\u002Fp>\n\u003Cp>Take a Report Snapshot before installing new plugins, or before implementing performance recommendations. Take another snapshot when you are finished and compare your results to measure the effect of your changes.\u003C\u002Fp>\n\u003Ch4>Add\u002FImport Custom URLs\u003C\u002Fh4>\n\u003Cp>Easily add additional URLs for inclusion in Pagespeed Reports. Even add URLs for non-WordPress sites, even if they are not hosted on your server. URLs can be added manually, or upload a properly formatted XML sitemap to add multiple pages at once.\u003C\u002Fp>\n\u003Cp>Custom URLs can be tagged and filtered in Report Summaries. Take Report Snapshots of your Custom URLs just like you would with any other report type.\u003C\u002Fp>\n\u003Ch4>Scheduled Report Checks\u003C\u002Fh4>\n\u003Cp>Configure Insights from Google PageSpeed to automatically recheck your site on a Daily, Weekly, Bi-Monthly, or Monthly basis.\u003C\u002Fp>\n\u003Cp>With each scan, any new pages or posts will be discovered, and existing reports will be updated to reflect any changes to your site, as well as any changes in the Pagespeed recommendations.\u003C\u002Fp>\n\u003Ch4>Additional Languages\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>(v1.x translation) Russian Translation provided by: Ivanka from \u003Ca href=\"http:\u002F\u002Fcoupofy.com\" rel=\"nofollow ugc\">coupofy.com\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>(v1.x translation) Spanish Translation provided by: Ogi Djuraskovic from \u003Ca href=\"http:\u002F\u002Ffirstsiteguide.com\" rel=\"nofollow ugc\">firstsiteguide.com\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>(v1.x translation) Serbian Translation provided by: Ogi Djuraskovic from \u003Ca href=\"http:\u002F\u002Ffirstsiteguide.com\" rel=\"nofollow ugc\">firstsiteguide.com\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Troubleshooting\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Please find the below list of potential issues that you may encounter, and the recommended next steps.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch4>I entered my API Key and saved the Options, but no Reports are showing up in the Report List.\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Google Pagespeed needs to be able to load each page to create its report. Make sure that your pages are publicly accessible over the internet.\u003C\u002Fli>\n\u003Cli>Ensure that your API key is entered correctly, and that you have enabled the “PageSpeed Insights API” from the Google API Console.\u003C\u002Fli>\n\u003Cli>In the Options page, under “Advanced Configuration” there is a checkbox called “Log API Exceptions”. Any API exception that is not caught and handled automatically will be stored for up to 7 days. This log information can be very helpful when diagnosing issues.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Page report checks never finish all of the way, I have to press “Start Reporting” again and again to get it to finish checking all of my pages.\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>If the reports seem to always run for a certain length of time before stopping unexpectedly, you may be exceeding your servers Max Execution time. Try increasing the value in Options->Advanced Configuration “Maximum Execution Time”.\u003C\u002Fli>\n\u003Cli>Some web hosting providers do not allow the Maximum Execution Time to be overridden or increased. In that case you can try setting the Maximum Script Run Time. This will make the script run for the set period of time, then stop and spawn a new script, to get around timeout issues. Start with a low value, and test. Increase the value one step at a time until you find the largest value that allows your scans to finish successfully.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>An error was reported while trying to check one of my pages, and it has been added to the Ignored Pages section.\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Navigate to the Ignored Pages tab, find the page, and click “reactivate” to try it again.\u003C\u002Fli>\n\u003Cli>If the page fails again, ensure that the page is publicly accessible from the internet. Non-public pages cannot be checked.\u003C\u002Fli>\n\u003Cli>In some rare cases, pages are not able to be scanned by the Pagespeed API. Try checking your page manually here: https:\u002F\u002Fdevelopers.google.com\u002Fspeed\u002Fpagespeed\u002Finsights\u002F. If the page fails to be checked, report the issue to Google so that they can diagnose further.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>I received a Javascript or PHP error.\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>If the error appeared while Google Pagespeed was checking pages, you may have loaded the page while it was storing data. Refresh the page in a couple seconds to see if the issue has gone away.\u003C\u002Fli>\n\u003Cli>If issues persist please report the problem with as much information as you can gather, including: What page you were on, the exact text of the error, or a screenshot of the error.\u003C\u002Fli>\n\u003Cli>In the Options page, under “Advanced Configuration” there is a checkbox called “Log API Exceptions”. Any API exception that is not caught and handled automatically will be logged for up to 7 days. This log information can be very helpful when diagnosing issues\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>My Page Scores seem really low. When I click “Recheck Results” when viewing Report Details, the score jumps up dramatically.\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Your server may have been responding slowly when the first report was generated. A slow server response time can have a large impact on your Page Speed Score. If these problems happen frequently you may want to talk with your hosting provider about the problem, or look into alternative hosting providers.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>I want to clear out all of the current page reports and start over.\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Navigate to the “Options” tab\u003C\u002Fli>\n\u003Cli>Expand the “Advanced Configuration” section.\u003C\u002Fli>\n\u003Cli>Find the “Delete Data” Dropdown\u003C\u002Fli>\n\u003Cli>Select “Delete Reports Only” to remove all Page Reports\u003C\u002Fli>\n\u003Cli>Or Select “Delete EVERYTHING” to remove all Page Reports, Custom URLs, Snapshots, and Ignored Pages\u003C\u002Fli>\n\u003C\u002Fol>\n","Use Insights from Google PageSpeed to increase your sites performance, your search engine ranking, and your visitors browsing experience.",20000,642462,28,"2024-07-07T19:09:00.000Z","6.5.8","3.6",[115,70,116,21,22],"page-speed","pagespeed-insights","http:\u002F\u002Fmattkeys.me","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgoogle-pagespeed-insights.4.0.8.zip",91,2,"2022-06-27 00:00:00",{"slug":123,"name":124,"version":125,"author":126,"author_profile":127,"description":128,"short_description":129,"active_installs":130,"downloaded":131,"rating":132,"num_ratings":133,"last_updated":134,"tested_up_to":64,"requires_at_least":135,"requires_php":136,"tags":137,"homepage":141,"download_link":142,"security_score":143,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":29},"quickwebp","QuickWebP – Compress \u002F Optimize Images & Convert WebP | SEO Friendly","3.2.7","Ludwig You","https:\u002F\u002Fprofiles.wordpress.org\u002Fludwigyou\u002F","\u003Cp>QuickWebP is an image compression and optimization plugin for WordPress that automatically converts images to WebP when they are uploaded to the media library. It also optimizes the image to improve your site’s performance. The plugin also renames the image file to the WebP format and cleans up the file name for better SEO. Additionally, the plugin uses the cleaned up name to pre-populate the alt, caption, description, legend, and title metadata, making image management on your site easier. You can also set a maximum width and height for the image, which will automatically resize it if necessary. No API is required and the plugin is completely free, with no subscriptions or additional fees.\u003C\u002Fp>\n\u003Ch3>Important\u003C\u002Fh3>\n\u003Cp>QuickWebP is now include in WPMasterToolKit plugin. You can download it here : \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwpmastertoolkit\u002F\" rel=\"ugc\">WPMasterToolKit\u003C\u002Fa>\u003Cbr \u002F>\nFor use like QuickWebP, you can activate the module “Media encoder” in the settings of WPMasterToolKit.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Automatically converts images to WebP format when uploaded to the media library\u003C\u002Fli>\n\u003Cli>Optimizes images for improved site performance\u003C\u002Fli>\n\u003Cli>Renames image files to WebP format and cleans up file names for prevent special characters (ex : “Clé d’identification.jpg” becomes “cle-d-identification.webp”)\u003C\u002Fli>\n\u003Cli>Pre-populates image metadata (alt, caption, description, legend, and title)\u003C\u002Fli>\n\u003Cli>Allows for automatic image resizing based on maximum width and height (by default max 2000px)\u003C\u002Fli>\n\u003Cli>No API required for convertion and optimization\u003C\u002Fli>\n\u003Cli>Entirely free, with no subscriptions or additional fees.\u003C\u002Fli>\n\u003Cli>Directly paste image from clipboard or software like Photoshop (CTRL + V OR CMD + V) directly into the WP Media Frame.\u003C\u002Fli>\n\u003Cli>Select library for images to convert to webp (GD or Imagick).\u003C\u002Fli>\n\u003Cli>Bulk convert images to webp format and preserve original images (for old media on your website).\u003C\u002Fli>\n\u003Cli>Preview image optimization in settings for better optimization.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Demos\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>How to install QuickWebP\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F5Ja2engS5YA?version=3&rel=0&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Paste an picture from clipboard to wp media easily\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FN5Yc-D8Hhyw?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch3>Other plugin by Webdeclic\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwebdeclic.com\" rel=\"nofollow ugc\">Webdeclic\u003C\u002Fa> is a French web agency based in Paris. We are specialized in the creation of websites and e-commerce sites. We are also the creator of the following plugins:\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwpmastertoolkit\u002F\" rel=\"ugc\">WPMasterToolKit\u003C\u002Fa> : A complete toolkit for your WordPress site.\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmentions-legales-par-webdeclic\u002F\" rel=\"ugc\">Mentions Legales Par Webdeclic\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcookie-dough-compliance-and-consent-for-gdpr\u002F\" rel=\"ugc\">Cookie Dough Compliance and Consent for GDPR\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fquickwebp\u002F\" rel=\"ugc\">QuickWebP – Compress \u002F Optimize Images & Convert WebP | SEO Friendly\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Funiversal-honey-pot\u002F\" rel=\"ugc\">Univeral Honey Pot\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fclean-my-wp\u002F\" rel=\"ugc\">Clean My WP\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsearch\u002Fwebdeclic\u002F\" rel=\"ugc\">Show all plugins on WordPress.org\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Support us\u003C\u002Fh3>\n\u003Cp>⭐️ If you like this plugin, please give us a 5 star rating on WordPress.org. This will motivate us to develop new features and write other plugins. ⭐️\u003C\u002Fp>\n\u003Cp>☕️ If you want buy me a coffee, you can do it here : \u003Ca href=\"https:\u002F\u002Fbmc.link\u002Fludwig\" rel=\"nofollow ugc\">Buy me a coffee\u003C\u002Fa> ☕️\u003C\u002Fp>\n","QuickWebP is a free WordPress plugin that converts images to WebP, optimizes performance, improves SEO, auto-fills metadata, and resizes images—no API …",7000,33353,94,17,"2025-12-26T15:37:00.000Z","6.0.0","7.4",[138,139,21,22,140],"image-compression","image-optimization","webp","https:\u002F\u002Fwebdeclic.com\u002Fprojets\u002Fcreation-de-lextension-wordpress-quickwebp\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fquickwebp.3.2.7.zip",100,{"slug":145,"name":146,"version":147,"author":148,"author_profile":149,"description":150,"short_description":151,"active_installs":152,"downloaded":153,"rating":154,"num_ratings":155,"last_updated":156,"tested_up_to":64,"requires_at_least":157,"requires_php":158,"tags":159,"homepage":160,"download_link":161,"security_score":26,"vuln_count":162,"unpatched_count":13,"last_vuln_date":163,"fetched_at":29},"jch-optimize","JCH Optimize","5.1.4","codealfa","https:\u002F\u002Fprofiles.wordpress.org\u002Fcodealfa\u002F","\u003Cp>JCH Optimize improves the performance of your website by performing several optimizations to the HTML page aimed at improving the Web Vitals measured by PageSpeed Insights, such as First Contentful Paint (FCP), Largest Contentful Paint (LCP), Speed Index (SI), Cumulative Layout Shift (CLS), Time to Interactive (TTI), and Total Blocking Time (TBT). These metrics attempt to quantify the quality of the user experience. JCH Optimize can improve these metrics to provide a better experience for your users and improve your PageSpeed scores.\u003C\u002Fp>\n\u003Ch4>Optimizations Performed By JCH Optimize\u003C\u002Fh4>\n\u003Cp>JCH Optimize optimizes your pages by automatically performing some recommended strategies offered by PageSpeed, which include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Minify CSS and JavaScript files and the HTML.\u003C\u002Fstrong> Unnecessary whitespaces and other characters are removed to reduce network payload sizes and script parse times.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Eliminate Render-Blocking Resources.\u003C\u002Fstrong> Inline critical JavaScript and CSS and defer all non-critical resources to prevent resources from blocking the first paint of your page.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Defer offscreen images.\u003C\u002Fstrong> Offscreen and hidden images are lazy-loaded after all critical resources have finished loading to lower Time To Interactive (TTI).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Add Width and Height attributes to images.\u003C\u002Fstrong> Set an explicit width and height on image elements to reduce layout shifts and improve CLS.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Enable text compression.\u003C\u002Fstrong> Boilerplate codes are placed in the .htaccess files at the site’s directory root to instruct the server to serve text-based resources with compression (deflate or brotli) to minimize total network bytes.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Preload critical resources.\u003C\u002Fstrong> Automatically analyzes each page to identify critical resources to load with a high priority by HTTP\u002F2 enabled servers to improve LCP time.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Reduce initial server response.\u003C\u002Fstrong> A page cache feature is included in the plugin that integrates well with the other optimization features and significantly reduces time-to-first-byte.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Benefits of Using JCH Optimize\u003C\u002Fh4>\n\u003Cp>Research has confirmed that 40% of visitors will leave a website if it takes more than 4 seconds to download. Also, Google and other search engines have indicated that their ranking algorithm increasingly factors website download speed. The benefits of using JCH Optimize then include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Improved user experience.\u003C\u002Fstrong> Your users will have a pleasant experience as they browse your site.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Improved SEO.\u003C\u002Fstrong> Your rankings in Google search pages can increase and improve organic visibility in internet searches.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Improved conversions.\u003C\u002Fstrong> Your website revenue also increases with increased traffic volume and visitor retention.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Pro Version available\u003C\u002Fh4>\n\u003Cp>There is a pro version available with more optimization features and options and premium support with assistance to configure plugin to resolve conflicts and improve performance on our \u003Ca href=\"https:\u002F\u002Fwww.jch-optimize.net\u002Fsubscribes\u002Fsubscribe-wordpress\u002Flevels.html\" rel=\"nofollow ugc\">website\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>How to use\u003C\u002Fh4>\n\u003Cp>To use, first temporarily deactivate all page caching features and plugins, then use the ‘Automatic Settings’ (Minimum – Optimum) to configure the plugin. The ‘Automatic Settings’ are concerned with the combining of the CSS and javascript files, and the management of the combined files, and automatically sets the options in the ‘Automatic Settings Groups’. Use the Exclude options to exclude files or plugins that don’t work so well when combined with JCH Optimize. You can then try the other optimization features in turn such as Sprite Generator, Add Image Attributes, Lazy Load Images, CDN\u002FCookieless Domain, Optimize CSS Delivery, etc., based on the optimization needs of your site. Flush all your cache before re-enabling caching features and plugins.\u003C\u002Fp>\n\u003Ch4>Documentation\u003C\u002Fh4>\n\u003Cp>Visit our \u003Ca href=\"https:\u002F\u002Fwww.jch-optimize.net\u002Fdocumentation.html\" rel=\"nofollow ugc\">documentation\u003C\u002Fa> on the main plugin site for more information on how the plugin works and how to configure it to improve your scores on \u003Ca href=\"https:\u002F\u002Fgtmetrix.com\u002F\" rel=\"nofollow ugc\">GtMetrix\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fdevelopers.google.com\u002Fspeed\u002Fpagespeed\u002Finsights\u002F\" rel=\"nofollow ugc\">PageSpeed Insights\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Advanced Features and Premium Support\u003C\u002Fh4>\n\u003Cp>If you need assistance on your website in configuring the plugin to resolve any conflicts or if you need access to more advanced features such as Http\u002F2 support, Remove unused CSS, Lazy-load iframes, Optimize Images, using multiple domains with CDN, then there’s a \u003Ca href=\"https:\u002F\u002Fwww.jch-optimize.net\u002Fsubscribe\u002Flevels.html#wordpress\" rel=\"nofollow ugc\">Pro version\u003C\u002Fa> available on a subscription basis. With an active subscription you get premium technical support through our ticket system, access to downloads of new versions, and access to our Optimize Image API.\u003C\u002Fp>\n","This plugin automatically performs several front end optimizations to your site to boost performance and increase PageSpeed scores.",4000,351888,88,69,"2026-01-16T23:52:00.000Z","6.5.0","8.0",[93,69,70,21,22],"http:\u002F\u002Fwww.jch-optimize.net\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjch-optimize.5.1.4.zip",3,"2024-05-13 00:00:00",{"attackSurface":165,"codeSignals":246,"taintFlows":254,"riskAssessment":287,"analyzedAt":298},{"hooks":166,"ajaxHandlers":204,"restRoutes":216,"shortcodes":244,"cronEvents":245,"entryPointCount":172,"unprotectedCount":27},[167,173,177,179,181,183,188,192,196,199],{"type":168,"name":169,"callback":170,"file":171,"line":172},"action","rest_api_init","closure","clicks-rest-api.php",8,{"type":168,"name":174,"callback":175,"file":176,"line":172},"init","seo_metrics_handle_custom_endpoint","endpoint.php",{"type":168,"name":169,"callback":170,"file":178,"line":172},"page-details-rest-api.php",{"type":168,"name":169,"callback":170,"file":180,"line":172},"plugin-info-rest-api.php",{"type":168,"name":169,"callback":170,"file":182,"line":172},"post-details-rest-api.php",{"type":168,"name":184,"callback":185,"file":186,"line":187},"activated_plugin","seo_metrics_redirect_on_activation","seo-metrics.php",51,{"type":168,"name":189,"callback":190,"file":186,"line":191},"wp_enqueue_scripts","seo_metrics_enqueue_scripts",63,{"type":168,"name":193,"callback":194,"file":186,"line":195},"admin_enqueue_scripts","seo_metrics_admin_enqueue_scripts",80,{"type":168,"name":169,"callback":197,"file":198,"line":172},"seo_metrics_register_rest_endpoint","token-rest-api.php",{"type":168,"name":200,"callback":201,"file":202,"line":203},"admin_menu","seo_metrics_add_welcome_page","welcome-page.php",19,[205,212,213],{"action":206,"nopriv":207,"callback":208,"hasNonce":209,"hasCapCheck":207,"file":210,"line":211},"seo_metrics_create_click_entry",false,"seo_metrics_create_click_entry_callback",true,"common-functions.php",68,{"action":206,"nopriv":209,"callback":208,"hasNonce":209,"hasCapCheck":207,"file":210,"line":155},{"action":214,"nopriv":207,"callback":214,"hasNonce":209,"hasCapCheck":209,"file":202,"line":215},"seo_metrics_handle_connect_button_click",162,[217,225,229,233,237],{"namespace":218,"route":219,"methods":220,"callback":222,"permissionCallback":223,"file":171,"line":224},"seo-metrics","\u002Fclicks-insights",[221],"GET","seo_metrics_rest_clicks_insights_handler","seo_metrics_verify_authorization_token",9,{"namespace":218,"route":226,"methods":227,"callback":228,"permissionCallback":223,"file":178,"line":224},"\u002Fpage-details",[221],"seo_metrics_rest_page_details_handler",{"namespace":218,"route":230,"methods":231,"callback":232,"permissionCallback":223,"file":180,"line":224},"\u002Fplugin-info",[221],"seo_metrics_rest_plugin_info_handler",{"namespace":218,"route":234,"methods":235,"callback":236,"permissionCallback":223,"file":182,"line":224},"\u002Fpost-details",[221],"seo_metrics_rest_post_details_handler",{"namespace":218,"route":238,"methods":239,"callback":241,"permissionCallback":242,"file":198,"line":243},"\u002Fget-auth-token\u002F",[240],"POST","seo_metrics_rest_endpoint_handler","__return_true",11,[],[],{"dangerousFunctions":247,"sqlUsage":248,"outputEscaping":251,"fileOperations":13,"externalRequests":27,"nonceChecks":120,"capabilityChecks":27,"bundledLibraries":253},[],{"prepared":249,"raw":13,"locations":250},10,[],{"escaped":74,"rawEcho":13,"locations":252},[],[],[255,277],{"entryPoint":256,"graph":257,"unsanitizedCount":27,"severity":39},"seo_metrics_handle_custom_endpoint (endpoint.php:10)",{"nodes":258,"edges":274},[259,264,268],{"id":260,"type":261,"label":262,"file":176,"line":263},"n0","source","$_SERVER",36,{"id":265,"type":266,"label":267,"file":176,"line":263},"n1","transform","→ seo_metrics_get_token_record()",{"id":269,"type":270,"label":271,"file":210,"line":272,"wp_function":273},"n2","sink","get_row() [SQLi]",39,"get_row",[275,276],{"from":260,"to":265,"sanitized":207},{"from":265,"to":269,"sanitized":207},{"entryPoint":278,"graph":279,"unsanitizedCount":27,"severity":39},"\u003Cendpoint> (endpoint.php:0)",{"nodes":280,"edges":284},[281,282,283],{"id":260,"type":261,"label":262,"file":176,"line":263},{"id":265,"type":266,"label":267,"file":176,"line":263},{"id":269,"type":270,"label":271,"file":210,"line":272,"wp_function":273},[285,286],{"from":260,"to":265,"sanitized":207},{"from":265,"to":269,"sanitized":207},{"summary":288,"deductions":289},"The \"seo-metrics-helper\" plugin v1.0.18 exhibits a mixed security posture. On the positive side, the plugin demonstrates good practices by utilizing prepared statements for all SQL queries and properly escaping all output. It also has no file operations, dangerous functions, or bundled libraries, which are excellent security indicators. However, the plugin has a concerning attack surface, particularly with one unprotected REST API route, which presents a direct entry point for potential unauthorized access or manipulation. The taint analysis reveals two flows with unsanitized paths, classified as high severity, indicating potential for command injection or similar vulnerabilities if these flows are triggered with malicious input.\n\nThe vulnerability history shows one known high-severity CVE, although it is currently patched. The common vulnerability type being 'Missing Authorization' is a red flag that aligns with the static analysis findings of an unprotected REST API route. While the absence of unpatched vulnerabilities and the use of secure coding practices for SQL and output are strengths, the identified high-severity taint flows and the historically recurring authorization issues in previous vulnerabilities warrant careful consideration. Overall, the plugin has some strong security foundations but requires immediate attention to the unprotected REST API endpoint and a thorough review of the high-severity taint flows to mitigate potential risks.",[290,293,295,296],{"reason":291,"points":292},"REST API route without permission callbacks",15,{"reason":294,"points":249},"High severity taint flow",{"reason":294,"points":249},{"reason":297,"points":249},"Total known CVEs (1 High, patched)","2026-03-16T19:51:49.936Z",{"wat":300,"direct":313},{"assetPaths":301,"generatorPatterns":306,"scriptPaths":307,"versionParams":308},[302,303,304,305],"\u002Fwp-content\u002Fplugins\u002Fseo-metrics-helper\u002Fjs\u002Ftrack-anchor-clicks.js","\u002Fwp-content\u002Fplugins\u002Fseo-metrics-helper\u002Fcss\u002Fwelcome-page-style.css","\u002Fwp-content\u002Fplugins\u002Fseo-metrics-helper\u002Fjs\u002Fenable-disable-connect-button.js","\u002Fwp-content\u002Fplugins\u002Fseo-metrics-helper\u002Fjs\u002Fconnect-plugin.js",[],[302,304,305],[309,310,311,312],"seo-metrics-helper\u002Fjs\u002Ftrack-anchor-clicks.js?ver=1.0","seo-metrics-helper\u002Fcss\u002Fwelcome-page-style.css?ver=1.0.0","seo-metrics-helper\u002Fjs\u002Fenable-disable-connect-button.js?ver=1.0","seo-metrics-helper\u002Fjs\u002Fconnect-plugin.js?ver=1.0",{"cssClasses":314,"htmlComments":315,"htmlAttributes":316,"restEndpoints":317,"jsGlobals":322,"shortcodeOutput":324},[],[],[],[318,319,320,321],"\u002Fwp-json\u002Fseo-metrics\u002Fclicks-insights","\u002Fwp-json\u002Fseo-metrics\u002Fpage-details","\u002Fwp-json\u002Fseo-metrics\u002Fpost-details","\u002Fwp-json\u002Fseo-metrics\u002Fplugin-info",[323],"seo_metrics_ajax_object",[]]