[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flBJgrrk7G74CbXSlJfrBsrkx-wmrSu09rbns0TkRlBc":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":74,"crawl_stats":38,"alternatives":82,"analysis":173,"fingerprints":971},"seraphinite-post-docx-source","Seraphinite Post .DOCX Source","2.16.15","Seraphinite Solutions","https:\u002F\u002Fprofiles.wordpress.org\u002Fseraphinitesoft\u002F","\u003Cp>Save your time by automatically converting from .DOCX to content with all WordPress post attributes. See more \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fgetting-started-pds\" rel=\"nofollow ugc\">how to use it\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>TO USE FREE ADDITIONAL FEATURES PLEASE INSTALL THE FREE EXTENDED PLUGIN VERSION BY FOLLOWING ONSCREEN PLUGIN’S INSTRUCTIONS.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fservices\u002Fdocx-to-html\" rel=\"nofollow ugc\">Try it online!\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Google Docs support\u003C\u002Fstrong>\u003Cbr \u002F>\nLoad documents \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fin-place-mode#src_type_gdoc\" rel=\"nofollow ugc\">directly\u003C\u002Fa> from your Google Drive or by \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fin-place-mode#src_type_gdoc_url\" rel=\"nofollow ugc\">shared URLs\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>No external services\u003C\u002Fstrong>\u003Cbr \u002F>\nNo embedding and dependencies on external services that slow down your site.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Flexible conversion mode\u003C\u002Fstrong>\u003Cbr \u002F>\nConvert all as in the original document (default mode) or just only document structure by \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fparagraphs\" rel=\"nofollow ugc\">turning all styles\u003C\u002Fa> off.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Document to HTML conversion\u003C\u002Fstrong>\u003Cbr \u002F>\nConverts \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fbody\" rel=\"nofollow ugc\">all types of elements\u003C\u002Fa> listed next. Numbered and bullet \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Flists\" rel=\"nofollow ugc\">lists\u003C\u002Fa> with inside content with or without numbering style. \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Ftext\" rel=\"nofollow ugc\">Text decoration\u003C\u002Fa> like bold, italic, underline, hidden, superscript, subscript, strikethrough, small caps, all caps, background and foreground color, and font size. \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fparagraphs\" rel=\"nofollow ugc\">Paragraphs\u003C\u002Fa> with or without styles. \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Ftables\" rel=\"nofollow ugc\">Tables\u003C\u002Fa> with absolute or relative width and header. Links to URLs and \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Flinks#name_path_conversion\" rel=\"nofollow ugc\">relative to other DOCX files\u003C\u002Fa> with HTML target attribute. Initial letter (drop cap), footnotes and endnotes, blockquotes, page breaks, \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fformulas\" rel=\"nofollow ugc\">formulas\u003C\u002Fa>. \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fraw-html\" rel=\"nofollow ugc\">Raw HTML\u003C\u002Fa> tags and attributes are also supported. \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fmedia\" rel=\"nofollow ugc\">Uploads images\u003C\u002Fa> (linked and embedded) into \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fmedia#place_into_library\" rel=\"nofollow ugc\">the library or standalone file\u003C\u002Fa> with \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fmedia#use_image_resize\" rel=\"nofollow ugc\">sizing\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fmedia#use_image_crop\" rel=\"nofollow ugc\">cropping\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fimages#filename\" rel=\"nofollow ugc\">filename\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fimages#alignment\" rel=\"nofollow ugc\">alignment\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fimages#wrapping\" rel=\"nofollow ugc\">floating\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fimages#title_and_description\" rel=\"nofollow ugc\">title and alt text\u003C\u002Fa>, caption with final \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fmedia#check_final_urls\" rel=\"nofollow ugc\">URL checking\u003C\u002Fa>. Uses images \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fmedia#image_filename_size\" rel=\"nofollow ugc\">thumbnails\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>All attributes conversion\u003C\u002Fstrong>\u003Cbr \u002F>\nConverts \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Ftitle\" rel=\"nofollow ugc\">title\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Ftags\" rel=\"nofollow ugc\">tags\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fcategories\" rel=\"nofollow ugc\">categories\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fexcerpt\" rel=\"nofollow ugc\">excerpt\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fslug\" rel=\"nofollow ugc\">slug\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fseo-title-and-description\" rel=\"nofollow ugc\">SEO title and description\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Ffeatured-image\" rel=\"nofollow ugc\">featured image\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fdate\" rel=\"nofollow ugc\">date\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Flanguage\" rel=\"nofollow ugc\">language\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fwoo-gallery-images\" rel=\"nofollow ugc\">WooCommerce gallery images\u003C\u002Fa>, and \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fcustom-attributes\" rel=\"nofollow ugc\">custom fields\u003C\u002Fa>. Uses document \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fhow-to-set-or-add-attribute-in-document\" rel=\"nofollow ugc\">additional contents\u003C\u002Fa> marked by special style for other text blocks.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Editor mode\u003C\u002Fstrong>\u003Cbr \u002F>\nIt appears as the \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fin-place-mode\" rel=\"nofollow ugc\">special meta-box\u003C\u002Fa> in the content editor (in-place). All changes will be put in particular editor places.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Direct mode\u003C\u002Fstrong>\u003Cbr \u002F>\nAutomatically \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fdirect-batch-mode\" rel=\"nofollow ugc\">create content\u003C\u002Fa> if needed. No need to open content for editing.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Gutenberg editor support\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fgutenberg-blocks\" rel=\"nofollow ugc\">Gutenberg blocks\u003C\u002Fa> are fully supported.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Remembering applicable content types\u003C\u002Fstrong>\u003Cbr \u002F>\nParticular \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Foptions\" rel=\"nofollow ugc\">content types\u003C\u002Fa> can be chosen to be applicable.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Basic content corrections\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fmedia#url_base\" rel=\"nofollow ugc\">Corrects image URLs\u003C\u002Fa> according to the upload image directory. \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Flinks#link_correction\" rel=\"nofollow ugc\">Checks internal links\u003C\u002Fa> for existence and marks or deletes them. \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Flinks#name_path_conversion\" rel=\"nofollow ugc\">Converts links\u003C\u002Fa> to another .DOCX documents to site links. Uses original and \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fmedia#image_descr_as_filename\" rel=\"nofollow ugc\">specified\u003C\u002Fa> media filenames. Warns about \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fmedia#check_final_urls\" rel=\"nofollow ugc\">non-existent media URLs\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Document to post binding\u003C\u002Fstrong>\u003Cbr \u002F>\nDocuments \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fdocument-to-post-binding\" rel=\"nofollow ugc\">can be bound to the posts\u003C\u002Fa> to get the ability to update it later from the same source.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Rich document markup using\u003C\u002Fstrong>\u003Cbr \u002F>\nWorks with \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fbody#review_mode\" rel=\"nofollow ugc\">reviewing documents\u003C\u002Fa> and always uses final markup content. \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fbody#review_mode\" rel=\"nofollow ugc\">Comment document parts\u003C\u002Fa> to prevent them from publishing.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Free additional features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Batch mode (limited)\u003C\u002Fstrong>\u003Cbr \u002F>\nJust \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fdirect-batch-mode\" rel=\"nofollow ugc\">converts\u003C\u002Fa> a set of documents with one click. Add files to list from many sources at one time.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Premium features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Batch mode\u003C\u002Fstrong>\u003Cbr \u002F>\nJust \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fdirect-batch-mode\" rel=\"nofollow ugc\">converts\u003C\u002Fa> a set of documents with one click. Add files to list from many sources at one time.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Remembering conversion settings\u003C\u002Fstrong>\u003Cbr \u002F>\nConversion \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Foptions\" rel=\"nofollow ugc\">options\u003C\u002Fa> can be preset by each post type to use the right settings each time.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Advanced content corrections\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fbody#hdrs_overlvl\" rel=\"nofollow ugc\">Downlevels subheaders\u003C\u002Fa> if more than one ‘Header 1’ on the page. Cleans unneeded elements like \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fbody#clean_page_breaks\" rel=\"nofollow ugc\">page breaks\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fmedia#clean_alttitlehref\" rel=\"nofollow ugc\">image original title, alternative text, and link attributes\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fmedia#prepend_siteurl_to_fileurl\" rel=\"nofollow ugc\">URL site prefix\u003C\u002Fa>. \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fdocs\u002Fwordpress\u002Fpost-docx-source\u002Fmedia#gen_alttitle\" rel=\"nofollow ugc\">Generates\u003C\u002Fa> title and alternative text attributes if they are empty.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>No promotions\u003C\u002Fstrong>\u003Cbr \u002F>\nNo promotions of other related plugins.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Support\u003C\u002Fstrong>\u003Cbr \u002F>\nPersonal prioritized \u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fsupport\" rel=\"nofollow ugc\">support\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.s-sols.com\u002Fproducts\u002Fwordpress\u002Fpost-docx-source\" rel=\"nofollow ugc\">More details\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Requirements\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fdownload\" rel=\"ugc\">WordPress\u003C\u002Fa> 4.5 or higher.\u003C\u002Fli>\n\u003Cli>PHP 5.4 or higher.\u003C\u002Fli>\n\u003Cli>Browser (Google Chrome, Firefox, IE).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Compatibility\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fall-in-one-seo-pack\" rel=\"ugc\">All in One SEO Pack\u003C\u002Fa> 2.0.9 or higher.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwordpress-seo\" rel=\"ugc\">Yoast SEO\u003C\u002Fa> 6.0 or higher.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fseo-by-rank-math\" rel=\"ugc\">Rank Math SEO\u003C\u002Fa> 1.0 or higher.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-seopress\" rel=\"ugc\">SEO Press\u003C\u002Fa> 3.7 or higher.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoocommerce\" rel=\"ugc\">WooCommerce\u003C\u002Fa> 3.0 or higher.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwpml.org\" rel=\"nofollow ugc\">WPML\u003C\u002Fa> 4.0 or higher.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fpolylang.pro\" rel=\"nofollow ugc\">PolyLang\u003C\u002Fa> 1.8 or higher.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcustom-upload-dir\" rel=\"ugc\">Custom Upload Dir\u003C\u002Fa> 3.4 or higher.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcustom-post-type-ui\" rel=\"ugc\">Custom Post Type UI\u003C\u002Fa> 1.5 or higher.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmeta-box\" rel=\"ugc\">Meta Box\u003C\u002Fa> 4.0 or higher.\u003C\u002Fli>\n\u003C\u002Ful>\n","Save your time by automatically converting from .DOCX to content with all WordPress post attributes.",900,40327,92,45,"2026-02-13T20:27:00.000Z","6.9.4","4.5","5.4",[20,21,22,23,24],"batch","converter","docx","importer","msword","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fseraphinite-post-docx-source","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fseraphinite-post-docx-source.2.16.15.zip",98,3,0,"2024-07-11 00:00:00","2026-03-15T15:16:48.613Z",[33,49,60],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48},"CVE-2024-38727","seraphinite-post-docx-source-missing-authorization","Seraphinite Post .DOCX Source \u003C= 2.16.9 - Missing Authorization","The Seraphinite Post .DOCX Source plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.16.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action.",null,"\u003C=2.16.9","2.16.10","medium",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Missing Authorization","2024-07-19 13:52:27",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F2620da78-3d78-40c5-a125-09d93993cac8?source=api-prod",9,{"id":50,"url_slug":51,"title":52,"description":53,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":54,"cvss_vector":55,"vuln_type":56,"published_date":30,"updated_date":57,"references":58,"days_to_patch":48},"CVE-2024-38728","seraphinite-post-docx-source-authenticated-subscriber-server-side-request-forgery","Seraphinite Post .DOCX Source \u003C= 2.16.9 - Authenticated (Subscriber+) Server-Side Request Forgery","The Seraphinite Post .DOCX Source plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.16.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application which can be used to query and modify information from internal services.",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Server-Side Request Forgery (SSRF)","2024-07-19 13:52:31",[59],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F4aebd497-d3c7-4a85-bde4-07e8eade836f?source=api-prod",{"id":61,"url_slug":62,"title":63,"description":64,"plugin_slug":4,"theme_slug":38,"affected_versions":65,"patched_in_version":66,"severity":41,"cvss_score":42,"cvss_vector":67,"vuln_type":68,"published_date":69,"updated_date":70,"references":71,"days_to_patch":73},"CVE-2023-48279","seraphinite-post-docx-source-cross-site-request-forgery","Seraphinite Post .DOCX Source \u003C= 2.16.6 - Cross-Site Request Forgery","The Seraphinite Post .DOCX Source plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.16.6. This is due to missing or incorrect nonce validation on the saveSettings functionality. This makes it possible for unauthenticated attackers to update the plugins settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.","\u003C=2.16.6","2.16.7","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2023-11-23 00:00:00","2024-02-12 15:02:20",[72],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fdfcc2ab2-504d-4151-9435-618e317ce95c?source=api-prod",82,{"slug":75,"display_name":7,"profile_url":8,"plugin_count":76,"total_installs":77,"avg_security_score":78,"avg_patch_time_days":79,"trust_score":80,"computed_at":81},"seraphinitesoft",5,60960,94,36,84,"2026-04-04T23:17:54.430Z",[83,103,125,143,159],{"slug":84,"name":85,"version":86,"author":87,"author_profile":88,"description":89,"short_description":90,"active_installs":91,"downloaded":92,"rating":93,"num_ratings":94,"last_updated":95,"tested_up_to":96,"requires_at_least":97,"requires_php":98,"tags":99,"homepage":101,"download_link":102,"security_score":13,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"wpcat2tag-importer","Categories to Tags Converter","0.6.3","briancolinger","https:\u002F\u002Fprofiles.wordpress.org\u002Fbriancolinger\u002F","\u003Cp>Convert existing categories to tags or tags to categories, selectively.\u003C\u002Fp>\n","Convert existing categories to tags or tags to categories, selectively.",50000,1792627,86,16,"2024-10-21T12:03:00.000Z","6.7.5","3.0","",[100,23],"categories-and-tags-converter","https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fwpcat2tag-importer\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpcat2tag-importer.0.6.3.zip",{"slug":104,"name":105,"version":106,"author":107,"author_profile":108,"description":109,"short_description":110,"active_installs":111,"downloaded":112,"rating":78,"num_ratings":113,"last_updated":114,"tested_up_to":16,"requires_at_least":17,"requires_php":115,"tags":116,"homepage":120,"download_link":121,"security_score":122,"vuln_count":123,"unpatched_count":29,"last_vuln_date":124,"fetched_at":31},"fg-prestashop-to-woocommerce","FG PrestaShop to WooCommerce","4.63.0","Kerfred","https:\u002F\u002Fprofiles.wordpress.org\u002Fkerfred\u002F","\u003Cp>This plugin migrates products, categories, tags, images and CMS from PrestaShop to WooCommerce\u002FWordPress.\u003C\u002Fp>\n\u003Cp>It has been tested with \u003Cstrong>PrestaShop versions 1.0 to 9\u003C\u002Fstrong> and the latest version of WordPress. It is compatible with multisite installations.\u003C\u002Fp>\n\u003Cp>Major features include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>migrates PrestaShop products\u003C\u002Fli>\n\u003Cli>migrates PrestaShop product images\u003C\u002Fli>\n\u003Cli>migrates PrestaShop product categories\u003C\u002Fli>\n\u003Cli>migrates PrestaShop product tags\u003C\u002Fli>\n\u003Cli>migrates PrestaShop CMS (as posts or pages)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>No need to subscribe to an external web site.\u003C\u002Fp>\n\u003Ch4>Premium version\u003C\u002Fh4>\n\u003Cp>The \u003Cstrong>Premium version\u003C\u002Fstrong> includes these extra features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>migrates PrestaShop product features\u003C\u002Fli>\n\u003Cli>migrates PrestaShop product attributes\u003C\u002Fli>\n\u003Cli>migrates PrestaShop product attribute images\u003C\u002Fli>\n\u003Cli>migrates PrestaShop product accessories\u003C\u002Fli>\n\u003Cli>migrates PrestaShop product combinations\u003C\u002Fli>\n\u003Cli>migrates PrestaShop virtual products\u003C\u002Fli>\n\u003Cli>migrates PrestaShop downloadable products\u003C\u002Fli>\n\u003Cli>migrates PrestaShop employees\u003C\u002Fli>\n\u003Cli>migrates PrestaShop customers\u003C\u002Fli>\n\u003Cli>migrates PrestaShop orders\u003C\u002Fli>\n\u003Cli>migrates PrestaShop ratings and reviews\u003C\u002Fli>\n\u003Cli>migrates PrestaShop discounts\u002Fvouchers (cart rules)\u003C\u002Fli>\n\u003Cli>migrates PrestaShop menus\u003C\u002Fli>\n\u003Cli>SEO: Redirect the PrestaShop URLs to the new WordPress URLs\u003C\u002Fli>\n\u003Cli>SEO: Import meta data (browser title, description, keywords, robots) to WordPress SEO\u003C\u002Fli>\n\u003Cli>the employees and customers can authenticate to WordPress using their PrestaShop passwords\u003C\u002Fli>\n\u003Cli>ability to do a partial import\u003C\u002Fli>\n\u003Cli>ability to run the import automatically from the cron (for dropshipping for example)\u003C\u002Fli>\n\u003Cli>ability to run the import by WP CLI\u003C\u002Fli>\n\u003Cli>compatible with PrestaShop multishops\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The Premium version can be purchased on: \u003Ca href=\"https:\u002F\u002Fwww.fredericgilles.net\u002Ffg-prestashop-to-woocommerce\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.fredericgilles.net\u002Ffg-prestashop-to-woocommerce\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Add-ons\u003C\u002Fh4>\n\u003Cp>The Premium version allows the use of add-ons that enhance functionality:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Attachments: imports the product attachments\u003C\u002Fli>\n\u003Cli>Brands: imports the manufacturers\u003C\u002Fli>\n\u003Cli>Suppliers: imports the suppliers\u003C\u002Fli>\n\u003Cli>Customer Groups: imports the customer groups and the wholesale prices\u003C\u002Fli>\n\u003Cli>Cost of Goods: import the products cost\u003C\u002Fli>\n\u003Cli>Custom Order Numbers: imports the PrestaShop order references\u003C\u002Fli>\n\u003Cli>Internationalization: imports the translations to WPML\u003C\u002Fli>\n\u003Cli>Tiered prices: imports the tiered prices based on quantity\u003C\u002Fli>\n\u003Cli>Units: imports the product units\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>English (default)\u003C\u002Fli>\n\u003Cli>French (fr_FR)\u003C\u002Fli>\n\u003Cli>Hungarian (hu_HU)\u003C\u002Fli>\n\u003Cli>Russian (ru_RU)\u003C\u002Fli>\n\u003Cli>other can be translated\u003C\u002Fli>\n\u003C\u002Ful>\n","A plugin to migrate PrestaShop e-commerce solution to WooCommerce",1000,150096,124,"2026-02-04T08:50:00.000Z","5.6",[21,117,23,118,119],"dropshipping","prestashop","woocommerce","https:\u002F\u002Fwww.fredericgilles.net\u002Ffg-prestashop-to-woocommerce\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffg-prestashop-to-woocommerce.4.65.0.zip",99,2,"2024-03-29 00:00:00",{"slug":126,"name":127,"version":128,"author":129,"author_profile":130,"description":131,"short_description":132,"active_installs":133,"downloaded":134,"rating":80,"num_ratings":135,"last_updated":136,"tested_up_to":137,"requires_at_least":97,"requires_php":98,"tags":138,"homepage":98,"download_link":141,"security_score":142,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"taxonomy-converter","Taxonomy Converter","1.3","kristarella","https:\u002F\u002Fprofiles.wordpress.org\u002Fkristarella\u002F","\u003Cp>Copy or convert terms between taxonomies.\u003C\u002Fp>\n\u003Cp>Taxonomies include categories, tags and any other custom taxonomies that may be present with your active theme and plugins.\u003C\u002Fp>\n\u003Cp>This plugin, based on Categories to Tags Converter, allows you to copy (duplicate) or convert (move) terms from one taxonomy to another or to multiple taxonomies, while maintaining associated posts.\u003C\u002Fp>\n","Copy or convert terms between taxonomies.",600,20940,11,"2019-07-26T05:50:00.000Z","5.2.24",[100,21,139,140,23],"copy","duplicate","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftaxonomy-converter.1.3.zip",85,{"slug":144,"name":145,"version":146,"author":107,"author_profile":108,"description":147,"short_description":148,"active_installs":149,"downloaded":150,"rating":151,"num_ratings":152,"last_updated":153,"tested_up_to":16,"requires_at_least":17,"requires_php":115,"tags":154,"homepage":157,"download_link":158,"security_score":151,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"fg-opencart-to-woocommerce","FG OpenCart to WooCommerce","1.48.0","\u003Cp>This plugin migrates products, categories, images and information pages from OpenCart to WooCommerce\u002FWordPress.\u003C\u002Fp>\n\u003Cp>It has been tested with \u003Cstrong>OpenCart versions 1 to 4\u003C\u002Fstrong> and the latest version of WordPress. It is compatible with multisite installations.\u003C\u002Fp>\n\u003Cp>Major features include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>migrates OpenCart products\u003C\u002Fli>\n\u003Cli>migrates OpenCart product images\u003C\u002Fli>\n\u003Cli>migrates OpenCart product categories\u003C\u002Fli>\n\u003Cli>migrates OpenCart product tags\u003C\u002Fli>\n\u003Cli>migrates OpenCart information pages\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>No need to subscribe to an external web site.\u003C\u002Fp>\n\u003Ch4>Premium version\u003C\u002Fh4>\n\u003Cp>The \u003Cstrong>Premium version\u003C\u002Fstrong> includes these extra features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>migrates OpenCart attributes\u003C\u002Fli>\n\u003Cli>migrates OpenCart filters\u003C\u002Fli>\n\u003Cli>migrates OpenCart options\u003C\u002Fli>\n\u003Cli>migrates OpenCart downloads\u003C\u002Fli>\n\u003Cli>migrates OpenCart users\u003C\u002Fli>\n\u003Cli>migrates OpenCart customers\u003C\u002Fli>\n\u003Cli>migrates OpenCart orders\u003C\u002Fli>\n\u003Cli>migrates OpenCart reviews\u003C\u002Fli>\n\u003Cli>migrates OpenCart tax classes\u003C\u002Fli>\n\u003Cli>migrates OpenCart related products\u003C\u002Fli>\n\u003Cli>migrates OpenCart coupons\u003C\u002Fli>\n\u003Cli>SEO: Redirect the OpenCart URLs to the new WordPress URLs\u003C\u002Fli>\n\u003Cli>SEO: Import meta data (meta title, description, keywords) to WordPress SEO\u003C\u002Fli>\n\u003Cli>the users and customers can authenticate to WordPress using their OpenCart passwords\u003C\u002Fli>\n\u003Cli>ability to update existing products\u003C\u002Fli>\n\u003Cli>ability to do a partial import\u003C\u002Fli>\n\u003Cli>ability to run the import automatically from the cron (for dropshipping for example)\u003C\u002Fli>\n\u003Cli>ability to run the import by WP CLI\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The Premium version can be purchased on: \u003Ca href=\"https:\u002F\u002Fwww.fredericgilles.net\u002Ffg-opencart-to-woocommerce\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.fredericgilles.net\u002Ffg-opencart-to-woocommerce\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Add-ons\u003C\u002Fh4>\n\u003Cp>The Premium version allows the use of add-ons that enhance functionality:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Brands: imports the manufacturers\u003C\u002Fli>\n\u003Cli>Attachments: imports the downloads\u003C\u002Fli>\n\u003Cli>Internationalization: imports the translations to WPML or Polylang\u003C\u002Fli>\n\u003Cli>Custom order numbers\u003C\u002Fli>\n\u003Cli>Custom order statuses\u003C\u002Fli>\n\u003Cli>Product Options\u003C\u002Fli>\n\u003Cli>Product Bundles\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>English (default)\u003C\u002Fli>\n\u003Cli>French (fr_FR)\u003C\u002Fli>\n\u003Cli>other can be translated\u003C\u002Fli>\n\u003C\u002Ful>\n","A plugin to migrate OpenCart e-commerce solution to WooCommerce",300,18291,100,14,"2026-02-09T15:50:00.000Z",[21,23,155,156,119],"migrator","opencart","https:\u002F\u002Fwww.fredericgilles.net\u002Ffg-opencart-to-woocommerce\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffg-opencart-to-woocommerce.1.48.0.zip",{"slug":160,"name":161,"version":162,"author":107,"author_profile":108,"description":163,"short_description":164,"active_installs":151,"downloaded":165,"rating":27,"num_ratings":166,"last_updated":167,"tested_up_to":16,"requires_at_least":17,"requires_php":115,"tags":168,"homepage":171,"download_link":172,"security_score":151,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"fg-spip-to-wp","FG SPIP to WordPress","3.36.1","\u003Cp>This plugin migrates categories, articles, news and images from SPIP to WordPress.\u003C\u002Fp>\n\u003Cp>It has been tested with \u003Cstrong>SPIP versions 1.8, 1.9, 2.0, 3.x, and 4.x\u003C\u002Fstrong> and the latest version of WordPress. It is compatible with multisite installations.\u003C\u002Fp>\n\u003Cp>Major features include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>migrates categories\u003C\u002Fli>\n\u003Cli>migrates articles\u003C\u002Fli>\n\u003Cli>migrates news\u003C\u002Fli>\n\u003Cli>migrates featured images\u003C\u002Fli>\n\u003Cli>converts SPIP shortcodes\u003C\u002Fli>\n\u003Cli>compatible with the MySQL and SQLite SPIP database drivers\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>No need to subscribe to an external web site.\u003C\u002Fp>\n\u003Ch4>Premium version\u003C\u002Fh4>\n\u003Cp>The \u003Cstrong>Premium version\u003C\u002Fstrong> includes these extra features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>migrates authors with their passwords\u003C\u002Fli>\n\u003Cli>migrates keywords\u003C\u002Fli>\n\u003Cli>migrates forum as WordPress comments\u003C\u002Fli>\n\u003Cli>migrates the syndic sites\u003C\u002Fli>\n\u003Cli>SEO: redirects articles, news, tags and authors URLs\u003C\u002Fli>\n\u003Cli>partial imports : ability to skip some parts of the import: categories, articles, news, users, forum\u003C\u002Fli>\n\u003Cli>ability to run the import by WP CLI\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The Premium version can be purchased on: \u003Ca href=\"https:\u002F\u002Fwww.fredericgilles.net\u002Ffg-spip-to-wordpress\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.fredericgilles.net\u002Ffg-spip-to-wordpress\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Add-ons\u003C\u002Fh4>\n\u003Cp>The Premium version allows the use of add-ons that enhance functionality:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>documents migration\u003C\u002Fli>\n\u003Cli>multilingual content to WPML\u003C\u002Fli>\n\u003Cli>metas SEO data migration\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>These modules can be purchased on: \u003Ca href=\"https:\u002F\u002Fwww.fredericgilles.net\u002Ffg-spip-to-wordpress\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fwww.fredericgilles.net\u002Ffg-spip-to-wordpress\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>English (default)\u003C\u002Fli>\n\u003Cli>French (fr_FR)\u003C\u002Fli>\n\u003Cli>other can be translated\u003C\u002Fli>\n\u003C\u002Ful>\n","A plugin to migrate categories, articles, news, and images from SPIP to WordPress",28470,32,"2026-01-27T08:02:00.000Z",[21,169,23,170],"import","spip","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ffg-spip-to-wp\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffg-spip-to-wp.3.36.1.zip",{"attackSurface":174,"codeSignals":325,"taintFlows":886,"riskAssessment":952,"analyzedAt":970},{"hooks":175,"ajaxHandlers":315,"restRoutes":322,"shortcodes":323,"cronEvents":324,"entryPointCount":123,"unprotectedCount":123},[176,183,187,191,195,198,200,203,208,212,214,218,220,223,226,230,233,236,239,242,245,248,251,254,257,260,263,266,269,274,277,283,287,291,295,299,302,304,306,309,311],{"type":177,"name":178,"callback":179,"priority":180,"file":181,"line":182},"filter","safe_style_css","closure",10,"Cmn\\Gen.php",4841,{"type":177,"name":184,"callback":185,"file":181,"line":186},"option_home","cb1",4934,{"type":177,"name":184,"callback":188,"priority":189,"file":181,"line":190},"cb2",99999,4935,{"type":177,"name":192,"callback":193,"file":181,"line":194},"home_url","cb",4938,{"type":177,"name":196,"callback":185,"file":181,"line":197},"option_siteurl",4966,{"type":177,"name":196,"callback":188,"priority":189,"file":181,"line":199},4967,{"type":177,"name":201,"callback":193,"file":181,"line":202},"site_url",4969,{"type":204,"name":205,"callback":206,"priority":180,"file":181,"line":207},"action","requests-requests.before_request","_cbRequestBefore",5093,{"type":204,"name":209,"callback":210,"priority":180,"file":181,"line":211},"requests-requests.before_parse","_cbRequestsBeforeParse",5094,{"type":177,"name":192,"callback":179,"file":181,"line":213},5932,{"type":177,"name":215,"callback":216,"priority":189,"file":181,"line":217},"wpml_get_language_from_url","anonymous",5937,{"type":177,"name":192,"callback":179,"priority":189,"file":181,"line":219},5942,{"type":177,"name":221,"callback":216,"priority":29,"file":181,"line":222},"load_textdomain_mofile",6316,{"type":177,"name":224,"callback":193,"priority":189,"file":181,"line":225},"post_link",6467,{"type":204,"name":227,"callback":216,"file":228,"line":229},"admin_notices","Cmn\\Plugin.php",483,{"type":204,"name":231,"callback":216,"file":228,"line":232},"network_admin_notices",484,{"type":204,"name":234,"callback":216,"file":228,"line":235},"plugins_loaded",488,{"type":204,"name":237,"callback":216,"file":228,"line":238},"change_locale",489,{"type":177,"name":240,"callback":179,"file":228,"line":241},"removable_query_args",495,{"type":204,"name":243,"callback":179,"file":228,"line":244},"admin_init",503,{"type":204,"name":246,"callback":179,"file":228,"line":247},"seraph_pds_postOpsRes",517,{"type":204,"name":249,"callback":179,"file":228,"line":250},"admin_enqueue_scripts",535,{"type":204,"name":252,"callback":179,"file":228,"line":253},"wp_loaded",574,{"type":177,"name":255,"callback":216,"priority":180,"file":228,"line":256},"plugins_update_check_locales",582,{"type":204,"name":258,"callback":179,"file":228,"line":259},"admin_post_nopriv_seraph_pds_api",584,{"type":204,"name":261,"callback":179,"file":228,"line":262},"admin_post_seraph_pds_api",585,{"type":204,"name":264,"callback":179,"file":228,"line":265},"admin_footer",644,{"type":177,"name":267,"callback":216,"priority":180,"file":228,"line":268},"admin_footer_text",824,{"type":177,"name":270,"callback":271,"priority":189,"file":272,"line":273},"add_post_metadata","seraph_pds\\_PreventUpdateDocBindMeta","common.php",169,{"type":177,"name":275,"callback":271,"priority":189,"file":272,"line":276},"update_post_metadata",170,{"type":177,"name":278,"callback":279,"priority":280,"file":281,"line":282},"wp_unique_filename","seraph_pds\\_wp_unique_filename_UploadImage",1,"helper.php",587,{"type":177,"name":284,"callback":285,"priority":280,"file":281,"line":286},"pre_move_uploaded_file","seraph_pds\\_pre_move_uploaded_file_UploadImage",588,{"type":177,"name":288,"callback":289,"priority":189,"file":281,"line":290},"wp_handle_upload","seraph_pds\\_handle_upload_UploadImage",589,{"type":177,"name":292,"callback":293,"file":281,"line":294},"upload_dir","seraph_pds\\_upload_dir_UploadImage",590,{"type":204,"name":296,"callback":179,"file":297,"line":298},"wp_enqueue_scripts","main.php",13,{"type":204,"name":300,"callback":179,"file":297,"line":301},"admin_menu",46,{"type":204,"name":243,"callback":179,"file":297,"line":303},56,{"type":204,"name":246,"callback":179,"file":297,"line":305},73,{"type":204,"name":307,"callback":179,"file":297,"line":308},"add_meta_boxes",83,{"type":204,"name":300,"callback":179,"file":297,"line":310},106,{"type":204,"name":312,"callback":313,"file":297,"line":314},"save_post","seraph_pds\\_OnPostSettingsSave",113,[316,320],{"action":317,"nopriv":318,"callback":216,"hasNonce":318,"hasCapCheck":318,"file":228,"line":319},"seraph_pds_act",false,493,{"action":321,"nopriv":318,"callback":179,"hasNonce":318,"hasCapCheck":318,"file":228,"line":290},"seraph_pds_api",[],[],[],{"dangerousFunctions":326,"sqlUsage":346,"outputEscaping":356,"fileOperations":883,"externalRequests":76,"nonceChecks":76,"capabilityChecks":884,"bundledLibraries":885},[327,331,334,339,341,343],{"fn":328,"file":181,"line":329,"context":330},"unserialize",322,"$v = @unserialize( $data );",{"fn":328,"file":181,"line":332,"context":333},2842,"$chunk -> a = @unserialize( $chunk -> a );",{"fn":335,"file":336,"line":337,"context":338},"proc_open","Cmn\\Img.php",375,"$hProc = @proc_open( $cmdline, array( 2 => array( 'pipe', 'w' ) ), $pipes, null, null, array( 'bypas",{"fn":335,"file":336,"line":340,"context":338},729,{"fn":335,"file":336,"line":342,"context":338},846,{"fn":328,"file":228,"line":344,"context":345},163,"$val = ( $val !== false ) ? @unserialize( $val ) : null;",{"prepared":123,"raw":28,"locations":347},[348,351,354],{"file":281,"line":349,"context":350},17,"$wpdb->get_var() with variable interpolation",{"file":281,"line":352,"context":353},531,"$wpdb->get_results() with variable interpolation",{"file":281,"line":355,"context":353},547,{"escaped":357,"rawEcho":358,"locations":359},105,278,[360,363,365,367,369,371,373,375,376,378,379,381,383,385,387,389,391,393,395,397,399,401,403,405,407,409,411,413,415,417,419,421,423,425,427,429,431,433,434,436,438,440,442,444,446,448,450,452,454,456,458,460,462,464,466,468,470,472,474,476,478,480,482,484,486,488,490,492,494,496,498,500,502,504,506,508,510,512,514,516,518,520,522,524,526,528,530,532,534,536,538,541,543,545,546,547,548,550,552,554,556,558,560,562,563,565,566,568,570,572,574,576,578,580,582,584,586,588,590,592,594,596,597,598,599,600,602,604,606,608,610,612,614,616,618,619,620,621,622,624,626,628,630,631,632,634,635,636,637,638,639,641,643,645,646,648,650,652,654,656,657,659,661,663,665,667,668,670,672,674,676,678,680,681,683,685,687,689,691,693,695,696,698,700,702,704,706,708,709,711,713,715,717,719,721,723,725,727,729,731,733,735,737,739,740,741,742,743,745,747,749,751,753,755,757,759,761,762,764,766,768,770,772,774,776,778,780,782,784,785,787,789,791,793,795,797,799,801,803,805,807,809,811,813,815,817,819,821,823,825,827,829,831,833,835,837,839,841,843,845,847,849,851,853,855,857,859,861,863,865,867,869,871,873,875,877,879,881],{"file":228,"line":361,"context":362},527,"raw output",{"file":228,"line":364,"context":362},529,{"file":228,"line":366,"context":362},1565,{"file":228,"line":368,"context":362},1568,{"file":228,"line":370,"context":362},1571,{"file":228,"line":372,"context":362},1593,{"file":228,"line":374,"context":362},1594,{"file":228,"line":374,"context":362},{"file":228,"line":377,"context":362},1596,{"file":228,"line":377,"context":362},{"file":228,"line":380,"context":362},1599,{"file":228,"line":382,"context":362},1875,{"file":228,"line":384,"context":362},1923,{"file":228,"line":386,"context":362},1942,{"file":228,"line":388,"context":362},1957,{"file":228,"line":390,"context":362},1971,{"file":228,"line":392,"context":362},1987,{"file":228,"line":394,"context":362},1998,{"file":228,"line":396,"context":362},2007,{"file":228,"line":398,"context":362},2057,{"file":228,"line":400,"context":362},2059,{"file":228,"line":402,"context":362},2071,{"file":228,"line":404,"context":362},2096,{"file":228,"line":406,"context":362},2098,{"file":228,"line":408,"context":362},2100,{"file":228,"line":410,"context":362},2103,{"file":228,"line":412,"context":362},2105,{"file":228,"line":414,"context":362},2107,{"file":228,"line":416,"context":362},2108,{"file":228,"line":418,"context":362},2109,{"file":228,"line":420,"context":362},2111,{"file":228,"line":422,"context":362},2119,{"file":228,"line":424,"context":362},2171,{"file":228,"line":426,"context":362},2172,{"file":272,"line":428,"context":362},96,{"file":297,"line":430,"context":362},77,{"file":297,"line":432,"context":362},120,{"file":297,"line":113,"context":362},{"file":297,"line":435,"context":362},126,{"file":297,"line":437,"context":362},132,{"file":297,"line":439,"context":362},162,{"file":297,"line":441,"context":362},164,{"file":297,"line":443,"context":362},166,{"file":297,"line":445,"context":362},168,{"file":297,"line":447,"context":362},174,{"file":297,"line":449,"context":362},178,{"file":297,"line":451,"context":362},180,{"file":297,"line":453,"context":362},182,{"file":297,"line":455,"context":362},187,{"file":297,"line":457,"context":362},189,{"file":297,"line":459,"context":362},191,{"file":297,"line":461,"context":362},193,{"file":297,"line":463,"context":362},195,{"file":297,"line":465,"context":362},197,{"file":297,"line":467,"context":362},199,{"file":297,"line":469,"context":362},211,{"file":297,"line":471,"context":362},213,{"file":297,"line":473,"context":362},215,{"file":297,"line":475,"context":362},217,{"file":297,"line":477,"context":362},222,{"file":297,"line":479,"context":362},224,{"file":297,"line":481,"context":362},226,{"file":297,"line":483,"context":362},228,{"file":297,"line":485,"context":362},230,{"file":297,"line":487,"context":362},232,{"file":297,"line":489,"context":362},236,{"file":297,"line":491,"context":362},237,{"file":297,"line":493,"context":362},238,{"file":297,"line":495,"context":362},240,{"file":297,"line":497,"context":362},242,{"file":297,"line":499,"context":362},244,{"file":297,"line":501,"context":362},246,{"file":297,"line":503,"context":362},249,{"file":297,"line":505,"context":362},251,{"file":297,"line":507,"context":362},253,{"file":297,"line":509,"context":362},255,{"file":297,"line":511,"context":362},265,{"file":297,"line":513,"context":362},269,{"file":297,"line":515,"context":362},276,{"file":297,"line":517,"context":362},280,{"file":297,"line":519,"context":362},282,{"file":297,"line":521,"context":362},283,{"file":297,"line":523,"context":362},292,{"file":297,"line":525,"context":362},302,{"file":297,"line":527,"context":362},306,{"file":297,"line":529,"context":362},361,{"file":297,"line":531,"context":362},366,{"file":297,"line":533,"context":362},377,{"file":297,"line":535,"context":362},378,{"file":297,"line":537,"context":362},408,{"file":539,"line":540,"context":362},"options.php",34,{"file":539,"line":542,"context":362},41,{"file":539,"line":544,"context":362},89,{"file":539,"line":13,"context":362},{"file":539,"line":27,"context":362},{"file":539,"line":122,"context":362},{"file":539,"line":549,"context":362},101,{"file":539,"line":551,"context":362},102,{"file":539,"line":553,"context":362},103,{"file":539,"line":555,"context":362},104,{"file":539,"line":557,"context":362},108,{"file":539,"line":559,"context":362},110,{"file":539,"line":561,"context":362},111,{"file":539,"line":314,"context":362},{"file":539,"line":564,"context":362},116,{"file":539,"line":432,"context":362},{"file":539,"line":567,"context":362},121,{"file":539,"line":569,"context":362},128,{"file":539,"line":571,"context":362},130,{"file":539,"line":573,"context":362},134,{"file":539,"line":575,"context":362},136,{"file":539,"line":577,"context":362},142,{"file":539,"line":579,"context":362},143,{"file":539,"line":581,"context":362},144,{"file":539,"line":583,"context":362},146,{"file":539,"line":585,"context":362},148,{"file":539,"line":587,"context":362},150,{"file":539,"line":589,"context":362},152,{"file":539,"line":591,"context":362},154,{"file":539,"line":593,"context":362},156,{"file":539,"line":595,"context":362},158,{"file":539,"line":439,"context":362},{"file":539,"line":441,"context":362},{"file":539,"line":443,"context":362},{"file":539,"line":273,"context":362},{"file":539,"line":601,"context":362},171,{"file":539,"line":603,"context":362},173,{"file":539,"line":605,"context":362},176,{"file":539,"line":607,"context":362},177,{"file":539,"line":609,"context":362},179,{"file":539,"line":611,"context":362},181,{"file":539,"line":613,"context":362},186,{"file":539,"line":615,"context":362},188,{"file":539,"line":617,"context":362},190,{"file":539,"line":459,"context":362},{"file":539,"line":461,"context":362},{"file":539,"line":463,"context":362},{"file":539,"line":465,"context":362},{"file":539,"line":623,"context":362},202,{"file":539,"line":625,"context":362},204,{"file":539,"line":627,"context":362},206,{"file":539,"line":629,"context":362},208,{"file":539,"line":477,"context":362},{"file":539,"line":485,"context":362},{"file":539,"line":633,"context":362},234,{"file":539,"line":489,"context":362},{"file":539,"line":493,"context":362},{"file":539,"line":495,"context":362},{"file":539,"line":499,"context":362},{"file":539,"line":501,"context":362},{"file":539,"line":640,"context":362},248,{"file":539,"line":642,"context":362},250,{"file":539,"line":644,"context":362},252,{"file":539,"line":509,"context":362},{"file":539,"line":647,"context":362},257,{"file":539,"line":649,"context":362},262,{"file":539,"line":651,"context":362},272,{"file":539,"line":653,"context":362},274,{"file":539,"line":655,"context":362},277,{"file":539,"line":519,"context":362},{"file":539,"line":658,"context":362},284,{"file":539,"line":660,"context":362},286,{"file":539,"line":662,"context":362},288,{"file":539,"line":664,"context":362},290,{"file":539,"line":666,"context":362},296,{"file":539,"line":149,"context":362},{"file":539,"line":669,"context":362},305,{"file":539,"line":671,"context":362},307,{"file":539,"line":673,"context":362},309,{"file":539,"line":675,"context":362},311,{"file":539,"line":677,"context":362},316,{"file":539,"line":679,"context":362},321,{"file":539,"line":329,"context":362},{"file":539,"line":682,"context":362},324,{"file":539,"line":684,"context":362},341,{"file":539,"line":686,"context":362},343,{"file":539,"line":688,"context":362},345,{"file":539,"line":690,"context":362},349,{"file":539,"line":692,"context":362},352,{"file":539,"line":694,"context":362},356,{"file":539,"line":529,"context":362},{"file":539,"line":697,"context":362},365,{"file":539,"line":699,"context":362},370,{"file":539,"line":701,"context":362},388,{"file":539,"line":703,"context":362},393,{"file":539,"line":705,"context":362},398,{"file":539,"line":707,"context":362},403,{"file":539,"line":537,"context":362},{"file":539,"line":710,"context":362},415,{"file":539,"line":712,"context":362},438,{"file":539,"line":714,"context":362},462,{"file":539,"line":716,"context":362},486,{"file":539,"line":718,"context":362},510,{"file":539,"line":720,"context":362},534,{"file":539,"line":722,"context":362},554,{"file":539,"line":724,"context":362},556,{"file":539,"line":726,"context":362},558,{"file":539,"line":728,"context":362},560,{"file":539,"line":730,"context":362},567,{"file":539,"line":732,"context":362},570,{"file":539,"line":734,"context":362},575,{"file":539,"line":736,"context":362},578,{"file":539,"line":738,"context":362},583,{"file":539,"line":262,"context":362},{"file":539,"line":282,"context":362},{"file":539,"line":290,"context":362},{"file":539,"line":133,"context":362},{"file":539,"line":744,"context":362},649,{"file":539,"line":746,"context":362},679,{"file":539,"line":748,"context":362},709,{"file":539,"line":750,"context":362},739,{"file":539,"line":752,"context":362},769,{"file":539,"line":754,"context":362},801,{"file":539,"line":756,"context":362},845,{"file":539,"line":758,"context":362},852,{"file":539,"line":760,"context":362},898,{"file":539,"line":11,"context":362},{"file":539,"line":763,"context":362},904,{"file":539,"line":765,"context":362},911,{"file":539,"line":767,"context":362},913,{"file":539,"line":769,"context":362},917,{"file":539,"line":771,"context":362},924,{"file":539,"line":773,"context":362},926,{"file":539,"line":775,"context":362},930,{"file":539,"line":777,"context":362},937,{"file":539,"line":779,"context":362},948,{"file":539,"line":781,"context":362},975,{"file":539,"line":783,"context":362},980,{"file":539,"line":111,"context":362},{"file":539,"line":786,"context":362},1006,{"file":539,"line":788,"context":362},1010,{"file":539,"line":790,"context":362},1018,{"file":539,"line":792,"context":362},1022,{"file":539,"line":794,"context":362},1026,{"file":539,"line":796,"context":362},1034,{"file":539,"line":798,"context":362},1036,{"file":539,"line":800,"context":362},1039,{"file":539,"line":802,"context":362},1041,{"file":539,"line":804,"context":362},1043,{"file":539,"line":806,"context":362},1045,{"file":539,"line":808,"context":362},1054,{"file":539,"line":810,"context":362},1070,{"file":539,"line":812,"context":362},1086,{"file":539,"line":814,"context":362},1102,{"file":539,"line":816,"context":362},1126,{"file":539,"line":818,"context":362},1158,{"file":539,"line":820,"context":362},1184,{"file":539,"line":822,"context":362},1214,{"file":539,"line":824,"context":362},1233,{"file":539,"line":826,"context":362},1247,{"file":539,"line":828,"context":362},1252,{"file":539,"line":830,"context":362},1271,{"file":539,"line":832,"context":362},1273,{"file":539,"line":834,"context":362},1277,{"file":539,"line":836,"context":362},1284,{"file":539,"line":838,"context":362},1286,{"file":539,"line":840,"context":362},1290,{"file":539,"line":842,"context":362},1297,{"file":539,"line":844,"context":362},1299,{"file":539,"line":846,"context":362},1303,{"file":539,"line":848,"context":362},1310,{"file":539,"line":850,"context":362},1312,{"file":539,"line":852,"context":362},1316,{"file":539,"line":854,"context":362},1323,{"file":539,"line":856,"context":362},1325,{"file":539,"line":858,"context":362},1329,{"file":539,"line":860,"context":362},1336,{"file":539,"line":862,"context":362},1338,{"file":539,"line":864,"context":362},1341,{"file":539,"line":866,"context":362},1343,{"file":539,"line":868,"context":362},1345,{"file":539,"line":870,"context":362},1347,{"file":539,"line":872,"context":362},1351,{"file":539,"line":874,"context":362},1353,{"file":539,"line":876,"context":362},1355,{"file":539,"line":878,"context":362},1359,{"file":539,"line":880,"context":362},1361,{"file":539,"line":882,"context":362},1364,68,7,[],[887,905,913,927,936],{"entryPoint":888,"graph":889,"unsanitizedCount":123,"severity":41},"StreamOutFileContent (Cmn\\Fs.php:13)",{"nodes":890,"edges":903},[891,897],{"id":892,"type":893,"label":894,"file":895,"line":896},"n0","source","$_SERVER (x2)","Cmn\\Fs.php",33,{"id":898,"type":899,"label":900,"file":895,"line":901,"wp_function":902},"n1","sink","header() [Header Injection]",62,"header",[904],{"from":892,"to":898,"sanitized":318},{"entryPoint":906,"graph":907,"unsanitizedCount":123,"severity":41},"\u003CFs> (Cmn\\Fs.php:0)",{"nodes":908,"edges":911},[909,910],{"id":892,"type":893,"label":894,"file":895,"line":896},{"id":898,"type":899,"label":900,"file":895,"line":901,"wp_function":902},[912],{"from":892,"to":898,"sanitized":318},{"entryPoint":914,"graph":915,"unsanitizedCount":29,"severity":926},"Init (Cmn\\Plugin.php:474)",{"nodes":916,"edges":923},[917,920],{"id":892,"type":893,"label":918,"file":228,"line":919},"$_REQUEST",507,{"id":898,"type":899,"label":921,"file":228,"line":364,"wp_function":922},"echo() [XSS]","echo",[924],{"from":892,"to":898,"sanitized":925},true,"low",{"entryPoint":928,"graph":929,"unsanitizedCount":29,"severity":926},"_on_admin_action_act (Cmn\\Plugin.php:1832)",{"nodes":930,"edges":934},[931,933],{"id":892,"type":893,"label":918,"file":228,"line":932},1845,{"id":898,"type":899,"label":921,"file":228,"line":382,"wp_function":922},[935],{"from":892,"to":898,"sanitized":925},{"entryPoint":937,"graph":938,"unsanitizedCount":29,"severity":926},"\u003CPlugin> (Cmn\\Plugin.php:0)",{"nodes":939,"edges":949},[940,942,943,947],{"id":892,"type":893,"label":941,"file":228,"line":919},"$_REQUEST (x2)",{"id":898,"type":899,"label":921,"file":228,"line":364,"wp_function":922},{"id":944,"type":893,"label":945,"file":228,"line":946},"n2","$_SERVER",1634,{"id":948,"type":899,"label":921,"file":228,"line":384,"wp_function":922},"n3",[950,951],{"from":892,"to":898,"sanitized":925},{"from":944,"to":948,"sanitized":925},{"summary":953,"deductions":954},"The seraphinite-post-docx-source plugin exhibits a mixed security posture. While it has no currently unpatched CVEs, its static analysis reveals significant concerns. The presence of two AJAX handlers without authentication checks represents a substantial attack surface, leaving the plugin vulnerable to unauthorized actions. Furthermore, the use of dangerous functions like 'unserialize' and 'proc_open' combined with a low percentage of properly escaped output (27%) indicates a risk of code injection and sensitive data exposure. Taint analysis, while not revealing critical or high severity issues, did identify two flows with unsanitized paths, suggesting potential for vulnerabilities if combined with other weaknesses.\n\nThe plugin's vulnerability history shows a pattern of medium severity issues including missing authorization, SSRF, and CSRF. The recent vulnerability in July 2024, even though patched, reinforces the need for ongoing vigilance. The lack of robust authorization checks on entry points is a recurring theme in its past issues and is directly reflected in the static analysis. Despite some positive signals like the use of nonces and capability checks, the plugin's core architecture, particularly its handling of AJAX requests and potentially untrusted data, presents significant risks.",[955,957,959,962,964,966,968],{"reason":956,"points":180},"AJAX handlers without authentication checks",{"reason":958,"points":180},"Use of dangerous functions (unserialize, proc_open)",{"reason":960,"points":961},"Low percentage of properly escaped output",8,{"reason":963,"points":76},"Flows with unsanitized paths identified",{"reason":965,"points":884},"Vulnerability history with missing authorization",{"reason":967,"points":884},"Vulnerability history with SSRF",{"reason":969,"points":884},"Vulnerability history with CSRF","2026-03-16T19:13:15.445Z",{"wat":972,"direct":985},{"assetPaths":973,"generatorPatterns":978,"scriptPaths":979,"versionParams":980},[974,975,976,977],"\u002Fwp-content\u002Fplugins\u002Fseraphinite-post-docx-source\u002Fcss\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fseraphinite-post-docx-source\u002Fcss\u002Fadmin-styles.css","\u002Fwp-content\u002Fplugins\u002Fseraphinite-post-docx-source\u002Fjs\u002Ffrontend-script.js","\u002Fwp-content\u002Fplugins\u002Fseraphinite-post-docx-source\u002Fjs\u002Fadmin-script.js",[],[976,977],[981,982,983,984],"seraphinite-post-docx-source\u002Fcss\u002Fstyle.css?ver=","seraphinite-post-docx-source\u002Fcss\u002Fadmin-styles.css?ver=","seraphinite-post-docx-source\u002Fjs\u002Ffrontend-script.js?ver=","seraphinite-post-docx-source\u002Fjs\u002Fadmin-script.js?ver=",{"cssClasses":986,"htmlComments":989,"htmlAttributes":992,"restEndpoints":995,"jsGlobals":997,"shortcodeOutput":1000},[987,988],"seraph-pds-frontend-container","seraph-pds-admin-container",[990,991],"\u003C!-- Seraphinite Post .DOCX Source Plugin Start -->","\u003C!-- Seraphinite Post .DOCX Source Plugin End -->",[993,994],"data-seraph-pds-post-id","data-seraph-pds-nonce",[996],"\u002Fwp-json\u002Fseraph-pds\u002Fv1\u002Fsave-post-data",[998,999],"seraphPDSFrontend","seraphPDSAdmin",[]]