[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOrxmSxnGV6ekQOloDBEcFUZ-pvUuR8boYJdNiYt7MH0":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":38,"analysis":136,"fingerprints":243},"shortcode-tester","A Shortcode Tester","1.2.2","Magenta Cuda","https:\u002F\u002Fprofiles.wordpress.org\u002Fmagenta-cuda\u002F","\u003Cp>The Shortcode Tester is a post editor tool for WordPress developers that displays in a popup window the HTML generated by WordPress shortcodes, i.e. so you can quickly view the generated HTML without having to view the entire post. Please visit \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmagenta-cuda\u002Fshortcode-tester\u002Fblob\u002Fmaster\u002FREADME.md\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Fmagenta-cuda\u002Fshortcode-tester\u002Fblob\u002Fmaster\u002FREADME.md\u003C\u002Fa> for a very quick introduction.\u003C\u002Fp>\n","The Shortcode Tester is a post editor tool for WordPress developers that displays in a popup window the HTML generated by WordPress shortcodes, i.e.",10,1981,100,1,"2020-01-03T10:06:00.000Z","5.3.21","3.6","",[20,21,22],"shortcode","tester","tool","https:\u002F\u002Fgithub.com\u002Fmagenta-cuda\u002Fshortcode-tester","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshortcode-tester.1.2.2.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":34,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},"magenta-cuda",4,40,89,30,86,"2026-04-04T19:24:48.361Z",[39,60,80,99,118],{"slug":40,"name":41,"version":42,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":13,"num_ratings":14,"last_updated":49,"tested_up_to":50,"requires_at_least":51,"requires_php":52,"tags":53,"homepage":58,"download_link":59,"security_score":13,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"jsm-show-registered-shortcodes","JSM Show Registered Shortcodes","4.0.0","JS Morisset","https:\u002F\u002Fprofiles.wordpress.org\u002Fjsmoriss\u002F","\u003Cp>A simple and lightweight plugin to show registered shortcodes for the current webpage, along with their callback functions, under a “Registered Shortcodes” toolbar menu item.\u003C\u002Fp>\n\u003Cp>There are no plugin settings – simply install and activate the plugin.\u003C\u002Fp>\n\u003Ch4>Related Plugins\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fjsm-show-comment-meta\u002F\" rel=\"ugc\">JSM Show Comment Metadata\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fjsm-show-order-meta\u002F\" rel=\"ugc\">JSM Show Order Metadata for WooCommerce HPOS\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fjsm-show-post-meta\u002F\" rel=\"ugc\">JSM Show Post Metadata\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fjsm-show-term-meta\u002F\" rel=\"ugc\">JSM Show Term Metadata\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fjsm-show-user-meta\u002F\" rel=\"ugc\">JSM Show User Metadata\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fjsm-show-registered-shortcodes\u002F\" rel=\"ugc\">JSM Show Registered Shortcodes\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Simple and lightweight plugin to show all registered shortcodes under a \"Registered Shortcodes\" toolbar menu item.",200,6029,"2026-03-11T18:10:00.000Z","6.9.4","6.0","7.4.33",[54,55,56,57],"debug","inspector","shortcodes","tools","https:\u002F\u002Fsurniaulula.com\u002Fextend\u002Fplugins\u002Fjsm-show-registered-shortcodes\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjsm-show-registered-shortcodes.4.0.0.zip",{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":47,"downloaded":68,"rating":69,"num_ratings":14,"last_updated":70,"tested_up_to":71,"requires_at_least":72,"requires_php":18,"tags":73,"homepage":78,"download_link":79,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"vc-flipbox","Flipbox Addon for WPBakery Page Builder (formerly Visual Composer)","1.1.8","themebon","https:\u002F\u002Fprofiles.wordpress.org\u002Fthemebon\u002F","\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fcodenpy.com\u002Fitem\u002Fcategory\u002Fwordpress\u002Fthemes\u002F\" rel=\"nofollow ugc\">Checkout our Latest WordPress Themes – 100% Free\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Flipbox for visual composer addon lets you add modern flipbox to your website with various options.. Works with latest Visual Composer v5.2.x\u003C\u002Fp>\n\u003Cp>Note: you can get this addon from \u003Ca href=\"https:\u002F\u002Fcodenpy.com\u002Fitem\u002Fvisual-composer-shortcodes-pro\u002F\" rel=\"nofollow ugc\">Essential WPBakery Page Builder (formerly Visual Composer) Addons\u003C\u002Fa>. It�s recommended to purchase the Essential WPBakery Page Builder Addons which contain other addons in the future update:\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fcodenpy.com\u002Fvisual-composer-addons\u002Fflip-box\u002F\" rel=\"nofollow ugc\">Flip Box – Demo\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fcodenpy.com\u002Fvisual-composer-addons\u002Fflip-box-3d\u002F\" rel=\"nofollow ugc\">Flip Box 3D – Demo\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fcodenpy.com\u002Fvisual-composer-addons\u002Fflip-box-advanced\u002F\" rel=\"nofollow ugc\">Flip Box Advanced – Demo\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>3 Flipbox style \u003C\u002Fli>\n\u003Cli>Background Image for front and back\u003C\u002Fli>\n\u003Cli>Horizontal and vertical effect\u003C\u002Fli>\n\u003Cli>Super Flexible\u003C\u002Fli>\n\u003Cli>Icon from 6 font libraries\u003C\u002Fli>\n\u003Cli>Unlimited Colors.\u003C\u002Fli>\n\u003Cli>Set image or icon.\u003C\u002Fli>\n\u003Cli>Read more button.\u003C\u002Fli>\n\u003Cli>Mobile friendly\u003C\u002Fli>\n\u003Cli>CSS3 Animation\u003C\u002Fli>\n\u003Cli>Super easy Installation.\u003C\u002Fli>\n\u003Cli>100% responsive.\u003C\u002Fli>\n\u003Cli>Easy user interface.\u003C\u002Fli>\n\u003Cli>Works with any theme.\u003C\u002Fli>\n\u003Cli>All Major browser supported.\u003C\u002Fli>\n\u003C\u002Ful>\n","Checkout our Latest WordPress Themes - 100% Free",12793,60,"2021-07-26T08:04:00.000Z","5.8.13","4.0.1",[74,75,76,77],"image-hotspot","tooltip","visual-composer-plugin","visual-composer-shortcode","http:\u002F\u002Fcodenpy.com\u002Fitem\u002Fflipbox-addon-visual-composer\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvc-flipbox.zip",{"slug":81,"name":82,"version":83,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":13,"downloaded":88,"rating":89,"num_ratings":90,"last_updated":91,"tested_up_to":92,"requires_at_least":72,"requires_php":18,"tags":93,"homepage":97,"download_link":98,"security_score":13,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"clean-unused-shortcodes","Clean unused shortcodes","2.0.1","Amr Abdelkarem","https:\u002F\u002Fprofiles.wordpress.org\u002Famrelarabi\u002F","\u003Cp>Clean unused shortcodes from your posts, pages, and any custom post types with ease.\u003C\u002Fp>\n\u003Cp>This plugin provides an intuitive user interface powered by React and supports advanced features like:\u003Cbr \u002F>\n– Preview unused and used shortcodes.\u003Cbr \u002F>\n– View the location of shortcodes in posts or pages.\u003Cbr \u002F>\n– Clean specific shortcodes or all unused shortcodes with one click.\u003Cbr \u002F>\n– Improved visual indicators and functionality for better management of your content.\u003C\u002Fp>\n","Remove unused shortcodes from your posts content with an improved user interface and advanced functionality.",2257,88,7,"2026-02-20T14:18:00.000Z","6.9.0",[94,95,20,57,96],"admin","clean","ui","https:\u002F\u002Famrelarabi.com?ref=clean-unused-shortcodes","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fclean-unused-shortcodes.2.0.1.zip",{"slug":100,"name":101,"version":102,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":13,"downloaded":107,"rating":13,"num_ratings":108,"last_updated":109,"tested_up_to":110,"requires_at_least":111,"requires_php":18,"tags":112,"homepage":116,"download_link":117,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"tipso","Tipso","1.0.0","Bojan Petkovski","https:\u002F\u002Fprofiles.wordpress.org\u002Fpetkovskibojan\u002F","\u003Cp>Tipso is a simple WordPress tooltip plugin that displays a responsive, animated, fully customizable tooltip when the visitor hovers over the matched element.\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>The plugin adds a button in the editor. On click it opens a modal window where you can enter the tooltip content. It generates a shortcode and inserts it in the editor.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>The shortcode\u003Cbr \u002F>\n  [tipso tip=”Tooltip content”]Hover me[\u002Ftipso]\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>You can also manually add the shortcode in the editor, or you can assing the tooltip functionality to any element simply by adding a class \u003Cstrong>tipso\u003C\u002Fstrong> and for the content add a \u003Cstrong>data-tipso=”Tooltip content”\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>For making changes to the default tooltip options (background color, content color etc.) go to “Settings\u002FTipso Settings”\u003C\u002Fp>\n\u003Cp>Check the \u003Ca href=\"http:\u002F\u002Ftipso.object505.com\" rel=\"nofollow ugc\">demo\u003C\u002Fa>\u003C\u002Fp>\n","Tipso is a simple Wordpress tooltip plugin.",5296,8,"2015-04-25T13:30:00.000Z","4.2.39","3.9",[113,114,20,115,75],"mobile","responsive","tinymce","http:\u002F\u002Ftipso.object505.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftipso.zip",{"slug":119,"name":120,"version":121,"author":122,"author_profile":123,"description":124,"short_description":125,"active_installs":126,"downloaded":127,"rating":13,"num_ratings":108,"last_updated":128,"tested_up_to":129,"requires_at_least":130,"requires_php":18,"tags":131,"homepage":134,"download_link":135,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"shortcodes-in-use","Shortcodes In Use","1.2.1","wizzud","https:\u002F\u002Fprofiles.wordpress.org\u002Fwizzud\u002F","\u003Cul>\n\u003Cli>Can’t recall where, or if, you’ve used a certain shortcode?\u003C\u002Fli>\n\u003Cli>Want to remove a plugin and unsure if it provides shortcodes or whether you’re using them?\u003C\u002Fli>\n\u003Cli>Don’t know what shortcodes come with WordPress?\u003C\u002Fli>\n\u003Cli>Found one unrecognised shortcode but unsure where there might be others?\u003C\u002Fli>\n\u003Cli>Need to swap out a theme and don’t know if it has shortcodes that you’ve used?\u003C\u002Fli>\n\u003Cli>Want to use a shortcode for a specific bit of information but can’t remember exactly what it’s called?\u003C\u002Fli>\n\u003Cli>Need to a change a parameter for all occurences of a shortcode?\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This is a simple administration tool that lists occurences of shortcodes within post content and\u002For custom fields, and\u002For widget settings.\u003Cbr \u002F>\nYou can select, or search for, specific shortcodes, and it can filter down to a provider, location, or post type.\u003Cbr \u002F>\nIt is intended to help administrators\u002Feditors locate where shortcodes have been used, so that they can be updated, renamed, deleted, or whatever.\u003C\u002Fp>\n\u003Cp>Features include :\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Search string(s) to match against shortcode tags – space or comma delimited for multple search strings\u003C\u002Fli>\n\u003Cli>Filter by the type of provider of shortcode – whether it is provided by a plugin, your theme, internal to WordPress (eg. \u003Ccode>[gallery]\u003C\u002Fcode>), or unknown (an inactive\u002Fdeleted plugin, maybe?)\u003C\u002Fli>\n\u003Cli>Filter by a specific provider – a named plugin, for example\u003C\u002Fli>\n\u003Cli>Filter by any number of specific, recognised shortcodes\u003C\u002Fli>\n\u003Cli>Filter by where to look for the shortcode – post content, post meta data (custom fields), or widgets\u003C\u002Fli>\n\u003Cli>Filter by the type of post that contains the shortcode\u003C\u002Fli>\n\u003Cli>Results include (where relevant and available) : either the widget name and its sidebar, or a linked post title and the type of post; the shortcode and its parameters; the shortcode provider (WordPress, plugin, theme, or unknown), and where it was found\u003C\u002Fli>\n\u003Cli>Has its own shortcode, for use when a plugin or theme only declares a shortcode when not in the admin backend\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>What it does \u003Cstrong>not\u003C\u002Fstrong> do :\u003C\u002Fp>\n\u003Cul>\n\u003Cli>It does \u003Cem>not\u003C\u002Fem> provide any insight as to what any shortcode does, or how to use\u002Fconfigure it.\u003C\u002Fli>\n\u003Cli>It does \u003Cem>not\u003C\u002Fem> look at custom tables, theme options, transients.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you like this plugin (or if you don’t?), please consider taking a moment or two to give it a\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fview\u002Fplugin-reviews\u002Fshortcodes-in-use\" rel=\"ugc\">Review\u003C\u002Fa> : it helps others, and gives me valuable feedback.\u003C\u002Fp>\n\u003Ch3>Shortcode\u003C\u002Fh3>\n\u003Cp>The shortcode for this plugin is…\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[shortcodes_in_use\u002F]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>…and output is restricted to users with \u003Cstrong>edit_posts\u003C\u002Fstrong> capability.\u003C\u002Fp>\n\u003Cp>The attributes available are in line with the options available in the Tool, and each one is a filter.\u003Cbr \u002F>\nSetting an attribute for all possible values is the same as omitting that attribute.\u003C\u002Fp>\n\u003Cp>Separate filters are ANDed, ie. specifying \u003Ccode>provider=\"wordpress\" post_type=\"page\"\u003C\u002Fcode> limits the results\u003Cbr \u002F>\nto shortcode tags that are in a page \u003Cstrong>AND\u003C\u002Fstrong> provided by WordPress core.\u003C\u002Fp>\n\u003Cp>Multiple values within a filter are ORed, ie. specifying \u003Ccode>post_type=\"post page\" provider=\"wordpress\"\u003C\u002Fcode>\u003Cbr \u002F>\nlimits the results to WordPress’s own shortcode tags that are in either a post \u003Cstrong>OR\u003C\u002Fstrong> a page.\u003C\u002Fp>\n\u003Cp>When you run the Tool in admin, the equivalent shortcode for the selected options is provided at the end\u003Cbr \u002F>\nof the results. Also, the \u003Cem>sanitized\u003C\u002Fem> shortcode is repeated at the top of the shortcode’s output.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>search\u003C\u002Fstrong> (string) : A space or comma is interpreted as a delimiter, so…\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[shortcodes_in_use search=\"foo bar\"\u002F]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>…looks for any shortcode tag that contains either “foo” or “bar”.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>provider\u003C\u002Fstrong> (string) : Any one or more of \u003Cem>unknown\u003C\u002Fem>, \u003Cem>wordpress\u003C\u002Fem>, \u003Cem>plugin\u003C\u002Fem>, or \u003Cem>theme\u003C\u002Fem>,\u003Cbr \u002F>\ndelimited by either a comma or a space. For example…\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[shortcodes_in_use provider=\"plugin unknown\"\u002F]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>…reports any shortcode tag whose provider cannot be determined, or whose provider has be\u003Cbr \u002F>\ndetermined as being a plugin.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>location\u003C\u002Fstrong> (string) : Any one or more of \u003Cem>title\u003C\u002Fem>, \u003Cem>content\u003C\u002Fem>, \u003Cem>excerpt\u003C\u002Fem>, \u003Cem>meta\u003C\u002Fem> or \u003Cem>widget\u003C\u002Fem>,\u003Cbr \u002F>\ndelimited by either a comma or a space. For example…\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[shortcodes_in_use location=\"content excerpt\"\u002F]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>…reports any shortcode tag found in any main content or excerpt area.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>post_type\u003C\u002Fstrong> (string) : Any one or more of WordPress’s standard post types – \u003Cem>post\u003C\u002Fem>, \u003Cem>page\u003C\u002Fem>,\u003Cbr \u002F>\n\u003Cem>attachment\u003C\u002Fem>, etc – and\u002For any custom post types. Multiple post types are comma- or space-delimited.\u003Cbr \u002F>\nFor example…\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[shortcodes_in_use post_type=\"post,page\"\u002F]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>…reports any shortcode tag found in a post of type ‘post’ or ‘page’.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>tag\u003C\u002Fstrong> (string) : Any one or more shortcode tags, delimited by either a comma or a space. For\u003Cbr \u002F>\nexample…\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[shortcodes_in_use tag=\"shortcodes_in_use, custom_menu_wizard\"\u002F]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>…reports any occurence of either of those two shortcode tags.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>name\u003C\u002Fstrong> (string) : This allows you to specify a specific plugin and\u002For theme by name. Multiple\u003Cbr \u002F>\nnames are comma- or space-delimited, and each name \u003Cstrong>\u003Cem>must\u003C\u002Fem>\u003C\u002Fstrong> begin with either “plugin\u002F” or “theme\u002F”.\u003Cbr \u002F>\nFor example…\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[shortcodes_in_use name=\"plugin\u002FShortcodes In Use, theme\u002FTwenty Fifteen\"\u002F]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>…reports any occurence of a shortcode tag belonging to either the Shortcodes In Use plugin or\u003Cbr \u002F>\nthe Twenty Fifteen theme. Instead of the \u003Cem>name\u003C\u002Fem> of the plugin\u002Ftheme, you can supply their\u003Cbr \u002F>\ncontaining folder, so this would be an alternative for the example above…\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[shortcodes_in_use name=\"plugin\u002Fshortcodes-in-use, theme\u002Ftwentyfifteen\"\u002F]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","List all the shortcodes that you have used within your content or custom fields, and find out exactly where they have been used.",80,5841,"2016-01-26T16:46:00.000Z","4.4.34","3.8",[94,132,133,20,22],"find","locate","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fshortcodes-in-use\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fshortcodes-in-use.1.2.1.zip",{"attackSurface":137,"codeSignals":201,"taintFlows":215,"riskAssessment":234,"analyzedAt":242},{"hooks":138,"ajaxHandlers":197,"restRoutes":198,"shortcodes":199,"cronEvents":200,"entryPointCount":26,"unprotectedCount":26},[139,145,149,152,155,159,162,165,168,172,175,177,180,183,186,189,192,195],{"type":140,"name":141,"callback":142,"file":143,"line":144},"action","admin_notices","closure","shortcode-tester-loader.php",36,{"type":140,"name":146,"callback":142,"file":147,"line":148},"template_redirect","shortcode-tester.php",58,{"type":140,"name":150,"callback":142,"file":147,"line":151},"media_buttons",99,{"type":140,"name":153,"callback":142,"file":147,"line":154},"admin_enqueue_scripts",106,{"type":140,"name":156,"callback":157,"file":147,"line":158},"admin_footer-post.php","anonymous",167,{"type":140,"name":160,"callback":157,"file":147,"line":161},"admin_footer-post-new.php",168,{"type":140,"name":163,"callback":157,"file":147,"line":164},"load-post-new.php",172,{"type":140,"name":166,"callback":157,"file":147,"line":167},"load-post.php",173,{"type":169,"name":170,"callback":142,"file":147,"line":171},"filter","the_title",452,{"type":169,"name":173,"callback":142,"priority":14,"file":147,"line":174},"the_content",458,{"type":169,"name":173,"callback":142,"file":147,"line":176},467,{"type":140,"name":178,"callback":142,"priority":11,"file":147,"line":179},"loop_end",473,{"type":140,"name":181,"callback":142,"file":147,"line":182},"wp_body_open",493,{"type":169,"name":184,"callback":142,"file":147,"line":185},"get_edit_post_link",501,{"type":140,"name":187,"callback":142,"file":147,"line":188},"get_sidebar",522,{"type":140,"name":190,"callback":142,"file":147,"line":191},"get_footer",538,{"type":169,"name":193,"callback":142,"file":147,"line":194},"show_admin_bar",572,{"type":140,"name":146,"callback":142,"file":147,"line":196},575,[],[],[],[],{"dangerousFunctions":202,"sqlUsage":203,"outputEscaping":205,"fileOperations":26,"externalRequests":26,"nonceChecks":14,"capabilityChecks":26,"bundledLibraries":214},[],{"prepared":26,"raw":26,"locations":204},[],{"escaped":26,"rawEcho":206,"locations":207},3,[208,211,212],{"file":143,"line":209,"context":210},37,"raw output",{"file":147,"line":34,"context":210},{"file":147,"line":213,"context":210},102,[],[216],{"entryPoint":217,"graph":218,"unsanitizedCount":26,"severity":233},"\u003Cshortcode-tester> (shortcode-tester.php:0)",{"nodes":219,"edges":230},[220,225],{"id":221,"type":222,"label":223,"file":147,"line":224},"n0","source","$_REQUEST['post_content']",68,{"id":226,"type":227,"label":228,"file":147,"line":34,"wp_function":229},"n1","sink","echo() [XSS]","echo",[231],{"from":221,"to":226,"sanitized":232},true,"low",{"summary":235,"deductions":236},"The \"shortcode-tester\" plugin, version 1.2.2, exhibits a strong security posture based on the provided static analysis. The absence of AJAX handlers, REST API routes, shortcodes, and cron events significantly limits the plugin's attack surface, with zero identified entry points. The code signals also indicate good practices, with 100% of SQL queries using prepared statements and a nonce check present.  There are no critical or high severity taint flows detected, and the plugin has no recorded vulnerability history. This suggests a well-developed and secure plugin in its current state.  However, a significant concern arises from the lack of output escaping, with 0% of the 3 identified outputs being properly escaped. This presents a potential Cross-Site Scripting (XSS) vulnerability if user-controlled data is ever introduced into these output contexts, even with the limited attack surface. Furthermore, the absence of capability checks for the single nonce check means that any authenticated user, regardless of their role, could potentially trigger the functionality secured by the nonce. While the current data indicates no known vulnerabilities, the output escaping deficiency is a notable weakness that should be addressed.",[237,240],{"reason":238,"points":239},"No proper output escaping",6,{"reason":241,"points":32},"Nonce check without capability check","2026-03-16T23:59:56.590Z",{"wat":244,"direct":253},{"assetPaths":245,"generatorPatterns":248,"scriptPaths":249,"versionParams":250},[246,247],"\u002Fwp-content\u002Fplugins\u002Fshortcode-tester\u002Fcss\u002Fmf2tk_macros_admin.css","\u002Fwp-content\u002Fplugins\u002Fshortcode-tester\u002Fjs\u002Fmf2tk_macros_admin.js",[],[247],[251,252],"shortcode-tester\u002Fcss\u002Fmf2tk_macros_admin.css?ver=","shortcode-tester\u002Fjs\u002Fmf2tk_macros_admin.js?ver=",{"cssClasses":254,"htmlComments":258,"htmlAttributes":266,"restEndpoints":272,"jsGlobals":273,"shortcodeOutput":275},[255,256,257],"sct_ix-popup","sct_ix-heading","sct_ix-instructions",[259,260,261,262,263,264,265],"\u003C!-- ##### ACTION:wp_body_open -->","\u003C!-- ##### FILTER:the_content start -->","\u003C!-- ##### FILTER:the_content end -->","\u003C!-- ##### ACTION:loop_end -->","\u003C!-- ##### ACTION:get_sidebar -->","\u003C!-- ##### ACTION:get_footer -->","\u003C!-- start shortcode tester -->",[267,268,269,270,271],"id=\"sct_ix-shortcode-tester\"","id=\"sct_ix-popup_margin\"","id=\"mf2tk-shortcode-tester\"","id=\"button-mf2tk-shortcode-tester-close\"","data-nonce",[],[274],"mf2tk_macros_admin",[]]