[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fufIe3ixztKBF6fwfhbGkRudk6-Stmpf8bJY7eN5dBGk":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":17,"download_link":22,"security_score":23,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":34,"analysis":145,"fingerprints":178},"simple-iframe-buster","Simple Iframe Buster","1.1.1","Mikel King","https:\u002F\u002Fprofiles.wordpress.org\u002Fvizkr\u002F","\u003Cp>Provides a method of adding X-Frame-Options to the http headers for sites hosted in an environment that does not grant access to\u003Cbr \u002F>\nthe webserver config, .htaccess or lack mod_headers type facility.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Sets X-Frame-Options to SAMEORIGIN\u003C\u002Fli>\n\u003Cli>Enqueue iframe blocking javascript\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Arbitrary section\u003C\u002Fh3>\n\u003Cp>This is my arbitrary section. There’s really nothing special to add because this is truly a simple plugin with no settings or configuration. Turn it on and block the iframe content thieves. Much of this can also be achieve by working with a good hosting provider. If you are board then head over to my content site \u003Ca href=\"https:\u002F\u002Fwww.jafdip.com\" rel=\"nofollow ugc\">JAFDIP\u003C\u002Fa>.\u003C\u002Fp>\n","Provides a method of setting the X-Frame-Options header to SAMEORIGIN. Also enqueues a javascript based iframe blocker.",100,6274,2,"2021-08-13T21:10:00.000Z","5.7.15","3.9","",[19,20,21],"http-headers","iframe","x-frame-options","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-iframe-buster.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":29,"display_name":7,"profile_url":8,"plugin_count":13,"total_installs":30,"avg_security_score":23,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},"vizkr",500,30,84,"2026-04-04T07:00:38.112Z",[35,52,73,98,121],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":24,"downloaded":43,"rating":24,"num_ratings":24,"last_updated":17,"tested_up_to":44,"requires_at_least":45,"requires_php":46,"tags":47,"homepage":49,"download_link":50,"security_score":11,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":51},"ruigehond-embed","Ruigehond embed","1.4.2","Joeri van Veen","https:\u002F\u002Fprofiles.wordpress.org\u002Fruigehond\u002F","\u003Cp>Plugin to embed selected urls from your site elsewhere.\u003C\u002Fp>\n\u003Ch4>Security\u003C\u002Fh4>\n\u003Cp>Other embedding will be prohibited by default, with an \u003Ccode>X-Frame-Options\u003C\u002Fcode> header and, optionally, a \u003Ccode>Content Security Policy\u003C\u002Fcode> header.\u003Cbr \u002F>\nThis will secure your WordPress website from a number of fairly easy attacks.\u003C\u002Fp>\n\u003Cp>To make this plugin especially useful you can now allow (third party) websites to embed specific urls from your site.\u003Cbr \u002F>\nEasily reuse forms or other content from your main site on satellite sites you own, without opening up any of them to attack.\u003C\u002Fp>\n\u003Ch4>Quick setup\u003C\u002Fh4>\n\u003Cp>Activate the plugin and go to Settings -> Ruigehond embed.\u003Cbr \u002F>\nAdd a reference (e.g. \u003Ccode>general-contact-form\u003C\u002Fcode>) in the \u003Cem>title\u003C\u002Fem> field and save the settings.\u003Cbr \u002F>\nAdd a slug it should serve (e.g. \u003Ccode>\u002Fcontact-clean\u002F\u003C\u002Fcode>) in the \u003Cem>embed\u003C\u002Fem> field.\u003Cbr \u002F>\nAdd urls that may embed this, aka referrers, (e.g. \u003Ccode>https:\u002F\u002Fmy-satellite.site\u003C\u002Fcode>) in the textarea.\u003C\u002Fp>\n\u003Ch4>Embedding\u003C\u002Fh4>\n\u003Cp>Install the plugin on your satellite site. This has the added benefit of locking down that site as well.\u003C\u002Fp>\n\u003Cp>Use the simple shortcode on that site to generate an iframe with the embedded content:\u003Cbr \u002F>\n    \u003Ccode>[ruigehond-embed src=\"https:\u002F\u002Fmy-main.site\u002Fruigehond_embed\u002Fgeneral-contact-form\"]\u003C\u002Fcode>\u003C\u002Fp>\n\u003Cp>Watch the form magically and safely be embedded. Other sites will continue to not be able to embed your content.\u003C\u002Fp>\n\u003Cp>You can also embed using a regular iframe in html, as long as the referrer is whitelisted.\u003Cbr \u002F>\nHowever, by using the plugin and shortcode, the height of the iframe will automatically be adjusted to fit the content.\u003C\u002Fp>\n\u003Ch4>Use htaccess\u003C\u002Fh4>\n\u003Cp>This plugin adds lines (clearly marked) at the beginning of your htaccess file.\u003Cbr \u002F>\nThey need not be at the beginning, but they need to be before the WordPress lines, or any other lines that corrupt the \u003Ccode>THE_REQUEST\u003C\u002Fcode> var.\u003C\u002Fp>\n\u003Cp>This plugin needs \u003Ccode>mod_headers\u003C\u002Fcode>, \u003Ccode>mod_rewrite\u003C\u002Fcode> and \u003Ccode>mod_setenvif\u003C\u002Fcode> to be activated, but they probably already are.\u003C\u002Fp>\n\u003Ch4>Without htaccess\u003C\u002Fh4>\n\u003Cp>When the htaccess is not processed, the plugin itself works directly with the request in the php processor.\u003Cbr \u002F>\nThe CSP header is not supported in that case.\u003Cbr \u002F>\nAlso, other plugins (especially caching plugins) may already have decided on a different route and this plugin might not work.\u003C\u002Fp>\n\u003Ch4>Content Security Policy\u003C\u002Fh4>\n\u003Cp>You can switch on the \u003Ccode>Content Security Policy\u003C\u002Fcode> (or \u003Ccode>CSP\u003C\u002Fcode>) header in this plugin, which is the most modern way to tackle these issues.\u003Cbr \u002F>\nHowever, other plugins may interfere, so be sure to check whether the CSP header is to your liking in practice.\u003C\u002Fp>\n\u003Cp>This plugin will add a \u003Ccode>CSP\u003C\u002Fcode> header if none is present yet.\u003Cbr \u002F>\nBut if one is present, the \u003Ccode>frame-ancestors\u003C\u002Fcode> directive must be present in it for this plugin to work.\u003Cbr \u002F>\nIt will only set the \u003Ccode>frame-ancestors\u003C\u002Fcode> directive, none of the others (to not break your site).\u003C\u002Fp>\n","Prevent your site from being embedded. Select specific urls that may be embedded from specific origins.",1015,"6.9.4","6.0","7.4",[48],"x-frame-options-embed-embedding-iframe-sameorigin","https:\u002F\u002Fgithub.com\u002Fjoerivanveen\u002Fruigehond-embed","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fruigehond-embed.1.4.2.zip","2026-03-15T10:48:56.248Z",{"slug":20,"name":20,"version":45,"author":53,"author_profile":54,"description":55,"short_description":56,"active_installs":57,"downloaded":58,"rating":59,"num_ratings":60,"last_updated":61,"tested_up_to":44,"requires_at_least":62,"requires_php":17,"tags":63,"homepage":68,"download_link":69,"security_score":70,"vuln_count":71,"unpatched_count":24,"last_vuln_date":72,"fetched_at":26},"webvitaly","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebvitaly\u002F","\u003Cul>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fr.freemius.com\u002F13759\u002F8047958\u002F\" title=\"Advanced iFrame\" rel=\"nofollow ugc\">Advanced iFrame\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"http:\u002F\u002Fweb-profile.net\u002Fwordpress\u002Fplugins\u002Fiframe\u002F\" title=\"Plugin page\" rel=\"nofollow ugc\">iframe\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"http:\u002F\u002Fweb-profile.net\u002Fdonate\u002F\" title=\"Support the development\" rel=\"nofollow ugc\">Donate\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwebvitalii\u002Fiframe\" title=\"Fork\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>[iframe src=”http:\u002F\u002Fwww.youtube.com\u002Fembed\u002F7_nAZQt9qu0″ width=”100%” height=”500″] shortcode\u003Cbr \u002F>\nshould show something like this:\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F7_nAZQt9qu0?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>WordPress removes iframe html tags because of security reasons.\u003Cbr \u002F>\nIframe shortcode is the replacement of the iframe html tag and accepts the same params as iframe html tag does.\u003Cbr \u002F>\nYou may use iframe shortcode to embed content from YouTube, Vimeo, Google Maps or from any external page.\u003C\u002Fp>\n\u003Cp>If you need to embed content from YouTube, Vimeo, SlideShare, SoundCloud, Twitter via direct link, you may use \u003Ccode>[embed]http:\u002F\u002Fwww.youtube.com\u002Fwatch?v=7_nAZQt9qu0[\u002Fembed]\u003C\u002Fcode> shortcode.\u003Cbr \u002F>\n[embed] shortcode is a core WordPress feature and can \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FEmbeds\" rel=\"nofollow ugc\">embed content from many resources via direct link\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Important\u003C\u002Fstrong>: You can not embed HTTP pages into HTTPS pages and vice versa.\u003Cbr \u002F>\nSo the protocol (http or httpS) for parent and embedded page should match.\u003C\u002Fp>\n\u003Ch4>iframe params:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>src\u003C\u002Fstrong> – source of the iframe: \u003Ccode>[iframe src=\"http:\u002F\u002Fwww.youtube.com\u002Fembed\u002F7_nAZQt9qu0\"]\u003C\u002Fcode>; by default src=”http:\u002F\u002Fwww.youtube.com\u002Fembed\u002F7_nAZQt9qu0″;\u003C\u002Fli>\n\u003Cli>\u003Cstrong>width\u003C\u002Fstrong> – width in pixels or in percents: \u003Ccode>[iframe width=\"100%\"]\u003C\u002Fcode> or \u003Ccode>[iframe width=\"600\"]\u003C\u002Fcode>; by default width=”100%”;\u003C\u002Fli>\n\u003Cli>\u003Cstrong>height\u003C\u002Fstrong> – height in pixels: \u003Ccode>[iframe height=\"500\"]\u003C\u002Fcode>; by default height=”500″;\u003C\u002Fli>\n\u003Cli>\u003Cstrong>scrolling\u003C\u002Fstrong> – with or without the scrollbar: \u003Ccode>[iframe scrolling=\"no\"]\u003C\u002Fcode>; by default scrolling=”yes”;\u003C\u002Fli>\n\u003Cli>\u003Cstrong>frameborder\u003C\u002Fstrong> – with or without the frame border: \u003Ccode>[iframe frameborder=\"0\"]\u003C\u002Fcode>; by default frameborder=”0″;\u003C\u002Fli>\n\u003Cli>\u003Cstrong>marginheight\u003C\u002Fstrong> – height of the margin: \u003Ccode>[iframe marginheight=\"0\"]\u003C\u002Fcode>; removed by default;\u003C\u002Fli>\n\u003Cli>\u003Cstrong>marginwidth\u003C\u002Fstrong> – width of the margin: \u003Ccode>[iframe marginwidth=\"0\"]\u003C\u002Fcode>; removed by default;\u003C\u002Fli>\n\u003Cli>\u003Cstrong>allowtransparency\u003C\u002Fstrong> – allows to set transparency of the iframe: \u003Ccode>[iframe allowtransparency=\"true\"]\u003C\u002Fcode>; removed by default;\u003C\u002Fli>\n\u003Cli>\u003Cstrong>id\u003C\u002Fstrong> – allows to add the id of the iframe: \u003Ccode>[iframe id=\"custom_id\"]\u003C\u002Fcode>; removed by default;\u003C\u002Fli>\n\u003Cli>\u003Cstrong>class\u003C\u002Fstrong> – allows to add the class of the iframe: \u003Ccode>[iframe class=\"custom_class\"]\u003C\u002Fcode>; by default class=”iframe-class”;\u003C\u002Fli>\n\u003Cli>\u003Cstrong>style\u003C\u002Fstrong> – allows to add the css styles of the iframe: \u003Ccode>[iframe style=\"margin-left:-30px;\"]\u003C\u002Fcode>; removed by default;\u003C\u002Fli>\n\u003Cli>\u003Cstrong>same_height_as\u003C\u002Fstrong> – allows to set the height of iframe same as target element: \u003Ccode>[iframe same_height_as=\"div.sidebar\"]\u003C\u002Fcode>, \u003Ccode>[iframe same_height_as=\"div#content\"]\u003C\u002Fcode>, \u003Ccode>[iframe same_height_as=\"body\"]\u003C\u002Fcode>, \u003Ccode>[iframe same_height_as=\"html\"]\u003C\u002Fcode>; removed by default;\u003C\u002Fli>\n\u003Cli>\u003Cstrong>any_other_param\u003C\u002Fstrong> – allows to add new parameter of the iframe \u003Ccode>[iframe any_other_param=\"any_value\"]\u003C\u002Fcode>;\u003C\u002Fli>\n\u003Cli>\u003Cstrong>any_other_empty_param\u003C\u002Fstrong> – allows to add new empty parameter of the iframe (like “allowfullscreen” on youtube) \u003Ccode>[iframe any_other_empty_param=\"\"]\u003C\u002Fcode>;\u003C\u002Fli>\n\u003C\u002Ful>\n","[iframe src=\"http:\u002F\u002Fwww.youtube.com\u002Fembed\u002F7_nAZQt9qu0\" width=\"100%\" height=\"500\"] shortcode",70000,1902698,88,56,"2025-12-18T21:54:00.000Z","3.0",[64,65,20,66,67],"embed","google-maps","vimeo","youtube","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fiframe\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fiframe.6.0.zip",97,6,"2024-05-22 00:00:00",{"slug":19,"name":74,"version":75,"author":76,"author_profile":77,"description":78,"short_description":79,"active_installs":80,"downloaded":81,"rating":82,"num_ratings":83,"last_updated":84,"tested_up_to":85,"requires_at_least":86,"requires_php":87,"tags":88,"homepage":93,"download_link":94,"security_score":95,"vuln_count":96,"unpatched_count":24,"last_vuln_date":97,"fetched_at":26},"HTTP Headers","1.19.2","Dimitar Ivanov","https:\u002F\u002Fprofiles.wordpress.org\u002Fzinoui\u002F","\u003Cp>HTTP Headers gives your control over the http headers returned by your blog or website.\u003C\u002Fp>\n\u003Cp>Headers supported by HTTP Headers includes:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Access-Control-Allow-Origin\u003C\u002Fli>\n\u003Cli>Access-Control-Allow-Credentials\u003C\u002Fli>\n\u003Cli>Access-Control-Max-Age\u003C\u002Fli>\n\u003Cli>Access-Control-Allow-Methods\u003C\u002Fli>\n\u003Cli>Access-Control-Allow-Headers\u003C\u002Fli>\n\u003Cli>Access-Control-Expose-Headers\u003C\u002Fli>\n\u003Cli>Age \u003C\u002Fli>\n\u003Cli>Content-Security-Policy\u003C\u002Fli>\n\u003Cli>Content-Security-Policy-Report-Only\u003C\u002Fli>\n\u003Cli>Cache-Control\u003C\u002Fli>\n\u003Cli>Clear-Site-Data\u003C\u002Fli>\n\u003Cli>Connection\u003C\u002Fli>\n\u003Cli>Content-Encoding\u003C\u002Fli>\n\u003Cli>Content-Type\u003C\u002Fli>\n\u003Cli>Cross-Origin-Embedder-Policy\u003C\u002Fli>\n\u003Cli>Cross-Origin-Opener-Policy\u003C\u002Fli>\n\u003Cli>Cross-Origin-Resource-Policy\u003C\u002Fli>\n\u003Cli>Expect-CT\u003C\u002Fli>\n\u003Cli>Expires\u003C\u002Fli>\n\u003Cli>Feature-Policy\u003C\u002Fli>\n\u003Cli>NEL\u003C\u002Fli>\n\u003Cli>Permissions-Policy\u003C\u002Fli>\n\u003Cli>Pragma\u003C\u002Fli>\n\u003Cli>P3P\u003C\u002Fli>\n\u003Cli>Referrer-Policy\u003C\u002Fli>\n\u003Cli>Report-To\u003C\u002Fli>\n\u003Cli>Strict-Transport-Security\u003C\u002Fli>\n\u003Cli>Timing-Allow-Origin\u003C\u002Fli>\n\u003Cli>Vary\u003C\u002Fli>\n\u003Cli>WWW-Authenticate\u003C\u002Fli>\n\u003Cli>X-Content-Type-Options\u003C\u002Fli>\n\u003Cli>X-DNS-Prefetch-Control\u003C\u002Fli>\n\u003Cli>X-Download-Options\u003C\u002Fli>\n\u003Cli>X-Frame-Options\u003C\u002Fli>\n\u003Cli>X-Permitted-Cross-Domain-Policies\u003C\u002Fli>\n\u003Cli>X-Powered-By\u003C\u002Fli>\n\u003Cli>X-Robots-Tag\u003C\u002Fli>\n\u003Cli>X-UA-Compatible\u003C\u002Fli>\n\u003Cli>X-XSS-Protection\u003C\u002Fli>\n\u003C\u002Ful>\n","HTTP Headers adds CORS & security HTTP headers to your website.",50000,715994,86,70,"2024-12-22T11:49:00.000Z","6.7.5","3.2","5.3",[89,90,91,19,92],"cors-headers","csp-header","custom-headers","security-headers","https:\u002F\u002Fgithub.com\u002Friverside\u002Fhttp-headers","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhttp-headers.1.19.2.zip",91,4,"2023-07-13 00:00:00",{"slug":99,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":106,"downloaded":107,"rating":82,"num_ratings":108,"last_updated":109,"tested_up_to":44,"requires_at_least":110,"requires_php":46,"tags":111,"homepage":115,"download_link":116,"security_score":117,"vuln_count":118,"unpatched_count":119,"last_vuln_date":120,"fetched_at":26},"advanced-iframe","Advanced iFrame","2026.0","mdempfle","https:\u002F\u002Fprofiles.wordpress.org\u002Fmdempfle\u002F","\u003Cblockquote>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.advanced-iframe.com\u002F\" rel=\"nofollow ugc\">New website: advanced-iframe.com\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\n  \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.advanced-iframe.com\u002Fadvanced-iframe\u002Fdemo-advanced-iframe-2-0\" rel=\"nofollow ugc\">Demo\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>Include content the way YOU like in an iframe that can hide and modify elements, does auto height, forward parameters and does many, many more…\u003C\u002Fp>\n\u003Ch4>Main features of advanced iframe\u003C\u002Fh4>\n\u003Cp>By entering the shortcode ‘[advanced_iframe]’ you can include any webpage to any page or article.\u003C\u002Fp>\n\u003Cp>Advanced iFrame now has out of the box support for embedded 3D models using the p3d 3D viewer. Go to https:\u002F\u002Fp3d.in\u002Fb\u002F24 and download a pre-configured plugin where the model does scale already nicely on all devices. Get started for free! If you need more storage or access to the Premium features of p3d.in, you can get a 50% discount on your first payment with the coupon AIFRAME on checkout.\u003C\u002Fp>\n\u003Cp>The following cool features compared to a normal iframe are implemented:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Hide areas of the layout to give the iframe more space (see screenshot)\u003C\u002Fli>\n\u003Cli>Show only specific areas of the iframe when the iframe is on a same domain (The Pro version supports this on different domains) or include parts directly by jQuery\u003C\u002Fli>\n\u003Cli>Modify css styles in the parent and the iframe to e.g. change the width of the content area (see screen-shot)\u003C\u002Fli>\n\u003Cli>Forward parameters to the iframe\u003C\u002Fli>\n\u003Cli>Resize the iframe to the content height or width on loading, AJAX or click\u003C\u002Fli>\n\u003Cli>Responsive videos (moved from the pro to the the free version in v2022)\u003C\u002Fli>\n\u003Cli>Scroll the parent to the top when the iframe is loaded\u003C\u002Fli>\n\u003Cli>Hide the content until it is fully loaded\u003C\u002Fli>\n\u003Cli>Add a css and js file to the parent page\u003C\u002Fli>\n\u003Cli>Security code: You can only insert the shortcode with a valid security code from the administration.\u003C\u002Fli>\n\u003Cli>Many additional cool features are available the pro version – see https:\u002F\u002Fwww.advanced-iframe.com\u002Fadvanced-iframe\u002Fadvanced-iframe-comparison-chart\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>In the free version you can update to the pro version directly or test all features in the 30 days trial!\u003C\u002Fp>\n\u003Cp>Please note: Modification inside the iframe are only possible if you are on the same domain or use a workaround like described in the settings.\u003C\u002Fp>\n\u003Cp>So please check first if the iframe page and the parent page are one the same domain. www.example.com and text.example.com are different domains! Please check in the documentation if you can use the feature you like\u003C\u002Fp>\n\u003Cp>A free iframe checker is available at\u003Cbr \u002F>\nhttps:\u002F\u002Fwww.advanced-iframe.com\u002Fadvanced-iframe\u002Ffree-iframe-checker.\u003Cbr \u002F>\nThis tool does check if a page is allowed to be included!\u003C\u002Fp>\n\u003Cp>All settings can be set with shortcode attributes as well. If you only use one iframe please use the settings in the administration because there each parameter is explained in detail and also the defaults are set there.\u003C\u002Fp>\n\u003Ch4>Limitations of the free version\u003C\u002Fh4>\n\u003Cp>The free version has no functional restrictions and is for personal and small non-commercial sites. After 10.000 views\u002Fmonth you have to opt-in to get unlimited views. If you do not opt-in the iframe is still working 100% and at the bottom of the iframe a small notice to opt-in is shown.\u003C\u002Fp>\n\u003Ch4>Upgrading to Advanced IFrame Pro\u003C\u002Fh4>\n\u003Cp>It’s quick and painless to get Advanced iFrame Pro. Simply sign up for the 30 days trail or buy directly in the plugin. You can than use the plugin on commercial, business, and professional sites and blogs. You furthermore get:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Show only specific areas of the iframe even when the iframe is on different domain\u003C\u002Fli>\n\u003Cli>Graphical content selector: https:\u002F\u002Fwww.mdempfle.de\u002Fdemos\u002Fconfigurator\u002Fadvanced-iframe-area-selector.html\u003C\u002Fli>\n\u003Cli>External workaround supports iframe modifications\u003C\u002Fli>\n\u003Cli>Widget support\u003C\u002Fli>\n\u003Cli>No view limit\u003C\u002Fli>\n\u003Cli>Hide areas of an iframe\u003C\u002Fli>\n\u003Cli>Browser detection\u003C\u002Fli>\n\u003Cli>Change link targets\u003C\u002Fli>\n\u003Cli>URL forward parameter mapping.\u003C\u002Fli>\n\u003Cli>Zoom iframe content\u003C\u002Fli>\n\u003Cli>Accordion menu\u003C\u002Fli>\n\u003Cli>jQuery help\u003C\u002Fli>\n\u003Cli>Advanced lazy load\u003C\u002Fli>\n\u003Cli>Standalone version – can be used in ANY php page!\u003C\u002Fli>\n\u003Cli>And much more…\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can find the comparison chart here: https:\u002F\u002Fwww.advanced-iframe.com\u002Fadvanced-iframe\u002Fadvanced-iframe-comparison-chart\u003Cbr \u002F>\nSee the pro demo here:\u003Cbr \u002F>\nhttps:\u002F\u002Fwww.advanced-iframe.com\u002Fadvanced-iframe\u002Fadvanced-iframe-pro-demo\u003C\u002Fp>\n\u003Ch4>Administration\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Go to Settings -> Advanced iFrame\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Quick start guide\u003C\u002Fh4>\n\u003Cp>The quickstart guide is also available as video: https:\u002F\u002Fwww.advanced-iframe.com\u002Fadvanced-iframe\u002Fadvanced-iframe-video-tutorials\u003C\u002Fp>\n\u003Cp>To include a webpage to your page please check the following things first:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Check if your page page is allowed to be included https:\u002F\u002Fwww.advanced-iframe.com\u002Fadvanced-iframe\u002Ffree-iframe-checker!\u003C\u002Fli>\n\u003Cli>Check if the iframe page and the parent page are one the same domain. www.example.com and text.example.com are different domains!\u003C\u002Fli>\n\u003Cli>Can you modify the page that should be included?\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Most likely you have one of the following setups:\u003C\u002Fp>\n\u003Col>\n\u003Cli>iframe cannot be included:  You cannot include the content because the owner does not allow this.\u003C\u002Fli>\n\u003Cli>iframe can be included and you are on a different domain: See the feature comparison chart: https:\u002F\u002Fwww.advanced-iframe.com\u002Fadvanced-iframe\u002Fadvanced-iframe-comparison-chart and the feature overview https:\u002F\u002Fwww.advanced-iframe.com\u002Fadvanced-iframe\u002Fadvanced-iframe-features-availability-overview. To resize the content to the height\u002Fwidth or modify css you need to modify the remote iframe page by adding one line of Javascript to enable the provided workaround.\u003C\u002Fli>\n\u003Cli>iframe can be included and you are on the same domain: All features of the plugin can be used.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>If you mix http and https read https:\u002F\u002Fwww.advanced-iframe.com\u002Fiframe-do-not-mix-http-and-https. Parent https and iframe http does not work on all mayor browsers!\u003C\u002Fp>\n\u003Ch4>Advanced iframe attributes\u003C\u002Fh4>\n\u003Cp>Below you find all possible shortcode attributes. If you only use one iframe please use the settings in the administration because there each parameter is explained in detail and also the defaults are set there.\u003C\u002Fp>\n\u003Cp>Setting an attribute does overwrite the setting in the administration.\u003C\u002Fp>\n\u003Cp>[advanced_iframe securitykey=””   src=””\u003Cbr \u002F>\n  id=””   name=””\u003Cbr \u002F>\n  width=””   height=””\u003Cbr \u002F>\n  marginwidth=””   marginheight=””\u003Cbr \u002F>\n  scrolling=””   frameborder=””\u003Cbr \u002F>\n  class=””   style=””\u003Cbr \u002F>\n  content_id=””   content_styles=””\u003Cbr \u002F>\n  hide_elements=””   url_forward_parameter=””\u003Cbr \u002F>\n  onload=””   onload_resize=””\u003Cbr \u002F>\n  onload_scroll_top=””   onload_show_element_only=””\u003Cbr \u002F>\n  store_height_in_cookie=””   additional_height=””\u003Cbr \u002F>\n  additional_js=””   additional_css=””\u003Cbr \u002F>\n  iframe_content_id=””   iframe_content_styles=””\u003Cbr \u002F>\n  iframe_hide_elements=””  hide_page_until_loaded=””\u003Cbr \u002F>\n  include_hide_page_until_loaded=””\u003Cbr \u002F>\n  include_url=”” include_content=””\u003Cbr \u002F>\n  include_height=””  include_fade=””\u003Cbr \u002F>\n  onload_resize_width=””   resize_on_ajax=””\u003Cbr \u002F>\n  resize_on_ajax_jquery=””   resize_on_click=””\u003Cbr \u002F>\n  resize_on_click_elements=””   use_shortcode_attributes_only=””\u003Cbr \u002F>\n  onload_resize_delay=””\u003Cbr \u002F>\n  ]\u003C\u002Fp>\n","Include content the way YOU like in an iframe that can hide and modify elements, does auto-height, forward parameters and does many, many more...",40000,2370567,55,"2026-03-05T21:11:00.000Z","5.5",[64,20,112,113,114],"modify-css","resize","shortcode","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fadvanced-iframe\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadvanced-iframe.2026.0.zip",72,12,1,"2026-01-19 00:00:00",{"slug":122,"name":123,"version":124,"author":125,"author_profile":126,"description":127,"short_description":128,"active_installs":129,"downloaded":130,"rating":32,"num_ratings":131,"last_updated":132,"tested_up_to":133,"requires_at_least":134,"requires_php":17,"tags":135,"homepage":141,"download_link":142,"security_score":143,"vuln_count":119,"unpatched_count":24,"last_vuln_date":144,"fetched_at":26},"bj-lazy-load","BJ Lazy Load","1.0.9","Bjørn Johansen","https:\u002F\u002Fprofiles.wordpress.org\u002Fbjornjohansen\u002F","\u003Cp>Lazy loading makes your site load faster and saves bandwidth.\u003C\u002Fp>\n\u003Cp>This plugin replaces all your post images, post thumbnails, gravatar images and content iframes with a placeholder and loads the content as it gets close to enter the browser window when the visitor scrolls the page. Also works with text widgets.\u003C\u002Fp>\n\u003Cp>Since it works with iframes, it also covers embedded videoes from YouTube, Vimeo etc.\u003C\u002Fp>\n\u003Cp>You can also lazy load other images and iframes in your theme, by using a simple filter.\u003C\u002Fp>\n\u003Cp>Non-javascript visitors gets the original element in noscript.\u003C\u002Fp>\n\u003Cp>Compatible with the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fricg-responsive-images\u002F\" rel=\"ugc\">RICG Responsive Images\u003C\u002Fa> plugin for responsive images.\u003C\u002Fp>\n\u003Cp>Please let me know if you have any issues. Fastest way to get a response is by Twitter: https:\u002F\u002Ftwitter.com\u002Fbjornjohansen\u003C\u002Fp>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Russian (ru_RU) by Elvisrk\u003C\u002Fli>\n\u003Cli>Hebrew (he_IL) by Imri Sagive\u003C\u002Fli>\n\u003Cli>Polish (pl_PL) by Maciej Gryniuk\u003C\u002Fli>\n\u003Cli>Norwegian Bokmål (nb_NO) by Bjørn Johansen\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fbjornjohansen\u002Fbj-lazy-load\" rel=\"nofollow ugc\">Development happens at GitHub\u003C\u002Fa>. Pull requests are very welcome.\u003C\u002Fp>\n\u003Ch3>Optional usage\u003C\u002Fh3>\n\u003Cp>If you have images output in custom templates or want to lazy load other images in your theme, you may pass the HTML through a filter:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003C?php\n$img_html = '\u003Cimg src=\"myimage.jpg\" alt=\"\">';\n$img_html = apply_filters( 'bj_lazy_load_html', $img_html );\necho $img_html;\n?>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Note for developers: The filter has a priority of 10.\u003C\u002Fp>\n","Lazy loading for images and iframes makes your site load faster and saves bandwidth. Uses no external JS libraries and degrades gracefully for non-js  &hellip;",20000,850990,90,"2017-11-28T06:25:00.000Z","4.9.29","3.5",[136,137,138,139,140],"iframes","images","javascript","lazy-loading","optimize","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbj-lazy-load\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbj-lazy-load.zip",83,"2015-09-02 00:00:00",{"attackSurface":146,"codeSignals":166,"taintFlows":173,"riskAssessment":174,"analyzedAt":177},{"hooks":147,"ajaxHandlers":162,"restRoutes":163,"shortcodes":164,"cronEvents":165,"entryPointCount":24,"unprotectedCount":24},[148,154,158],{"type":149,"name":150,"callback":151,"file":152,"line":153},"action","init","register_buster_script","plugin.php",60,{"type":149,"name":155,"callback":156,"file":152,"line":157},"send_headers","send_x_frame_meta_header",63,{"type":149,"name":159,"callback":160,"file":152,"line":161},"wp_enqueue_scripts","enq_buster_script",64,[],[],[],[],{"dangerousFunctions":167,"sqlUsage":168,"outputEscaping":170,"fileOperations":24,"externalRequests":24,"nonceChecks":24,"capabilityChecks":24,"bundledLibraries":172},[],{"prepared":24,"raw":24,"locations":169},[],{"escaped":24,"rawEcho":24,"locations":171},[],[],[],{"summary":175,"deductions":176},"Based on the provided static analysis and vulnerability history, the 'simple-iframe-buster' plugin v1.1.1 appears to have a strong security posture. The static analysis reveals no apparent attack surface, dangerous functions, raw SQL queries, unescaped output, or file operations. Taint analysis also indicates a clean codebase with no identified vulnerabilities or unsanitized flows. The absence of any recorded vulnerabilities in its history further strengthens this assessment, suggesting a history of secure development and maintenance.\n\nWhile the plugin exhibits excellent security practices in its current version, it's important to note that the analysis did not identify any capability checks or nonce checks on potential entry points (though none were found). This is a minor point of concern, as a more robust implementation might defensively include these checks even if no immediate attack surface is apparent. However, the overall lack of entry points mitigates this risk significantly. The plugin's strengths lie in its minimalist design and adherence to secure coding principles for the features it does implement.\n\nIn conclusion, the 'simple-iframe-buster' plugin v1.1.1 demonstrates a very low risk profile. Its clean code, lack of known vulnerabilities, and minimal attack surface are all positive indicators. The absence of any deductions reflects the robust security demonstrated in the provided data.",[],"2026-03-16T20:46:40.253Z",{"wat":179,"direct":186},{"assetPaths":180,"generatorPatterns":182,"scriptPaths":183,"versionParams":184},[181],"\u002Fwp-content\u002Fplugins\u002Fsimple-iframe-buster\u002Fjs\u002Fiframe-buster.js",[],[181],[185],"simple-iframe-buster\u002Fjs\u002Fiframe-buster.js?ver=",{"cssClasses":187,"htmlComments":188,"htmlAttributes":189,"restEndpoints":190,"jsGlobals":191,"shortcodeOutput":192},[],[],[],[],[],[]]