[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCRwJtLHCE7q94tSsKSwNbdV8ZYRHSTo5wchI0O5sGZg":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":57,"crawl_stats":36,"alternatives":64,"analysis":128,"fingerprints":286},"simple-org-chart","Simple Org Chart","2.3.5","G Matta","https:\u002F\u002Fprofiles.wordpress.org\u002Fgangesh\u002F","\u003Cp>This plugin allows you to seamlessly setup a hierarchical based organisation chart, otherwise known as an Org Chart, for use in your website. We have integrated drag and drop features to ensure the process is intuitive and fast.\u003C\u002Fp>\n\u003Cp>The Chart is able to display a Gravatar image and user’s display name. In the future we are aiming to add a template system which will allow more information to be displayed.\u003C\u002Fp>\n\u003Cp>Now \u003Cstrong>chart JSON\u003C\u002Fstrong> can be accessed using endpoint.\u003C\u002Fp>\n\u003Cblockquote>\u003Cp>\nEndpoint for JSON. {domain.com}\u002Fwp-json\u002Forg_chart\u002Fjson\n\u003C\u002Fp>\u003C\u002Fblockquote>\n\u003Cp>JSON format can be updated using “parseJSON” function in index.php . Its a pluggable function.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwporgchart.com\u002F\" rel=\"nofollow ugc\">\u003Cstrong>WP Org Chart Pro\u003C\u002Fstrong>\u003C\u002Fa> is released.\u003C\u002Fp>\n\u003Cblockquote>\u003Cp>\n* Responsive\u003Cbr \u002F>\n* Buddypress Support\u003Cbr \u002F>\n* Multiple Charts\u003Cbr \u002F>\n* JSON Access\u003Cbr \u002F>\n* Custom Departments\u003Cbr \u002F>\n* Simple user management\u003Cbr \u002F>\n* Template system for custom design\u003Cbr \u002F>\n* Hooks and Filters for custom fields\u003Cbr \u002F>\n* Print Chart\u003Cbr \u002F>\n* Replace Top Level user without reset chart\n\u003C\u002Fp>\u003C\u002Fblockquote>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwporgchart.com\u002F\" rel=\"nofollow ugc\"> Demo \u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Credits:\u003C\u002Fstrong>\u003Cbr \u002F>\n@wesnolte : https:\u002F\u002Fgithub.com\u002Fwesnolte\u002FjOrgChart\u003C\u002Fp>\n","Create a simple jQuery Org Chart which will display your team or organisation structure in a hierarchical fashion, using easy drag and drop facilities …",1000,44598,96,22,"2025-05-06T17:07:00.000Z","6.8.5","6.0","8.0",[20,21,22],"org-chart","organisation-chart","organization-chart","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsimple-org-chart\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-org-chart.zip",99,2,0,"2023-08-17 00:00:00","2026-03-15T15:16:48.613Z",[31,46],{"id":32,"url_slug":33,"title":34,"description":35,"plugin_slug":4,"theme_slug":36,"affected_versions":37,"patched_in_version":6,"severity":38,"cvss_score":39,"cvss_vector":40,"vuln_type":41,"published_date":28,"updated_date":42,"references":43,"days_to_patch":45},"CVE-2023-28791","simple-org-chart-cross-site-request-forgery","Simple Org Chart \u003C= 2.3.4 - Cross-Site Request Forgery","The Simple Org Chart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.4. This is due to missing nonce validation on the org_chart_do_page() function. This makes it possible for unauthenticated attackers to modify the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Please note CVE-2023-40008 was also recorded for this vulnerability.",null,"\u003C=2.3.4","medium",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2025-05-07 14:05:40",[44],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F8d413350-f520-4dd9-af7d-e776628aef1d?source=api-prod",630,{"id":47,"url_slug":48,"title":49,"description":50,"plugin_slug":4,"theme_slug":36,"affected_versions":37,"patched_in_version":6,"severity":38,"cvss_score":51,"cvss_vector":52,"vuln_type":53,"published_date":28,"updated_date":54,"references":55,"days_to_patch":45},"CVE-2023-40603","simple-org-chart-missing-authorization","Simple Org Chart \u003C= 2.3.4 - Missing Authorization","The Simple Org Chart plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the myajax() function in versions up to, and including, 2.3.4. This makes it possible for unauthenticated attackers to invoke the function and update the plugin's tree option.",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Missing Authorization","2025-05-07 14:05:35",[56],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fc674ec32-7959-414a-8c31-3455bebb47bb?source=api-prod",{"slug":58,"display_name":7,"profile_url":8,"plugin_count":59,"total_installs":60,"avg_security_score":61,"avg_patch_time_days":45,"trust_score":62,"computed_at":63},"gangesh",4,2310,89,71,"2026-04-04T12:03:56.349Z",[65,88,110],{"slug":22,"name":66,"version":67,"author":68,"author_profile":69,"description":70,"short_description":71,"active_installs":72,"downloaded":73,"rating":74,"num_ratings":75,"last_updated":76,"tested_up_to":77,"requires_at_least":78,"requires_php":79,"tags":80,"homepage":84,"download_link":85,"security_score":13,"vuln_count":86,"unpatched_count":27,"last_vuln_date":87,"fetched_at":29},"Organization chart","1.7.6","wpdevart","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpdevart\u002F","\u003Cp>WordPress organization chart plugin is a nice and handy tool for creating simple and nice organizational charts. If you have any suggestions about the functionality, just let us know.\u003C\u002Fp>\n\u003Ch3>You can check the demo of the plugin here:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdemo.wpdevart.com\u002Forganization-chart\" rel=\"nofollow ugc\">Demo Page\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Features of Free version\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>User-friendly interface\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Works great with all actual WordPress versions\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Responsive(mobile-friendly) design\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Gutenberg-ready plugin\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Ability to add unlimited themes and elements\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Ability to add image for each element\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Ability to duplicate the organizational charts or themes\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Ability to add horizontal scrolling instead of mobile view\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Ability to select theme for each element\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Ability to change the organizational chart background color and border radius\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Ability to enable Popup functionality\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Ability to configure Popup styles\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Ability to set User Permissions\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Also, our plugin has a premium version, so you can upgrade the free version and get more functionality – \u003Ca href=\"https:\u002F\u002Fwpdevart.com\u002Fwordpress-organization-chart-plugin\u002F\" rel=\"nofollow ugc\">WordPress Organization Chart Premium\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Features of the Premium version\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Built-in themes for the elements\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable elements\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Ability to change the title and description font family\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Ability to change the elements border styles\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Ability to change the elements background color(gradient)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Full Screen functionality\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Drag and Zoom functionality\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Ability to set a responsive view after the element\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>If you have any questions, issues or even suggestions occurring our plugin, you can contact us at \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Forganization-chart\" rel=\"ugc\">SUPPORT FORUM\u003C\u002Fa>.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FF4md4FQDvSY?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>Below we listed the WordPress Organizational Chart plugin options list. If you click on the element edit button, you will see a popup window with the following settings.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Element Settings\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Information tab\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Type the URL – Type the element image URL or upload it using the “Upload” button.\u003C\u002Fli>\n\u003Cli>Type the title –  Type the element title in this field.\u003C\u002Fli>\n\u003Cli>Type the description – Type the element description in this field.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Styling\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Select the theme – You can select the element theme using this option.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Theme Settings\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>General Settings\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Responsive(Add a horizontal scroll, Mobile view) – This option allows to select how to display the organization chart, if the is is bigger then the container.\u003C\u002Fli>\n\u003Cli>Background Color – Choose the container background color.\u003C\u002Fli>\n\u003Cli>Border Radius – Type the container border radius.\u003C\u002Fli>\n\u003Cli>Padding – Type the global padding values.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Line style\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Set the line color – This option allows to set the global line(border) color.\u003C\u002Fli>\n\u003Cli>Line Height – This option allows to set the global line(border) height.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Item style\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Background Color – Select the element background color.\u003C\u002Fli>\n\u003Cli>Minimum Width – Type the element minimum width.\u003C\u002Fli>\n\u003Cli>Minimum Height – Type the element minimum height.\u003C\u002Fli>\n\u003Cli>Image width – Type the element image width.\u003C\u002Fli>\n\u003Cli>Image height – Type the element image height.\u003C\u002Fli>\n\u003Cli>Image Border Radius – Type the image border radius.\u003C\u002Fli>\n\u003Cli>Image Margin – Type the image margin option values.\u003C\u002Fli>\n\u003Cli>Title font – Configure the title font style by clicking on the pencil icon(available options are: Font Family, Color, Font Size, Line Height, Letter Spacing, Font Weight, Font Style).\u003C\u002Fli>\n\u003Cli>Title Margin – Type the title margin option values.\u003C\u002Fli>\n\u003Cli>Description font – Configure the description font style by clicking on the pencil icon(available options are: Font Family, Color, Font Size, Line Height, Letter Spacing, Font Weight, Font Style).\u003C\u002Fli>\n\u003Cli>Description margin – Type the description margin option values.\u003C\u002Fli>\n\u003Cli>Item Border – Configure the element border style by clicking on the pencil icon(available options are: Item Border Type, Item Border Color, Border Width, Border Radius).\u003C\u002Fli>\n\u003C\u002Ful>\n","WordPress organization chart plugin is a nice and handy tool for creating simple and nice organizational charts. If you have any suggestions about the …",5000,112078,100,13,"2026-02-12T21:23:00.000Z","6.9.4","3.4.0","",[81,20,22,82,83],"employee-list","organizational-chart","staff-directory","https:\u002F\u002Fwpdevart.com\u002Fwordpress-organization-chart-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Forganization-chart.1.7.6.zip",5,"2024-08-07 00:01:25",{"slug":89,"name":90,"version":91,"author":92,"author_profile":93,"description":94,"short_description":95,"active_installs":96,"downloaded":97,"rating":98,"num_ratings":86,"last_updated":99,"tested_up_to":100,"requires_at_least":101,"requires_php":102,"tags":103,"homepage":107,"download_link":108,"security_score":109,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":29},"clicface-organi","Clicface Organi","2.08","clicface","https:\u002F\u002Fprofiles.wordpress.org\u002Fclicface\u002F","\u003Cp>Clicface Organi is a great plugin for WordPress to create employee org charts. This is the perfect solution for organizations, teams and associations.\u003C\u002Fp>\n\u003Cp>Clicface Organi works with Clicface Trombi, as it uses Clicface Trombi employee database to generate org charts.\u003C\u002Fp>\n\u003Cp>It’s the perfect solution to build very easily the org chart of any company.\u003C\u002Fp>\n\u003Cp>Stay in touch with Clicface updates by \u003Ca href=\"http:\u002F\u002Feepurl.com\u002FOz7YH\" rel=\"nofollow ugc\">subscribing to our newsletter\u003C\u002Fa>. New subscribers automatically receive discount vouchers.\u003C\u002Fp>\n\u003Cp>Need help? Check our \u003Ca href=\"https:\u002F\u002Fplugins.clicface.com\u002Fdocumentation\u002Ffaq\u002F\" rel=\"nofollow ugc\">FAQ\u003C\u002Fa> or \u003Ca href=\"http:\u002F\u002Fsupport.clicface.com\u002F\" rel=\"nofollow ugc\">create a new support ticket\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easy integration\u003C\u002Fli>\n\u003Cli>Drag’n Drop moves to create the org chart\u003C\u002Fli>\n\u003Cli>Show employee’s details in a new window or a lightbox\u003C\u002Fli>\n\u003Cli>Custom Styles\u003C\u002Fli>\n\u003Cli>Insert any employee (up to 10)\u003C\u002Fli>\n\u003Cli>Insert any Label (up to 10): a box where you can type anything you want\u003C\u002Fli>\n\u003Cli>Works with Clicface Trombi, to keep your employee data up to date\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Supported languages:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>English\u003C\u002Fli>\n\u003Cli>French\u003C\u002Fli>\n\u003C\u002Ful>\n","Create Org Charts easily in WordPress. A flexible and lightweight WordPress plugin, working with Clicface Trombi.",200,26026,52,"2024-11-12T09:51:00.000Z","6.7.5","4.7","5.6",[104,105,20,106,82],"management","management-tool","organigram","https:\u002F\u002Fplugins.clicface.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fclicface-organi.zip",92,{"slug":111,"name":112,"version":113,"author":114,"author_profile":115,"description":116,"short_description":117,"active_installs":118,"downloaded":119,"rating":27,"num_ratings":27,"last_updated":120,"tested_up_to":16,"requires_at_least":121,"requires_php":122,"tags":123,"homepage":79,"download_link":127,"security_score":74,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":29},"interactive-organizational-chart","Interactive Organizational Chart","1.0.0","mukundansiv","https:\u002F\u002Fprofiles.wordpress.org\u002Fmukundansiv\u002F","\u003Cp>The Interactive Organizational Chart plugin allows WordPress administrators and editors to upload and manage organizational data through CSV files, while providing a beautiful interactive interface for users to view company hierarchies.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Admin and editor uploads\u003C\u002Fstrong> – WordPress administrators and editors can upload data\u003C\u002Fli>\n\u003Cli>\u003Cstrong>CSV file support\u003C\u002Fstrong> – Upload organizational data via CSV files (export from Excel)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multiple companies\u003C\u002Fstrong> – Support for multiple company org charts\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Interactive viewing\u003C\u002Fstrong> – Click nodes to see detailed employee information\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Search functionality\u003C\u002Fstrong> – Search by name or role\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Responsive design\u003C\u002Fstrong> – Works on all devices\u003C\u002Fli>\n\u003Cli>\u003Cstrong>LinkedIn integration\u003C\u002Fstrong> – Direct links to employee profiles\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Database storage\u003C\u002Fstrong> – All data stored securely in WordPress database\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Perfect for:\u003C\u002Fstrong>\u003Cbr \u002F>\n* Company websites\u003Cbr \u002F>\n* Employee directories\u003Cbr \u002F>\n* Organizational structure visualization\u003Cbr \u002F>\n* Client presentations\u003Cbr \u002F>\n* Internal company tools\u003C\u002Fp>\n\u003Cp>\u003Cstrong>CSV File Format Required:\u003C\u002Fstrong>\u003Cbr \u002F>\n* ID (unique identifier)\u003Cbr \u002F>\n* Manager ID (for hierarchy, leave empty for CEO)\u003Cbr \u002F>\n* Name (employee name)\u003Cbr \u002F>\n* Role (job title)\u003Cbr \u002F>\n* Tenure (optional)\u003Cbr \u002F>\n* About (optional)\u003Cbr \u002F>\n* LinkedIn (optional)\u003Cbr \u002F>\n* Headshot (optional image URL)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>How to prepare your data:\u003C\u002Fstrong>\u003Cbr \u002F>\n1. Create your organizational data in Excel\u003Cbr \u002F>\n2. Export as CSV: File \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Save As \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> CSV (Comma delimited) (*.csv)\u003Cbr \u002F>\n3. Upload the CSV file to the plugin\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Display Options:\u003C\u002Fstrong>\u003Cbr \u002F>\n* Shortcode: \u003Ccode>[inteorch]\u003C\u002Fcode>\u003Cbr \u002F>\n* PHP: \u003Ccode>\u003C?php echo do_shortcode('[inteorch]'); ?>\u003C\u002Fcode>\u003Cbr \u002F>\n* Widget: Available in WordPress widget areas\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPL v2 or later.\u003C\u002Fp>\n\u003Cp>This program is free software; you can redistribute it and\u002For modify\u003Cbr \u002F>\nit under the terms of the GNU General Public License as published by\u003Cbr \u002F>\nthe Free Software Foundation; either version 2 of the License, or\u003Cbr \u002F>\n(at your option) any later version.\u003C\u002Fp>\n\u003Cp>This program is distributed in the hope that it will be useful,\u003Cbr \u002F>\nbut WITHOUT ANY WARRANTY; without even the implied warranty of\u003Cbr \u002F>\nMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the\u003Cbr \u002F>\nGNU General Public License for more details.\u003C\u002Fp>\n\u003Cp>You should have received a copy of the GNU General Public License\u003Cbr \u002F>\nalong with this program; if not, write to the Free Software\u003Cbr \u002F>\nFoundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA\u003C\u002Fp>\n","A complete WordPress plugin for managing and displaying interactive organizational charts with admin and editor data upload and user-friendly viewing.",10,280,"2025-08-25T07:00:00.000Z","5.0","7.4",[124,125,126,20,82],"company-structure","employee-directory","hierarchy","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Finteractive-organizational-chart.1.0.0.zip",{"attackSurface":129,"codeSignals":227,"taintFlows":252,"riskAssessment":278,"analyzedAt":285},{"hooks":130,"ajaxHandlers":204,"restRoutes":211,"shortcodes":220,"cronEvents":225,"entryPointCount":226,"unprotectedCount":27},[131,137,141,144,148,152,156,160,162,166,169,172,176,179,184,187,189,191,195,198,200],{"type":132,"name":133,"callback":134,"file":135,"line":136},"action","admin_init","org_chart_init","index.php",16,{"type":132,"name":138,"callback":139,"file":135,"line":140},"admin_menu","org_chart_add_page",17,{"type":132,"name":133,"callback":142,"file":135,"line":143},"orgchart_scripts",19,{"type":132,"name":145,"callback":146,"file":135,"line":147},"admin_enqueue_scripts","orgchart_enqueue",20,{"type":132,"name":149,"callback":150,"priority":151,"file":135,"line":14},"init","set_org_cookie",1,{"type":132,"name":153,"callback":154,"priority":118,"file":135,"line":155},"admin_notices","general_admin_notice",23,{"type":132,"name":157,"callback":158,"file":135,"line":159},"current_screen","this_screen",24,{"type":132,"name":149,"callback":142,"file":135,"line":161},546,{"type":132,"name":163,"callback":164,"file":135,"line":165},"show_user_profile","shr_extra_profile_fields",681,{"type":132,"name":167,"callback":164,"file":135,"line":168},"edit_user_profile",682,{"type":132,"name":170,"callback":164,"file":135,"line":171},"user_new_form",683,{"type":132,"name":173,"callback":174,"file":135,"line":175},"profile_update","shr_profile_update",714,{"type":132,"name":177,"callback":174,"file":135,"line":178},"user_register",715,{"type":180,"name":181,"callback":182,"priority":118,"file":135,"line":183},"filter","user_contactmethods","my_new_contactmethods",731,{"type":132,"name":163,"callback":185,"file":135,"line":186},"user_interests_fields",761,{"type":132,"name":167,"callback":185,"file":135,"line":188},762,{"type":132,"name":170,"callback":185,"file":135,"line":190},763,{"type":132,"name":192,"callback":193,"file":135,"line":194},"personal_options_update","user_interests_fields_save",787,{"type":132,"name":196,"callback":193,"file":135,"line":197},"edit_user_profile_update",788,{"type":132,"name":177,"callback":193,"file":135,"line":199},789,{"type":132,"name":201,"callback":202,"file":135,"line":203},"rest_api_init","my_register_route",867,[205],{"action":206,"nopriv":207,"callback":208,"hasNonce":209,"hasCapCheck":209,"file":135,"line":210},"org_chart",false,"myajax",true,862,[212],{"namespace":213,"route":214,"methods":215,"callback":217,"permissionCallback":218,"file":135,"line":219},"org_chart\u002Fv1","\u002Fstructure",[216],"GET","custom_json","closure",870,[221],{"tag":222,"callback":223,"file":135,"line":224},"orgchart","orgchart_display",597,[],3,{"dangerousFunctions":228,"sqlUsage":229,"outputEscaping":231,"fileOperations":27,"externalRequests":27,"nonceChecks":226,"capabilityChecks":59,"bundledLibraries":251},[],{"prepared":27,"raw":27,"locations":230},[],{"escaped":62,"rawEcho":232,"locations":233},8,[234,237,239,241,243,245,247,249],{"file":135,"line":235,"context":236},163,"raw output",{"file":135,"line":238,"context":236},262,{"file":135,"line":240,"context":236},310,{"file":135,"line":242,"context":236},319,{"file":135,"line":244,"context":236},410,{"file":135,"line":246,"context":236},500,{"file":135,"line":248,"context":236},506,{"file":135,"line":250,"context":236},519,[],[253,270],{"entryPoint":254,"graph":255,"unsanitizedCount":27,"severity":269},"org_chart_do_page (index.php:75)",{"nodes":256,"edges":267},[257,262],{"id":258,"type":259,"label":260,"file":135,"line":261},"n0","source","$_POST (x2)",174,{"id":263,"type":264,"label":265,"file":135,"line":238,"wp_function":266},"n1","sink","echo() [XSS]","echo",[268],{"from":258,"to":263,"sanitized":209},"low",{"entryPoint":271,"graph":272,"unsanitizedCount":27,"severity":269},"\u003Cindex> (index.php:0)",{"nodes":273,"edges":276},[274,275],{"id":258,"type":259,"label":260,"file":135,"line":261},{"id":263,"type":264,"label":265,"file":135,"line":238,"wp_function":266},[277],{"from":258,"to":263,"sanitized":209},{"summary":279,"deductions":280},"The static analysis of simple-org-chart v2.3.5 reveals a generally strong security posture. The plugin demonstrates good practices by implementing nonce checks and capability checks on all identified entry points (AJAX handlers, REST API routes, and shortcodes).  The absence of dangerous functions, raw SQL queries, file operations, and external HTTP requests is also a positive sign. Taint analysis shows no critical or high severity unsanitized flows, indicating that user-supplied data is likely being handled safely within the analyzed paths.\n\nHowever, the plugin's vulnerability history presents a notable concern. With two known medium-severity CVEs in its past, including a recent one from August 2023, it suggests a recurring pattern of security weaknesses. While there are currently no unpatched vulnerabilities, the past incidents, particularly those involving CSRF and missing authorization, indicate potential areas where oversight might have occurred. The presence of these past vulnerabilities, even if resolved, warrants continued vigilance and suggests that the plugin may not have a perfect track record in preventing certain classes of security flaws.\n\nIn conclusion, simple-org-chart v2.3.5 exhibits commendable defensive coding practices in its current version. The lack of immediate critical risks from the static analysis is reassuring. Nevertheless, the historical prevalence of medium-severity vulnerabilities, especially those related to authorization and CSRF, should not be overlooked. Users should remain aware of this history and ensure the plugin is always updated to the latest version to benefit from any past security fixes and to mitigate the risk of similar issues recurring.",[281,283],{"reason":282,"points":118},"Two past medium severity CVEs",{"reason":284,"points":86},"Recent vulnerability (2023-08-17)","2026-03-16T19:07:12.427Z",{"wat":287,"direct":297},{"assetPaths":288,"generatorPatterns":293,"scriptPaths":294,"versionParams":295},[289,290,291,292],"\u002Fwp-content\u002Fplugins\u002Fsimple-org-chart\u002Fcss\u002Fjquery.jOrgChart.css","\u002Fwp-content\u002Fplugins\u002Fsimple-org-chart\u002Fcss\u002Fcustom.css","\u002Fwp-content\u002Fplugins\u002Fsimple-org-chart\u002Fjs\u002Fjquery.jOrgChart.js","\u002Fwp-content\u002Fplugins\u002Fsimple-org-chart\u002Fjs\u002Fcustom.js",[],[291,292],[296],"simple-org-chart\u002Fjs\u002Fcustom.js?ver=2.3.5",{"cssClasses":298,"htmlComments":304,"htmlAttributes":305,"restEndpoints":307,"jsGlobals":308,"shortcodeOutput":310},[222,299,300,301,302,303],"oblock","oinline","overlay1","popup1","close1",[],[306],"data-id=\"bio",[],[309],"orgChartAjax",[311],"[orgchart]"]