[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fykfqXxXtiMxeCvPSco0VZ68zLiS0NqdI5bI8phFOc94":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":13,"download_link":23,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":36,"analysis":131,"fingerprints":226},"simple-popup-notification","Simple Popup Notification","1.1","Galaxy Weblinks","https:\u002F\u002Fprofiles.wordpress.org\u002Fgalaxyweblinks\u002F","\u003Cp>A lightweight plugin to display customizable notification popups on the frontend. Users can manage popup content and styles from the admin settings. Once closed, the popup will not reappear for the user until the cookie expires.\u003C\u002Fp>\n\u003Cp>Here’s a link to the documentation for the plugin. This will help you learn more about its features and how to use it.\u003Cbr \u002F>\n\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwp-plugins.galaxyweblinks.com\u002Fwp-plugins\u002Fsimple-popup-notification\u002Fdoc\u002F\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa>\u003C\u002Fstrong>\u003Cbr \u002F>\nFor any feedback or queries regarding this plugin, please contact our \u003Ca href=\"https:\u002F\u002Fwp-plugins.galaxyweblinks.com\u002Fcontact\u002F\" rel=\"nofollow ugc\">Support team\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Requirements\u003C\u002Fh3>\n\u003Cp>To get the best experience with this Simple Popup Notification plugin, we recommend the following:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>PHP  7.4 or later\u003C\u002Fli>\n\u003Cli>MySQL 5.6 or later\u003C\u002Fli>\n\u003Cli>WordPress 6.7 or later\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>To be sure about the above requirements, contact your hosting vendor.\u003C\u002Fp>\n","Add a WordPress popup box to the admin page settings, including backend options.",0,272,"","6.8.5","4.9","7.4",[18,19,20,21,22],"cta-button-link","cta-button-text","enable-popup","select-image-position-option","upload-image","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-popup-notification.1.1.zip",100,null,"2026-03-15T10:48:56.248Z",[],{"slug":29,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":32,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"galaxyweblinks",40,24800,97,310,77,"2026-04-04T00:39:28.774Z",[37,59,79,98,112],{"slug":38,"name":39,"version":6,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":24,"downloaded":44,"rating":45,"num_ratings":46,"last_updated":47,"tested_up_to":14,"requires_at_least":48,"requires_php":13,"tags":49,"homepage":54,"download_link":55,"security_score":56,"vuln_count":46,"unpatched_count":46,"last_vuln_date":57,"fetched_at":58},"wpb-image-widget","WPB Image Widget","WPBean","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpbean\u002F","\u003Cp>A simple widget for showing responsive image in sidebar area. It’s using WordPress’s new media uploader.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fdemo1.wpbean.com\u002F\" rel=\"nofollow ugc\">DEMO\u003C\u002Fa>  |  \u003Ca href=\"https:\u002F\u002Fwpbean.com\u002Fsupport\u002F\" rel=\"nofollow ugc\">Support\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch3>👋 Need expert WordPress & WooCommerce development help?\u003C\u002Fh3>\n\u003Cp>I’m currently available for hire — WordPress and WooCommerce development, custom features, bug fixing, speed optimization, performance tuning, SEO improvements, and more.\u003Cbr \u002F>\nWith over 10 years of experience building high-quality WordPress solutions, I can help you take your website to the next level.\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwpbean.com\u002Fweb-development-services\u002F?utm_source=WordPress&utm_medium=desc-link&utm_campaign=available-for-hire&utm_content=WPB+Image+Widget\" rel=\"nofollow ugc\">\u003Cstrong>Contact me here \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan>\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Plugin Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Showing image in sidebar by widget.\u003C\u002Fli>\n\u003Cli>Linking image to large image or cutom link.\u003C\u002Fli>\n\u003Cli>Image size.\u003C\u002Fli>\n\u003Cli>Image alt text.\u003C\u002Fli>\n\u003Cli>Image bellow text.\u003C\u002Fli>\n\u003Cli>Image alignment.\u003C\u002Fli>\n\u003Cli>Nice animation on mouse hover.\u003C\u002Fli>\n\u003Cli>Easy to use.\u003C\u002Fli>\n\u003Cli>Clean code & easy to customize.\u003C\u002Fli>\n\u003C\u002Ful>\n","A simple widget for showing responsive image in sidebar area. It's using WordPress's new media uploader.",4210,80,1,"2025-06-08T22:21:00.000Z","3.6",[50,51,52,53,38],"image","image-widget","upload-image-in-widget","widget","http:\u002F\u002Fwpbean.com\u002Fwpb-image-widget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpb-image-widget.1.1.zip",78,"2025-09-05 00:00:00","2026-03-15T15:16:48.613Z",{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":67,"downloaded":68,"rating":11,"num_ratings":11,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":13,"tags":72,"homepage":76,"download_link":77,"security_score":78,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":58},"access-fotoweb-media","FotoWare WordPress Lite","2.0.0","ViitorCloud Technologies Pvt Ltd","https:\u002F\u002Fprofiles.wordpress.org\u002Fviitorcloudvc\u002F","\u003Cp>The Plugin’s WordPress editor button connector for FotoWare allows users to include images directly from the Fotoweb DAM, into the WordPress platform.\u003C\u002Fp>\n\u003Cp>In the current plugin version, only, images are supported and are not imported in the WordPress Library, but stay in the Fotoweb repository.\u003C\u002Fp>\n\u003Cp>The plugin relays on FotoWare API to connect it and follows security protocols based on FotoWare data privacy guidelines. \u003Ca href=\"https:\u002F\u002Fwww.FotoWare.com\u002Fcompany\u002Flegal\u002Fprivacy-policy\" rel=\"nofollow ugc\">FotoWare\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>For further details and to add FotoWare URL, Client ID, Client Secret from FotoWare Account please review documentation by FotoWare. \u003Ca href=\"https:\u002F\u002Flearn.FotoWare.com\u002F\" rel=\"nofollow ugc\">FotoWare\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>No coding required.\u003C\u002Fp>\n\u003Cp>Compatible with Visual Editor and HTML Editor only.\u003C\u002Fp>\n\u003Cp>Required to connect with FotoWare through FotoWare settings.\u003C\u002Fp>\n\u003Cp>Required FotoWare URL, Client ID, Client Secret from FotoWare Account.\u003C\u002Fp>\n\u003Ch4>Get Involved\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fviitorcloud.com\u002F\" rel=\"nofollow ugc\">ViitorCloud\u003C\u002Fa> believes in active community support. So, with our plugins, we aim to try to make life easy for developers & customers. Subscribe to our newsletter for more updates.\u003C\u002Fp>\n\u003Ch4>Advance Features (Pro Version)\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Supports Gutenberg (Popular default editor of WordPress). \u003C\u002Fli>\n\u003Cli>Best Compatible with all posts, pages, and custom post types of WordPress.\u003C\u002Fli>\n\u003Cli>Compatible with WordPress Multisite Subdomain\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Enables multilingual support and is compatible with Popular Plugin “WPML”.\u003C\u002Fp>\n\u003Cp>Please visit \u003Ca href=\"https:\u002F\u002Fviitorcloud.com\u002Fvcstore\" rel=\"nofollow ugc\">Fotoware WordPress Premium\u003C\u002Fa>  to buy.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n","The Plugin's WordPress editor button connector for FotoWare allows users to include images directly from the Fotoweb DAM, into the WordPress plat &hellip;",10,1879,"2024-05-31T05:22:00.000Z","6.5.8","3.8",[73,74,75],"dam","fotoware","upload-image-from-fotoware","https:\u002F\u002Fviitorcloud.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faccess-fotoweb-media.zip",92,{"slug":80,"name":81,"version":82,"author":83,"author_profile":84,"description":85,"short_description":86,"active_installs":67,"downloaded":87,"rating":24,"num_ratings":46,"last_updated":88,"tested_up_to":89,"requires_at_least":90,"requires_php":13,"tags":91,"homepage":95,"download_link":96,"security_score":97,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":58},"boxer-image-upload","Boxer Image Upload","1.0","mandeep007","https:\u002F\u002Fprofiles.wordpress.org\u002Fmandeep007\u002F","\u003Cp>This plugin could use for upload a single image to media and display on frontend by using a image upload widget.\u003C\u002Fp>\n","This plugin could use for upload a single image to media and display on frontend by using a image upload widget.",2102,"2015-03-22T08:39:00.000Z","4.1.42","3.5",[80,50,92,93,94],"image-upload","upload","upload-image-with-link","http:\u002F\u002Fwww.jobdeoz.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fboxer-image-upload.zip",85,{"slug":99,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":67,"downloaded":106,"rating":24,"num_ratings":46,"last_updated":107,"tested_up_to":108,"requires_at_least":90,"requires_php":13,"tags":109,"homepage":110,"download_link":111,"security_score":97,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":58},"ks-ads-widget","KS Ads Widget","1.2","kingsoftdng","https:\u002F\u002Fprofiles.wordpress.org\u002Fkingsoftdng\u002F","\u003Cp>A simple ads widget that uses the native WordPress media manager to add ads widgets to your site.\u003C\u002Fp>\n","A simple ads widget that uses the native WordPress media manager to add ads widgets to your site.",1569,"2017-05-16T03:42:00.000Z","4.7.32",[22,53],"http:\u002F\u002Faioresources.net","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fks-ads-widget.zip",{"slug":113,"name":114,"version":82,"author":115,"author_profile":116,"description":117,"short_description":118,"active_installs":67,"downloaded":119,"rating":120,"num_ratings":121,"last_updated":122,"tested_up_to":123,"requires_at_least":124,"requires_php":13,"tags":125,"homepage":129,"download_link":130,"security_score":97,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":58},"upload-multiple-image","Upload Multiple Image","suhasrathod","https:\u002F\u002Fprofiles.wordpress.org\u002Fsuhasrathod\u002F","\u003Cp>This plugin adds a meta box for multiple images for all posts and pages. please see installation instructions.\u003C\u002Fp>\n\u003Cp>Retrive all image using function get_multiple_image($post_id)\u003C\u002Fp>\n","This plugin adds a meta box for multiple images for all posts and pages.",2905,94,3,"2014-02-12T11:58:00.000Z","3.7.41","3.7",[50,126,127,128,22],"metabox","multi","multiple-upload","http:\u002F\u002Fsuhasrathod.wordpress.com\u002F2014\u002F01\u002F29\u002Fupload-multiple-image-1\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fupload-multiple-image.zip",{"attackSurface":132,"codeSignals":177,"taintFlows":192,"riskAssessment":219,"analyzedAt":225},{"hooks":133,"ajaxHandlers":167,"restRoutes":174,"shortcodes":175,"cronEvents":176,"entryPointCount":46,"unprotectedCount":11},[134,140,144,149,153,157,160,164],{"type":135,"name":136,"callback":137,"file":138,"line":139},"action","admin_enqueue_scripts","simppono_color_picker","includes\\admin\\class-simple-popup-notification-admin.php",27,{"type":135,"name":141,"callback":142,"file":138,"line":143},"admin_menu","simppono_section_plugin_menu",28,{"type":145,"name":146,"callback":147,"priority":67,"file":138,"line":148},"filter","plugin_row_meta","simppono_add_custom_plugin_links",29,{"type":135,"name":150,"callback":151,"file":138,"line":152},"admin_init","simppono_section_settings",30,{"type":145,"name":154,"callback":155,"priority":67,"file":138,"line":156},"plugin_action_links","simppono_add_plugin_action_links",31,{"type":135,"name":150,"callback":158,"file":138,"line":159},"simppono_section_save_settings",32,{"type":135,"name":161,"callback":162,"file":163,"line":139},"wp_enqueue_scripts","simppono_enqueue_scripts","includes\\frontend\\class-simple-popup-notification-frontend.php",{"type":135,"name":165,"callback":166,"file":163,"line":143},"wp_footer","simppono_popup_model",[168],{"action":169,"nopriv":170,"callback":171,"hasNonce":172,"hasCapCheck":170,"file":138,"line":173},"get_image_html",false,"simppono_get_image_html_callback",true,33,[],[],[],{"dangerousFunctions":178,"sqlUsage":179,"outputEscaping":181,"fileOperations":11,"externalRequests":11,"nonceChecks":46,"capabilityChecks":11,"bundledLibraries":191},[],{"prepared":11,"raw":11,"locations":180},[],{"escaped":182,"rawEcho":121,"locations":183},44,[184,187,189],{"file":138,"line":185,"context":186},346,"raw output",{"file":138,"line":188,"context":186},357,{"file":138,"line":190,"context":186},494,[],[193,211],{"entryPoint":194,"graph":195,"unsanitizedCount":11,"severity":210},"simppono_get_image_html_callback (includes\\admin\\class-simple-popup-notification-admin.php:319)",{"nodes":196,"edges":208},[197,202],{"id":198,"type":199,"label":200,"file":138,"line":201},"n0","source","$_POST",327,{"id":203,"type":204,"label":205,"file":138,"line":206,"wp_function":207},"n1","sink","echo() [XSS]",333,"echo",[209],{"from":198,"to":203,"sanitized":172},"low",{"entryPoint":212,"graph":213,"unsanitizedCount":11,"severity":210},"\u003Cclass-simple-popup-notification-admin> (includes\\admin\\class-simple-popup-notification-admin.php:0)",{"nodes":214,"edges":217},[215,216],{"id":198,"type":199,"label":200,"file":138,"line":201},{"id":203,"type":204,"label":205,"file":138,"line":206,"wp_function":207},[218],{"from":198,"to":203,"sanitized":172},{"summary":220,"deductions":221},"The static analysis of \"simple-popup-notification\" v1.1 indicates a generally good security posture. The plugin exhibits strong adherence to best practices, with a complete lack of dangerous functions, no raw SQL queries, and a high percentage of properly escaped output. The presence of a nonce check on its single AJAX handler further strengthens its defenses against common web attacks. The absence of any recorded vulnerabilities in its history suggests a well-maintained and secure codebase.\n\nHowever, the code analysis reveals a key area for improvement: the absence of capability checks on its AJAX handler. While a nonce check is present, it does not verify user permissions, potentially allowing any logged-in user to trigger the AJAX functionality. This could be a concern if the AJAX action performs sensitive operations. The taint analysis found no critical or high-severity issues, and the limited attack surface is a positive sign. \n\nIn conclusion, \"simple-popup-notification\" v1.1 demonstrates a promising security foundation with its SQL preparedness, output escaping, and nonce usage. The primary weakness lies in the lack of authorization checks for its AJAX endpoint, which, while not a critical vulnerability based on the current data, represents a potential risk that should be addressed to ensure comprehensive security.",[222],{"reason":223,"points":224},"AJAX handler without capability checks",5,"2026-03-17T05:53:40.638Z",{"wat":227,"direct":238},{"assetPaths":228,"generatorPatterns":232,"scriptPaths":233,"versionParams":234},[229,230,231],"\u002Fwp-content\u002Fplugins\u002Fsimple-popup-notification\u002Fincludes\u002Fadmin\u002Fcss\u002Fsimple-popup-notification-admin.css","\u002Fwp-content\u002Fplugins\u002Fsimple-popup-notification\u002Fincludes\u002Fadmin\u002Fjs\u002Fcolor-picker.js","\u002Fwp-content\u002Fplugins\u002Fsimple-popup-notification\u002Fincludes\u002Fadmin\u002Fjs\u002Fcustom-script.js",[],[230,231],[235,236,237],"\u002Fincludes\u002Fadmin\u002Fjs\u002Fcolor-picker.js?ver=1.1","\u002Fincludes\u002Fadmin\u002Fcss\u002Fsimple-popup-notification-admin.css?ver=1.1","\u002Fincludes\u002Fadmin\u002Fjs\u002Fcustom-script.js?ver=1.1",{"cssClasses":239,"htmlComments":247,"htmlAttributes":248,"restEndpoints":250,"jsGlobals":251,"shortcodeOutput":253},[240,241,242,243,244,245,246],"simple-popup-notification--notice","e-notice__actions","e-button--cta","cta-secondary","e-note","metabox-flex","dpffm-howtouse",[],[249],"simppono-popup-section",[],[252],"admin_ajax_object",[]]