[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCKB5gXiOU-nxvK6zmzN6MC0hJV6lDiigOBGEQUTS0iQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":22,"download_link":23,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":37,"analysis":130,"fingerprints":336},"simple-post-view-count","Simple Post View Count","1.0.0","ThemeDot","https:\u002F\u002Fprofiles.wordpress.org\u002Fthemedot\u002F","\u003Cp>Simple Post View Count is a lightweight plugin that allows you to track and display the number of views for your WordPress posts. Key features include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>View Tracking\u003C\u002Fstrong>: Automatically tracks post views using AJAX or a fallback method, with IP-based deduplication.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shortcode Support\u003C\u002Fstrong>: Use \u003Ccode>[simppovi-single-post-view]\u003C\u002Fcode> to display view counts anywhere on your site.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable Display\u003C\u002Fstrong>: Customize text and colors for view counts via the settings page.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Admin Column\u003C\u002Fstrong>: Adds a sortable “Views” column to the post list in the admin area.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>View Logs\u003C\u002Fstrong>: View detailed logs of post views and export them to CSV.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Caching Compatibility\u003C\u002Fstrong>: Works with caching plugins when configured correctly.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Perfect for bloggers, content creators, and site owners who want to monitor post popularity without heavy analytics plugins.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPLv2 or later. See the included \u003Ccode>license.txt\u003C\u002Fcode> file for details.\u003C\u002Fp>\n","Track and display post view counts. Includes shortcode support, customizable settings, and view logs with CSV export.",0,154,"2025-10-14T12:17:00.000Z","6.8.5","6.3","7.4",[18,19,20,21],"analytics","post-view-counter","post-views-count","shortcode","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsimple-post-view-count\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-post-view-count.1.0.0.zip",100,null,"2026-03-15T15:16:48.613Z",[],{"slug":29,"display_name":30,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":33,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"themedot","junkthemedotcom",3,60,92,30,88,"2026-04-04T02:12:30.197Z",[38,61,81,97,114],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":32,"downloaded":46,"rating":32,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":16,"tags":51,"homepage":57,"download_link":58,"security_score":59,"vuln_count":47,"unpatched_count":11,"last_vuln_date":60,"fetched_at":26},"surbma-premium-wp","Surbma | Premium WP","11.3","Surbma","https:\u002F\u002Fprofiles.wordpress.org\u002Fsurbma\u002F","\u003Cp>WordPress is a great platform and a good basis. But it needs plugins to add functions, which is necessary for almost every website. The aim of this plugin is to add very useful extensions to your WordPress website.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Here is a list of the current functions:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Extra fields: It gives a central place, where you can add your basic informations, like name, address, phone or email. Use shortcodes to add these informations to your site. If you ever need to change any of this information, you can change it in one place and all your informations will automatically update. Wow!\u003C\u002Fli>\n\u003Cli>Google Analytics: An easy way to use Google Analytics tracking on your website. You only need to add your UA code and everything is done automatically. You can add your Classic or your Universal Analytics code and you can set display features option, if you want.\u003C\u002Fli>\n\u003Cli>Google Tag Manager: The best way to manage all your 3rd party codes on your website.\u003C\u002Fli>\n\u003Cli>Social share buttons for posts with 5 different styles: Facebook, Twitter, LinkedIn, Pinterest, Email\u003C\u002Fli>\n\u003Cli>Shortcodes: A lot of useful shortcodes.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Do you want to contribute or help improving this plugin?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You can find it on GitHub: \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FSurbma\u002Fsurbma-premium-wp\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002FSurbma\u002Fsurbma-premium-wp\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>You can find my other plugins and projects on GitHub:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002FSurbma\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002FSurbma\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Please feel free to contribute, help or recommend any new features for my plugins, themes and other projects.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Do you want to know more about me?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Visit my webpage: \u003Ca href=\"https:\u002F\u002Fsurbma.com\u002F\" rel=\"nofollow ugc\">Surbma.com\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Do you like and use my free plugins?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You can donate me for FREE here: \u003Ca href=\"https:\u002F\u002Fsurbma.com\u002Fdonate\u002F\" rel=\"nofollow ugc\">Surbma.com\u003C\u002Fa>\u003C\u002Fp>\n","Useful extensions for your WordPress website.",6356,1,"2025-07-30T20:20:00.000Z","6.7.5","5.2",[52,53,54,55,56],"facebook","google","google-analytics","google-tag-manager","shortcodes","https:\u002F\u002Fsurbma.com\u002Fwordpress-plugins\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsurbma-premium-wp.11.3.zip",99,"2025-01-07 00:00:00",{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":69,"downloaded":70,"rating":11,"num_ratings":11,"last_updated":71,"tested_up_to":72,"requires_at_least":73,"requires_php":74,"tags":75,"homepage":78,"download_link":79,"security_score":80,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26},"wpsea-functionality","Seattle WordPress Functionality","0.8.2","Ben Lobaugh (blobaugh)","https:\u002F\u002Fprofiles.wordpress.org\u002Fblobaugh\u002F","\u003Cp>A functionality plugin is one that provides a common set of functionality that is\u003Cbr \u002F>\nused across a wide range of WordPress based websites. This plugin contains a set\u003Cbr \u002F>\nof functionality that has been deemed useful by the Seattle WordPress community.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Contact Form shortcode\u003C\u002Fli>\n\u003Cli>Popular posts widget\u003C\u002Fli>\n\u003Cli>Random post widget\u003C\u002Fli>\n\u003Cli>provides an easy way to disable some meta info from wp_head\u003C\u002Fli>\n\u003C\u002Ful>\n","A functionality plugin is one that provides a common set of functionality that is",10,1659,"2015-05-17T03:19:00.000Z","4.1.0","3.0","",[18,53,76,21,77],"meta","widget","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwpsea-functionality\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpsea-functionality.zip",85,{"slug":82,"name":83,"version":84,"author":85,"author_profile":86,"description":87,"short_description":88,"active_installs":11,"downloaded":89,"rating":11,"num_ratings":11,"last_updated":90,"tested_up_to":49,"requires_at_least":91,"requires_php":74,"tags":92,"homepage":74,"download_link":96,"security_score":33,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26},"postviews-insights","PostViews Insights","1.0.1","Sunny Thakur","https:\u002F\u002Fprofiles.wordpress.org\u002Fsunny923\u002F","\u003Cp>A plugin to display post view insights and provide a shortcode to list posts based on view count.\u003C\u002Fp>\n","Display post view insights and provide a shortcode to list posts based on view count.",992,"2024-11-18T12:32:00.000Z","5.0",[18,93,94,21,95],"insights","postviews","views","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpostviews-insights.1.0.1.zip",{"slug":98,"name":99,"version":100,"author":101,"author_profile":102,"description":103,"short_description":104,"active_installs":11,"downloaded":105,"rating":11,"num_ratings":11,"last_updated":106,"tested_up_to":14,"requires_at_least":91,"requires_php":107,"tags":108,"homepage":112,"download_link":113,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26},"total-views","Total Views","1.0","DIZE TECH IT SOLUTIONS","https:\u002F\u002Fprofiles.wordpress.org\u002Fdizetech\u002F","\u003Cp>Total Views is a lightweight WordPress plugin that allows you to \u003Cstrong>count total page views\u003C\u002Fstrong> and display them anywhere using the \u003Ccode>[total_views]\u003C\u002Fcode> shortcode.\u003C\u002Fp>\n\u003Cp>Features include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Counts \u003Cstrong>total page views\u003C\u002Fstrong> for your website.  \u003C\u002Fli>\n\u003Cli>Display total views with a \u003Cstrong>customizable label\u003C\u002Fstrong>.  \u003C\u002Fli>\n\u003Cli>Style options: \u003Cstrong>bold, italic, underline, color\u003C\u002Fstrong>.  \u003C\u002Fli>\n\u003Cli>Editable \u003Cstrong>total page views\u003C\u002Fstrong> number in the settings to manually adjust.  \u003C\u002Fli>\n\u003Cli>Front-end shortcode \u003Ccode>[total_views]\u003C\u002Fcode> displays the counter exactly as in the admin preview.  \u003C\u002Fli>\n\u003Cli>CSS classes: \u003Ccode>total-views-label\u003C\u002Fcode> and \u003Ccode>total-views-count\u003C\u002Fcode> for advanced styling.  \u003C\u002Fli>\n\u003Cli>Optional \u003Cstrong>“Check tutorial” button\u003C\u002Fstrong> linking to a video guide.  \u003C\u002Fli>\n\u003Cli>Responsive admin settings page.  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Ideal for bloggers, developers, and website owners who want \u003Cstrong>quick traffic insight\u003C\u002Fstrong> with minimal setup.\u003C\u002Fp>\n\u003Ch3>Keywords\u003C\u002Fh3>\n\u003Cp>page views, visitor counter, traffic analytics, shortcode counter, total views plugin, front-end page views, visitor statistics, WP plugin traffic, lightweight analytics\u003C\u002Fp>\n","Count total page views on your WordPress site and display them with a simple shortcode. Customizable label, styles, and editable page views.",214,"2025-08-28T12:54:00.000Z","7.2",[18,109,21,110,111],"page-views","traffic-counter","visitor-statistics","https:\u002F\u002Fdizetech.in\u002Fshop\u002Ftotal-views-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftotal-views.1.0.zip",{"slug":115,"name":116,"version":117,"author":116,"author_profile":118,"description":119,"short_description":120,"active_installs":11,"downloaded":121,"rating":11,"num_ratings":11,"last_updated":122,"tested_up_to":123,"requires_at_least":124,"requires_php":16,"tags":125,"homepage":74,"download_link":129,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26},"vectoron","Vectoron","2.11.7","https:\u002F\u002Fprofiles.wordpress.org\u002Fvectoron\u002F","\u003Cp>Vectoron provides three main features:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>1. REST API Endpoints\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Secure REST API endpoints for external content management, perfect for integrating with automation platforms like Superblocks, Zapier, or custom applications.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Create and update posts programmatically\u003C\u002Fli>\n\u003Cli>Manage categories\u003C\u002Fli>\n\u003Cli>Upload media (file upload, base64, or URL)\u003C\u002Fli>\n\u003Cli>Full authentication support (Basic Auth or custom headers)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>2. Content Shortcodes\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The \u003Ccode>[vectoron_article]\u003C\u002Fcode> shortcode provides:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Automatic wpautop disabling for custom HTML content\u003C\u002Fli>\n\u003Cli>Built-in GA4 event tracking\u003C\u002Fli>\n\u003Cli>FAQ accordion styling support\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>3. ACF Integration\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Automatically sync post content to Advanced Custom Fields:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Settings page under Settings > Vectoron\u003C\u002Fli>\n\u003Cli>Auto-detect WYSIWYG fields in ACF field groups\u003C\u002Fli>\n\u003Cli>Support for Flexible Content, Repeaters, and Groups\u003C\u002Fli>\n\u003Cli>ACF sync triggered by Vectoron API or X-Vectoron-Sync header\u003C\u002Fli>\n\u003Cli>Works with both custom Vectoron API and native WP REST API\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>4. Page Builder Integrations\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Seamless integration with popular WordPress page builders:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Elementor\u003C\u002Fstrong>: Auto-sync content to Elementor’s text-editor widgets\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Beaver Builder\u003C\u002Fstrong>: Auto-sync content to Beaver Builder’s rich-text modules\u003C\u002Fli>\n\u003Cli>\u003Cstrong>DIVI\u003C\u002Fstrong>: Auto-sync content to DIVI’s shortcode format (sections, rows, columns, text modules)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WP Bakery\u003C\u002Fstrong>: Auto-sync content to WP Bakery’s shortcode format (rows, columns, column_text)\u003C\u002Fli>\n\u003Cli>Configurable sync modes: Auto (detect existing builder posts), Always (convert all posts), or Disabled\u003C\u002Fli>\n\u003Cli>Cache clearing for immediate visual updates\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>5. SEO Plugin Integrations\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Automatic SEO metadata sync with popular SEO plugins:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Yoast SEO\u003C\u002Fstrong>: Sync meta description, SEO title, and focus keyword\u003C\u002Fli>\n\u003Cli>\u003Cstrong>SEOpress\u003C\u002Fstrong>: Sync meta description, SEO title, and target keyword\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Rank Math\u003C\u002Fstrong>: Sync meta description, SEO title, and focus keyword\u003C\u002Fli>\n\u003Cli>All SEO fields set via API are automatically synced to the active SEO plugin\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>API Endpoints\u003C\u002Fh3>\n\u003Cp>All endpoints use the namespace \u003Ccode>vectoron\u002Fv1\u003C\u002Fcode>:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>POST \u002Fwp-json\u002Fvectoron\u002Fv1\u002Fposts\u003C\u002Fcode> – Create a new post\u003C\u002Fli>\n\u003Cli>\u003Ccode>PUT \u002Fwp-json\u002Fvectoron\u002Fv1\u002Fposts\u002F{id}\u003C\u002Fcode> – Update an existing post\u003C\u002Fli>\n\u003Cli>\u003Ccode>POST \u002Fwp-json\u002Fvectoron\u002Fv1\u002Fcategories\u003C\u002Fcode> – Create a category\u003C\u002Fli>\n\u003Cli>\u003Ccode>POST \u002Fwp-json\u002Fvectoron\u002Fv1\u002Fmedia\u003C\u002Fcode> – Upload media\u003C\u002Fli>\n\u003Cli>\u003Ccode>GET \u002Fwp-json\u002Fvectoron\u002Fv1\u002Fstatus\u003C\u002Fcode> – Health check (no auth required)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Authentication\u003C\u002Fh3>\n\u003Cp>Three authentication methods are supported:\u003C\u002Fp>\n\u003Col>\n\u003Cli>\u003Cstrong>HTTP Basic Auth\u003C\u002Fstrong> – Standard username:password\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Authorization Header\u003C\u002Fstrong> – \u003Ccode>Authorization: Basic \u003Cbase64>\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom Headers\u003C\u002Fstrong> – \u003Ccode>X-WP-Username\u003C\u002Fcode> and \u003Ccode>X-WP-Password\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>ACF Sync Header\u003C\u002Fh3>\n\u003Cp>When using the native WordPress REST API (\u003Ccode>\u002Fwp-json\u002Fwp\u002Fv2\u002Fposts\u003C\u002Fcode>) instead of the Vectoron custom API, you can trigger ACF sync by adding the \u003Ccode>X-Vectoron-Sync\u003C\u002Fcode> header:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>X-Vectoron-Sync: true\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>This is useful when:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>You want to use WordPress’s native post creation\u002Fupdate endpoints\u003C\u002Fli>\n\u003Cli>Your integration already uses the WP REST API\u003C\u002Fli>\n\u003Cli>You need features only available in the native API\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Without this header, native WP REST API requests will NOT trigger ACF sync, ensuring Gutenberg and other WordPress interfaces don’t interfere with ACF content.\u003C\u002Fp>\n\u003Ch3>Security Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Rate limiting (60 requests\u002Fminute per IP)\u003C\u002Fli>\n\u003Cli>Capability-based permission checks\u003C\u002Fli>\n\u003Cli>SSRF protection for URL uploads\u003C\u002Fli>\n\u003Cli>Input sanitization and validation\u003C\u002Fli>\n\u003Cli>Protected meta key filtering\u003C\u002Fli>\n\u003C\u002Ful>\n","A WordPress REST API plugin for external content management with authenticated API endpoints, GA4 tracking shortcodes, and ACF integration.",402,"2026-03-12T19:52:00.000Z","6.9.4","5.6",[18,126,127,128,21],"content-management","ga4","rest-api","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvectoron.zip",{"attackSurface":131,"codeSignals":237,"taintFlows":265,"riskAssessment":328,"analyzedAt":335},{"hooks":132,"ajaxHandlers":208,"restRoutes":217,"shortcodes":218,"cronEvents":235,"entryPointCount":236,"unprotectedCount":11},[133,139,144,148,152,156,161,165,169,172,177,181,185,189,192,196,201,204],{"type":134,"name":135,"callback":136,"priority":69,"file":137,"line":138},"filter","manage_post_posts_columns","add_post_view_column","includes\\add-post-column.php",24,{"type":140,"name":141,"callback":142,"priority":69,"file":137,"line":143},"action","manage_post_posts_custom_column","populate_post_view_column",25,{"type":134,"name":145,"callback":146,"priority":69,"file":137,"line":147},"manage_edit-post_sortable_columns","register_sortable_columns",26,{"type":134,"name":149,"callback":150,"priority":69,"file":137,"line":151},"request","sort_by_post_view",27,{"type":140,"name":153,"callback":154,"priority":69,"file":137,"line":155},"plugins_loaded","simppovi_admin_columns_init",90,{"type":140,"name":157,"callback":158,"file":159,"line":160},"add_meta_boxes","add_meta_box","includes\\custom-functions.php",44,{"type":140,"name":162,"callback":163,"priority":69,"file":159,"line":164},"save_post","save_post_data",45,{"type":140,"name":166,"callback":167,"file":159,"line":168},"admin_notices","display_admin_notices",192,{"type":140,"name":153,"callback":170,"file":159,"line":171},"simppovi_admin_meta_box_init",194,{"type":140,"name":173,"callback":174,"file":175,"line":176},"admin_enqueue_scripts","simppovi_enqueue_admin_scripts","includes\\settings.php",50,{"type":140,"name":178,"callback":179,"file":175,"line":180},"wp_enqueue_scripts","simppovi_enqueue_frontend_scripts",65,{"type":140,"name":182,"callback":183,"file":175,"line":184},"admin_init","simppovi_register_settings",80,{"type":140,"name":186,"callback":187,"file":175,"line":188},"admin_menu","simppovi_register_menu_page",82,{"type":140,"name":182,"callback":190,"file":175,"line":191},"simppovi_handle_reset_post_view_data",253,{"type":140,"name":173,"callback":193,"priority":194,"file":175,"line":195},"simppovi_add_admin_inline_css",20,275,{"type":140,"name":197,"callback":198,"file":199,"line":200},"wp","simppovi_track_post_view","includes\\simple-post-view-count.php",95,{"type":140,"name":178,"callback":202,"file":199,"line":203},"simppovi_enqueue_scripts",288,{"type":140,"name":182,"callback":205,"priority":47,"file":206,"line":207},"simppovi_handle_csv_export","includes\\view-logs.php",130,[209,215],{"action":210,"nopriv":211,"callback":212,"hasNonce":213,"hasCapCheck":211,"file":199,"line":214},"simppovi_track_view",false,"simppovi_ajax_track_post_view",true,184,{"action":210,"nopriv":213,"callback":212,"hasNonce":213,"hasCapCheck":211,"file":199,"line":216},185,[],[219,224,227,231],{"tag":220,"callback":221,"file":222,"line":223},"total_views","simppovi_total_views_shortcode","includes\\shortcodes.php",58,{"tag":225,"callback":226,"file":222,"line":155},"simppovi-today-post-view","simppovi_today_post_view_shortcode",{"tag":228,"callback":229,"file":222,"line":230},"simppovi-total-post-view","simppovi_total_post_view_shortcode",122,{"tag":232,"callback":233,"file":222,"line":234},"simppovi-single-post-view","simppovi_single_post_view_shortcode",140,[],6,{"dangerousFunctions":238,"sqlUsage":239,"outputEscaping":255,"fileOperations":11,"externalRequests":11,"nonceChecks":241,"capabilityChecks":236,"bundledLibraries":264},[],{"prepared":240,"raw":241,"locations":242},38,5,[243,246,249,251,253],{"file":175,"line":244,"context":245},181,"$wpdb->query() with variable interpolation",{"file":247,"line":248,"context":245},"uninstall.php",23,{"file":247,"line":250,"context":245},39,{"file":247,"line":252,"context":245},46,{"file":247,"line":254,"context":245},62,{"escaped":256,"rawEcho":257,"locations":258},63,2,[259,262],{"file":206,"line":260,"context":261},197,"raw output",{"file":206,"line":263,"context":261},204,[],[266,284,292,311],{"entryPoint":267,"graph":268,"unsanitizedCount":11,"severity":283},"simppovi_handle_csv_export (includes\\view-logs.php:17)",{"nodes":269,"edges":281},[270,275],{"id":271,"type":272,"label":273,"file":206,"line":274},"n0","source","$_GET",31,{"id":276,"type":277,"label":278,"file":206,"line":279,"wp_function":280},"n1","sink","header() [Header Injection]",48,"header",[282],{"from":271,"to":276,"sanitized":213},"low",{"entryPoint":285,"graph":286,"unsanitizedCount":11,"severity":283},"\u003Cview-logs> (includes\\view-logs.php:0)",{"nodes":287,"edges":290},[288,289],{"id":271,"type":272,"label":273,"file":206,"line":274},{"id":276,"type":277,"label":278,"file":206,"line":279,"wp_function":280},[291],{"from":271,"to":276,"sanitized":213},{"entryPoint":293,"graph":294,"unsanitizedCount":47,"severity":310},"simppovi_ajax_track_post_view (includes\\simple-post-view-count.php:100)",{"nodes":295,"edges":307},[296,299,302],{"id":271,"type":272,"label":297,"file":199,"line":298},"$_POST",150,{"id":276,"type":300,"label":301,"file":199,"line":298},"transform","→ simppovi_get_views_in_range()",{"id":303,"type":277,"label":304,"file":199,"line":305,"wp_function":306},"n2","get_var() [SQLi]",210,"get_var",[308,309],{"from":271,"to":276,"sanitized":211},{"from":276,"to":303,"sanitized":211},"high",{"entryPoint":312,"graph":313,"unsanitizedCount":257,"severity":310},"\u003Csimple-post-view-count> (includes\\simple-post-view-count.php:0)",{"nodes":314,"edges":324},[315,318,319,320,322],{"id":271,"type":272,"label":316,"file":199,"line":317},"$_POST (x2)",110,{"id":276,"type":277,"label":304,"file":199,"line":305,"wp_function":306},{"id":303,"type":272,"label":316,"file":199,"line":298},{"id":321,"type":300,"label":301,"file":199,"line":298},"n3",{"id":323,"type":277,"label":304,"file":199,"line":305,"wp_function":306},"n4",[325,326,327],{"from":271,"to":276,"sanitized":213},{"from":303,"to":321,"sanitized":211},{"from":321,"to":323,"sanitized":211},{"summary":329,"deductions":330},"The \"simple-post-view-count\" plugin v1.0.0 exhibits a generally good security posture due to its strong adherence to best practices in code. The static analysis reveals a low attack surface with all identified entry points protected by authentication or permission checks. The code also demonstrates a high level of diligence in output escaping, with 97% of outputs properly handled, and a substantial majority of SQL queries utilizing prepared statements. The absence of dangerous functions, file operations, and external HTTP requests further strengthens its security.  \n\nHowever, the taint analysis flags two flows with unsanitized paths, indicating potential vulnerabilities. While no critical or high severity taint flows were explicitly reported, these unsanitized paths represent a significant concern and could be leveraged by attackers. The plugin's vulnerability history is currently clean, with no recorded CVEs, which is a positive sign.  \n\nIn conclusion, the plugin is built with good security awareness, evidenced by its comprehensive use of sanitization and authentication. The primary area of concern lies in the two identified unsanitized path flows, which require immediate investigation and remediation. Addressing these specific taint analysis findings will significantly improve the plugin's overall security resilience.",[331,334],{"reason":332,"points":333},"Taint flow with unsanitized path (High Severity)",15,{"reason":332,"points":333},"2026-03-17T07:07:56.991Z",{"wat":337,"direct":349},{"assetPaths":338,"generatorPatterns":342,"scriptPaths":343,"versionParams":345},[339,340,341],"\u002Fwp-content\u002Fplugins\u002Fsimple-post-view-count\u002Fincludes\u002Fcss\u002Fsimppovi-styles.css","\u002Fwp-content\u002Fplugins\u002Fsimple-post-view-count\u002Fincludes\u002Fjs\u002Fsimppovi-admin.js","\u002Fwp-content\u002Fplugins\u002Fsimple-post-view-count\u002Fincludes\u002Fjs\u002Fsimppovi-frontend.js",[],[344],"wp-color-picker",[346,347,348],"simppovi-styles?ver=","simppovi-admin?ver=","simppovi-frontend?ver=",{"cssClasses":350,"htmlComments":354,"htmlAttributes":355,"restEndpoints":357,"jsGlobals":358,"shortcodeOutput":361},[351,352,353],"simppovi-formated-post-view","formated_post_view","column-post_view",[],[356],"data-post_id",[],[359,360],"simppoviAdmin","simppoviAjax",[362],"[post_view]"]