[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLzubsSSUdXx6WZmdQjV8lYoYpRLVz2Lx9JKPBrRQl0M":3,"$fdNpaHwVq3t5uiVLmN4gdFuk_4GDiyiJCsU87QfyouVE":788,"$flcQTwn3zrtkrv1JF0xyJucWbpGRSY0K-vN0YRkV0Zeo":792},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"discovery_status":32,"vulnerabilities":33,"developer":75,"crawl_stats":39,"alternatives":83,"analysis":191,"fingerprints":766},"sniplets","Sniplets","1.4.5","John Godley","https:\u002F\u002Fprofiles.wordpress.org\u002Fjohnny5\u002F","\u003Cp>Sniplets is a generic text insertion plugin with support for an extensible processing framework. At it’s simplest this means you can dynamically replace text in your posts with text that may be defined elsewhere, or created by some other module. For example, you can use Sniplets to perform syntax highlighting of files, execute custom PHP code, insert data from a database, and perform all manner of other useful tasks within a standard interface.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Replace tags in a post with pre-defined text\u003C\u002Fli>\n\u003Cli>Apply processing functions to the pre-defined text to perform additional functionality\u003C\u002Fli>\n\u003Cli>Automatic insertion – data can be made to automatically appear in various places (header, footer, before post, after post, more tag, initialization)\u003C\u002Fli>\n\u003Cli>Custom processors can be written by the user\u003C\u002Fli>\n\u003Cli>Fully localized\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Sniplets is available in:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>English\u003C\u002Fli>\n\u003Cli>Belorussian thanks to Marcis Gasuns\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Documentation\u003C\u002Fh3>\n\u003Cp>Full documentation can be found on the \u003Ca href=\"http:\u002F\u002Furbangiraffe.com\u002Fplugins\u002Fsniplets\u002F\" rel=\"nofollow ugc\">Sniplets\u003C\u002Fa> page.\u003C\u002Fp>\n","Sniplets is a generic text insertion plugin.  Use it to manually or automatically insert data, PHP, syntax highlight, and almost anything else!",40,24740,56,4,"2012-04-29T14:29:00.000Z","2.9.2","2.7","",[20,21,22,23,24],"code","insert","page","php","post","http:\u002F\u002Furbangiraffe.com\u002Fplugins\u002Fsniplets\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsniplets.1.4.6.zip",81,3,0,"2008-02-26 00:00:00","2026-04-16T10:56:18.058Z","no_bundle",[34,52,64],{"id":35,"url_slug":36,"title":37,"description":38,"plugin_slug":4,"theme_slug":39,"affected_versions":40,"patched_in_version":41,"severity":42,"cvss_score":43,"cvss_vector":44,"vuln_type":45,"published_date":30,"updated_date":46,"references":47,"days_to_patch":49,"patch_diff_files":50,"patch_trac_url":39,"research_status":39,"research_verified":51,"research_rounds_completed":29,"research_plan":39,"research_summary":39,"research_vulnerable_code":39,"research_fix_diff":39,"research_exploit_outline":39,"research_model_used":39,"research_started_at":39,"research_completed_at":39,"research_error":39,"poc_status":39,"poc_video_id":39,"poc_summary":39,"poc_steps":39,"poc_tested_at":39,"poc_wp_version":39,"poc_php_version":39,"poc_playwright_script":39,"poc_exploit_code":39,"poc_has_trace":51,"poc_model_used":39,"poc_verification_depth":39},"CVE-2008-1061","sniplets-cross-site-scripting","Sniplets \u003C 1.2.3 - Cross-Site Scripting","Multiple cross-site scripting (XSS) vulnerabilities in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) text parameter to (a) warning.php, (b) notice.php, and (c) inset.php in view\u002Fsniplets\u002F, and possibly (d) modules\u002Fexecute.php; the (2) url parameter to (e) view\u002Fadmin\u002Fsubmenu.php; and the (3) page parameter to (f) view\u002Fadmin\u002Fpager.php.",null,"\u003C1.2.3","1.2.3","medium",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-01-22 19:56:02",[48],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fcf4d42a2-746b-4c23-b0fe-b66eafb76303?source=api-prod",5810,[],false,{"id":53,"url_slug":54,"title":55,"description":56,"plugin_slug":4,"theme_slug":39,"affected_versions":40,"patched_in_version":41,"severity":57,"cvss_score":58,"cvss_vector":59,"vuln_type":60,"published_date":30,"updated_date":46,"references":61,"days_to_patch":49,"patch_diff_files":63,"patch_trac_url":39,"research_status":39,"research_verified":51,"research_rounds_completed":29,"research_plan":39,"research_summary":39,"research_vulnerable_code":39,"research_fix_diff":39,"research_exploit_outline":39,"research_model_used":39,"research_started_at":39,"research_completed_at":39,"research_error":39,"poc_status":39,"poc_video_id":39,"poc_summary":39,"poc_steps":39,"poc_tested_at":39,"poc_wp_version":39,"poc_php_version":39,"poc_playwright_script":39,"poc_exploit_code":39,"poc_has_trace":51,"poc_model_used":39,"poc_verification_depth":39},"CVE-2008-1060","sniplets-remote-code-execution","Sniplets \u003C 1.2.3 - Remote Code Execution","Eval injection vulnerability in modules\u002Fexecute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via the text parameter.","critical",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","Improper Control of Generation of Code ('Code Injection')",[62],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fdfe41d6f-5026-4fcb-9ba0-a5180a03222c?source=api-prod",[],{"id":65,"url_slug":66,"title":67,"description":68,"plugin_slug":4,"theme_slug":39,"affected_versions":40,"patched_in_version":41,"severity":57,"cvss_score":58,"cvss_vector":59,"vuln_type":69,"published_date":70,"updated_date":46,"references":71,"days_to_patch":73,"patch_diff_files":74,"patch_trac_url":39,"research_status":39,"research_verified":51,"research_rounds_completed":29,"research_plan":39,"research_summary":39,"research_vulnerable_code":39,"research_fix_diff":39,"research_exploit_outline":39,"research_model_used":39,"research_started_at":39,"research_completed_at":39,"research_error":39,"poc_status":39,"poc_video_id":39,"poc_summary":39,"poc_steps":39,"poc_tested_at":39,"poc_wp_version":39,"poc_php_version":39,"poc_playwright_script":39,"poc_exploit_code":39,"poc_has_trace":51,"poc_model_used":39,"poc_verification_depth":39},"CVE-2008-1059","sniplets-remote-file-inclusion","Sniplets \u003C 1.2.3 - Remote File Inclusion","PHP remote file inclusion vulnerability in modules\u002Fsyntax_highlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter.","Improper Control of Filename for Include\u002FRequire Statement in PHP Program ('PHP Remote File Inclusion')","2008-02-25 00:00:00",[72],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F5e90704e-1a0c-448c-9139-542927cfa4f8?source=api-prod",5811,[],{"slug":76,"display_name":7,"profile_url":8,"plugin_count":77,"total_installs":78,"avg_security_score":79,"avg_patch_time_days":80,"trust_score":81,"computed_at":82},"johnny5",14,2215120,87,4069,70,"2026-05-20T02:53:12.001Z",[84,106,124,147,167],{"slug":85,"name":86,"version":87,"author":88,"author_profile":89,"description":90,"short_description":91,"active_installs":92,"downloaded":93,"rating":94,"num_ratings":95,"last_updated":96,"tested_up_to":97,"requires_at_least":98,"requires_php":18,"tags":99,"homepage":103,"download_link":104,"security_score":105,"vuln_count":29,"unpatched_count":29,"last_vuln_date":39,"fetched_at":31},"page-in-page","Page In Page","2.0.3","Cyril","https:\u002F\u002Fprofiles.wordpress.org\u002Ftcyr\u002F","\u003Cp>The page-in-page plugin has a very simple mission:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>Insert posts and pages within each other with no stress.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Bring your Facebook Page posts to your WP pages.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Show your Tweets in your WP blog.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>It provides possibilities to use both widgets and shortcodes. If using a widget you are only able to include pages within pages but if using the shortcode, you are able to able to insert posts\u002Fpages\u003Cbr \u002F>\nwithin other posts\u002Fpages.\u003C\u002Fp>\n\u003Cp>For Facebook Page posts, only the first 25 most recent posts are returned and for Tweets, only the first 20 most recent tweets are returned. In future releases maybe we will include pagination for social feeds.\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Ch4>Using the widget\u003C\u002Fh4>\n\u003Cp>The settings in the widget include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cem>Title\u003C\u002Fem>: Widget Title. This title will be shown as the page’s title if ‘Show page title’ option is not selected.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cem>Page\u003C\u002Fem>: Select the page that will be included when widget is called.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cem>Show page title\u003C\u002Fem>: If checked (selected) then the page title will be shown and the ‘Widget Title’ ignored.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cem>Show title as link\u003C\u002Fem>: If checked (selected) the title will be displayed as a link to the page.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cem>Show page content\u003C\u002Fem>: If checked (selected) then the page content will be included in the output.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cem>Show featured image\u003C\u002Fem>: If checked (selected) then the featured image will be included in the output.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cem>Show featured image as link\u003C\u002Fem> : If checked (selected) then the featured image will be included and linked to page in the output.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cem>Output Template\u003C\u002Fem>: Insert an HTML template that will be used to display content of the widget. If not provided the default template will be used\u003C\u002Fp>\n\u003Cp>Slugs that can be used in your template are \u003Cstrong>${page_title}\u003C\u002Fstrong>, \u003Cstrong>${page_content}\u003C\u002Fstrong>, \u003Cstrong>${page_link}\u003C\u002Fstrong>, \u003Cstrong>${page_image}\u003C\u002Fstrong> . Each are self explanatory of what they will be replaced with.\u003C\u002Fp>\n\u003Cp>The default output template is\u003C\u002Fp>\n\u003Cp>\u003Cdiv class=”twl-page-in-page”>\u003C\u002Fp>\n\u003Cp>\u003Cspan class=”twl-page-in-page-title”>${page_title}\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>\u003Cdiv class=”twl-page-in-page-content”>\u003C\u002Fp>\n\u003Cp>\u003Cdiv class=”twl-page-in-page-image”>\u003Cimg src=”${page_image}” \u002F>\u003C\u002Fdiv>\u003C\u002Fp>\n\u003Cp>\u003Cdiv class=”twl-page-in-page-text”>${page_content}\u003C\u002Fdiv>\u003C\u002Fp>\n\u003Cp>\u003C\u002Fdiv>\u003C\u002Fp>\n\u003Cp>\u003C\u002Fdiv>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Using shortcode\u003C\u002Fh4>\n\u003Cp>With shortcodes, you can insert posts in posts, pages in pages, posts in pages and vice versa.\u003C\u002Fp>\n\u003Cp>Settings that can be used in a shortcode are:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>id : The ID of the page\u002Fpost you want to insert\u003C\u002Fli>\n\u003Cli>show_page_title: should the page title be displayed? (Can be 1 for true or 0 for false. Defaults to 1)\u003C\u002Fli>\n\u003Cli>show_page_content: should the page title be displayed? (Can be 1 for true or 0 for false. Defaults to 1)\u003C\u002Fli>\n\u003Cli>show_title_as_link: Can be 1 for true or 0 for false. Defaults to 0. If set to 1, the page title will be displayed as a link to the page\u002Fpost\u003C\u002Fli>\n\u003Cli>show_featured_image: Can be 1 for true or 0 for false. Defaults to 0. If set to 1, the page’s featured image will be included\u003C\u002Fli>\n\u003Cli>show_featured_image_as_ink: Can be 1 for true or 0 for false. Defaults to 0. If set to 1, the page’s featured image will be included as a link\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Note that\u003C\u002Fstrong> if you are specifying a template in the shortcode, then the above settings will be ignored and the slugs you insert in your template will be replaced with appropriate content.\u003Cbr \u002F>\nSee a template example and allowed slugs above.\u003C\u002Fp>\n\u003Cp>To insert a shortcode you can do one of the following:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>To insert without specifying a template you can simply use\u003C\u002Fp>\n\u003Cp>[twl_page_in id=123] OR [twl_page_in id=123 show_page_title=1].\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>To insert your shortcode specifying a template for page\u002Fpost’s title and content use the following. You can include other supported slugs mentioned above\u003C\u002Fp>\n\u003Cp>[twl_page_in id=123 show_page_title=1]\u003C\u002Fp>\n\u003Cp>\u003Ch3 class=”my-awesome-title-class”>${page_title}\u003C\u002Fh3>\u003C\u002Fp>\n\u003Cp>\u003Cdiv class=”my-awesome-content-class”>${page_content}\u003C\u002Fdiv>\u003C\u002Fp>\n\u003Cp>[\u002Ftwl_page_in]\u003C\u002Fp>\n\u003Cp>The template specified in the [twl_page_in] tag will be used to display the page\u002Fpost with the specified id when inserting it. The template is optional and if not specified then the default template will be used.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>IMPORTANT!!!\u003C\u002Fstrong> If you specify a template, you MUST have the slugs you want to be shown else you might get unexpected results\u003C\u002Fp>\n\u003Cp>\u003Cstrong>IMPORTANT!!!\u003C\u002Fstrong> This template has to be defined when Editor is in ‘Visual’ mode and NOT in ‘Text’ mode (see screen shot). If you do not respect this you might have unexpected results because HTML tags might not be parsed properly.\u003Cbr \u002F>\nHowever if you have escaping with magic quotes off on your server then template should be defined when editor is in ‘Text’ mode.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>To insert posts from your Facebook page, Go to Admin > Settings > Page In Page Plugin and insert your facebook application credentials.\u003Cbr \u002F>\nNext edit the page where you want the posts to appear and insert the short code \u003Cstrong>[twl_page_in_fb]\u003C\u002Fstrong>. See screenshot 3 for output.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>To insert tweets from your twitter account, Go to Admin > Settings > Page In Page Plugin and insert your twitter application credentials.\u003Cbr \u002F>\nNext edit the page where you want the posts to appear and insert the short code \u003Cstrong>[twl_page_in_tw]\u003C\u002Fstrong>. See screenshot 4 for output.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>What Next?\u003C\u002Fh3>\n\u003Cp>Find a bug or got any worries? well never mind just send an email to cyril.tata@hotmail.com.\u003C\u002Fp>\n\u003Cp>Future releases: Integrate same functionality across multi sites and pagination for social page feeds.\u003C\u002Fp>\n\u003Ch3>2.0.3\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Remove non-GPL compatible jquery isotope library\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>2.0.2\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Important\u003C\u002Fstrong> In the widget, the “title template” and “content template” fields have been unified to “output template”. Template specification in editor remains unchanged but more slugs added.\u003C\u002Fli>\n\u003Cli>More settings added\n\u003Cul>\n\u003Cli>show page title (shortcode parameter: show_page_title. Can be 1 or 0)\u003C\u002Fli>\n\u003Cli>show page title as link (shortcode parameter: show_title_as_link. Can be 1 or 0)\u003C\u002Fli>\n\u003Cli>show page content (shortcode parameter: show_page_content. Can be 1 or 0)\u003C\u002Fli>\n\u003Cli>show featured image (shortcode parameter: show_featured_image. Can be 1 or 0)\u003C\u002Fli>\n\u003Cli>show featured image as link (shortcode parameter: show_featured_image_as_link. Can be 1 or 0)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>If an output template is specified, then the settings above are ignored so all necessary slugs should be specified in output template.\u003C\u002Fli>\n\u003Cli>Slugs to be used in templates: \u003Cstrong>${page_title}\u003C\u002Fstrong>, \u003Cstrong>${page_content}\u003C\u002Fstrong>, \u003Cstrong>${page_link}\u003C\u002Fstrong>, \u003Cstrong>${page_image}\u003C\u002Fstrong> .\u003C\u002Fli>\n\u003Cli>Usage of namespace for twitter SDK removed due to complaints for PHP \u003C 5.3 (this change is only for those who have not been able to use the twitter shortcode)\u003C\u002Fli>\n\u003Cli>Some code re-factoring\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>2.0.1\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>code re-factoring\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>2.0\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Add possibility to include \u003Cstrong>posts\u003C\u002Fstrong> from a facebook page.\u003C\u002Fli>\n\u003Cli>Add possibility to include tweets from a twitter timeline.\u003C\u002Fli>\n\u003Cli>Include new shortcodes: \u003Cstrong>[twl_page_in_wp]\u003C\u002Fstrong> for inserting a WordPress page, \u003Cstrong>[twl_page_in_fb]\u003C\u002Fstrong> for inserting Facebook posts and \u003Cstrong>[twl_page_in_tw]\u003C\u002Fstrong> for inserting user tweets.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>1.0\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Initial version of plugin\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin helps you insert a post or page from the WP posts database table within another, bring your Facebook posts and Twitter feeds to your blog.",200,7715,72,5,"2014-02-24T11:48:00.000Z","3.7.41","3.0.1",[100,22,24,101,102],"insert-post-in-page","shortcode","widget","http:\u002F\u002Fcyriltata.blogspot.com\u002F2013\u002F11\u002Fwordpress-plugin-page-in-page.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpage-in-page.2.0.3.zip",85,{"slug":107,"name":108,"version":109,"author":110,"author_profile":111,"description":112,"short_description":113,"active_installs":114,"downloaded":115,"rating":29,"num_ratings":29,"last_updated":116,"tested_up_to":117,"requires_at_least":118,"requires_php":18,"tags":119,"homepage":122,"download_link":123,"security_score":105,"vuln_count":29,"unpatched_count":29,"last_vuln_date":39,"fetched_at":31},"phpeval","PHPEval","1.0.2","Carsten Jonstrup","https:\u002F\u002Fprofiles.wordpress.org\u002Fnc6400\u002F","\u003Cp>The PHPEval Plugin is a WordPress plugin which allows users to write php code inside of their pages. Embedded php code will be executed when the post is shown. In doing so, the plugin offers the possibility to utilize dynamic content inside of posts. In contrast to other plugins with the same aim, this on is focus on security.  Here’s a features list:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easy to setup and configure\u003C\u002Fli>\n\u003Cli>Simple syntax\u003C\u002Fli>\n\u003Cli>Central administration of code\u003C\u002Fli>\n\u003Cli>More coming up soon!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>YES, I do consider feature requests, and that is what makes this plugin work. The discussions go here: \u003Ca href=\"http:\u002F\u002Fcode.google.com\u002Fp\u002Fphpeval\u002F\" title=\"Technical Support\" rel=\"nofollow ugc\">Technical Support\u003C\u002Fa>\u003C\u002Fp>\n","The PHPEval Plugin is a Wordpress plugin which allows users to write php code inside of their pages. Embedded php code will be executed when the post  &hellip;",10,2269,"2012-06-18T10:41:00.000Z","3.4.2","2.9",[20,120,23,24,121],"pages","posts","http:\u002F\u002Fcode.google.com\u002Fp\u002Fphpeval\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fphpeval.1.0.2.zip",{"slug":125,"name":126,"version":6,"author":127,"author_profile":128,"description":129,"short_description":130,"active_installs":131,"downloaded":132,"rating":133,"num_ratings":134,"last_updated":135,"tested_up_to":136,"requires_at_least":18,"requires_php":18,"tags":137,"homepage":143,"download_link":144,"security_score":145,"vuln_count":28,"unpatched_count":29,"last_vuln_date":146,"fetched_at":31},"insert-php-code-snippet","Insert PHP Code Snippet","f1logic","https:\u002F\u002Fprofiles.wordpress.org\u002Ff1logic\u002F","\u003Cp>A quicklook into Insert PHP Code Snippet\u003C\u002Fp>\n\u003Cpre>\u003Ccode>★ Convert PHP snippets to shortcodes\n★ Insert PHP code easily using shortcode\n★ Support for PHP snippet shortcodes in widgets\n★ Dropdown menu in TinyMCE editor to pick snippet shortcodes easily\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>Features in Detail\u003C\u002Fh4>\n\u003Cp>Insert PHP Code Snippet allows you to create shortcodes corresponding to PHP code snippets. You can create a shortcode corresponding to any random PHP code such as ad codes, login validation etc. and use the same in your posts, pages or widgets.\u003C\u002Fp>\n\u003Cp>The shortcodes generated using the plugin are easily available as a dropdown in the standard wordpress content editor as well as in widget settings, thereby giving you ease of integrating your PHP snippets with your posts and pages.\u003C\u002Fp>\n\u003Ch4>About\u003C\u002Fh4>\n\u003Cp>Insert PHP Code Snippet is developed and maintained by \u003Ca href=\"http:\u002F\u002Fxyzscripts.com\u002F\" title=\"xyzscripts.com\" rel=\"nofollow ugc\">XYZScripts\u003C\u002Fa>. For any support, you may \u003Ca href=\"http:\u002F\u002Fxyzscripts.com\u002Fsupport\u002F\" title=\"XYZScripts Support\" rel=\"nofollow ugc\">contact us\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>★ \u003Ca href=\"http:\u002F\u002Fhelp.xyzscripts.com\u002Fdocs\u002Finsert-php-code-snippet\u002Fuser-guide\" rel=\"nofollow ugc\">Insert PHP Code Snippet User Guide\u003C\u002Fa>\u003Cbr \u002F>\n★ \u003Ca href=\"http:\u002F\u002Fhelp.xyzscripts.com\u002Fdocs\u002Finsert-php-code-snippet\u002Ffaq\u002F\" rel=\"nofollow ugc\">Insert PHP Code Snippet FAQ\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>More Information\u003C\u002Fh3>\n\u003Cp>★ \u003Ca href=\"http:\u002F\u002Fhelp.xyzscripts.com\u002Fdocs\u002Finsert-php-code-snippet\u002Fuser-guide\" rel=\"nofollow ugc\">Insert PHP Code Snippet User Guide\u003C\u002Fa>\u003Cbr \u002F>\n★ \u003Ca href=\"http:\u002F\u002Fhelp.xyzscripts.com\u002Fdocs\u002Finsert-php-code-snippet\u002Ffaq\u002F\" rel=\"nofollow ugc\">Insert PHP Code Snippet FAQ\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Troubleshooting\u003C\u002Fh4>\n\u003Cp>Please read the FAQ first if you are having problems.\u003C\u002Fp>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cpre>\u003Ccode>WordPress 5.0+\nPHP 7+\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>Feedback\u003C\u002Fh4>\n\u003Cp>We would like to receive your feedback and suggestions. You may submit them at our \u003Ca href=\"http:\u002F\u002Fxyzscripts.com\u002Fmembers\u002Fsupport\u002F\" title=\"XYZScripts Support\" rel=\"nofollow ugc\">support desk\u003C\u002Fa>.\u003C\u002Fp>\n","Add PHP code to your pages and posts easily using shortcodes.",100000,1579326,98,699,"2026-03-16T11:15:00.000Z","6.9.4",[138,139,140,141,142],"add-php","insert-php","insert-php-code","insert-php-snippet","insert-php-tag","http:\u002F\u002Fxyzscripts.com\u002Fwordpress-plugins\u002Finsert-php-code-snippet\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Finsert-php-code-snippet.1.4.5.zip",97,"2025-10-27 00:00:00",{"slug":148,"name":149,"version":150,"author":151,"author_profile":152,"description":153,"short_description":154,"active_installs":155,"downloaded":156,"rating":157,"num_ratings":158,"last_updated":159,"tested_up_to":160,"requires_at_least":161,"requires_php":18,"tags":162,"homepage":164,"download_link":165,"security_score":166,"vuln_count":29,"unpatched_count":29,"last_vuln_date":39,"fetched_at":31},"display-posts-shortcode","Display Posts – Easy lists, grids, navigation, and more","3.0.3","Bill Erickson","https:\u002F\u002Fprofiles.wordpress.org\u002Fbillerickson\u002F","\u003Cp>Display Posts allows you easily list content from all across your website. Start by adding this shortcode in the content editor to display a list of your most recent posts:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[display-posts]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Filter by Category\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>To only show posts within a certain category, use the category parameter:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[display-posts category=\"news\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Display as Post Grid\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You can create a great looking, column-based grid of posts with a bit of styling. \u003Ca href=\"https:\u002F\u002Fdisplayposts.com\u002F2019\u002F01\u002F04\u002Fpost-grid-styling\u002F\" rel=\"nofollow ugc\">Here’s how!\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>List Popular Posts\u003C\u002Fstrong>\u003Cbr \u002F>\nYou can highlight your popular content in multiple ways. If you want to feature the posts with the most comments, use:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[display-posts orderby=\"comment_count\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>You can also list \u003Ca href=\"https:\u002F\u002Fdisplayposts.com\u002F2019\u002F01\u002F04\u002Fmost-popular-posts-by-social-shares\u002F\" rel=\"nofollow ugc\">most popular posts by social shares\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Include thumbnails, excerpts, and more\u003C\u002Fstrong>\u003Cbr \u002F>\nThe \u003Ca href=\"https:\u002F\u002Fdisplayposts.com\u002Fdocs\u002Fparameters\u002F#display-parameters\" rel=\"nofollow ugc\">display parameters\u003C\u002Fa> let you control what information is displayed for each post. To include an image and summary, use:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[display-posts include_excerpt=\"true\" image_size=\"thumbnail\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>You can use any image size added by WordPress (thumbnail, medium, medium_large, large) OR any custom image size added by your theme or other plugins.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Sort the list however you like\u003C\u002Fstrong>\u003Cbr \u002F>\nBy default the listing will list the newest content first, but you can order by title, menu order, relevance, content type, metadata, and more.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>List upcoming events\u003C\u002Fstrong>\u003Cbr \u002F>\nYou can easily list upcoming events from any event calendar. Each plugin will require slightly different code.\u003C\u002Fp>\n\u003Cp>Here are \u003Ca href=\"https:\u002F\u002Fdisplayposts.com\u002Ftag\u002Fevents\u002F\" rel=\"nofollow ugc\">tutorials for popular event calendar plugins\u003C\u002Fa>. If your plugin is not listed here, submit a support request and I’ll add it!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Tutorials\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fdisplayposts.com\u002Ftutorials\u002F\" rel=\"nofollow ugc\">Our tutorials\u003C\u002Fa> cover common customization requests, and are updated often.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Full Documentation\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdisplayposts.com\u002Fdocs\u002Fparameters\u002F#query-parameters\" rel=\"nofollow ugc\">Query parameters\u003C\u002Fa> for customizing which posts are listed (filter by category, tag, date…)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdisplayposts.com\u002Fdocs\u002Fparameters\u002F#display-parameters\" rel=\"nofollow ugc\">Display parameters\u003C\u002Fa> determine how the posts appear (title, excerpt, image…)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdisplayposts.com\u002F2019\u002F01\u002F04\u002Fuse-template-parts-to-match-your-themes-styling\u002F\" rel=\"nofollow ugc\">Template parts\u003C\u002Fa> for Display Posts to perfectly match your theme’s post listings\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdisplayposts.com\u002Fdocs\u002Fthe-output-filter\u002F\" rel=\"nofollow ugc\">Output filter\u003C\u002Fa> for complete control over how the listing looks on your site\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdisplayposts.com\u002Fdocs\u002Fparameters\u002F#display-parameters\" rel=\"nofollow ugc\">Filters\u003C\u002Fa> for even more powerful customizations for developers\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Extensions\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fbillerickson\u002FDisplay-Posts-Pagination\" rel=\"nofollow ugc\">Display Posts – Pagination\u003C\u002Fa> – Allow results of Display Posts to be paginated\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdisplay-posts-date-view\u002F\" rel=\"ugc\">Display Posts – Date View\u003C\u002Fa> – Lets you break your content down by month or year.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fbillerickson\u002FDisplay-Posts-Alpha-View\" rel=\"nofollow ugc\">Display Posts – Alpha View\u003C\u002Fa> – Display an alphabetical listing of your content, broken down by letter\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fbillerickson\u002FDisplay-Posts-Transient-Cache\" rel=\"nofollow ugc\">Display Posts – Transient Cache\u003C\u002Fa> – Cache the output using transients\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fbillerickson\u002Fdps-coauthor-addon\" rel=\"nofollow ugc\">Co-Authors Plus Addon\u003C\u002Fa> – multiple authors on posts\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fbillerickson\u002Fdps-columns-extension\" rel=\"nofollow ugc\">Columns Extension\u003C\u002Fa> – display posts in columns\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fbillerickson\u002FDPS-Exclude-Sticky\" rel=\"nofollow ugc\">DPS Exclude Sticky\u003C\u002Fa> – exclude sticky posts unless specifically requested\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fshazahm1\u002FDisplay-Posts-Shortcode-Pinch-Zoomer\" rel=\"nofollow ugc\">DPS Pinch Zoomer\u003C\u002Fa> – adds support pinch zooming post images on mobile devices and mouse wheel zooming on desktops\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fshazahm1\u002FDisplay-Posts-Shortcode-Remote\" rel=\"nofollow ugc\">Display Posts Shortcode Remote\u003C\u002Fa> – display posts from a remote WordPress site utilizing the WP REST API.\u003C\u002Fli>\n\u003C\u002Ful>\n","Add a listing of content on your website using a simple shortcode. Filter the results by category, author, and more.",80000,1254585,96,164,"2024-10-14T16:53:00.000Z","6.6.5","3.0",[22,120,121,163,101],"query","https:\u002F\u002Fdisplayposts.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdisplay-posts-shortcode.3.0.3.zip",92,{"slug":139,"name":168,"version":169,"author":170,"author_profile":171,"description":172,"short_description":173,"active_installs":174,"downloaded":175,"rating":176,"num_ratings":177,"last_updated":178,"tested_up_to":136,"requires_at_least":179,"requires_php":180,"tags":181,"homepage":186,"download_link":187,"security_score":188,"vuln_count":189,"unpatched_count":29,"last_vuln_date":190,"fetched_at":31},"Woody Code Snippets – Insert PHP, CSS, JS, and Header\u002FFooter Scripts","2.7.2","Themeisle","https:\u002F\u002Fprofiles.wordpress.org\u002Fthemeisle\u002F","\u003Cp>Woody Code Snippets is a WordPress plugin that helps you insert code into your site without editing theme files.\u003C\u002Fp>\n\u003Cp>Many WordPress users still add PHP, JavaScript, CSS, tracking pixels, or ad scripts directly into functions.php, header.php, or footer.php. This approach breaks easily when themes update and becomes hard to manage as your site grows.\u003C\u002Fp>\n\u003Cp>Woody solves this by giving you a centralized code snippet manager where you can safely add header scripts, footer scripts, PHP snippets, custom CSS, JavaScript, and HTML from the WordPress admin.\u003C\u002Fp>\n\u003Cp>You can use Woody as a header and footer code manager, a PHP snippet plugin, or a way to reuse content and scripts across your site using shortcodes or automatic insertion.\u003C\u002Fp>\n\u003Cp>Each snippet can be enabled or disabled instantly, placed in specific locations like before content or after paragraphs, and shown only when certain conditions are met.\u003C\u002Fp>\n\u003Ch3>Quick Links\u003C\u002Fh3>\n\u003Cp>📘 \u003Ca href=\"https:\u002F\u002Fdocs.themeisle.com\u002Fcollection\u002F2410-woody-code-snippets\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa> – Complete setup and configuration guide\u003C\u002Fp>\n\u003Cp>💬 \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Finsert-php\u002F\" rel=\"ugc\">Support Forum\u003C\u002Fa> – Community help and expert support\u003C\u002Fp>\n\u003Cp>⭐ \u003Ca href=\"https:\u002F\u002Fwoodysnippet.com\u002Fupgrade\u002F?utm_source=wordpressorg&utm_medium=readme&utm_campaign=woody_quicklinks\" rel=\"nofollow ugc\">Go Pro\u003C\u002Fa> – Unlock advanced features and priority support\u003C\u002Fp>\n\u003Ch3>What Problems Does Woody Solve?\u003C\u002Fh3>\n\u003Cp>Woody is built for real WordPress workflows. It helps you:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Insert code into headers and footers without editing theme files\u003C\u002Fli>\n\u003Cli>Add analytics scripts, tracking pixels, and ad code safely\u003C\u002Fli>\n\u003Cli>Manage PHP snippets without touching functions.php\u003C\u002Fli>\n\u003Cli>Reuse scripts and content across pages using shortcodes\u003C\u002Fli>\n\u003Cli>Control where code runs using placement rules and conditions\u003C\u002Fli>\n\u003Cli>Enable, disable, or roll back snippets without breaking your site\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Whether you are building client sites, running marketing experiments, or maintaining your own project, Woody gives you control without unnecessary complexity.\u003C\u002Fp>\n\u003Ch3>How It Works\u003C\u002Fh3>\n\u003Cp>Woody lets you create code snippets and control where and when they run, all from the WordPress admin.\u003C\u002Fp>\n\u003Ch4>Example #1\u003C\u002Fh4>\n\u003Cp>Create a JavaScript snippet and add your analytics or tracking code.\u003Cbr \u002F>\nPlace it in the site header and add a condition to exclude administrators so your own visits are not tracked.\u003C\u002Fp>\n\u003Ch4>Example #2\u003C\u002Fh4>\n\u003Cp>Create a text snippet with reusable content or a shortcode.\u003Cbr \u002F>\nAdd conditions to show it only to logged-in users, then insert it anywhere using the snippet shortcode or automatic placement rules.\u003C\u002Fp>\n\u003Cp>This makes it easy to manage repeated logic and content without editing theme files.\u003C\u002Fp>\n\u003Ch3>Who Should Use Woody Code Snippets\u003C\u002Fh3>\n\u003Cp>Woody is designed for:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Developers who want a structured way to manage custom code\u003C\u002Fli>\n\u003Cli>Marketers adding analytics, ads, and tracking scripts\u003C\u002Fli>\n\u003Cli>Solopreneurs who want flexibility without editing theme files\u003C\u002Fli>\n\u003Cli>Agencies managing multiple sites and shared snippets\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you regularly need to insert code into WordPress, Woody fits naturally into your workflow.\u003C\u002Fp>\n\u003Ch3>Supported Snippet Types\u003C\u002Fh3>\n\u003Cp>Woody supports multiple snippet types, so you can manage all custom code in one place. You can create:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>PHP snippets\u003C\u002Fstrong> for functions, hooks, classes, and global variables\u003C\u002Fli>\n\u003Cli>\u003Cstrong>JavaScript snippets\u003C\u002Fstrong> for analytics, integrations, and interactive features\u003C\u002Fli>\n\u003Cli>\u003Cstrong>CSS snippets\u003C\u002Fstrong> to add custom styles without editing theme files\u003C\u002Fli>\n\u003Cli>\u003Cstrong>HTML snippets\u003C\u002Fstrong> for markup and layout elements\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Text snippets\u003C\u002Fstrong> using the WordPress editor for reusable content\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Ad snippets\u003C\u002Fstrong> for ads and banners\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Universal snippets\u003C\u002Fstrong> that combine PHP, HTML, CSS, and JavaScript\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Why do you need this plugin?\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Insert Google AdSense Ads, Amazon Native Shopping Contextual Ads, Yandex Direct Ads, Media.net on your website.\u003C\u002Fli>\n\u003Cli>Insert Google Analytic Tracking code, Yandex Metrika Tracking Code, Yandex Counter to Header, Footer.\u003C\u002Fli>\n\u003Cli>Insert PHP Code Snippets and execute on your website. Register PHP functions, classes, global variables everywhere.\u003C\u002Fli>\n\u003Cli>Insert Social media widgets, add any external resources widgets.\u003C\u002Fli>\n\u003Cli>Insert Facebook Pixels, Facebook Scripts, Facebook og:image Tag, Google Conversion Pixels, Vk Pixels.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Header and Footer Code Management\u003C\u002Fh3>\n\u003Cp>Woody works as a full header and footer code manager.\u003C\u002Fp>\n\u003Cp>You can insert snippets:\u003Cbr \u002F>\n– Into the site header before the closing  tag\u003Cbr \u002F>\n– Into the site footer before the closing  tag\u003C\u002Fp>\n\u003Cp>Common examples include analytics scripts, tracking pixels, verification tags, and global JavaScript or CSS.\u003C\u002Fp>\n\u003Ch3>Advanced Placement Options\u003C\u002Fh3>\n\u003Cp>Beyond headers and footers, Woody lets you insert snippets into specific locations.\u003C\u002Fp>\n\u003Cp>You can place code:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Before or after post or page content  \u003C\u002Fli>\n\u003Cli>Before or after a specific paragraph  \u003C\u002Fli>\n\u003Cli>Before or after a post  \u003C\u002Fli>\n\u003Cli>Inside archives, categories, and taxonomy pages  \u003C\u002Fli>\n\u003Cli>Between posts on archive pages  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>WooCommerce Pages\u003C\u002Fh4>\n\u003Cp>Woody supports automatic snippet placement on WooCommerce pages.\u003C\u002Fp>\n\u003Cp>You can insert snippets:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Before or after the product list  \u003C\u002Fli>\n\u003Cli>Before or after a single product  \u003C\u002Fli>\n\u003Cli>Before or after the single product summary  \u003C\u002Fli>\n\u003Cli>After the product title, price, or excerpt  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Common use cases include conversion tracking, promotional banners, custom JavaScript, and trust notices.\u003C\u002Fp>\n\u003Ch3>Shortcodes and Reusable Content\u003C\u002Fh3>\n\u003Cp>Woody supports shortcodes so you can insert snippets exactly where you need them. You can place snippets inside posts, pages, widgets, and page builders.\u003C\u002Fp>\n\u003Cp>With \u003Ca href=\"https:\u002F\u002Fwoodysnippet.com\u002Fupgrade\u002F?utm_source=wordpressorg&utm_medium=readme&utm_campaign=woody_shortcode\" rel=\"nofollow ugc\">Pro\u003C\u002Fa>, you can define custom shortcode names that are readable and portable across sites.\u003C\u002Fp>\n\u003Ch3>Conditional Logic for Code Snippets\u003C\u002Fh3>\n\u003Cp>Woody allows you to control when a snippet is displayed.\u003C\u002Fp>\n\u003Cp>[FREE] Available in the free version:\u003Cbr \u002F>\n– User role and registration date\u003Cbr \u002F>\n– Page, post type, or taxonomy\u003Cbr \u002F>\n– Referrer or cookie value\u003C\u002Fp>\n\u003Cp>[PRO] Advanced conditions available in \u003Ca href=\"https:\u002F\u002Fwoodysnippet.com\u002Fupgrade\u002F?utm_source=wordpressorg&utm_medium=readme&utm_campaign=woody_conditions\" rel=\"nofollow ugc\">Pro\u003C\u002Fa>:\u003Cbr \u002F>\n– Device type, browser, and operating system\u003Cbr \u002F>\n– JavaScript availability or ad blocker detection\u003Cbr \u002F>\n– User country, visit depth, time of day, and total visits\u003C\u002Fp>\n\u003Cp>Conditions can be combined using AND and OR logic.\u003C\u002Fp>\n\u003Cp>Unlock advanced conditions with \u003Ca href=\"https:\u002F\u002Fwoodysnippet.com\u002Fupgrade\u002F?utm_source=wordpressorg&utm_medium=readme&utm_campaign=woody_conditions\" rel=\"nofollow ugc\">Woody Pro\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Snippet Management and Organization\u003C\u002Fh3>\n\u003Cp>Woody includes features to keep snippets organized and easy to manage.\u003C\u002Fp>\n\u003Cp>You can:\u003Cbr \u002F>\n– Enable or disable snippets instantly\u003Cbr \u002F>\n– Control execution order using priorities\u003Cbr \u002F>\n– Tag and clone snippets\u003Cbr \u002F>\n– Import and export snippets between sites\u003C\u002Fp>\n\u003Ch3>Code Revisions and Rollback [PRO]\u003C\u002Fh3>\n\u003Cp>With \u003Ca href=\"https:\u002F\u002Fwoodysnippet.com\u002Fupgrade\u002F?utm_source=wordpressorg&utm_medium=readme&utm_campaign=woody_restore\" rel=\"nofollow ugc\">Pro\u003C\u002Fa>, Woody automatically saves snippet revisions. You can view previous versions, compare changes, and restore earlier revisions if something goes wrong.\u003C\u002Fp>\n\u003Cp>This adds an extra layer of safety when working with custom code.\u003C\u002Fp>\n\u003Ch3>Cloud Templates and Sync [PRO]\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwoodysnippet.com\u002Fupgrade\u002F?utm_source=wordpressorg&utm_medium=readme&utm_campaign=woody_cloud\" rel=\"nofollow ugc\">Woody Pro\u003C\u002Fa> includes cloud-based snippet templates.\u003C\u002Fp>\n\u003Cp>You can save snippets as templates and reuse them across multiple sites, which is especially useful for agencies and developers managing repeated setups.\u003C\u002Fp>\n\u003Ch3>Settings and Developer Options\u003C\u002Fh3>\n\u003Cp>Woody includes advanced settings for fine-grained control.\u003C\u002Fp>\n\u003Cp>You can:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Preserve HTML entities without automatic conversion  \u003C\u002Fli>\n\u003Cli>Execute shortcodes inside snippets  \u003C\u002Fli>\n\u003Cli>Enable error email notifications  \u003C\u002Fli>\n\u003Cli>Automatically activate snippets on save  \u003C\u002Fli>\n\u003Cli>Fully remove plugin data on uninstall  \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Code Editor\u003C\u002Fh4>\n\u003Cp>The built-in editor includes:\u003Cbr \u002F>\n– Syntax highlighting and line numbers\u003Cbr \u002F>\n– Configurable indentation and tab size\u003Cbr \u002F>\n– Optional line wrapping\u003Cbr \u002F>\n– Automatic bracket and quote closing\u003Cbr \u002F>\n– Highlighting of matching variables and functions\u003C\u002Fp>\n\u003Ch3>Use This Plugin Responsibly\u003C\u002Fh3>\n\u003Cp>Woody allows you to run custom PHP, JavaScript, and CSS on your site. Always make sure you understand the code you add. Using unverified or outdated scripts may affect site security or stability. On multisite installations, only trusted administrators should have access to snippet creation.\u003C\u002Fp>\n\u003Cp>Woody includes safeguards such as snippet disabling, revisions, and error notifications, but it cannot validate third-party code you choose to run.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>Need help? Open a new thread in the WordPress \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Finsert-php\u002F\" rel=\"ugc\">support forum\u003C\u002Fa>, and we will be happy to assist.\u003C\u002Fp>\n\u003Ch3>Documentation\u003C\u002Fh3>\n\u003Cp>Learn how to make the most of Woody with our detailed and user-friendly \u003Ca href=\"https:\u002F\u002Fdocs.themeisle.com\u002Fcollection\u002F2410-woody-code-snippets\" rel=\"nofollow ugc\">documentation\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Woody is backed by \u003Ca href=\"https:\u002F\u002Fthemeisle.com\u002F?utm_source=wordpressorg&utm_medium=readme&utm_campaign=woody\" rel=\"nofollow ugc\">Themeisle\u003C\u002Fa>, trusted by over 1 million WordPress users worldwide.\u003C\u002Fp>\n","Insert PHP, JavaScript, CSS, HTML, ads, and tracking code into WordPress headers, footers, pages, and content using conditional logic, without editing &hellip;",60000,1718294,90,221,"2026-01-27T15:40:00.000Z","5.6","7.0",[182,183,184,139,185],"code-snippets","custom-code","header-footer-scripts","snippet","https:\u002F\u002Fwoodysnippet.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Finsert-php.2.7.2.zip",82,8,"2026-03-23 00:00:00",{"attackSurface":192,"codeSignals":288,"taintFlows":665,"riskAssessment":750,"analyzedAt":765},{"hooks":193,"ajaxHandlers":284,"restRoutes":285,"shortcodes":286,"cronEvents":287,"entryPointCount":29,"unprotectedCount":29},[194,200,204,208,212,216,219,222,226,230,234,236,240,242,245,248,251,255,259,262,265,268,271,274,277,280,282],{"type":195,"name":196,"callback":197,"file":198,"line":199},"action","init","initialize","model\\widget.php",24,{"type":195,"name":201,"callback":202,"file":198,"line":203},"sidebar_admin_setup","setup_save",50,{"type":195,"name":205,"callback":206,"file":198,"line":207},"sidebar_admin_page","setup_display",51,{"type":195,"name":196,"callback":209,"file":210,"line":211},"load_locale","plugin.php",136,{"type":195,"name":213,"callback":214,"file":210,"line":215},"admin_menu","compatibility_27",140,{"type":195,"name":213,"callback":217,"file":210,"line":218},"compatibility_26",143,{"type":195,"name":213,"callback":220,"file":210,"line":221},"compatibility_25",146,{"type":195,"name":223,"callback":224,"file":210,"line":225},"dbx_post_advanced","anonymous",228,{"type":195,"name":227,"callback":224,"file":228,"line":229},"wp_print_scripts","sniplets.php",54,{"type":195,"name":231,"callback":232,"file":228,"line":233},"admin_head","wp_print_styles",55,{"type":195,"name":235,"callback":232,"file":228,"line":13},"admin_print_styles",{"type":237,"name":238,"callback":238,"priority":114,"file":228,"line":239},"filter","contextual_help",57,{"type":195,"name":213,"callback":224,"file":228,"line":241},58,{"type":195,"name":243,"callback":224,"file":228,"line":244},"admin_footer",59,{"type":237,"name":246,"callback":224,"file":228,"line":247},"the_posts",65,{"type":195,"name":249,"callback":224,"file":228,"line":250},"the_sniplet",66,{"type":195,"name":252,"callback":252,"priority":253,"file":228,"line":254},"the_sniplet_place",1,67,{"type":237,"name":256,"callback":257,"file":228,"line":258},"the_content","run_php",73,{"type":237,"name":260,"callback":257,"file":228,"line":261},"the_excerpt",74,{"type":237,"name":263,"callback":263,"priority":114,"file":228,"line":264},"the_real_content",77,{"type":195,"name":266,"callback":224,"file":228,"line":267},"wp_head",147,{"type":195,"name":269,"callback":224,"file":228,"line":270},"wp_footer",150,{"type":195,"name":272,"callback":224,"file":228,"line":273},"comment_form",153,{"type":195,"name":275,"callback":256,"priority":253,"file":228,"line":276},"the_content_rss",157,{"type":195,"name":278,"callback":256,"priority":253,"file":228,"line":279},"the_excerpt_rss",158,{"type":195,"name":256,"callback":256,"priority":253,"file":228,"line":281},162,{"type":195,"name":260,"callback":256,"priority":253,"file":228,"line":283},163,[],[],[],[],{"dangerousFunctions":289,"sqlUsage":297,"outputEscaping":373,"fileOperations":663,"externalRequests":29,"nonceChecks":519,"capabilityChecks":14,"bundledLibraries":664},[290,294],{"fn":291,"file":292,"line":199,"context":293},"unserialize","model\\sniplets_class.php","$this->modules = unserialize ($this->modules);",{"fn":291,"file":228,"line":295,"context":296},363,"$snip->modules   = unserialize ((string)$sniplet->modules[0]);",{"prepared":28,"raw":298,"locations":299},38,[300,303,306,308,309,311,313,315,316,317,319,320,322,323,325,327,329,331,333,335,336,338,340,342,344,346,348,350,352,354,356,358,360,362,364,366,368,370],{"file":301,"line":114,"context":302},"model\\database.php","$wpdb->get_results() with variable interpolation",{"file":301,"line":304,"context":305},13,"$wpdb->query() with variable interpolation",{"file":301,"line":307,"context":305},33,{"file":301,"line":264,"context":305},{"file":301,"line":310,"context":305},78,{"file":301,"line":312,"context":305},79,{"file":301,"line":314,"context":305},80,{"file":301,"line":27,"context":305},{"file":301,"line":188,"context":305},{"file":301,"line":318,"context":305},83,{"file":301,"line":176,"context":305},{"file":301,"line":321,"context":305},91,{"file":301,"line":166,"context":305},{"file":301,"line":324,"context":305},93,{"file":301,"line":326,"context":305},100,{"file":301,"line":328,"context":305},101,{"file":301,"line":330,"context":305},110,{"file":292,"line":332,"context":305},63,{"file":292,"line":321,"context":334},"$wpdb->get_var() with variable interpolation",{"file":292,"line":166,"context":305},{"file":292,"line":337,"context":305},115,{"file":292,"line":339,"context":334},125,{"file":292,"line":341,"context":305},127,{"file":292,"line":343,"context":302},135,{"file":292,"line":345,"context":305},139,{"file":292,"line":221,"context":347},"$wpdb->get_row() with variable interpolation",{"file":292,"line":349,"context":302},187,{"file":292,"line":351,"context":302},204,{"file":292,"line":353,"context":302},220,{"file":292,"line":355,"context":305},239,{"file":292,"line":357,"context":305},253,{"file":292,"line":359,"context":305},264,{"file":292,"line":361,"context":305},274,{"file":292,"line":363,"context":305},284,{"file":292,"line":365,"context":305},295,{"file":292,"line":367,"context":305},522,{"file":228,"line":369,"context":302},375,{"file":371,"line":372,"context":302},"xml.php",28,{"escaped":304,"rawEcho":374,"locations":375},201,[376,380,381,383,384,387,389,390,392,393,395,396,398,399,401,403,405,407,408,410,411,413,416,418,421,423,426,429,431,432,434,436,438,440,442,444,446,448,450,452,454,456,457,459,461,463,466,467,469,471,472,473,475,476,477,479,480,481,483,484,485,486,487,489,490,492,493,494,495,497,498,500,501,502,503,504,506,508,510,511,512,513,514,515,516,517,518,520,522,523,525,526,528,529,530,532,533,534,536,538,539,541,543,544,545,546,547,548,549,550,551,552,553,554,555,556,558,559,560,561,562,563,565,567,568,569,570,571,572,573,574,575,577,578,579,581,582,583,584,586,588,590,591,593,595,596,597,599,600,601,602,603,604,605,606,607,608,609,611,612,613,614,615,617,618,619,620,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,638,640,641,642,643,645,646,647,648,649,651,653,655,657,658,659,660,661,662],{"file":377,"line":378,"context":379},"ajax.php",175,"raw output",{"file":377,"line":378,"context":379},{"file":377,"line":382,"context":379},185,{"file":377,"line":382,"context":379},{"file":385,"line":386,"context":379},"model\\pager.php",462,{"file":198,"line":388,"context":379},128,{"file":198,"line":283,"context":379},{"file":198,"line":391,"context":379},165,{"file":198,"line":391,"context":379},{"file":198,"line":394,"context":379},167,{"file":198,"line":394,"context":379},{"file":198,"line":397,"context":379},171,{"file":198,"line":397,"context":379},{"file":198,"line":400,"context":379},212,{"file":198,"line":402,"context":379},215,{"file":198,"line":404,"context":379},217,{"file":198,"line":406,"context":379},227,{"file":198,"line":406,"context":379},{"file":198,"line":409,"context":379},231,{"file":198,"line":409,"context":379},{"file":198,"line":412,"context":379},236,{"file":414,"line":415,"context":379},"modules\\encode.php",6,{"file":417,"line":114,"context":379},"modules\\include.php",{"file":419,"line":420,"context":379},"modules\\logged_in.php",9,{"file":422,"line":189,"context":379},"modules\\logged_out.php",{"file":424,"line":425,"context":379},"modules\\random.php",25,{"file":427,"line":428,"context":379},"modules\\reverse.php",7,{"file":430,"line":79,"context":379},"modules\\syntax_highlight.php",{"file":430,"line":324,"context":379},{"file":433,"line":114,"context":379},"modules\\textile.php",{"file":435,"line":189,"context":379},"modules\\wpautop.php",{"file":210,"line":437,"context":379},323,{"file":210,"line":439,"context":379},344,{"file":210,"line":441,"context":379},391,{"file":210,"line":443,"context":379},408,{"file":210,"line":445,"context":379},521,{"file":210,"line":447,"context":379},524,{"file":210,"line":449,"context":379},530,{"file":228,"line":451,"context":379},130,{"file":228,"line":453,"context":379},259,{"file":228,"line":455,"context":379},525,{"file":228,"line":449,"context":379},{"file":228,"line":458,"context":379},535,{"file":228,"line":460,"context":379},668,{"file":228,"line":462,"context":379},677,{"file":464,"line":465,"context":379},"view\\admin\\annoy.php",12,{"file":464,"line":465,"context":379},{"file":468,"line":114,"context":379},"view\\admin\\export.php",{"file":468,"line":470,"context":379},17,{"file":468,"line":470,"context":379},{"file":468,"line":372,"context":379},{"file":474,"line":95,"context":379},"view\\admin\\function_edit.php",{"file":474,"line":95,"context":379},{"file":474,"line":420,"context":379},{"file":474,"line":478,"context":379},15,{"file":474,"line":478,"context":379},{"file":474,"line":470,"context":379},{"file":474,"line":482,"context":379},18,{"file":474,"line":482,"context":379},{"file":474,"line":482,"context":379},{"file":474,"line":482,"context":379},{"file":474,"line":482,"context":379},{"file":474,"line":488,"context":379},20,{"file":474,"line":488,"context":379},{"file":474,"line":491,"context":379},21,{"file":474,"line":491,"context":379},{"file":474,"line":199,"context":379},{"file":474,"line":425,"context":379},{"file":474,"line":496,"context":379},30,{"file":474,"line":496,"context":379},{"file":474,"line":499,"context":379},32,{"file":474,"line":307,"context":379},{"file":474,"line":307,"context":379},{"file":474,"line":307,"context":379},{"file":474,"line":307,"context":379},{"file":474,"line":505,"context":379},35,{"file":474,"line":507,"context":379},36,{"file":509,"line":420,"context":379},"view\\admin\\function_list.php",{"file":509,"line":420,"context":379},{"file":509,"line":420,"context":379},{"file":509,"line":420,"context":379},{"file":509,"line":114,"context":379},{"file":509,"line":77,"context":379},{"file":509,"line":77,"context":379},{"file":509,"line":77,"context":379},{"file":509,"line":77,"context":379},{"file":509,"line":519,"context":379},16,{"file":521,"line":14,"context":379},"view\\admin\\head.php",{"file":521,"line":95,"context":379},{"file":524,"line":114,"context":379},"view\\admin\\limits.php",{"file":524,"line":470,"context":379},{"file":524,"line":527,"context":379},19,{"file":524,"line":488,"context":379},{"file":524,"line":488,"context":379},{"file":531,"line":189,"context":379},"view\\admin\\options.php",{"file":531,"line":372,"context":379},{"file":531,"line":505,"context":379},{"file":531,"line":535,"context":379},42,{"file":531,"line":537,"context":379},49,{"file":531,"line":250,"context":379},{"file":540,"line":14,"context":379},"view\\admin\\placement_edit.php",{"file":540,"line":542,"context":379},11,{"file":540,"line":542,"context":379},{"file":540,"line":304,"context":379},{"file":540,"line":77,"context":379},{"file":540,"line":77,"context":379},{"file":540,"line":77,"context":379},{"file":540,"line":77,"context":379},{"file":540,"line":77,"context":379},{"file":540,"line":519,"context":379},{"file":540,"line":519,"context":379},{"file":540,"line":527,"context":379},{"file":540,"line":488,"context":379},{"file":540,"line":425,"context":379},{"file":540,"line":425,"context":379},{"file":540,"line":557,"context":379},27,{"file":540,"line":372,"context":379},{"file":540,"line":372,"context":379},{"file":540,"line":372,"context":379},{"file":540,"line":372,"context":379},{"file":540,"line":496,"context":379},{"file":540,"line":564,"context":379},31,{"file":566,"line":420,"context":379},"view\\admin\\placement_list.php",{"file":566,"line":420,"context":379},{"file":566,"line":420,"context":379},{"file":566,"line":420,"context":379},{"file":566,"line":114,"context":379},{"file":566,"line":77,"context":379},{"file":566,"line":77,"context":379},{"file":566,"line":77,"context":379},{"file":566,"line":478,"context":379},{"file":576,"line":478,"context":379},"view\\admin\\post-form-inside.php",{"file":576,"line":482,"context":379},{"file":576,"line":488,"context":379},{"file":580,"line":189,"context":379},"view\\admin\\sniplets.php",{"file":580,"line":114,"context":379},{"file":580,"line":542,"context":379},{"file":580,"line":478,"context":379},{"file":580,"line":585,"context":379},29,{"file":580,"line":587,"context":379},37,{"file":580,"line":589,"context":379},44,{"file":580,"line":244,"context":379},{"file":580,"line":592,"context":379},64,{"file":594,"line":28,"context":379},"view\\admin\\sniplet_class.php",{"file":594,"line":415,"context":379},{"file":594,"line":415,"context":379},{"file":598,"line":95,"context":379},"view\\admin\\sniplet_edit.php",{"file":598,"line":95,"context":379},{"file":598,"line":420,"context":379},{"file":598,"line":420,"context":379},{"file":598,"line":478,"context":379},{"file":598,"line":482,"context":379},{"file":598,"line":527,"context":379},{"file":598,"line":199,"context":379},{"file":598,"line":372,"context":379},{"file":598,"line":587,"context":379},{"file":598,"line":298,"context":379},{"file":598,"line":610,"context":379},43,{"file":598,"line":610,"context":379},{"file":598,"line":610,"context":379},{"file":598,"line":589,"context":379},{"file":598,"line":589,"context":379},{"file":598,"line":616,"context":379},52,{"file":598,"line":244,"context":379},{"file":598,"line":244,"context":379},{"file":598,"line":244,"context":379},{"file":621,"line":28,"context":379},"view\\admin\\sniplet_item.php",{"file":621,"line":95,"context":379},{"file":621,"line":428,"context":379},{"file":621,"line":542,"context":379},{"file":621,"line":542,"context":379},{"file":621,"line":542,"context":379},{"file":621,"line":304,"context":379},{"file":621,"line":478,"context":379},{"file":621,"line":527,"context":379},{"file":621,"line":527,"context":379},{"file":621,"line":527,"context":379},{"file":621,"line":488,"context":379},{"file":621,"line":199,"context":379},{"file":621,"line":199,"context":379},{"file":621,"line":199,"context":379},{"file":621,"line":637,"context":379},26,{"file":639,"line":14,"context":379},"view\\admin\\sniplet_list.php",{"file":639,"line":14,"context":379},{"file":639,"line":420,"context":379},{"file":639,"line":465,"context":379},{"file":644,"line":28,"context":379},"view\\admin\\submenu.php",{"file":644,"line":14,"context":379},{"file":644,"line":95,"context":379},{"file":644,"line":415,"context":379},{"file":644,"line":428,"context":379},{"file":650,"line":637,"context":379},"view\\admin\\support.php",{"file":652,"line":28,"context":379},"view\\sniplets\\inset.php",{"file":654,"line":28,"context":379},"view\\sniplets\\notice.php",{"file":656,"line":28,"context":379},"view\\sniplets\\warning.php",{"file":371,"line":505,"context":379},{"file":371,"line":505,"context":379},{"file":371,"line":505,"context":379},{"file":371,"line":507,"context":379},{"file":371,"line":587,"context":379},{"file":371,"line":298,"context":379},2,[],[666,684,692,703,711,720,734],{"entryPoint":667,"graph":668,"unsanitizedCount":253,"severity":683},"show_config (model\\widget.php:107)",{"nodes":669,"edges":681},[670,675],{"id":671,"type":672,"label":673,"file":198,"line":674},"n0","source","$_POST",111,{"id":676,"type":677,"label":678,"file":198,"line":679,"wp_function":680},"n1","sink","update_option() [Settings Manipulation]",120,"update_option",[682],{"from":671,"to":676,"sanitized":51},"low",{"entryPoint":685,"graph":686,"unsanitizedCount":253,"severity":683},"\u003Cwidget> (model\\widget.php:0)",{"nodes":687,"edges":690},[688,689],{"id":671,"type":672,"label":673,"file":198,"line":674},{"id":676,"type":677,"label":678,"file":198,"line":679,"wp_function":680},[691],{"from":671,"to":676,"sanitized":51},{"entryPoint":693,"graph":694,"unsanitizedCount":253,"severity":683},"\u003Cexport> (view\\admin\\export.php:0)",{"nodes":695,"edges":701},[696,698],{"id":671,"type":672,"label":697,"file":468,"line":372},"$_SERVER['REQUEST_URI']",{"id":676,"type":677,"label":699,"file":468,"line":372,"wp_function":700},"echo() [XSS]","echo",[702],{"from":671,"to":676,"sanitized":51},{"entryPoint":704,"graph":705,"unsanitizedCount":253,"severity":683},"\u003Climits> (view\\admin\\limits.php:0)",{"nodes":706,"edges":709},[707,708],{"id":671,"type":672,"label":697,"file":524,"line":114},{"id":676,"type":677,"label":699,"file":524,"line":114,"wp_function":700},[710],{"from":671,"to":676,"sanitized":51},{"entryPoint":712,"graph":713,"unsanitizedCount":663,"severity":683},"\u003Coptions> (view\\admin\\options.php:0)",{"nodes":714,"edges":718},[715,717],{"id":671,"type":672,"label":716,"file":531,"line":189},"$_SERVER['REQUEST_URI'] (x2)",{"id":676,"type":677,"label":699,"file":531,"line":189,"wp_function":700},[719],{"from":671,"to":676,"sanitized":51},{"entryPoint":721,"graph":722,"unsanitizedCount":663,"severity":683},"\u003Csniplets> (view\\admin\\sniplets.php:0)",{"nodes":723,"edges":731},[724,726,727,729],{"id":671,"type":672,"label":725,"file":580,"line":114},"$_GET['page']",{"id":676,"type":677,"label":699,"file":580,"line":114,"wp_function":700},{"id":728,"type":672,"label":697,"file":580,"line":589},"n2",{"id":730,"type":677,"label":699,"file":580,"line":589,"wp_function":700},"n3",[732,733],{"from":671,"to":676,"sanitized":51},{"from":728,"to":730,"sanitized":51},{"entryPoint":735,"graph":736,"unsanitizedCount":29,"severity":683},"\u003Cxml> (xml.php:0)",{"nodes":737,"edges":746},[738,739,742,743],{"id":671,"type":672,"label":673,"file":371,"line":189},{"id":676,"type":677,"label":740,"file":371,"line":519,"wp_function":741},"get_row() [SQLi]","get_row",{"id":728,"type":672,"label":673,"file":371,"line":189},{"id":730,"type":677,"label":744,"file":371,"line":199,"wp_function":745},"header() [Header Injection]","header",[747,749],{"from":671,"to":676,"sanitized":748},true,{"from":728,"to":730,"sanitized":748},{"summary":751,"deductions":752},"The \"sniplets\" plugin v1.4.5 exhibits a mixed security posture. While the static analysis reports a seemingly small attack surface with no apparent direct entry points that lack authorization, significant concerns arise from the code signals. The presence of the `unserialize` function is a major red flag, as it can lead to remote code execution if used with untrusted input.  Furthermore, the low percentage of SQL queries using prepared statements and the extremely low rate of properly escaped output suggest a high likelihood of SQL injection and cross-site scripting vulnerabilities, respectively.\n\nThe plugin's vulnerability history, with three known CVEs including critical ones for cross-site scripting, code injection, and remote file inclusion, strongly corroborates these code analysis concerns. The fact that the last vulnerability was in 2008 and none are currently unpatched is positive, but the historical pattern of severe vulnerabilities indicates a history of insecure coding practices. While the plugin's entry points are not directly exploitable in this version based on the provided static analysis, the internal code quality and historical vulnerabilities present a substantial risk if any of the identified weaknesses are exposed or if new vulnerabilities are introduced.\n\nIn conclusion, despite a lack of immediately obvious exploitable entry points in the current static analysis, the core codebase contains dangerous functions and exhibits poor security hygiene regarding SQL prepared statements and output escaping. The significant historical vulnerability record further amplifies the risk. Users should be extremely cautious and consider alternatives or ensure rigorous auditing and patching if they must use this plugin.",[753,755,757,759,761,763],{"reason":754,"points":478},"Dangerous function: unserialize used",{"reason":756,"points":114},"Low percentage of SQL prepared statements",{"reason":758,"points":114},"Low percentage of properly escaped output",{"reason":760,"points":478},"High number of past critical CVEs",{"reason":762,"points":114},"Flows with unsanitized paths found",{"reason":764,"points":478},"History of RFI, XSS, and Code Injection","2026-03-16T22:18:08.240Z",{"wat":767,"direct":776},{"assetPaths":768,"generatorPatterns":771,"scriptPaths":772,"versionParams":773},[769,770],"\u002Fwp-content\u002Fplugins\u002Fsniplets\u002Fresource\u002Fadmin.css","\u002Fwp-content\u002Fplugins\u002Fsniplets\u002Fresource\u002Fadmin.js",[],[770],[774,775],"sniplets\u002Fresource\u002Fadmin.js?ver=","sniplets\u002Fresource\u002Fadmin.css?ver=",{"cssClasses":777,"htmlComments":778,"htmlAttributes":779,"restEndpoints":783,"jsGlobals":784,"shortcodeOutput":785},[],[],[780,781,782],"data-sniplet-name","data-sniplet-id","data-sniplet-post-id",[],[5],[786,787],"[sniplet ","[sniplet]",{"error":748,"url":789,"statusCode":790,"statusMessage":791,"message":791},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fsniplets\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":663,"versions":793},[794,800],{"version":795,"download_url":26,"svn_tag_url":796,"released_at":39,"has_diff":51,"diff_files_changed":797,"diff_lines":39,"trac_diff_url":798,"vulnerabilities":799,"is_current":51},"1.4.6","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fsniplets\u002Ftags\u002F1.4.6\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fsniplets%2Ftags%2F1.4.5&new_path=%2Fsniplets%2Ftags%2F1.4.6",[],{"version":6,"download_url":801,"svn_tag_url":802,"released_at":39,"has_diff":51,"diff_files_changed":803,"diff_lines":39,"trac_diff_url":39,"vulnerabilities":804,"is_current":748},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsniplets.1.4.5.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fsniplets\u002Ftags\u002F1.4.5\u002F",[],[]]