[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7WeYeFIDioPOHoctKJqxUthOk4i-oSZwjDhXDRDPEjQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":22,"download_link":23,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":36,"analysis":137,"fingerprints":217},"sponsored-article-content","Sponsored Article Content","1.02","Jeremy Green","https:\u002F\u002Fprofiles.wordpress.org\u002Fendocreative\u002F","\u003Cp>Adds native ad functionality to your site by marking posts as sponsored.\u003C\u002Fp>\n","Adds native ad functionality to your site by marking posts as sponsored.",10,1544,0,"2015-01-09T13:09:00.000Z","4.1.42","3.0.1","",[19,20,21],"advertising","native-ad","sponsored","http:\u002F\u002Fzeen101.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsponsored-article-content.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":29,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":32,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"endocreative",4,3090,89,30,86,"2026-04-05T01:34:34.080Z",[37,58,77,96,117],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":30,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":17,"tags":51,"homepage":55,"download_link":56,"security_score":57,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"native-ads-adnow","Adnow Native Widget","2.0.3","vbadnow","https:\u002F\u002Fprofiles.wordpress.org\u002Fvbadnow\u002F","\u003Cp>This plugin enables WordPress users to easily integrate Adnow’s native ads widgets on their site.\u003Cbr \u002F>\nGenerate high income on your website by showing native ads with high CTR to your visitors.\u003C\u002Fp>\n\u003Ch3>3rd party service\u003C\u002Fh3>\n\u003Cp>Our plugin uses an api service to get a list of widgets created in your personal account at adnow.com.\u003Cbr \u002F>\nThe service is located at https:\u002F\u002Fwp_plug.adnow.com\u002Fwp_aadb.php\u003Cbr \u002F>\nThe response is text in the JSON format that contains a list of your widgets.\u003Cbr \u002F>\nBelow links to our terms and privacy policy\u003Cbr \u002F>\nhttps:\u002F\u002Fadnow.com\u002Fterms\u003Cbr \u002F>\nhttps:\u002F\u002Fadnow.com\u002Fprivacy-policy\u003C\u002Fp>\n","Use the Adnow widget to monetize your website successfully with high quality native ads",60,26606,70,"2025-03-27T16:28:00.000Z","6.7.5","3.0",[52,19,53,54],"ad-network","monetization","native-ads","https:\u002F\u002Fadnow.com\u002Fwordpress-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnative-ads-adnow.2.0.4.zip",92,{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":11,"downloaded":66,"rating":67,"num_ratings":68,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":17,"tags":72,"homepage":75,"download_link":76,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"adfever-monetisation","Adfever Monétisation","1.0.2","adfever","https:\u002F\u002Fprofiles.wordpress.org\u002Fadfever\u002F","\u003Cp>Ce plugin permet à tous les éditeurs inscrits sur AdFever – \u003Ca href=\"http:\u002F\u002Fwww.Adfever.com\u002F\" title=\"Plateforme de monétisation AdFever\" rel=\"nofollow ugc\">AdFever.com\u003C\u002Fa> – d’ajouter simplement de nombreux formats de monétisation. Actuellement, les formats publicitaires disponibles sont : liens sponsorisés, liens texte, footer, site under et slide in.\u003C\u002Fp>\n\u003Cp>Pour que ce plugin fonctionne, vous devez posséder un compte éditeur AdFever et demander à editeurs@adfever.com  un identifiant pour chaque format.\u003Cbr \u002F>\nLes liens sponsorisés sont personnalisables (automatiquement ou manuellement), ils pourront être affichés automatiquement avant ou après vos articles. Les annonces affichées dépendent des tags associés à vos posts et du titre de vos posts.\u003C\u002Fp>\n","Plugin de monétisation pour les membres de la régie publicitaire AdFever.",5866,80,1,"2014-04-17T16:15:00.000Z","3.9.40","3.4",[62,19,53,73,74],"publicite","sponsored-links","http:\u002F\u002Fwww.adfever.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadfever-monetisation.zip",{"slug":78,"name":79,"version":80,"author":81,"author_profile":82,"description":83,"short_description":84,"active_installs":11,"downloaded":85,"rating":86,"num_ratings":87,"last_updated":88,"tested_up_to":89,"requires_at_least":90,"requires_php":17,"tags":91,"homepage":94,"download_link":95,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"swiftad","SwiftAd","0.5.4","Richard Alva","https:\u002F\u002Fprofiles.wordpress.org\u002Fralva83702\u002F","\u003Cp>Swift Ad is backed by a powerful ad server, you can take advantage of frequency capping, geo targeting, set run dates, cap total impressions, all the tools you need to take control.\u003C\u002Fp>\n\u003Cp>Swift Ad is a lightning fast plugin backed by a powerful ad server, making it so you can take any display ad on your website and set dynamic controls on how it behaves. Take full advantage of frequency capping, geotargeting, run dates and capping of impressions. All this with no added stress and no latency issues. Plus, you’ll now have sophisticated third-party reporting and analytics that helps you make decisions you need to with new and stronger confidence.\u003C\u002Fp>\n\u003Cp>With Swift Ad you can easily manage your display advertising from right within your WordPress website. With Swift Ad you get:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>A custom content type to setup and manage advertising campaigns\u003Cbr \u002F>\nSwift Ad’s custom content control lets you keep your display ads separate from other content while stilling being able to take advantage of all the features of typical post management. Swift Ad comes with an intuitive interface that lets you ad images, videos, ad tags and more.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Geotageting\u003Cbr \u002F>\nSwift Ad makes it possible for you to run regionally targeted campaigns, delivering geographically relevant advertising that caters to local tastes.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Able to limit by date range & and total impressions\u003Cbr \u002F>\nSwift Ad lets you set a date range you want the post to serve in and the maximum number of impressions. Truly powerful content.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Frequency Capping\u003Cbr \u002F>\nThis is a fancy word that means Swift Ad gives you the ability to limit how often a post is seen at the top of your feed, or in the location of your choosing, by any given visitor.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Tacked for impressions and clicks\u003Cbr \u002F>\nEvery Swift Ad is tracked with unparalleled accuracy for impressions and clicks. Now you can see how many times a post in your feed was clicked on or viewed.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Split Testing\u003Cbr \u002F>\nNow, with Swift Ad, you can split test anything (also known as A\u002FB testing) in order to gauge the performance of one post against another. Start maximizing the performance of your sponsored content today and find out what headlines, what messages best resonate with your visitors.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>With Swift Ad you get all the features you would expect from a powerful ad server right here in WordPress. Swift Ad gives you the ability to sell, manage and measure on any kind of display advertising you can imagine. Static to video.\u003C\u002Fp>\n\u003Cp>Our intuitive interface makes it super easy to setup a display ad, preview the post before it goes live and gather metrics on how it’s serving. You can now have complete control of display advertising at your finger tips with the simple push of a button.\u003C\u002Fp>\n","Swift Ad lets website administrators easily manage display advertising right from their WordPress website. ",1961,100,3,"2017-05-24T21:15:00.000Z","4.7.32","4.0",[19,92,93],"geo-targeting","native-advertising","https:\u002F\u002Fswiftimpressions.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fswiftad.0.5.4.zip",{"slug":97,"name":98,"version":99,"author":100,"author_profile":101,"description":102,"short_description":103,"active_installs":104,"downloaded":105,"rating":57,"num_ratings":106,"last_updated":107,"tested_up_to":108,"requires_at_least":109,"requires_php":110,"tags":111,"homepage":115,"download_link":116,"security_score":86,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"ads-txt","Ads.txt Manager","1.4.6","10up","https:\u002F\u002Fprofiles.wordpress.org\u002F10up\u002F","\u003Cp>Create, manage, and validate your ads.txt and app-ads.txt from within WordPress, like any other content asset. Requires PHP 7.4+.\u003C\u002Fp>\n\u003Ch3>What is ads.txt?\u003C\u002Fh3>\n\u003Cp>Ads.txt is an initiative by the Interactive Advertising Bureau to enable publishers to take control over who can sell their ad inventory. Through our work at 10up with various publishers, we’ve created a way to manage and validate your ads.txt file from within WordPress, eliminating the need to upload a file. The validation baked into the plugin helps avoid malformed records, which can cause issues that end up cached for up to 24 hours and can lead to a drop in ad revenue.\u003C\u002Fp>\n\u003Ch3>Technical Notes\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Requires PHP 7.4+.\u003C\u002Fli>\n\u003Cli>Ad blockers may break syntax highlighting and pre-save error checking on the edit screen.\u003C\u002Fli>\n\u003Cli>Rewrites need to be enabled. Without rewrites, WordPress cannot know to supply \u003Ccode>\u002Fads.txt\u003C\u002Fcode> when requested.\u003C\u002Fli>\n\u003Cli>Your site URL must not contain a path (e.g. \u003Ccode>https:\u002F\u002Fexample.com\u002Fsite\u002F\u003C\u002Fcode> or path-based multisite installs). While the plugin will appear to function in the admin, it will not display the contents at \u003Ccode>https:\u002F\u002Fexample.com\u002Fsite\u002Fads.txt\u003C\u002Fcode>. This is because the plugin follows the IAB spec, which requires that the ads.txt file be located at the root of a domain or subdomain.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>What about ads.cert?\u003C\u002Fh3>\n\u003Cp>We’re closely monitoring continued developments in the ad fraud space, and see this plugin as not only a way to create and manage your ads.txt file but also be prepared for future changes and upgrades to specifications. Ads.cert is still in the extremely early stages so we don’t see any immediate concerns with implementing ads.txt.\u003C\u002Fp>\n\u003Ch3>Can I use this with multisite?\u003C\u002Fh3>\n\u003Cp>Yes! However, if you are using a subfolder installation it will only work for the main site. This is because you can only have one ads.txt for a given domain or subdomain per the \u003Ca href=\"https:\u002F\u002Fiabtechlab.com\u002Fads-txt\u002F\" rel=\"nofollow ugc\">ads.txt spec\u003C\u002Fa>.  Our recommendation is to only activate Ads.txt Manager per-site.\u003C\u002Fp>\n","Create, manage, and validate your ads.txt and app-ads.txt from within WordPress, like any other content asset.",100000,1903612,14,"2026-01-04T21:09:00.000Z","6.9.4","6.6","7.4",[112,113,97,19,114],"ad-manager","ads","app-ads-txt","https:\u002F\u002Fgithub.com\u002F10up\u002Fads-txt","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fads-txt.1.4.6.zip",{"slug":118,"name":119,"version":120,"author":121,"author_profile":122,"description":123,"short_description":124,"active_installs":125,"downloaded":126,"rating":67,"num_ratings":127,"last_updated":128,"tested_up_to":108,"requires_at_least":90,"requires_php":129,"tags":130,"homepage":17,"download_link":135,"security_score":86,"vuln_count":68,"unpatched_count":13,"last_vuln_date":136,"fetched_at":26},"advanced-popups","Advanced Popups","1.2.2","codesupplyco","https:\u002F\u002Fprofiles.wordpress.org\u002Fcodesupplyco\u002F","\u003Cp>Advanced Popups is a lightweight yet powerful WordPress popup plugin designed for maximum conversion. Create beautiful, targeted popups to grow your email list, display important announcements, show cookie notices, or promote special offers.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Multiple Popup Types\u003C\u002Fstrong> – Choose between Content Box (perfect for opt-ins), Notification Box (ideal for announcements), or Notification Bar (great for cookie notices)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Strategic Placements\u003C\u002Fstrong> – Position your popups where they’ll perform best – top, bottom, center, corners, or sides of the screen\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Smart Triggers\u003C\u002Fstrong> – Display popups at the perfect moment with multiple trigger options:\n\u003Cul>\n\u003Cli>Time delay\u003C\u002Fli>\n\u003Cli>Page viewed\u003C\u002Fli>\n\u003Cli>Exit intent (catch visitors before they leave)\u003C\u002Fli>\n\u003Cli>Scroll position (target engaged readers)\u003C\u002Fli>\n\u003Cli>Manual launch via button click\u003C\u002Fli>\n\u003Cli>Accept agreement (for compliance notices)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Precise Targeting\u003C\u002Fstrong> – Show popups exactly where they matter:\n\u003Cul>\n\u003Cli>Specific pages, posts, or custom post types\u003C\u002Fli>\n\u003Cli>Taxonomy pages (categories, tags)\u003C\u002Fli>\n\u003Cli>Front page, archives, or search results\u003C\u002Fli>\n\u003Cli>Based on user login status (guest vs. logged-in)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Visitor-Friendly Controls\u003C\u002Fstrong> – Respect your visitors with:\n\u003Cul>\n\u003Cli>Frequency limits (avoid popup fatigue)\u003C\u002Fli>\n\u003Cli>Mobile-specific settings\u003C\u002Fli>\n\u003Cli>Multiple close options (overlay click, ESC key)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Beautiful Animations\u003C\u002Fstrong> – Choose from fade, slide, zoom, or combined effects for entrance and exit\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Fully Customizable\u003C\u002Fstrong> – Control width, overlay appearance, and many other visual aspects\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Advanced Popups is optimized for performance, ensuring your site speed isn’t compromised while delivering high-converting popups that respect user experience.\u003C\u002Fp>\n\u003Cp>Perfect for marketers, content creators, and site owners who want to increase engagement without annoying visitors.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>See Advanced Popups in action:\u003C\u002Fstrong> Check out our \u003Ca href=\"https:\u002F\u002Fauthentictheme.com\u002Fauthentic\u002Fpopups\u002F\" rel=\"nofollow ugc\">live examples and demos\u003C\u002Fa> to see what you can create with this plugin.\u003C\u002Fp>\n","Display high-converting newsletter popups, a cookie notice, or a notification with the light-weight yet feature-rich plugin.",70000,631247,9,"2025-12-03T14:57:00.000Z","5.4",[19,131,132,133,134],"marketing","optin","popup","popups","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadvanced-popups.1.2.2.zip","2020-06-21 00:00:00",{"attackSurface":138,"codeSignals":183,"taintFlows":205,"riskAssessment":206,"analyzedAt":216},{"hooks":139,"ajaxHandlers":179,"restRoutes":180,"shortcodes":181,"cronEvents":182,"entryPointCount":13,"unprotectedCount":13},[140,146,150,154,158,162,167,171,175],{"type":141,"name":142,"callback":143,"file":144,"line":145},"action","admin_enqueue_scripts","spa_enqueue_color_picker","sponsored-article-content.php",22,{"type":141,"name":147,"callback":148,"file":144,"line":149},"admin_menu","spa_create_options_page",39,{"type":141,"name":151,"callback":152,"file":144,"line":153},"admin_init","spa_admin_init",59,{"type":141,"name":155,"callback":156,"file":144,"line":157},"add_meta_boxes","spa_meta_box_create",144,{"type":141,"name":159,"callback":160,"file":144,"line":161},"save_post","spa_options_save_meta",169,{"type":163,"name":164,"callback":165,"file":144,"line":166},"filter","the_title","spa_ad_post_title",182,{"type":163,"name":168,"callback":169,"file":144,"line":170},"the_content","spa_ad_post_content",203,{"type":163,"name":172,"callback":173,"file":144,"line":174},"body_class","spa_ad_body_classes",218,{"type":141,"name":176,"callback":177,"file":144,"line":178},"wp_head","spa_ad_styles",234,[],[],[],[],{"dangerousFunctions":184,"sqlUsage":185,"outputEscaping":187,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":204},[],{"prepared":13,"raw":13,"locations":186},[],{"escaped":13,"rawEcho":188,"locations":189},7,[190,193,195,197,199,201,202],{"file":144,"line":191,"context":192},113,"raw output",{"file":144,"line":194,"context":192},120,{"file":144,"line":196,"context":192},127,{"file":144,"line":198,"context":192},134,{"file":144,"line":200,"context":192},244,{"file":144,"line":200,"context":192},{"file":144,"line":203,"context":192},246,[],[],{"summary":207,"deductions":208},"The \"sponsored-article-content\" v1.02 plugin exhibits a generally good security posture based on the provided static analysis and vulnerability history. The absence of identified CVEs and a clean vulnerability history indicate a lack of publicly known exploits. Furthermore, the static analysis reveals no dangerous functions, no SQL queries without prepared statements, no file operations, no external HTTP requests, and no taint flows, all of which are positive indicators. However, a significant concern arises from the complete lack of output escaping. With 7 total outputs and 0% properly escaped, any data rendered by this plugin is susceptible to cross-site scripting (XSS) attacks, allowing an attacker to inject malicious scripts into web pages viewed by other users. The absence of capability checks and nonce checks, while not immediately critical given the lack of identifiable entry points, leaves a potential for future vulnerabilities if new entry points are introduced or if existing ones are implicitly exposed.",[209,212,214],{"reason":210,"points":211},"All outputs are unescaped (XSS risk)",8,{"reason":213,"points":87},"No capability checks found",{"reason":215,"points":87},"No nonce checks found","2026-03-17T00:20:11.396Z",{"wat":218,"direct":225},{"assetPaths":219,"generatorPatterns":221,"scriptPaths":222,"versionParams":224},[220],"\u002Fwp-content\u002Fplugins\u002Fsponsored-article-content\u002Fscript.js",[],[223],"script.js",[],{"cssClasses":226,"htmlComments":230,"htmlAttributes":231,"restEndpoints":239,"jsGlobals":240,"shortcodeOutput":241},[227,228,229],"spa-indicator","spa-content","is-sponsored-article",[],[232,233,234,235,236,237,238],"id=\"spa_ad\"","name=\"spa_ad\"","id=\"spa-options\"","name=\"spa_options[spa_text]\"","name=\"spa_options[spa_text_color]\"","name=\"spa_options[spa_color]\"","name=\"spa_options[spa_content_color]\"",[],[],[]]