[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9G6eOFvVJvdNET4X9M12SxQV2cKG8N9w07gEKKVOC1E":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":22,"download_link":23,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":35,"analysis":146,"fingerprints":185},"stand-ukraine","Stand with Ukraine","1.2","closemarketing","https:\u002F\u002Fprofiles.wordpress.org\u002Fclosemarketing\u002F","\u003Cp>Creates a Flag in the footer to show that you stand with Ukraine.\u003C\u002Fp>\n\u003Ch3>Developers\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fclosemarketing\u002Fstand-ukraine\" rel=\"nofollow ugc\">Official Repository Github\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Links\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fen.close.marketing\u002F\" rel=\"nofollow ugc\">Closemarketing\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fen.close.technology\u002F\" rel=\"nofollow ugc\">CloseTechnology\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Shows a flag in the footer to show that you stand with Ukraine.",80,2631,100,3,"2024-11-04T15:56:00.000Z","6.7.5","4.0","",[20,4,21],"flag","ukraine","https:\u002F\u002Fclose.technology","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstand-ukraine.1.2.zip",92,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":24,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},10,7610,30,88,"2026-04-04T08:31:38.360Z",[36,53,75,101,122],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":25,"downloaded":44,"rating":25,"num_ratings":25,"last_updated":45,"tested_up_to":46,"requires_at_least":17,"requires_php":18,"tags":47,"homepage":18,"download_link":51,"security_score":52,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"support-ukraine-floating-flag","Support Ukraine – Floating Flag","1.0","TOSTAD","https:\u002F\u002Fprofiles.wordpress.org\u002Ftostad\u002F","\u003Cp>Displays the slogans “Slava Ukraini!” and “Herojam slava!” to non-invasively show support for Ukraine.\u003C\u002Fp>\n\u003Ch3>Developers\u003C\u002Fh3>\n\u003Cp>TOSTAD.sk\u003C\u002Fp>\n\u003Ch3>Links\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftostad.sk\u002F\" rel=\"nofollow ugc\">TOSTAD.sk\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Adds a floating flag of Ukraine to the left side of the screen, which opens on hover.",573,"2023-08-03T06:30:00.000Z","6.2.9",[20,48,49,50,21],"herojam-slava","slava-ukraini","support-ukraine","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsupport-ukraine-floating-flag.zip",85,{"slug":54,"name":55,"version":56,"author":57,"author_profile":58,"description":59,"short_description":60,"active_installs":61,"downloaded":62,"rating":24,"num_ratings":63,"last_updated":64,"tested_up_to":65,"requires_at_least":17,"requires_php":66,"tags":67,"homepage":73,"download_link":74,"security_score":52,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"international-telephone-input-for-contact-form-7","International Telephone Input for Contact Form 7","1.5.7","Yordan Soares","https:\u002F\u002Fprofiles.wordpress.org\u002Fyordansoares\u002F","\u003Cp>Addon for Contact Form 7 that creates a new type of input for entering and validating international telephone numbers. It adds a flag dropdown with prefix of the telephone number, detects the user’s country, displays a relevant placeholder and provides formatting\u002Fvalidation methods.\u003C\u002Fp>\n\u003Ch4>How to use\u003C\u002Fh4>\n\u003Cp>Once you have installed and activated your plugin, a new type of input field will be available in your Contact Form 7 forms. In order to add it to your form, you can either click on the “International Telephone” button above your form editor, or add the shortcode like: \u003Ccode>[intl_tel* {your-phone}]\u003C\u002Fcode>. Replace \u003Ccode>{your-phone}\u003C\u002Fcode> by the name do you want to give the field. Optionally, you can use the asterisk (*) to makes the field required.\u003C\u002Fp>\n\u003Cp>To display the field’s info on your email, use this tag: \u003Ccode>[{your-phone}]\u003C\u002Fcode>. It will display something like +12025550109\u003C\u002Fp>\n\u003Ch4>Aditional info in your email\u003C\u002Fh4>\n\u003Cp>You can also recover specific parts of the telephone number: the name of the country it refers to, the country code, the number without the country code. Use this tags:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>[{your-phone}-cf7it-country-name]\u003C\u002Fcode>: It prints the name of the country. For the example above: United States\u003C\u002Fli>\n\u003Cli>\u003Ccode>[{your-phone}-cf7it-country-code]\u003C\u002Fcode>: It prints the country code of the phone number. For the example above: 1\u003C\u002Fli>\n\u003Cli>\u003Ccode>[{your-phone}-cf7it-country-iso2]\u003C\u002Fcode>: It prints the country iso code. For the example above: us\u003C\u002Fli>\n\u003Cli>\u003Ccode>[{your-phone}-cf7it-national]\u003C\u002Fcode>: It prints the phone number without international prefix. For the example above: 2025550109\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Third-party software\u003C\u002Fh4>\n\u003Cp>This plugin uses the \u003Ca href=\"https:\u002F\u002Fintl-tel-input.com\u002F\" rel=\"nofollow ugc\">International Telephone Input\u003C\u002Fa> JavaScript library and the \u003Ca href=\"https:\u002F\u002Fextreme-ip-lookup.com\" rel=\"nofollow ugc\">eXTReMe-IP-LOOKUP.com API\u003C\u002Fa>.\u003C\u002Fp>\n","Addon for Contact Form 7 that creates a new type of input for entering and validating international telephone numbers. It adds a flag dropdown, detect …",9000,78374,26,"2022-02-21T04:53:00.000Z","5.9.13","7.0",[68,69,70,71,72],"cf7-international-phone-input","contact-form-7","country-code","international-phone-input","telephone-flags-input","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Finternational-telephone-input-for-contact-form-7\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Finternational-telephone-input-for-contact-form-7.1.5.7.zip",{"slug":76,"name":77,"version":78,"author":79,"author_profile":80,"description":81,"short_description":82,"active_installs":83,"downloaded":84,"rating":85,"num_ratings":86,"last_updated":87,"tested_up_to":88,"requires_at_least":89,"requires_php":18,"tags":90,"homepage":96,"download_link":97,"security_score":98,"vuln_count":99,"unpatched_count":99,"last_vuln_date":100,"fetched_at":27},"language-icons-flags-switcher","Flag Icons","2.2","Vasilis Triantafyllou","https:\u002F\u002Fprofiles.wordpress.org\u002Fhavengr\u002F","\u003Cp>This plugin helps you to add the flag icons with the targeted links on your site by choosing desired position or using a shortcode.\u003C\u002Fp>\n\u003Cp>Version 2 supports Google Translate ICON !\u003C\u002Fp>\n\u003Cp>You just have to select position,flag and add the link!\u003C\u002Fp>\n\u003Cp>Flags Icons: English, Bosnia, Nepal, Klingon, Iceland, Switzerland, Mongolia, Moldova, Greece, Belgium, EU, UAE, Indonesia, Hong Kong, Brazil, Estonia, Lithuania, Latvia, Argentina, Finland, Norway, Germany, Spain, Wales, Ireland, Romania, India, Hungary, Portugal, Usa, Turkey, Japan, Israel, Saudi Arabia, Sweden, France, Italy, Netherlands, s. Korea, China, Czech , Cyprus, Russia, Malaysia, Singapore, Thailand, Denmark, Bulgaria , Canada, Dominician Republic, Croatia, Egypt, New Zealand, Myanmar, Algeria, Australia, Esperado, Iran, Iraq, Catalan, Taiwav, Albania, Morocco, Palestine, Luxembourg, Mexico, Vietnam, Azerbaijan,Belarus,Cambodia,Libya,Ethiopia, Luxembourg, Afghanistan, Aruba, Georgia, Haiti, Kuwait, Malta, paraguay, Peru, South-Africa, Uzbekistan, Ukraine, Pakistan, Australia, Austria, Tunisia and Poland.\u003C\u002Fp>\n\u003Ch3>Arbitrary section 1\u003C\u002Fh3>\n\u003Cp>Thanks for using! Its my first plugin i hope it will help!\u003C\u002Fp>\n","Flags Icons Language Switcher.",4000,63370,98,20,"2022-04-10T20:50:00.000Z","5.8.13","3.3",[91,92,93,94,95],"flags","icons","language","multisite","switch","http:\u002F\u002Fwww.webcraft.gr\u002Fmuli","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flanguage-icons-flags-switcher.zip",64,1,"2025-03-31 00:00:00",{"slug":102,"name":103,"version":104,"author":105,"author_profile":106,"description":107,"short_description":108,"active_installs":109,"downloaded":110,"rating":111,"num_ratings":112,"last_updated":113,"tested_up_to":65,"requires_at_least":114,"requires_php":66,"tags":115,"homepage":120,"download_link":121,"security_score":52,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"svg-flags-lite","SVG Flags – Beautiful Scalable Flags For All Countries!","0.9.6","David Gwyer","https:\u002F\u002Fprofiles.wordpress.org\u002Fdgwyer\u002F","\u003Cp>SVG Flags of the world allows you to add high quality beautiful flags to your WordPress site in seconds. Display one or more flags at any scale without loss of quality and with a fixed aspect ratio so they always look great! Supported aspect ratios are 4:3 (default) and 1:1 (square).\u003C\u002Fp>\n\u003Cp>Create SVG flags visually, directly inside the Gutenberg block editor and preview them in realtime without having to leave the editor window. No more having to remember shortcode names and long lists of shortcode attributes.\u003C\u002Fp>\n\u003Cp>The plugin also includes shortcodes if you prefer to use these instead. If your site is using the classic WordPress editor then you have no choice but to use shortcodes. To add SVG flags to your content it’s as simple as inserting the \u003Ccode>[svg-flags]\u003C\u002Fcode> shortcode into a post or page. See the main plugin settings page for full information on all the attributes available.\u003C\u002Fp>\n\u003Cp>We hope you find this plugin useful. If you have a moment please consider \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fview\u002Fplugin-reviews\u002Fsvg-flags-lite\" rel=\"ugc\">\u003Cstrong>rating\u003C\u002Fstrong>\u003C\u002Fa> it to show your support. It’s very much appreciated and helps spread the word.\u003C\u002Fp>\n\u003Cp>Also, why not take a look at our \u003Ca href=\"https:\u002F\u002Fwww.wpgoplugins.com\" rel=\"nofollow ugc\">other plugins\u003C\u002Fa>. We’re continually developing great solutions for WordPress.\u003C\u002Fp>\n","Add SVG flags of the world anywhere on your site that scale to look great at any size!",2000,30686,86,6,"2022-03-22T17:08:00.000Z","5.0",[116,20,117,118,119],"country","scalable","svg","world","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsvg-flags-lite\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsvg-flags-lite.0.9.6.zip",{"slug":123,"name":124,"version":125,"author":126,"author_profile":127,"description":128,"short_description":129,"active_installs":130,"downloaded":131,"rating":132,"num_ratings":133,"last_updated":134,"tested_up_to":135,"requires_at_least":136,"requires_php":137,"tags":138,"homepage":144,"download_link":145,"security_score":13,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"international-telephone-input-with-flags-and-dial-codes","International Telephone Input With Flags And Dial Codes","2.0.6","Sajjad Hossain Sagor","https:\u002F\u002Fprofiles.wordpress.org\u002Fsajjad67\u002F","\u003Cp>Plugin turns the standard telephone input into an International Telephone Input with a national flag drop down list & respective Country dial codes.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Option To Enable Plugin Feature\u003C\u002Fli>\n\u003Cli>Option To Select Specific Input Using CSS3 Specification Class\u002FID\u002FTag\u003C\u002Fli>\n\u003Cli>Option To Exclude Countries\u003C\u002Fli>\n\u003Cli>Option To Only Show Specific Countries\u003C\u002Fli>\n\u003Cli>Option To Auto Detect User Country\u003C\u002Fli>\n\u003Cli>Fallback To Ajax For Detecting Country To Bypass Page Cache\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Please include a statement in your Privacy Policy informing users that their country may be detected based on their IP address. However, no personally identifiable information is stored or retained.\u003C\u002Fp>\n","Turn Your Simple Telephone Input Into International Dial Codes Input",1000,13059,82,7,"2025-12-16T16:00:00.000Z","6.9.4","5.6","8.1",[139,140,141,142,143],"country-flag","dial-codes","form","form-input","input","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Finternational-telephone-input-with-flags-and-dial-codes\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Finternational-telephone-input-with-flags-and-dial-codes.2.0.6.zip",{"attackSurface":147,"codeSignals":162,"taintFlows":173,"riskAssessment":174,"analyzedAt":184},{"hooks":148,"ajaxHandlers":158,"restRoutes":159,"shortcodes":160,"cronEvents":161,"entryPointCount":25,"unprotectedCount":25},[149,154],{"type":150,"name":151,"callback":152,"file":153,"line":63},"action","plugins_loaded","supuk_plugin_init","stand-ukraine.php",{"type":150,"name":155,"callback":156,"file":153,"line":157},"wp_footer","supuk_show_flag",36,[],[],[],[],{"dangerousFunctions":163,"sqlUsage":164,"outputEscaping":166,"fileOperations":25,"externalRequests":25,"nonceChecks":25,"capabilityChecks":25,"bundledLibraries":172},[],{"prepared":25,"raw":25,"locations":165},[],{"escaped":167,"rawEcho":99,"locations":168},2,[169],{"file":153,"line":170,"context":171},50,"raw output",[],[],{"summary":175,"deductions":176},"The \"stand-ukraine\" plugin v1.2 exhibits a seemingly strong security posture based on the provided static analysis.  The absence of direct entry points like AJAX handlers, REST API routes, shortcodes, and cron events, coupled with zero detected dangerous functions, raw SQL queries, or file operations, suggests a minimal attack surface.  The fact that all SQL queries utilize prepared statements is a significant positive indicator of secure database interaction.\n\nHowever, the analysis does raise some concerns. The plugin has a notable lack of nonces and capability checks, which are crucial for authorization and preventing cross-site request forgery (CSRF) attacks, especially if any hidden entry points or functionalities are later discovered.  The presence of unescaped output in 67% of observed cases is a potential risk for Cross-Site Scripting (XSS) vulnerabilities, allowing attackers to inject malicious scripts into the browser of other users.\n\nThe vulnerability history is completely clean, with zero known CVEs. This, combined with the clean taint analysis, suggests that the plugin has not historically been a target or has been developed with a strong focus on avoiding exploitable flaws. Despite the clean history, the identified weaknesses in output escaping and the absence of crucial authorization checks warrant attention for a truly robust security profile.",[177,179,182],{"reason":178,"points":112},"Unescaped output present",{"reason":180,"points":181},"No nonce checks detected",5,{"reason":183,"points":181},"No capability checks detected","2026-03-16T21:29:06.258Z",{"wat":186,"direct":191},{"assetPaths":187,"generatorPatterns":188,"scriptPaths":189,"versionParams":190},[],[],[],[],{"cssClasses":192,"htmlComments":193,"htmlAttributes":194,"restEndpoints":195,"jsGlobals":196,"shortcodeOutput":197},[],[],[],[],[],[198,199],"\u003Cdiv title=\"We stand with Ukraine\" style=\"position: fixed; left: -80px; bottom: 20px; width: 300px; height: 84px; transform: rotate(45deg); z-index: 999; background: linear-gradient(-180deg, rgb(0, 91, 187) 50%, rgb(255, 213, 0) 50%);\">\u003C\u002Fdiv>","\u003Cdiv title=\"We stand with Ukraine\" style=\"position: fixed; left: -80px; bottom: 20px; width: 200px; height: 54px; transform: rotate(45deg); z-index: 999; background: linear-gradient(-180deg, rgb(0, 91, 187) 50%, rgb(255, 213, 0) 50%);\">\u003C\u002Fdiv>"]