[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAtK0ii6hcWIzO6s9w_xJjVp5pOXOBKCWViE7scSHV1Y":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":14,"tags":17,"homepage":22,"download_link":23,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":34,"analysis":126,"fingerprints":179},"stella-flags","Stella Flags Widget","1.0","rafallach","https:\u002F\u002Fprofiles.wordpress.org\u002Freal99\u002F","\u003Cp>Plugin creates language selector widget with country flags for the Stella plugin.\u003Cbr \u002F>\nPlugin can be easly styled by css attached to your wordpress template.\u003C\u002Fp>\n\u003Ch3>Source\u003C\u002Fh3>\n\u003Cp>Mecrucrial Repository: https:\u002F\u002Frafallach@bitbucket.org\u002Frafallach\u002Fstella-flags-plugin\u003C\u002Fp>\n","Plugin creates language selector widget with country flags for the Stella plugin.",20,2439,0,"","3.4.2","3.0",[18,19,20,21],"flags","languages","localization","widget","http:\u002F\u002Fbitbucket.org\u002Frafallach\u002Fstella-flags-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstella-flags.zip",100,null,"2026-03-15T10:48:56.248Z",[],{"slug":29,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":11,"avg_security_score":24,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},"real99",1,30,94,"2026-04-04T06:22:33.077Z",[35,55,73,95,110],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":24,"downloaded":43,"rating":13,"num_ratings":13,"last_updated":44,"tested_up_to":45,"requires_at_least":46,"requires_php":14,"tags":47,"homepage":51,"download_link":52,"security_score":53,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":54},"wp-multilingual","WP_Multilingual","1.3.4.15","Oleg Butuzov","https:\u002F\u002Fprofiles.wordpress.org\u002Fbutuzov\u002F","\u003Cp>For WP 2.3 – 2.5  you should user 1.3.* version\u003C\u002Fp>\n\u003Cp>WP_Multilingual is extension that brings WordPress multilingual support. With it’s help you can publish more that in one language at a time. Its easy, cheap and simple way to use multilingual advantages of blogging.\u003C\u002Fp>\n\u003Cp>With this plugin you can manage your Posts\u002FPages\u002FCategories\u002FBlogroll Links\u002FTags in multilingual mode.\u003C\u002Fp>\n\u003Cp>Plugin also allow you to localize theme relate to Selected language, and localize Wp-admin in your language.\u003Cbr \u002F>\nPlugin Localized in\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Russian\u003C\u002Fli>\n\u003Cli>Ukrainian\u003C\u002Fli>\n\u003Cli>English\u003C\u002Fli>\n\u003Cli>Franch\u003C\u002Fli>\n\u003Cli>Italian\u003C\u002Fli>\n\u003Cli>Greek\u003C\u002Fli>\n\u003Cli>Spanish\u003C\u002Fli>\n\u003Cli>Czech\u003C\u002Fli>\n\u003Cli>Catalan\u003C\u002Fli>\n\u003Cli>Herbew\u003C\u002Fli>\n\u003Cli>Deutsch\u003C\u002Fli>\n\u003Cli>Dutch (Holland or Netherlands)\u003C\u002Fli>\n\u003Cli>Arabian\u003C\u002Fli>\n\u003Cli>Polish\u003C\u002Fli>\n\u003C\u002Ful>\n","WP_Multilingual is extension that brings WordPress multilingual support. With it's help you can publish more that in one language at a time.",29253,"2008-10-23T01:06:00.000Z","2.5.1","2.3.1",[19,20,48,49,50],"localizations","multilingual","tags","http:\u002F\u002Fmade.com.ua\u002Fmultilingual\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-multilingual.1.3.4.15.zip",85,"2026-03-15T15:16:48.613Z",{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":24,"downloaded":63,"rating":13,"num_ratings":13,"last_updated":64,"tested_up_to":65,"requires_at_least":66,"requires_php":14,"tags":67,"homepage":71,"download_link":72,"security_score":53,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":54},"wpglobus-for-black-studio-tinymce-widget","WPGlobus for Black Studio TinyMCE Widget","1.2.0","Alex Gor","https:\u002F\u002Fprofiles.wordpress.org\u002Falexgff\u002F","\u003Cp>\u003Cstrong>WPGlobus for Black Studio TinyMCE Widget\u003C\u002Fstrong> is an extension to the WPGlobus plugin.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>NOTE:\u003C\u002Fstrong> You need to install and activate the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwpglobus\u002F\" rel=\"ugc\">WPGlobus Multilingual Plugin\u003C\u002Fa> version 1.2.4 or later before installing the WPGlobus for Black Studio TinyMCE Widget extension.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>NOTE:\u003C\u002Fstrong> Add-on was tested with \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fblack-studio-tinymce-widget\u002F\" rel=\"ugc\">Black Studio TinyMCE Widget\u003C\u002Fa> plugin from version 2.2.5\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>More info\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.wpglobus.com\u002Fextensions-archive\u002Fwpglobus-for-black-studio-tinymce-widget-archive\u002F\" rel=\"nofollow ugc\">WPGlobus for Black Studio TinyMCE Widget home page\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002FWPGlobus\u002Fwpglobus-for-black-studio-tinymce-widget\u002F\" rel=\"nofollow ugc\">GitHub code repository\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n","WPGlobus for Black Studio TinyMCE Widget is an extension to the WPGlobus plugin.",7815,"2017-12-05T10:18:00.000Z","4.9.29","4.0",[68,20,49,69,70],"international","wpglobus","wysiwyg-widget","https:\u002F\u002Fgithub.com\u002FWPGlobus\u002Fwpglobus-for-black-studio-tinymce-widget","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpglobus-for-black-studio-tinymce-widget.zip",{"slug":74,"name":75,"version":76,"author":77,"author_profile":78,"description":79,"short_description":80,"active_installs":81,"downloaded":82,"rating":24,"num_ratings":83,"last_updated":84,"tested_up_to":85,"requires_at_least":86,"requires_php":87,"tags":88,"homepage":91,"download_link":92,"security_score":93,"vuln_count":30,"unpatched_count":13,"last_vuln_date":94,"fetched_at":54},"smartcat-wpml","Smartcat Translator for WPML","3.1.77","smartcatai","https:\u002F\u002Fprofiles.wordpress.org\u002Fsmartcatai\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.smartcat.com\u002F?utm_source=connectors&utm_medium=referral&utm_campaign=wordpress\" rel=\"nofollow ugc\">Smartcat\u003C\u002Fa> connects linguists, companies, and agencies to streamline the translation of any content into any language, on demand. Our platform puts your translation process on autopilot, from content creation to payments.\u003C\u002Fp>\n\u003Cp>The plugin allows you to set up an integration between your WPML-enabled WordPress site and Smartcat. The integration itself is configured in Smartcat. Once configured, it will automatically pull translatable content from your website to Smartcat, where you can translate it with your own linguists or the ones you pick from our Marketplace. Alternatively, you can use the power of machine translation and post-edit just the most important pages to reduce translation costs. Once your content is translated, Smartcat will push it back to WordPress, instantly publishable in the target language(s) of choice.\u003C\u002Fp>\n\u003Ch3>Account & pricing\u003C\u002Fh3>\n\u003Cp>You first need to create a Smartcat account as one is not automatically created when installing the extension.\u003Cbr \u002F>\nTo create an account, go to \u003Ca href=\"https:\u002F\u002Fwww.smartcat.com\" rel=\"nofollow ugc\">smartcat.com\u003C\u002Fa>. All translation features in Smartcat are free to use.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Connect your WordPress website with a specific Smartcat account\u003C\u002Fli>\n\u003Cli>Choose the translation supplier from your own team or Smartcat Marketplace\u003C\u002Fli>\n\u003Cli>Automatically send new or updated content for translation\u003C\u002Fli>\n\u003Cli>Reuse existing translations thanks to Translation Memory\u003C\u002Fli>\n\u003Cli>Choose translation workflow stages — translation, editing, proofreading, etc.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Benefits of Smartcat\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>No document re-formatting required\u003C\u002Fli>\n\u003Cli>Easy-to-use multilingual translation editor\u003C\u002Fli>\n\u003Cli>Multi-stage translation process — e.g., translation, editing, proofreading\u003C\u002Fli>\n\u003Cli>Free collaboration with your own volunteers or coworkers\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.smartcat.com\u002Fmarketplace\u002F?utm_source=connectors&utm_medium=referral&utm_campaign=wordpress\" rel=\"nofollow ugc\">Marketplace\u003C\u002Fa>\u003Cbr \u002F>\n of 350,000+ translators and 2,000+ agencies in 100+ language pairs\u003C\u002Fli>\n\u003Cli>Track progress by language, document, or person\u003C\u002Fli>\n\u003Cli>Automated payments to translation suppliers\u003C\u002Fli>\n\u003Cli>Free support to optimize localization processes\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>Contact us at \u003Ca href=\"mailto:support@smartcat.com\" rel=\"nofollow ugc\">support@smartcat.com\u003C\u002Fa> with any questions related to:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Module issues\u003C\u002Fli>\n\u003Cli>Assistance in vendor management (freelancers or LSPs)\u003C\u002Fli>\n\u003Cli>Use of the module for your clients needs\u003C\u002Fli>\n\u003C\u002Ful>\n","The easiest way to translate your WPML-enabled WordPress site into various languages.",60,15979,3,"2026-03-13T07:35:00.000Z","6.9.4","5.3","7.0",[19,20,49,89,90],"translation","translator","https:\u002F\u002Fsmartcat.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsmartcat-wpml.3.1.77.zip",99,"2025-09-10 18:45:26",{"slug":96,"name":97,"version":98,"author":99,"author_profile":100,"description":101,"short_description":102,"active_installs":103,"downloaded":104,"rating":11,"num_ratings":30,"last_updated":14,"tested_up_to":105,"requires_at_least":16,"requires_php":14,"tags":106,"homepage":14,"download_link":109,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"country-flags-info-widget","Country Flags Info Widget","1.0.0","sierramike","https:\u002F\u002Fprofiles.wordpress.org\u002Fsierramike\u002F","\u003Cp>This plugin allows you to display a widget containing a list of countries with a flag, a country name and misc information. You can choose if you want to display the country names or not.\u003C\u002Fp>\n\u003Cp>It can be used to display scores, sport results, registrations, people participating in an event and much more.\u003C\u002Fp>\n\u003Cp>You can edit smcfi.css file to adjust width of elements, or override css classes smcfi-name and smcfi-misc.\u003C\u002Fp>\n\u003Cp>Flags are 64×64 pixel sized to be ready for retina displays.\u003C\u002Fp>\n\u003Cp>It is forked from jimmywb excellent plugin ‘Simple Link List’ and behaves the same.\u003C\u002Fp>\n","Enables a widget in which you can display a list of country with flags, names and misc information.",10,4601,"4.2.39",[107,108,18,21],"countries","country","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcountry-flags-info-widget.1.0.zip",{"slug":111,"name":112,"version":6,"author":113,"author_profile":114,"description":115,"short_description":116,"active_installs":103,"downloaded":117,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":118,"requires_at_least":119,"requires_php":14,"tags":120,"homepage":124,"download_link":125,"security_score":24,"vuln_count":13,"unpatched_count":13,"last_vuln_date":25,"fetched_at":26},"language-mix","Language Mix","Andriy Lesyuk","https:\u002F\u002Fprofiles.wordpress.org\u002Fs-andy\u002F","\u003Cp>There are countries, where people speak several languages. For these people there is no need to\u003Cbr \u002F>\nseparate the content of the site by such languages, especially when they come with some unique\u003Cbr \u002F>\n(i.e., not translated) content. On the other side, there can still be people, who speak only one\u003Cbr \u002F>\nlanguage.\u003C\u002Fp>\n\u003Cp>The Language Mix plugin for WordPress is an extension to the\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpolylang\u002F\" rel=\"ugc\">Polylang\u003C\u002Fa> plugin of\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fchouby\u002F\" rel=\"nofollow ugc\">Chouby\u003C\u002Fa>, that implements a new approach of the multilingual\u003Cbr \u002F>\ncontent handling. Its main feature is that it does not hide content in other languages, which are\u003Cbr \u002F>\nknown to the visitor! The plugin determines, which languages the user can read, using HTTP headers\u003Cbr \u002F>\nsent by the user’s browser.\u003C\u002Fp>\n\u003Cp>Additionally, the plugin comes with two widgets:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>The \u003Cstrong>Languages\u003C\u002Fstrong> widget, that can be put on any WordPress page, allows to configure, content in\u003Cbr \u002F>\nwhich languages the user wants to see. The widget saves its settings into cookies.\u003C\u002Fli>\n\u003Cli>The \u003Cstrong>Translations\u003C\u002Fstrong> widget, that can be put on the single content page only (e.g., the post page),\u003Cbr \u002F>\nis an alternative to the Polylang’s \u003Cem>Language Switcher\u003C\u002Fem> widget. The difference is that this widget\u003Cbr \u002F>\nshows links only to translations of the current page (i.e., if no translations are available,\u003Cbr \u002F>\nnothing is shown).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The \u003Ca href=\"http:\u002F\u002Fprojects.andriylesyuk.com\u002Fproject\u002Fwordpress\u002Flanguage-mix\" rel=\"nofollow ugc\">plugin’s project\u003C\u002Fa> is also\u003Cbr \u002F>\nhosted on the \u003Ca href=\"http:\u002F\u002Fwww.andriylesyuk.com\" rel=\"nofollow ugc\">author’s website\u003C\u002Fa> \u003Cem>(using\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Fwww.redmine.org\u002F\" rel=\"nofollow ugc\">Redmine\u003C\u002Fa> and WordPress)\u003C\u002Fem>.\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Fprojects.andriylesyuk.com\u002Fproject\u002Fwordpress\u002Flanguage-mix\" rel=\"nofollow ugc\">There\u003C\u002Fa> you can read news, report\u003Cbr \u002F>\nbugs, and more.\u003C\u002Fp>\n\u003Cp>\u003Cem>For the banner I used \u003Ca href=\"http:\u002F\u002Fwww.flickr.com\u002Fphotos\u002Ffdecomite\u002F3288906696\u002F\" rel=\"nofollow ugc\">the image\u003C\u002Fa> of\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Fwww.flickr.com\u002Fphotos\u002Ffdecomite\u002F\" rel=\"nofollow ugc\">Francesco De Comite\u003C\u002Fa>.\u003C\u002Fem>\u003C\u002Fp>\n\u003Ch3>Issue Tracker\u003C\u002Fh3>\n\u003Cp>Use \u003Ca href=\"http:\u002F\u002Fprojects.andriylesyuk.com\u002Fprojects\u002Flanguage-mix\u002Fissues\" rel=\"nofollow ugc\">this issue tracker\u003C\u002Fa> to report\u003Cbr \u002F>\nbugs, request features and file other issues.\u003C\u002Fp>\n\u003Ch3>Documentation\u003C\u002Fh3>\n\u003Cp>The documentation for the plugin can be found in the\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Fprojects.andriylesyuk.com\u002Fprojects\u002Flanguage-mix\u002Fwiki\" rel=\"nofollow ugc\">Wiki\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Blog\u003C\u002Fh3>\n\u003Cp>The plugin’s project has a blog \u003Ca href=\"http:\u002F\u002Fblog.andriylesyuk.com\u002Fprojects\u002Flanguage-mix\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Live Demo\u003C\u002Fh3>\n\u003Cp>I’m using this plugin at \u003Ca href=\"http:\u002F\u002Fwww.andriylesyuk.com\" rel=\"nofollow ugc\">my personal website\u003C\u002Fa>. A translated article\u003Cbr \u002F>\n\u003Cem>(English and Russian)\u003C\u002Fem> can be found \u003Ca href=\"http:\u002F\u002Fblog.andriylesyuk.com\u002Fthe-nature-of-euromaidan\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Thanks to\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.flickr.com\u002Fphotos\u002Ffdecomite\u002F\" rel=\"nofollow ugc\">Francesco De Comite\u003C\u002Fa> for\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Fwww.flickr.com\u002Fphotos\u002Ffdecomite\u002F3288906696\u002F\" rel=\"nofollow ugc\">the image\u003C\u002Fa> used as the plugin’s banner.\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin modifies the behavior of the Polylang plugin making it show contents of all languages, which are believed to be known by the visitor.",2235,"3.7.41","3.5.1",[121,122,49,123,21],"browser-languages","cookies","polylang","http:\u002F\u002Fprojects.andriylesyuk.com\u002Fproject\u002Fwordpress\u002Flanguage-mix","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flanguage-mix.zip",{"attackSurface":127,"codeSignals":143,"taintFlows":163,"riskAssessment":164,"analyzedAt":178},{"hooks":128,"ajaxHandlers":139,"restRoutes":140,"shortcodes":141,"cronEvents":142,"entryPointCount":13,"unprotectedCount":13},[129,135],{"type":130,"name":131,"callback":132,"file":133,"line":134},"action","widgets_init","anonymous","stella-flags.php",54,{"type":130,"name":136,"callback":137,"file":133,"line":138},"wp_enqueue_scripts","add_scripts",58,[],[],[],[],{"dangerousFunctions":144,"sqlUsage":148,"outputEscaping":150,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":162},[145],{"fn":146,"file":133,"line":134,"context":147},"create_function","add_action( 'widgets_init', create_function( '', 'register_widget( \"Stella_Flags\" );' ));",{"prepared":13,"raw":13,"locations":149},[],{"escaped":13,"rawEcho":151,"locations":152},4,[153,156,158,160],{"file":133,"line":154,"context":155},27,"raw output",{"file":133,"line":157,"context":155},36,{"file":133,"line":159,"context":155},38,{"file":133,"line":161,"context":155},39,[],[],{"summary":165,"deductions":166},"The Stella Flags plugin v1.0 exhibits a mixed security posture.  On the positive side, it demonstrates good practices by having zero known CVEs, a complete absence of SQL queries (thus no risk of SQL injection via prepared statements), no file operations, and no external HTTP requests. The attack surface also appears to be zero, with no AJAX handlers, REST API routes, shortcodes, or cron events exposed, and notably, no unprotected entry points.  However, significant concerns arise from the code analysis. The presence of `create_function` is a direct indicator of a potential security risk due to its inherent vulnerabilities. Furthermore, 100% of output is unescaped, presenting a high risk of Cross-Site Scripting (XSS) vulnerabilities where user-supplied data could be injected into the page and executed in the user's browser.  The lack of any nonce or capability checks also means that if any functionality were to be added in the future, it would likely be unprotected.\n\nWhile the plugin has no recorded vulnerability history, this does not automatically imply security. It could simply mean the plugin hasn't been a target or that past vulnerabilities were not publicly disclosed. The critical issues found in the static analysis, specifically the use of `create_function` and universally unescaped output, are significant weaknesses that outweigh the current lack of known vulnerabilities and zero attack surface. These issues necessitate immediate attention to mitigate potential risks, particularly XSS and arbitrary code execution if `create_function` is used with untrusted input.",[167,170,173,176],{"reason":168,"points":169},"Use of dangerous function: create_function",15,{"reason":171,"points":172},"Output escaping: 0% properly escaped",16,{"reason":174,"points":175},"Missing nonce checks",5,{"reason":177,"points":175},"Missing capability checks","2026-03-16T22:43:13.984Z",{"wat":180,"direct":187},{"assetPaths":181,"generatorPatterns":183,"scriptPaths":184,"versionParams":185},[182],"\u002Fwp-content\u002Fplugins\u002Fstella-flags\u002Fcss\u002Fstyles.css",[],[],[186],"stella_flags\u002Fcss\u002Fstyles.css?ver=",{"cssClasses":188,"htmlComments":189,"htmlAttributes":190,"restEndpoints":191,"jsGlobals":192,"shortcodeOutput":193},[18],[],[],[],[],[]]