[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feUON9yTVEeEHRJfSl3gWfKApXJpcEeyxbU8puTq10qY":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":36,"analysis":142,"fingerprints":284},"stickyboard","StickyBoard","1.1.0","ネトデジ編集部","https:\u002F\u002Fprofiles.wordpress.org\u002Fminikuru\u002F","\u003Cp>StickyBoardは、WordPressサイトの任意のページに付箋を追加できるプラグインです。ログインユーザーのみが使用でき、付箋はユーザーごとに個別に保存されます。サイトを閲覧しながらメモを取ったり、重要な情報をマークしたりするのに最適です。\u003C\u002Fp>\n\u003Cp>\u003Cstrong>主な機能:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>サイト上の任意の場所に付箋を追加\u003C\u002Fli>\n\u003Cli>ドラッグアンドドロップで付箋を移動\u003C\u002Fli>\n\u003Cli>5色の付箋（黄、緑、青、ピンク、紫）\u003C\u002Fli>\n\u003Cli>テキスト内のURLを自動的にリンクに変換\u003C\u002Fli>\n\u003Cli>管理画面からすべての付箋を一覧表示・管理\u003C\u002Fli>\n\u003Cli>付箋の表示は作成者のみ（他のユーザーには表示されません）\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>使い方:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>プラグインをインストールして有効化\u003C\u002Fli>\n\u003Cli>サイトの任意のページに移動\u003C\u002Fli>\n\u003Cli>画面右下（または設定により左下）のツールバーの「+」ボタンをクリック\u003C\u002Fli>\n\u003Cli>付箋を配置したい場所をクリック\u003C\u002Fli>\n\u003Cli>メモを入力（自動保存されます）\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>For English Users:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>StickyBoard allows logged-in users to add sticky notes to any page on your WordPress site. Notes are private to each user and can be placed anywhere on the page. Perfect for taking notes while browsing or marking important information.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Add sticky notes to any position on your site\u003C\u002Fli>\n\u003Cli>Drag and drop to move notes\u003C\u002Fli>\n\u003Cli>5 color options (yellow, green, blue, pink, purple)\u003C\u002Fli>\n\u003Cli>Automatic URL linking in note text\u003C\u002Fli>\n\u003Cli>Manage all your notes from the admin dashboard\u003C\u002Fli>\n\u003Cli>Notes are visible only to their creator\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Additional Info\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>開発者情報:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>当プラグインはミニクル合同会社によって開発・メンテナンスされています。\u003Cbr \u002F>\nサポートや質問については、公式サイトをご覧ください: \u003Ca href=\"https:\u002F\u002Fminikuru.co.jp\" rel=\"nofollow ugc\">https:\u002F\u002Fminikuru.co.jp\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>For English Users:\u003C\u002Fp>\n\u003Cp>This plugin is developed and maintained by MINIKURU LLC.\u003Cbr \u002F>\nFor support and inquiries, please visit our official website: \u003Ca href=\"https:\u002F\u002Fminikuru.co.jp\" rel=\"nofollow ugc\">https:\u002F\u002Fminikuru.co.jp\u003C\u002Fa>\u003C\u002Fp>\n","ログインユーザーがWebページに付箋を追加できるようにするプラグイン。Create personal sticky notes on any WordPress page.",0,352,"2025-04-30T05:08:00.000Z","6.8.5","5.0","7.0",[18,19,20,21,22],"annotations","memo","notes","personal-notes","sticky-notes","https:\u002F\u002Fminikuru.co.jp\u002Fproducts-tools\u002Fwordpress-plugins\u002Fstickyboard\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstickyboard.1.1.0.zip",100,null,"2026-03-15T15:16:48.613Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":25,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"minikuru",3,80,30,94,"2026-04-05T01:54:34.746Z",[37,60,82,105,124],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":25,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":55,"download_link":56,"security_score":57,"vuln_count":58,"unpatched_count":11,"last_vuln_date":59,"fetched_at":27},"plugin-notes-plus","Plugin Notes Plus","1.2.10","jamiebergen","https:\u002F\u002Fprofiles.wordpress.org\u002Fjamiebergen\u002F","\u003Cp>Have you ever returned to a site that you built a while back and asked, “Why did I install this plugin?” This plugin provides an extra column on the Plugins page that enables you to add, edit, or delete notes about the plugins you have installed on a particular site. These notes are intended to provide documentation regarding why a particular plugin was installed and how or where it’s being used.\u003C\u002Fp>\n\u003Cp>Features\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Add as many or as few notes as you need for each plugin.\u003C\u002Fli>\n\u003Cli>Edit or delete notes as desired.\u003C\u002Fli>\n\u003Cli>Select an icon to go with each note to quickly convey what type of content it contains (e.g., info, warning, link, etc.)\u003C\u002Fli>\n\u003Cli>Format notes using basic HTML tags if desired.\u003C\u002Fli>\n\u003Cli>Any links included in the note will be automatically converted to \u003Ccode>target=\"_blank\"\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Notes are added and updated via Ajax, avoiding slow page reloads.\u003C\u002Fli>\n\u003Cli>Notes also display on the WordPress Updates page for any plugins that need to be updated.\u003C\u002Fli>\n\u003Cli>A filter is provided if you would like to display notes beneath the plugin description instead of in a separate column.\u003C\u002Fli>\n\u003Cli>A filter is available to selectively hide or display plugin notes in the admin.\u003C\u002Fli>\n\u003C\u002Ful>\n","Adds a column to the Plugins page where you can add, edit, or delete notes about a plugin.",9000,75205,61,"2025-03-20T00:08:00.000Z","6.7.5","6.2","5.6",[19,53,54],"plugin-notes","plugins","https:\u002F\u002Fgithub.com\u002Fjamiebergen\u002Fplugin-notes-plus","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fplugin-notes-plus.1.2.10.zip",91,2,"2024-08-16 00:00:00",{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":68,"downloaded":69,"rating":25,"num_ratings":70,"last_updated":71,"tested_up_to":72,"requires_at_least":73,"requires_php":74,"tags":75,"homepage":79,"download_link":80,"security_score":81,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"dashboard-sticky-notes","Dashboard Sticky Notes","1.1.2","Hiroaki Miyashita","https:\u002F\u002Fprofiles.wordpress.org\u002Fhiroaki-miyashita\u002F","\u003Cp>The Dashboard Sticky Notes plugin adds the functionality to add sticky notes into the dashboard. You could specify the context (normal or side), priority (high or low), and target (user roles and\u002For users themselves) with notes. HTML tags and shortcodes are also available in the content.\u003C\u002Fp>\n\u003Cp>Localization\u003C\u002Fp>\n\u003Cul>\n\u003Cli>French (fr_FR) – \u003Ca href=\"http:\u002F\u002Fericlowry.fr\u002F\" rel=\"nofollow ugc\">Eric Lowry\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Japanese (ja) – \u003Ca href=\"https:\u002F\u002Fwpgogo.com\u002F\" rel=\"nofollow ugc\">Hiroaki Miyashita\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Documentation in Japanese\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.cmswp.jp\u002Fplugins\u002Fdashboard_sticky_notes\u002F\" rel=\"nofollow ugc\">Dashboard Sticky Notes\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Special Thanks\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.wpsupportspecialists.com\u002Fdashboard-sticky-notes\u002F\" rel=\"nofollow ugc\">WP Support Specialists\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Known Issues \u002F Bugs\u003C\u002Fh3>\n\u003Cp>None.\u003C\u002Fp>\n\u003Ch3>Uninstall\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Deactivate the plugin\u003C\u002Fli>\n\u003Cli>That’s it! 🙂\u003C\u002Fli>\n\u003C\u002Fol>\n","This plugin adds the functionality to add sticky notes into the dashboard.",2000,27333,12,"2020-07-11T00:35:00.000Z","5.4.19","3.0","5.3",[76,77,20,78,22],"dashboard","note","sticky","https:\u002F\u002Fwww.cmswp.jp\u002Fplugins\u002Fdashboard_sticky_notes\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdashboard-sticky-notes.1.1.2.zip",85,{"slug":83,"name":84,"version":85,"author":86,"author_profile":87,"description":88,"short_description":89,"active_installs":90,"downloaded":91,"rating":92,"num_ratings":93,"last_updated":94,"tested_up_to":95,"requires_at_least":15,"requires_php":96,"tags":97,"homepage":100,"download_link":101,"security_score":102,"vuln_count":103,"unpatched_count":11,"last_vuln_date":104,"fetched_at":27},"page-post-notes","Page & Post Notes","1.3.5","yydevelopment","https:\u002F\u002Fprofiles.wordpress.org\u002Fyydevelopment\u002F","\u003Cp>The page & post notes plugin allow you to add notes on pages and posts on your wordpress website.\u003C\u002Fp>\n\u003Cp>With this plugin you will be able to easily create notes with important data and remove them if required.\u003C\u002Fp>\n\u003Ch4>Page & Post Notes Plugin Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>The ability to add notes to all pages and posts on your wordpress websites\u003C\u002Fli>\n\u003Cli>The ability to add as many notes you want for each page and post\u003C\u002Fli>\n\u003Cli>The ability to remove notes you don’t want anymore\u003C\u002Fli>\n\u003Cli>The ability to change text direction to rtl and ltr\u003C\u002Fli>\n\u003Cli>The ability to add separator line to the text\u003C\u002Fli>\n\u003Cli>The ability to save notes also on wordpress dashbaord\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>About the author & license\u003C\u002Fh4>\n\u003Cp>This plugin was brought to you for free by \u003Ca href=\"https:\u002F\u002Fwww.yydevelopment.com\u002F\" rel=\"nofollow ugc\">YYDevelopment\u003C\u002Fa> under GPLv2 license.\u003C\u002Fp>\n\u003Cp>The plugin is 100% free and we intend to keep it that way in the future as well. You are free to use this plugin and all our other \u003Ca href=\"https:\u002F\u002Fwww.yydevelopment.com\u002Fyydevelopment-wordpress-plugins\u002F\" rel=\"nofollow ugc\">free wordpress plugins\u003C\u002Fa> for your projects, your client’s projects or for anything else you need.\u003C\u002Fp>\n\u003Cp>If this plugin was helpful for you please share it online and if you get a chance to give it a \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpage-post-notes\u002F#reviews\" rel=\"ugc\">positive review\u003C\u002Fa> we will appreciate that.\u003C\u002Fp>\n\u003Cp>If have any problems or questions regarding our page & post notes  plugin \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fpage-post-notes\u002F\" rel=\"ugc\">submit a ticket\u003C\u002Fa> and we will be happy to help.\u003C\u002Fp>\n\u003Cp>By the way, we are based in Israel so we welcome you to visit our Hebrew site as well \u003Ca href=\"https:\u002F\u002Fwww.yydevelopment.co.il\u002F\" rel=\"nofollow ugc\">YYDevelopment Israel\u003C\u002Fa> if you are fellow Israeli.\u003C\u002Fp>\n\u003Ch4>Help support us with a coffee donation\u003C\u002Fh4>\n\u003Cp>Don’t you just hate it when you download a plugin and you find out that in order to use it you have to buy a pro version?\u003C\u002Fp>\n\u003Cp>Even bigger problem is when you use a plugin and then just out of the blue the developer decides to add a pro version and he either changes the way the plugin works or he converts some of the free functions to paid ones.\u003C\u002Fp>\n\u003Cp>We sure did hate that and a few years back we decided to start creating some of the plugins ourselves and we decided to share them all with the WordPress community \u003Cstrong>100% FREE\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>Nowadays we have more than 15 plugins and you can download and use them all for free by \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsearch\u002Fyydevelopment\u002F\" rel=\"ugc\">Clicking Here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>If you liked this plugin and you want to help support our cause, \u003Ca href=\"https:\u002F\u002Fwww.yydevelopment.com\u002Fcoffee-break\u002F?plugin=page-post-notes\" rel=\"nofollow ugc\">buy us a coffee\u003C\u002Fa>. Studies show that coffee helps with creating WordPress plugins.\u003C\u002Fp>\n","Simple plugin that allow you to notes on pages and posts",1000,14163,88,11,"2025-12-10T03:45:00.000Z","6.9.4","5.2.4",[19,77,20,98,99],"page-notes","post-notes","https:\u002F\u002Fwww.yydevelopment.com\u002Fyydevelopment-wordpress-plugins\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpage-post-notes.1.3.5.zip",99,1,"2025-11-06 17:14:46",{"slug":106,"name":107,"version":108,"author":109,"author_profile":110,"description":111,"short_description":112,"active_installs":90,"downloaded":113,"rating":25,"num_ratings":114,"last_updated":115,"tested_up_to":95,"requires_at_least":116,"requires_php":51,"tags":117,"homepage":121,"download_link":122,"security_score":102,"vuln_count":103,"unpatched_count":11,"last_vuln_date":123,"fetched_at":27},"wb-sticky-notes","Sticky Notes for WP Dashboard","1.2.5","Web Builder 143","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebbuilder143\u002F","\u003Cp>Need a simple way to stay organized inside your WordPress admin area? \u003Cstrong>Sticky Notes for WP Dashboard\u003C\u002Fstrong> lets you add customizable sticky notes right to your dashboard—just like the ones on your desk, but smarter.\u003C\u002Fp>\n\u003Cp>Use it to jot down reminders, create to-do lists, or leave quick notes for other users. Each note can be styled, resized, and moved around to fit the way you work. Whether you’re managing a personal site or running a team, Sticky Notes makes it easy to keep important information front and center.\u003C\u002Fp>\n\u003Ch3>Why you’ll love Sticky Notes for WP Dashboard:\u003C\u002Fh3>\n\u003Cp>– Create as many sticky notes as you need, anywhere in the admin dashboard\u003Cbr \u002F>\n– Change colors, fonts, and themes to match your style\u003Cbr \u002F>\n– Drag and drop notes to position them exactly where you want\u003Cbr \u002F>\n– Show or hide notes with one click\u003Cbr \u002F>\n– Duplicate, archive, and organize notes easily\u003Cbr \u002F>\n– Control who can access notes with user role restrictions\u003Cbr \u002F>\n– Option to hide notes on specific admin pages for a cleaner view\u003C\u002Fp>\n\u003Cp>With an intuitive interface and zero setup required, Sticky Notes for WP Dashboard is a must-have productivity tool for any WP site owner.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Create sticky notes directly on your WP admin dashboard  \u003C\u002Fli>\n\u003Cli>Easy-to-use interface for quick note management  \u003C\u002Fli>\n\u003Cli>Customize notes with themes, colors, and fonts  \u003C\u002Fli>\n\u003Cli>Resizable and movable notes for better organization  \u003C\u002Fli>\n\u003Cli>Hide or show notes globally with one click  \u003C\u002Fli>\n\u003Cli>Duplicate notes with a single click  \u003C\u002Fli>\n\u003Cli>Archive notes for future reference  \u003C\u002Fli>\n\u003Cli>Disable sticky notes on specific admin pages  \u003C\u002Fli>\n\u003Cli>Limit note access by user roles\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Our Other Free Plugins\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwb-custom-product-tabs-for-woocommerce\u002F\" rel=\"ugc\">Custom Product Tabs for WooCommerce\u003C\u002Fa>  \u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwb-mail-logger\u002F\" rel=\"ugc\">WB Mail Logger\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Fol>\n","Create sticky notes in your WP admin for reminders and to-dos. Restrict notes by user roles and disable them on specific pages.",16123,6,"2026-01-19T15:14:00.000Z","3.5.0",[118,119,20,120,22],"admin-notes","dashboard-notes","reminders","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwb-sticky-notes.1.2.5.zip","2025-12-31 00:00:00",{"slug":125,"name":126,"version":127,"author":128,"author_profile":129,"description":130,"short_description":131,"active_installs":132,"downloaded":133,"rating":134,"num_ratings":135,"last_updated":136,"tested_up_to":95,"requires_at_least":137,"requires_php":121,"tags":138,"homepage":139,"download_link":140,"security_score":102,"vuln_count":103,"unpatched_count":11,"last_vuln_date":141,"fetched_at":27},"notely","Notely","1.9.0","Rocket Apps","https:\u002F\u002Fprofiles.wordpress.org\u002Fmikeyott\u002F","\u003Cp>Create admin text notes for any post, page or custom post type.\u003C\u002Fp>\n\u003Ch3>How To Use\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Go to \u003Cstrong>Settings\u003C\u002Fstrong> -> \u003Cstrong>Notely\u003C\u002Fstrong>, choose which post types to enable for and set any other desired options.\u003C\u002Fli>\n\u003Cli>Hit the \u003Cstrong>Save Settings\u003C\u002Fstrong> button.\u003C\u002Fli>\n\u003Cli>You will now see a \u003Cstrong>Notes\u003C\u002Fstrong> metabox when you create or edit.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Official website and support\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fnotely\" rel=\"ugc\">Notely support\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>More options with \u003Ca href=\"https:\u002F\u002Frocketapps.com.au\u002Fproduct\u002Fnotely-pro\u002F?origin=notely\" rel=\"nofollow ugc\">Notely Pro\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Frocketapps.com.au\u002Fshop\u002F?origin=notely\" rel=\"nofollow ugc\">More awesome plugins\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Frocketapps.com.au\u002Fwproject-theme\u002F?origin=notely\" rel=\"nofollow ugc\">Project Management built on WordPress\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Create admin text notes for any post, page or custom post type.",700,16889,96,13,"2026-03-04T01:09:00.000Z","4.0",[19,20,98,99],"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fnotely\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnotely.1.9.0.zip","2025-09-26 00:00:00",{"attackSurface":143,"codeSignals":198,"taintFlows":235,"riskAssessment":275,"analyzedAt":283},{"hooks":144,"ajaxHandlers":169,"restRoutes":170,"shortcodes":195,"cronEvents":196,"entryPointCount":197,"unprotectedCount":11},[145,149,153,157,161,165],{"type":146,"name":147,"callback":147,"file":148,"line":33},"action","init","stickyboard.php",{"type":146,"name":150,"callback":151,"file":148,"line":152},"wp_enqueue_scripts","enqueue_scripts",33,{"type":146,"name":154,"callback":155,"file":148,"line":156},"admin_menu","add_admin_menu",36,{"type":146,"name":158,"callback":159,"file":148,"line":160},"admin_init","register_settings",39,{"type":146,"name":162,"callback":163,"file":148,"line":164},"rest_api_init","register_rest_routes",42,{"type":146,"name":166,"callback":167,"file":148,"line":168},"wp_footer","debug_info",58,[],[171,179,184,190],{"namespace":172,"route":173,"methods":174,"callback":176,"permissionCallback":177,"file":148,"line":178},"stickyboard\u002Fv1","\u002Fnotes",[175],"GET","get_notes","rest_permissions_check",428,{"namespace":172,"route":173,"methods":180,"callback":182,"permissionCallback":177,"file":148,"line":183},[181],"POST","create_note",434,{"namespace":172,"route":185,"methods":186,"callback":188,"permissionCallback":177,"file":148,"line":189},"\u002Fnotes\u002F(?P\u003Cid>\\d+)",[187],"PUT","update_note",440,{"namespace":172,"route":185,"methods":191,"callback":193,"permissionCallback":177,"file":148,"line":194},[192],"DELETE","delete_note",446,[],[],4,{"dangerousFunctions":199,"sqlUsage":200,"outputEscaping":212,"fileOperations":11,"externalRequests":11,"nonceChecks":58,"capabilityChecks":11,"bundledLibraries":234},[],{"prepared":201,"raw":31,"locations":202},17,[203,207,210],{"file":204,"line":205,"context":206},"templates\\admin-page.php",72,"$wpdb->get_var() with variable interpolation",{"file":204,"line":208,"context":209},75,"$wpdb->get_results() with variable interpolation",{"file":204,"line":211,"context":209},84,{"escaped":213,"rawEcho":214,"locations":215},104,8,[216,219,222,224,226,228,230,232],{"file":148,"line":217,"context":218},307,"raw output",{"file":220,"line":221,"context":218},"templates\\my-notes.php",133,{"file":220,"line":223,"context":218},136,{"file":220,"line":225,"context":218},139,{"file":220,"line":227,"context":218},181,{"file":220,"line":229,"context":218},184,{"file":220,"line":231,"context":218},359,{"file":220,"line":233,"context":218},382,[],[236],{"entryPoint":237,"graph":238,"unsanitizedCount":11,"severity":274},"\u003Cmy-notes> (templates\\my-notes.php:0)",{"nodes":239,"edges":269},[240,245,251,255,260,264],{"id":241,"type":242,"label":243,"file":220,"line":244},"n0","source","$_POST",157,{"id":246,"type":247,"label":248,"file":220,"line":249,"wp_function":250},"n1","sink","query() [SQLi]",164,"query",{"id":252,"type":242,"label":253,"file":220,"line":254},"n2","$_GET",93,{"id":256,"type":247,"label":257,"file":220,"line":258,"wp_function":259},"n3","get_results() [SQLi]",199,"get_results",{"id":261,"type":242,"label":262,"file":220,"line":263},"n4","$_GET (x2)",211,{"id":265,"type":247,"label":266,"file":220,"line":267,"wp_function":268},"n5","echo() [XSS]",213,"echo",[270,272,273],{"from":241,"to":246,"sanitized":271},true,{"from":252,"to":256,"sanitized":271},{"from":261,"to":265,"sanitized":271},"low",{"summary":276,"deductions":277},"The stickyboard plugin v1.1.0 exhibits a generally strong security posture based on the static analysis.  The absence of dangerous functions, file operations, and external HTTP requests is a positive sign.  Furthermore, the high percentage of SQL queries using prepared statements and properly escaped output suggests good development practices regarding data handling and preventing cross-site scripting (XSS) vulnerabilities. The limited attack surface, with all entry points having permission checks, is also commendable.  The plugin also has no recorded vulnerability history, which further reinforces its perceived security.\n\nHowever, a notable concern is the complete lack of capability checks in conjunction with REST API routes. While these routes do have permission callbacks, the absence of specific capability checks means that access control might be broader than intended, potentially allowing users with less privileged roles to perform actions they shouldn't. The limited number of nonce checks (only 2) also raises a slight concern for potential Cross-Site Request Forgery (CSRF) vulnerabilities, although without specific flows identified, this remains a theoretical risk. The absence of any recorded historical vulnerabilities is a strength, indicating consistent secure development, but it doesn't negate the need to scrutinize the current code for potential weaknesses.\n\nIn conclusion, stickyboard v1.1.0 appears to be a securely developed plugin with robust data handling. The primary areas for potential improvement lie in refining access control for its REST API endpoints by incorporating specific capability checks and potentially increasing the number of nonce checks to mitigate CSRF risks more thoroughly. The lack of historical vulnerabilities is a significant positive, but the current analysis reveals areas where security could be further hardened.",[278,281],{"reason":279,"points":280},"REST API routes lack capability checks",10,{"reason":282,"points":31},"Low number of nonce checks","2026-03-17T07:00:24.813Z",{"wat":285,"direct":294},{"assetPaths":286,"generatorPatterns":289,"scriptPaths":290,"versionParams":291},[287,288],"\u002Fwp-content\u002Fplugins\u002Fstickyboard\u002Fassets\u002Fcss\u002Fstickyboard.css","\u002Fwp-content\u002Fplugins\u002Fstickyboard\u002Fassets\u002Fjs\u002Fstickyboard.js",[],[288],[292,293],"stickyboard.css?ver=","stickyboard.js?ver=",{"cssClasses":295,"htmlComments":296,"htmlAttributes":297,"restEndpoints":298,"jsGlobals":300,"shortcodeOutput":302},[],[],[],[299],"\u002Fstickyboard\u002Fv1",[301],"stickyBoard",[]]