[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foDWy27y3QCFMc7rCD1wDkGs1l3kiaTTK0uNBYh1v-lc":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":22,"download_link":23,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":35,"analysis":36,"fingerprints":129},"super-annotation","Super annotation","1.0.4","eventtex","https:\u002F\u002Fprofiles.wordpress.org\u002Feventtex\u002F","\u003Cp>Allows to add an extra column on the plugin page to quickly add a note in front of each plugin.\u003C\u002Fp>\n\u003Ch3>Installation in WordPress admin\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>Go to your WordPress administration \u003Ccode>Extensions > Add\u003C\u002Fcode>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Search for \u003Ccode>Super Annotation\u003C\u002Fcode> (use the search form)\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Click the Install and Activate button of the extension\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Installation FTP\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>Download the full \u003Ccode>super-annotation\u003C\u002Fcode> folder to the \u003Ccode>\u002Fwp-content\u002Fplugins\u002F\u003C\u002Fcode> directory\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Activate the extension from the ‘Extension’ menu in WordPress\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Adding an annotation\u003C\u002Fh3>\n\u003Cp>On the plugins page an input field appears on each line allowing you to add an annotation\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>Select the plugin concerned by the annotation\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Add your annotation and click on the ADD button\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Deleting an annotation\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>Select the plugin concerned by the annotation\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Delete your annotation by clicking on the DELETE button\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Display of annotation columns\u003C\u002Fh3>\n\u003Cp>You can choose whether or not to display the columns relating to the Super Annotation\u003Cbr \u002F>\nplugins by clicking on the eye icon at the top right of your WordPress administration.\u003C\u002Fp>\n","Allows to add an extra column on the plugin page to quickly add a note in front of each plugin.",10,1377,100,1,"2024-07-03T11:22:00.000Z","6.5.8","5.7","7.1",[20,21],"annotation-plugins","commentary-plugins","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsuper-annotation.1.0.5.zip",92,0,null,"2026-03-15T14:54:45.397Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":32,"avg_patch_time_days":31,"trust_score":33,"computed_at":34},2,30,96,91,"2026-04-05T09:20:31.676Z",[],{"attackSurface":37,"codeSignals":68,"taintFlows":79,"riskAssessment":117,"analyzedAt":128},{"hooks":38,"ajaxHandlers":64,"restRoutes":65,"shortcodes":66,"cronEvents":67,"entryPointCount":25,"unprotectedCount":25},[39,45,50,54,58,61],{"type":40,"name":41,"callback":42,"file":43,"line":44},"filter","manage_plugins_columns","add_extension_annotations_column_header","super-annotation.php",21,{"type":46,"name":47,"callback":48,"file":43,"line":49},"action","admin_head","add_extension_annotations_column_css",62,{"type":46,"name":51,"callback":52,"priority":11,"file":43,"line":53},"manage_plugins_custom_column","add_extension_annotations_column_content",86,{"type":46,"name":55,"callback":56,"file":43,"line":57},"admin_init","save_or_delete_super_annotations",87,{"type":40,"name":41,"callback":59,"file":43,"line":60},"add_saved_annotations_column_header",104,{"type":46,"name":51,"callback":62,"priority":11,"file":43,"line":63},"add_saved_annotations_column_content",116,[],[],[],[],{"dangerousFunctions":69,"sqlUsage":70,"outputEscaping":72,"fileOperations":25,"externalRequests":25,"nonceChecks":25,"capabilityChecks":25,"bundledLibraries":78},[],{"prepared":25,"raw":25,"locations":71},[],{"escaped":73,"rawEcho":14,"locations":74},8,[75],{"file":43,"line":76,"context":77},113,"raw output",[],[80,99],{"entryPoint":81,"graph":82,"unsanitizedCount":30,"severity":98},"save_or_delete_super_annotations (super-annotation.php:68)",{"nodes":83,"edges":95},[84,89],{"id":85,"type":86,"label":87,"file":43,"line":88},"n0","source","$_POST (x2)",70,{"id":90,"type":91,"label":92,"file":43,"line":93,"wp_function":94},"n1","sink","update_option() [Settings Manipulation]",79,"update_option",[96],{"from":85,"to":90,"sanitized":97},false,"low",{"entryPoint":100,"graph":101,"unsanitizedCount":116,"severity":98},"\u003Csuper-annotation> (super-annotation.php:0)",{"nodes":102,"edges":113},[103,104,105,109],{"id":85,"type":86,"label":87,"file":43,"line":88},{"id":90,"type":91,"label":92,"file":43,"line":93,"wp_function":94},{"id":106,"type":86,"label":107,"file":43,"line":108},"n2","$_POST",81,{"id":110,"type":91,"label":111,"file":43,"line":76,"wp_function":112},"n3","echo() [XSS]","echo",[114,115],{"from":85,"to":90,"sanitized":97},{"from":106,"to":110,"sanitized":97},3,{"summary":118,"deductions":119},"The \"super-annotation\" plugin version 1.0.4 exhibits a generally positive security posture based on the static analysis.  There are no identified dangerous functions, SQL queries are exclusively using prepared statements, and a high percentage of output is properly escaped.  Furthermore, the plugin has no recorded vulnerability history, suggesting a strong track record of secure development. The attack surface is also commendably small, with no public entry points like AJAX handlers, REST API routes, or shortcodes that lack authentication checks.\n\nHowever, a significant concern arises from the taint analysis, which revealed two flows with unsanitized paths. While these did not escalate to critical or high severity, the presence of unsanitized paths indicates a potential for vulnerabilities if data originating from these flows were to be used in a sensitive operation, such as file access or command execution, without proper sanitization. The complete absence of nonce checks and capability checks across all entry points (though the entry points are zero) is also a notable omission that could become a risk if new entry points were introduced without these security measures.\n\nIn conclusion, \"super-annotation\" v1.0.4 is built on a foundation of good security practices, particularly in its handling of SQL and output. The lack of historical vulnerabilities is a strong positive indicator. The primary weakness lies in the identified unsanitized taint flows, which, while not currently exploited, represent a latent risk that warrants attention and mitigation.",[120,123,126],{"reason":121,"points":122},"Taint flows with unsanitized paths found",15,{"reason":124,"points":125},"No nonce checks implemented",5,{"reason":127,"points":125},"No capability checks implemented","2026-03-16T23:38:19.104Z",{"wat":130,"direct":135},{"assetPaths":131,"generatorPatterns":132,"scriptPaths":133,"versionParams":134},[],[],[],[],{"cssClasses":136,"htmlComments":142,"htmlAttributes":143,"restEndpoints":146,"jsGlobals":147,"shortcodeOutput":149},[137,138,139,140,141],"extension-annotation-textarea","column-extension_annotations","saved_annotations","column-saved_annotations","active",[],[144,145],"name=\"extension_annotations","value=\"",[],[148],"document.getElementsByName",[]]