[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGkb0h8JxMqUy9QXQauuJiB_TlKG_PvMSHV8CkWxFq10":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":63,"crawl_stats":37,"alternatives":69,"analysis":168,"fingerprints":294},"taxonomy-terms-order","Category Order and Taxonomy Terms Order","1.9.4","nsp-code","https:\u002F\u002Fprofiles.wordpress.org\u002Fnsp-code\u002F","\u003Cp>Easily control the order of Categories and any hierarchical taxonomy with a simple drag-and-drop interface. Reorder parent and child terms visually in the admin and choose whether the plugin automatically applies your custom term order to front-end queries.\u003C\u002Fp>\n\u003Ch3>Key features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Intuitive drag-and-drop reordering for Categories and all hierarchical taxonomies. \u003C\u002Fli>\n\u003Cli>Option to auto-apply the custom term order to front-end queries (no theme\u002Fplugin edits required). \u003C\u002Fli>\n\u003Cli>Keep the admin term lists in your new order (makes management and editorial workflows consistent). \u003C\u002Fli>\n\u003Cli>Works with multiple taxonomies per post type — switch between taxonomies from the same interface. \u003C\u002Fli>\n\u003Cli>Multisite aware and regularly updated for modern WordPress and PHP versions (see changelog for compatibility notes).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>How it works\u003C\u002Fh3>\n\u003Cp>After activating the plugin, a new Taxonomy Order page becomes available under the custom post type menu. Simply open it and drag terms into the exact order you want — including parent\u002Fchild hierarchy.\u003Cbr \u002F>\nUse the plugin’s Taxonomy Order screen to drag terms into the order you want. To apply the custom order automatically across your site, enable the Autosort option — the plugin will adjust term queries on the fly so your chosen order shows without template changes. If you prefer to control ordering in code, include orderby => ‘term_order’ when calling get_terms() to use the plugin’s order programmatically.\u003C\u002Fp>\n\u003Cp>This plugin is developed by \u003Ca href=\"http:\u002F\u002Fwww.nsp-code.com\" rel=\"nofollow ugc\">Nsp-Code\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>See the \u003Ca href=\"https:\u002F\u002Fwww.nsp-code.com\u002Fpremium-plugins\u002Fwordpress-plugins\u002Fadvanced-taxonomy-terms-order\u002F\" rel=\"nofollow ugc\">Advanced Taxonomy Terms Order\u003C\u002Fa> for advanced features.\u003C\u002Fp>\n\u003Ch3>Localization\u003C\u002Fh3>\n\u003Cp>Available in Catalan, Chinese (China), Chinese (Taiwan), Czech, Dutch, Dutch (Belgium), English (Australia), English (Canada), English (New Zealand), English (UK), English (US), French (France), Galician, German, Italian, Japanese, Norwegian (Bokmål), Polish, Portuguese (Portugal), Russian, Spanish (Chile), Spanish (Spain), Spanish (Venezuela), Swedish, and Turkish.\u003Cbr \u002F>\nWhant to contribute with a translation to your language? Please check at https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Ftaxonomy-terms-order\u003C\u002Fp>\n\u003Cp>There isn’t any Editors for your native language on plugin Contributors? You can help to moderate! https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Ftaxonomy-terms-order\u002Fcontributors\u003C\u002Fp>\n","Drag-and-drop ordering for Categories & any taxonomy (hierarchically) using a Drag and Drop Sortable JavaScript capability.",500000,9896783,90,162,"2026-02-19T17:40:00.000Z","6.9.4","2.8","",[20,21,22,23],"categories-sort","category-order","taxonomy-order","terms-order","http:\u002F\u002Fwww.nsp-code.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftaxonomy-terms-order.1.9.4.zip",99,2,0,"2018-02-22 00:00:00","2026-03-15T15:16:48.613Z",[32,48],{"id":33,"url_slug":34,"title":35,"description":36,"plugin_slug":4,"theme_slug":37,"affected_versions":38,"patched_in_version":39,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":29,"updated_date":44,"references":45,"days_to_patch":47},"WF-fe7e6a53-36c3-41fc-bae8-a9e1de2494ad-taxonomy-terms-order","category-order-and-taxonomy-terms-order-authenticated-php-object-injection","Category Order and Taxonomy Terms Order \u003C= 1.5.2.2 - Authenticated PHP Object Injection","The Category Order and Taxonomy Terms Order plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2.2 via deserialization of untrusted input from the 'order' parameter. This allows authenticated attackers, with subscriber-level permissions and above, to inject a PHP Object. No known POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.",null,"\u003C1.5.3","1.5.3","high",8.5,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","Deserialization of Untrusted Data","2024-01-22 19:56:02",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Ffe7e6a53-36c3-41fc-bae8-a9e1de2494ad?source=api-prod",2161,{"id":49,"url_slug":50,"title":51,"description":52,"plugin_slug":4,"theme_slug":37,"affected_versions":53,"patched_in_version":54,"severity":55,"cvss_score":56,"cvss_vector":57,"vuln_type":58,"published_date":59,"updated_date":44,"references":60,"days_to_patch":62},"WF-c5e66244-2b86-491b-9eca-19e42e7f2da8-taxonomy-terms-order","category-order-and-taxonomy-terms-order-cross-site-scripting","Category Order and Taxonomy Terms Order \u003C1.4.6.0 - Cross-Site Scripting","The Category Order and Taxonomy Terms Order plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 1.4.6.0 due to insufficient input sanitization and output escaping on the 'post_type' parameter. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.","\u003C1.4.6.0","1.4.6.1","medium",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2015-08-18 00:00:00",[61],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fc5e66244-2b86-491b-9eca-19e42e7f2da8?source=api-prod",3080,{"slug":7,"display_name":7,"profile_url":8,"plugin_count":64,"total_installs":65,"avg_security_score":26,"avg_patch_time_days":66,"trust_score":67,"computed_at":68},5,1162000,1630,78,"2026-04-03T21:30:14.004Z",[70,89,109,127,148],{"slug":71,"name":72,"version":73,"author":74,"author_profile":75,"description":76,"short_description":77,"active_installs":78,"downloaded":79,"rating":80,"num_ratings":81,"last_updated":82,"tested_up_to":83,"requires_at_least":17,"requires_php":18,"tags":84,"homepage":86,"download_link":87,"security_score":88,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"wp-category-sort","WP Category Sort","2.0.3","Lovinnagi","https:\u002F\u002Fprofiles.wordpress.org\u002Flovinnagi\u002F","\u003Cp>The WP Category Sort plugin allows you to easily reorder your categories the way you want via drag and drop.\u003C\u002Fp>\n","The WP Category Sort plugin allows you to easily reorder your categories the way you want via drag and drop.",500,5402,100,1,"2021-12-03T12:23:00.000Z","5.8.13",[20,21,85,22,23],"order-category","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-category-sort\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-category-sort.2.0.3.zip",85,{"slug":90,"name":91,"version":92,"author":93,"author_profile":94,"description":95,"short_description":96,"active_installs":97,"downloaded":98,"rating":99,"num_ratings":100,"last_updated":101,"tested_up_to":16,"requires_at_least":102,"requires_php":103,"tags":104,"homepage":107,"download_link":108,"security_score":80,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"custom-taxonomy-order-ne","Custom Taxonomy Order","4.0.2","Marcel Pol","https:\u002F\u002Fprofiles.wordpress.org\u002Fmpol\u002F","\u003Cp>Custom Taxonomy Order is a plugin for WordPress which allows for the ordering of taxonomy terms.\u003C\u002Fp>\n\u003Cp>It supports the following features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Order (custom) terms through a simple drag-and-drop interface.\u003C\u002Fli>\n\u003Cli>No custom coding needed. It uses standard WordPress filters.\u003C\u002Fli>\n\u003Cli>It uses the available WordPress scripts and styles.\u003C\u002Fli>\n\u003Cli>The plugin is lightweight, without any unnecessary scripts to load into the admin.\u003C\u002Fli>\n\u003Cli>It falls in line gracefully with the look and feel of the WordPress interface.\u003C\u002Fli>\n\u003Cli>It is located under the Tools > Term Order menu in the backend.\u003C\u002Fli>\n\u003Cli>Translated or translatable.\u003C\u002Fli>\n\u003Cli>Custom functions to order the taxonomies themselves.\u003C\u002Fli>\n\u003Cli>There is no Pro version, everything works in the Free version.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Compatibility\u003C\u002Fh4>\n\u003Cp>This plugin is compatible with \u003Ca href=\"https:\u002F\u002Fwww.classicpress.net\" rel=\"nofollow ugc\">ClassicPress\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Contributions\u003C\u002Fh4>\n\u003Cp>This plugin is also available in \u003Ca href=\"https:\u002F\u002Fcodeberg.org\u002Fcyclotouriste\u002Fcustom-taxonomy-order-ne\" rel=\"nofollow ugc\">Codeberg\u003C\u002Fa>.\u003C\u002Fp>\n","Allows for the ordering of categories and custom taxonomy terms through a simple drag-and-drop interface",50000,717000,96,95,"2026-01-10T09:21:00.000Z","4.1","7.0",[21,105,22,106],"order","term-order","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcustom-taxonomy-order-ne\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-taxonomy-order-ne.4.0.2.zip",{"slug":110,"name":111,"version":112,"author":7,"author_profile":8,"description":113,"short_description":114,"active_installs":115,"downloaded":116,"rating":117,"num_ratings":118,"last_updated":119,"tested_up_to":120,"requires_at_least":121,"requires_php":18,"tags":122,"homepage":24,"download_link":126,"security_score":80,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"post-terms-order","Post Terms Order – per Post based","1.3","\u003Cp>This plugin allows Taxonomy Terms sort per Post based using a Drag and Drop Sortable JavaScript capability. It include a clean interface which makes the plugin easy and intuitive to use.\u003C\u002Fp>\n\u003Ch4>Usage\u003C\u002Fh4>\n\u003Cp>Nothing complicated, eveyrone should be able to use this code:\u003Cbr \u002F>\n* Install the plugin through the Install Plugins interface or by uploading the \u003Ccode>post-terms-order\u003C\u002Fcode> folder to your \u003Ccode>\u002Fwp-content\u002Fplugins\u002F\u003C\u002Fcode> directory.\u003Cbr \u002F>\n* Activate the Post Terms Order plugin.\u003Cbr \u002F>\n* A new menu item page will be created within Settings > Post Terms Order, this is the place where sorts can be created.\u003C\u002Fp>\n\u003Ch4>Limitation\u003C\u002Fh4>\n\u003Cp>The plugin is limited to 20 objects. For unlimited usage check the \u003Ca href=\"https:\u002F\u002Fwww.nsp-code.com\u002Fpremium-plugins\u002Fadvanced-post-terms-order\u002F\" rel=\"nofollow ugc\">Advanced Post Terms Order\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Advanced Version\u003C\u002Fh4>\n\u003Cp>There is an advanced version of the plugin with improved functionality and more features. For more details check the \u003Ca href=\"https:\u002F\u002Fwww.nsp-code.com\u002Fpremium-plugins\u002Fadvanced-post-terms-order\u002F\" rel=\"nofollow ugc\">Advanced Post Terms Order\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>This plugin is developed by \u003Ca href=\"http:\u002F\u002Fwww.nsp-code.com\" rel=\"nofollow ugc\">Nsp-Code\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Localization\u003C\u002Fh3>\n\u003Cp>Available in English, Romanian.\u003Cbr \u002F>\nWant to contribute with a translation to your language? Please check at https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fpost-terms-order\u003Cbr \u002F>\nhttp:\u002F\u002Fwww.nsp-code.com\u003C\u002Fp>\n","Sort Taxonomy Terms per Post basis using a Drag and Drop Sortable JavaScript capability.",2000,56062,60,7,"2026-03-09T12:59:00.000Z","6.8.5","3.2",[123,124,110,125,23],"post-taxonomy-order","post-taxonomy-terms-order","post-terms-order-per-post-basis","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpost-terms-order.1.3.zip",{"slug":128,"name":129,"version":130,"author":131,"author_profile":132,"description":133,"short_description":134,"active_installs":135,"downloaded":136,"rating":28,"num_ratings":28,"last_updated":137,"tested_up_to":138,"requires_at_least":139,"requires_php":140,"tags":141,"homepage":145,"download_link":146,"security_score":147,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"reshuffle","Reshuffle – Change Post Order, Product Order, Taxonomy Order","1.0.0","Elenova Digital","https:\u002F\u002Fprofiles.wordpress.org\u002Felenovadigital\u002F","\u003Ch4>Change Post Order, Product Order, Category Order\u003C\u002Fh4>\n\u003Cp>Reshuffle allows users to reorder posts, pages, products, and taxonomy terms using a simple drag-and-drop interface. This plugin provides custom ordering functionality for all post types and taxonomies, including WooCommerce products and categories.\u003C\u002Fp>\n\u003Cp>With Reshuffle, you can:\u003Cbr \u002F>\n– Drag and drop posts, products, or taxonomy terms to reorder them.\u003Cbr \u002F>\n– Maintain custom sorting on the front-end and admin side.\u003Cbr \u002F>\n– Ensure that custom order persists even after a page refresh.\u003Cbr \u002F>\n– Apply custom ordering to WooCommerce product pages and categories.\u003Cbr \u002F>\n– Support for additional taxonomies.\u003C\u002Fp>\n\u003Cp>This plugin adds a simple and user-friendly interface for changing the order of items in WordPress, without the need for custom code.\u003C\u002Fp>\n\u003Ch3>Requires PHP\u003C\u002Fh3>\n\u003Cp>This plugin requires PHP version 7.2 or higher to work properly. Make sure your server is running the recommended PHP version to ensure compatibility and performance.\u003C\u002Fp>\n","Reorder posts, products, and taxonomy terms via a drag-and-drop interface.",40,513,"2025-03-25T10:50:00.000Z","6.7.5","5.2","7.2",[21,142,143,144,22],"custom-post-order","post-types-order","posts-order","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Freshuffle\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Freshuffle.1.0.0.zip",92,{"slug":149,"name":150,"version":151,"author":152,"author_profile":153,"description":154,"short_description":155,"active_installs":156,"downloaded":157,"rating":99,"num_ratings":135,"last_updated":158,"tested_up_to":16,"requires_at_least":159,"requires_php":160,"tags":161,"homepage":166,"download_link":167,"security_score":80,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"real-custom-post-order","Real Custom Post Order: Create a custom order for your content","1.3.130","devowl.io GmbH","https:\u002F\u002Fprofiles.wordpress.org\u002Fdevowl\u002F","\u003Cp>\u003Cstrong>Create a custom order of your content by dragging and dropping\u003C\u002Fstrong> for the following content types:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Posts\u003C\u002Fli>\n\u003Cli>Pages\u003C\u002Fli>\n\u003Cli>WooCommerce products\u003C\u002Fli>\n\u003Cli>All other custom post types\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Simple and intuitive sorting for your content!\u003C\u002Fp>\n\u003Ch3>Free Sandbox\u003C\u002Fh3>\n\u003Cp>You want to try Real Custom Post Order before installing? \u003Cstrong>Take a free sandbox\u003C\u002Fstrong> and play around!\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Ftry.devowl.io\u002F?product=RCPO\" rel=\"nofollow ugc\">Create sandbox\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Why should you create a custom post order?\u003C\u002Fh3>\n\u003Cp>Many WordPress sites grow over time and with it the number of posts, pages, products, etc. It can be difficult to find the right content that is related to each other if you use the default order by publication date from WordPress. A custom order of posts – whether it’s a post order, a custom page order, a custom product order, or a custom post type order – can help you organize your content in a more intuitive way that helps you find your content more simply and quickly.\u003C\u002Fp>\n\u003Ch3>Compatibility\u003C\u002Fh3>\n\u003Cp>We try our best to make Real Custom Post Order compatible with other plugins that enhance your WordPress. At the moment we have explicit compatibility with the following plugins:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdevowl.io\u002Fgo\u002Freal-category-management?source=wordpress-org&plugin=real-custom-post-order\" rel=\"nofollow ugc\">Real Category Management\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Freal-media-library-lite\u002F\" rel=\"ugc\">Real Media Library\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoocommerce\u002F\" rel=\"ugc\">WooCommerce\u003C\u002Fa> (custom post order for products only)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwordpress-seo\u002F\" rel=\"ugc\">Yoast SEO\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwpseo.de\u002F\" rel=\"nofollow ugc\">wpSEO\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Supported Languages\u003C\u002Fh3>\n\u003Cp>Real Custom Post Order is \u003Cstrong>in multiple languages available\u003C\u002Fstrong>:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>English\u003C\u002Fli>\n\u003Cli>German\u003C\u002Fli>\n\u003Cli>Dutch\u003C\u002Fli>\n\u003Cli>Spanish\u003C\u002Fli>\n\u003Cli>French\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you want to help us add a translation in your language, please \u003Ca href=\"https:\u002F\u002Fdevowl.io\u002Fsupport\u002F\" rel=\"nofollow ugc\">open a support ticket\u003C\u002Fa> and we will help you with the technical part. Thanks for your participation!\u003C\u002Fp>\n","Custom post order for posts, pages, WooCommerce products and custom post types using drag and drop. Simple and intuitive sorting of your content!",9000,321603,"2025-12-02T08:36:00.000Z","5.9","7.4.0",[162,142,163,164,165],"custom-page-order","custom-post-type-order","custom-product-order","custom-taxonomy-order","https:\u002F\u002Fdevowl.io","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Freal-custom-post-order.1.3.130.zip",{"attackSurface":169,"codeSignals":230,"taintFlows":247,"riskAssessment":284,"analyzedAt":293},{"hooks":170,"ajaxHandlers":220,"restRoutes":227,"shortcodes":228,"cronEvents":229,"entryPointCount":81,"unprotectedCount":28},[171,177,180,183,187,190,193,198,201,205,208,213,217],{"type":172,"name":173,"callback":174,"priority":175,"file":176,"line":175},"action","to\u002Fget_terms_orderby\u002Fignore","to_get_terms_orderby_ignore_coauthors",10,"include\\class.addons.php",{"type":172,"name":173,"callback":178,"priority":175,"file":176,"line":179},"to_get_terms_orderby_ignore_polylang",11,{"type":172,"name":173,"callback":181,"priority":175,"file":176,"line":182},"to_get_terms_orderby_ignore_woocommerce",12,{"type":172,"name":184,"callback":184,"file":185,"line":186},"admin_print_scripts","include\\class.tto.php",15,{"type":172,"name":188,"callback":188,"file":185,"line":189},"admin_print_styles",16,{"type":172,"name":191,"callback":191,"priority":26,"file":185,"line":192},"admin_menu",17,{"type":194,"name":195,"callback":196,"priority":175,"file":185,"line":197},"filter","terms_clauses","apply_order_filter",18,{"type":194,"name":199,"callback":199,"priority":81,"file":185,"line":200},"get_terms_orderby",19,{"type":194,"name":202,"callback":203,"file":185,"line":204},"plugin_action_links_taxonomy-terms-order\u002Ftaxonomy-terms-order.php","add_plugin_action_links",23,{"type":194,"name":206,"callback":203,"file":185,"line":207},"network_admin_plugin_action_links_taxonomy-terms-order\u002Ftaxonomy-terms-order.php",24,{"type":172,"name":209,"callback":210,"priority":26,"file":211,"line":212},"wp_initialize_site","TTO_wp_initialize_site","taxonomy-terms-order.php",48,{"type":172,"name":214,"callback":215,"file":211,"line":216},"plugins_loaded","TTO_load_textdomain",65,{"type":172,"name":214,"callback":218,"file":211,"line":219},"TTO_class_load",80,[221],{"action":222,"nopriv":223,"callback":224,"hasNonce":225,"hasCapCheck":223,"file":185,"line":226},"update-taxonomy-order",false,"saveAjaxOrder",true,21,[],[],[],{"dangerousFunctions":231,"sqlUsage":232,"outputEscaping":237,"fileOperations":28,"externalRequests":28,"nonceChecks":27,"capabilityChecks":81,"bundledLibraries":246},[],{"prepared":27,"raw":81,"locations":233},[234],{"file":211,"line":235,"context":236},33,"$wpdb->get_col() with variable interpolation",{"escaped":238,"rawEcho":27,"locations":239},37,[240,244],{"file":241,"line":242,"context":243},"include\\class.interface.php",132,"raw output",{"file":241,"line":245,"context":243},271,[],[248,272],{"entryPoint":249,"graph":250,"unsanitizedCount":81,"severity":55},"Interface (include\\class.interface.php:9)",{"nodes":251,"edges":269},[252,257,263,266],{"id":253,"type":254,"label":255,"file":241,"line":256},"n0","source","$_GET (x3)",14,{"id":258,"type":259,"label":260,"file":241,"line":261,"wp_function":262},"n1","sink","echo() [XSS]",75,"echo",{"id":264,"type":254,"label":265,"file":241,"line":256},"n2","$_GET",{"id":267,"type":259,"label":260,"file":241,"line":268,"wp_function":262},"n3",79,[270,271],{"from":253,"to":258,"sanitized":225},{"from":264,"to":267,"sanitized":223},{"entryPoint":273,"graph":274,"unsanitizedCount":81,"severity":283},"\u003Cclass.interface> (include\\class.interface.php:0)",{"nodes":275,"edges":280},[276,277,278,279],{"id":253,"type":254,"label":255,"file":241,"line":256},{"id":258,"type":259,"label":260,"file":241,"line":261,"wp_function":262},{"id":264,"type":254,"label":265,"file":241,"line":256},{"id":267,"type":259,"label":260,"file":241,"line":268,"wp_function":262},[281,282],{"from":253,"to":258,"sanitized":225},{"from":264,"to":267,"sanitized":223},"low",{"summary":285,"deductions":286},"The \"taxonomy-terms-order\" plugin, version 1.9.5, exhibits a generally positive security posture with a small attack surface and robust input validation mechanisms.  The static analysis reveals good practices such as a high percentage of properly escaped output and the presence of nonce and capability checks on its single AJAX handler.  The limited number of SQL queries, with a majority using prepared statements, further contributes to this positive assessment.  However, the vulnerability history presents a significant concern.  Two previously discovered CVEs, including one high and one medium severity vulnerability, indicate a past susceptibility to complex attacks like deserialization and cross-site scripting.  While currently unpatched vulnerabilities are zero, the recurring types suggest potential areas for future risk if not diligently addressed in updates.",[287,289,291],{"reason":288,"points":186},"Past high severity vulnerability",{"reason":290,"points":175},"Past medium severity vulnerability",{"reason":292,"points":64},"Flows with unsanitized paths detected","2026-03-16T17:00:41.296Z",{"wat":295,"direct":305},{"assetPaths":296,"generatorPatterns":299,"scriptPaths":300,"versionParams":301},[297,298],"\u002Fwp-content\u002Fplugins\u002Ftaxonomy-terms-order\u002Fcss\u002Fto.css","\u002Fwp-content\u002Fplugins\u002Ftaxonomy-terms-order\u002Fjs\u002Fto-javascript.js",[],[298],[302,303,304],"taxonomy-terms-order\u002Ftaxonomy-terms-order.php","taxonomy-terms-order\u002Fcss\u002Fto.css?ver=","taxonomy-terms-order\u002Fjs\u002Fto-javascript.js?ver=",{"cssClasses":306,"htmlComments":308,"htmlAttributes":309,"restEndpoints":318,"jsGlobals":319,"shortcodeOutput":321},[307],"menu_tto",[],[310,311,312,313,314,315,316,317,311,312,313,314,315,316,317],"data-tto-taxonomy","data-tto-term_id","data-tto-term_parent","data-tto-current_term","data-tto-term_order","data-tto-current_parent","data-tto-drag_root","data-tto-term_level",[],[320],"TTO_VERSION",[]]