[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDrlJgvsxVfYSNWJ_EjPXhlHO7puCwf84JrmBMaa2OMo":3,"$fSytOS_gu6Qh7nhJR48sFEmizuMp46M0e50FlvE6Hpm8":265,"$fdSeaMUi4mwjEN80tQ0HGjOdC3qbRjUqSJUEMr5X2oHI":270},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"discovery_status":30,"vulnerabilities":31,"developer":49,"crawl_stats":37,"alternatives":54,"analysis":165,"fingerprints":247},"theme-duplicator","Theme Duplicator","1.1","Rohit Choudhary","https:\u002F\u002Fprofiles.wordpress.org\u002Frohit92\u002F","\u003Cp>This plugin creates a duplicate copy of you selected theme.\u003C\u002Fp>\n","This plugin creates a duplicate copy of you selected theme.",400,8206,100,2,"2024-11-19T09:48:00.000Z","6.7.5","4.1","",[20,21,22,23],"copy-theme","duplicate-theme","duplicator","network","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftheme-duplicator\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftheme-duplicator.zip",71,1,"2025-04-01 00:00:00","2026-07-22T17:31:50.256Z","no_bundle",[32],{"id":33,"url_slug":34,"title":35,"description":36,"plugin_slug":4,"theme_slug":37,"affected_versions":38,"patched_in_version":37,"severity":39,"cvss_score":40,"cvss_vector":41,"vuln_type":42,"published_date":28,"updated_date":43,"references":44,"days_to_patch":37,"patch_diff_files":46,"patch_trac_url":37,"research_status":37,"research_verified":47,"research_rounds_completed":48,"research_plan":37,"research_summary":37,"research_vulnerable_code":37,"research_fix_diff":37,"research_exploit_outline":37,"research_model_used":37,"research_started_at":37,"research_completed_at":37,"research_error":37,"poc_status":37,"poc_video_id":37,"poc_summary":37,"poc_steps":37,"poc_tested_at":37,"poc_wp_version":37,"poc_php_version":37,"poc_playwright_script":37,"poc_exploit_code":37,"poc_has_trace":47,"poc_model_used":37,"poc_verification_depth":37},"CVE-2025-31845","theme-duplicator-cross-site-request-forgery","Theme Duplicator \u003C= 1.1 - Cross-Site Request Forgery","The Theme Duplicator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site administrator into performing an action such as clicking on a link.",null,"\u003C=1.1","medium",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2025-04-08 18:31:21",[45],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F331a893c-498d-4ae8-8a04-e7aa25640e80?source=api-prod",[],false,0,{"slug":50,"display_name":7,"profile_url":8,"plugin_count":27,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":51,"trust_score":52,"computed_at":53},"rohit92",30,74,"2026-08-29T09:42:26.905Z",[55,77,101,125,143],{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":63,"downloaded":64,"rating":65,"num_ratings":66,"last_updated":67,"tested_up_to":68,"requires_at_least":69,"requires_php":70,"tags":71,"homepage":75,"download_link":76,"security_score":13,"vuln_count":48,"unpatched_count":48,"last_vuln_date":37,"fetched_at":29},"simple-social-icons","Simple Social Icons","4.0.0","OsomPress","https:\u002F\u002Fprofiles.wordpress.org\u002Fosompress\u002F","\u003Cp>Simple Social Icons is an easy to use, customizable way to display icons that link visitors to your various social profiles. You can choose which profiles to link to, customize the color and size of your icons, and align them to the left, center, or right.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Two Ways to Use Social Icons:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong>Widget (WordPress 4.0+):\u003C\u002Fstrong> The traditional widget works on all supported WordPress versions. Simply drag the “Simple Social Icons” widget into any widget area and configure it from the widget form. All available icons are accessible through the widget.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Block Variations (WordPress 6.9+):\u003C\u002Fstrong> On WordPress 6.9+, this plugin extends the core Social Icons block with additional icon variations. These icons automatically appear when adding a Social Icons block in the block editor. Block variations only add icons that are not already available in WordPress core, so you get the best of both worlds: core icons plus these additional options.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>Important:\u003C\u002Fstrong> If you’re currently using the widget, nothing changes for you. The widget continues to work exactly as before on all WordPress versions. Block variations are an additional feature that only activates on WordPress 6.9+ and doesn’t affect existing widget functionality.\u003C\u002Fp>\n\u003Cp>*Note: The simple_social_default_glyphs filter has been deprecated from this plugin.\u003C\u002Fp>\n","This plugin provides two ways to display social icons: a traditional widget (available on all WordPress versions) and block variations for the core So …",100000,3277265,86,92,"2026-05-27T16:28:00.000Z","7.0.2","4.0","7.4",[72,73,74],"social-media","social-networking","social-profiles","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsimple-social-icons\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-social-icons.4.0.0.zip",{"slug":78,"name":79,"version":80,"author":79,"author_profile":81,"description":82,"short_description":83,"active_installs":84,"downloaded":85,"rating":86,"num_ratings":87,"last_updated":88,"tested_up_to":68,"requires_at_least":89,"requires_php":90,"tags":91,"homepage":96,"download_link":97,"security_score":98,"vuln_count":99,"unpatched_count":48,"last_vuln_date":100,"fetched_at":29},"buddypress","BuddyPress","14.5.0","https:\u002F\u002Fprofiles.wordpress.org\u002Fbuddypress\u002F","\u003Cp>Are you looking for modern, robust, and sophisticated social network software? BuddyPress is a suite of components that are common to a typical social network, and allows for great add-on features through WordPress’s extensive plugin system.\u003C\u002Fp>\n\u003Cp>Aimed at site builders & developers, BuddyPress is focused on ease of integration, ease of use, and extensibility. It is deliberately powerful yet unbelievably simple social network software, built by contributors to WordPress.\u003C\u002Fp>\n\u003Cp>\u003Ciframe loading=\"lazy\" title=\"VideoPress Video Player\" aria-label=\"VideoPress Video Player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fvideo.wordpress.com\u002Fembed\u002FwvvZgNwo?hd=1&cover=1\" frameborder=\"0\" allowfullscreen allow=\"clipboard-write\">\u003C\u002Fiframe>\u003Cscript src='https:\u002F\u002Fv0.wordpress.com\u002Fjs\u002Fnext\u002Fvideopress-iframe.js?m=1770107250'>\u003C\u002Fscript>\u003C\u002Fp>\n\u003Cp>Members can register on your site to create user profiles, have private conversations, make social connections, create and interact in groups, and much more. Truly a social network in a box, BuddyPress helps you build a home for your company, school, sports team, or other niche community.\u003C\u002Fp>\n\u003Ch4>Built with developers in mind\u003C\u002Fh4>\n\u003Cp>BuddyPress helps site builders & developers add community features to their websites. It comes with a robust theme compatibility API that does its best to make every BuddyPress content page look and feel right with just about any WordPress theme. You will likely need to adjust some styling on your own to make everything look pristine.\u003C\u002Fp>\n\u003Cp>BuddyPress themes are just WordPress themes with additional templates, and with a little work, you could easily create your own, too! A handful of BuddyPress-specific themes are readily available for download from WordPress.org, and lots more are available from third-party theme authors.\u003C\u002Fp>\n\u003Cp>BuddyPress also comes with built-in support for Akismet and \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbbpress\u002F\" rel=\"ugc\">bbPress\u003C\u002Fa>, two very popular and very powerful WordPress plugins. If you’re using either, visit their settings pages and ensure everything is configured to your liking.\u003C\u002Fp>\n\u003Ch4>The BuddyPress Add-ons\u003C\u002Fh4>\n\u003Cp>WordPress.org is home to some amazing Add-ons for BuddyPress, including:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbp-attachments\u002F\" rel=\"ugc\">BP Attachments\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbp-classic\u002F\" rel=\"ugc\">BP Classic\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>NB\u003C\u002Fstrong>: BP Classic is a backwards compatibility Add-on for BuddyPress 12.0 and up bringing back the BP Legacy URL parser, the BP Default theme and BP Legacy widgets.\u003C\u002Fp>\n\u003Cp>Go to \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fbuddypress\u002F\" rel=\"nofollow ugc\">BuddyPress profile on WordPress.org\u003C\u002Fa> to find them all!\u003C\u002Fp>\n\u003Ch4>Join our community\u003C\u002Fh4>\n\u003Cp>If you’re interested in contributing to BuddyPress, we’d love to have you. Head over to the \u003Ca href=\"https:\u002F\u002Fcodex.buddypress.org\u002Fparticipate-and-contribute\u002F\" rel=\"nofollow ugc\">BuddyPress Documentation\u003C\u002Fa> site to find out how you can pitch in.\u003C\u002Fp>\n\u003Cp>BuddyPress is available in many languages thanks to the volunteer efforts of individuals all around the world. Check out our \u003Ca href=\"https:\u002F\u002Fcodex.buddypress.org\u002Ftranslations\u002F\" rel=\"nofollow ugc\">translations page\u003C\u002Fa> on the BuddyPress Documentation site for more details. If you are a polyglot, please \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fbuddypress\" rel=\"nofollow ugc\">consider helping translate BuddyPress\u003C\u002Fa> into your language.\u003C\u002Fp>\n\u003Cp>Growing the BuddyPress community means better software for everyone!\u003C\u002Fp>\n","Get together safely, in your own way, in WordPress.",90000,13809446,82,375,"2026-07-07T16:52:00.000Z","6.1","5.6",[92,93,94,23,95],"community","group","members","self-hosted","https:\u002F\u002Fbuddypress.org","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddypress.14.5.0.zip",81,24,"2026-01-22 18:30:17",{"slug":102,"name":103,"version":104,"author":105,"author_profile":106,"description":107,"short_description":108,"active_installs":109,"downloaded":110,"rating":111,"num_ratings":112,"last_updated":113,"tested_up_to":16,"requires_at_least":114,"requires_php":90,"tags":115,"homepage":121,"download_link":122,"security_score":123,"vuln_count":14,"unpatched_count":48,"last_vuln_date":124,"fetched_at":29},"page-or-post-clone","Fast Page & Post Duplicator","9.3","carlosfazenda","https:\u002F\u002Fprofiles.wordpress.org\u002Fcarlosfazenda\u002F","\u003Cp>The Fast Page & Post Duplicator plugin lets you make a copy of any post or page in WordPress with one click.\u003C\u002Fp>\n\u003Cp>It makes a copy of the original content so you can use the same layouts, formatting and structure again without having to start from scratch.\u003C\u002Fp>\n\u003Cp>This plugin is simple and fast. It makes managing content easier.\u003C\u002Fp>\n\u003Cp>It is great for:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Using the same page layouts\u003C\u002Fli>\n\u003Cli>Making versions of landing pages\u003C\u002Fli>\n\u003Cli>Copying posts to update or translate them\u003C\u002Fli>\n\u003Cli>Making copies of templates quickly\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cp>✔ Duplicate posts with one click\u003Cbr \u002F>\n✔ Duplicate pages with one click\u003Cbr \u002F>\n✔ It copies the content, title and settings\u003Cbr \u002F>\n✔ Keeps the structure and formatting as the original post\u003Cbr \u002F>\n✔ Fast and simple\u003Cbr \u002F>\n✔ With a simple interface in the WordPress post list\u003C\u002Fp>\n\u003Cp>New things in recent versions:\u003C\u002Fp>\n\u003Cp>✔ See what you have cloned recently\u003Cbr \u002F>\n✔ View statistics on who is cloning what\u003Cbr \u002F>\n✔ Check history of all the clones you have made\u003C\u002Fp>\n\u003Ch3>How it works\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Install and activate the Fast Page & Post Duplicator plugin.\u003C\u002Fli>\n\u003Cli>Go to \u003Cstrong>Posts \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> All Posts\u003C\u002Fstrong> or \u003Cstrong>Pages \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> All Pages\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>Move your mouse over any item in the list.\u003C\u002Fli>\n\u003Cli>Click \u003Cstrong>Clone\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>The copied content will open as a \u003Cstrong>draft\u003C\u002Fstrong>. You can edit and publish it.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Why use Fast Page & Post Duplicator?\u003C\u002Fh3>\n\u003Cp>Making pages from scratch can take a time.\u003C\u002Fp>\n\u003Cp>With the Fast Page & Post Duplicator plugin you can make a copy of existing content. Change it which saves you time and makes sure your site looks consistent.\u003C\u002Fp>\n\u003Cp>The Fast Page & Post Duplicator plugin works with the WordPress admin interface and does not need any special setup.\u003C\u002Fp>\n","Make a copy of posts and pages with just one click.",60000,651521,94,13,"2026-03-06T14:39:00.000Z","4.5",[116,117,118,119,120],"clone-page","clone-post","duplicate-post","page","post-duplicator","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpage-or-post-clone\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpage-or-post-clone.zip",98,"2026-03-04 19:00:38",{"slug":126,"name":127,"version":6,"author":128,"author_profile":129,"description":130,"short_description":131,"active_installs":132,"downloaded":133,"rating":111,"num_ratings":134,"last_updated":135,"tested_up_to":136,"requires_at_least":114,"requires_php":18,"tags":137,"homepage":140,"download_link":141,"security_score":142,"vuln_count":48,"unpatched_count":48,"last_vuln_date":37,"fetched_at":29},"lightweight-social-icons","Lightweight Social Icons","Tom","https:\u002F\u002Fprofiles.wordpress.org\u002Fedge22\u002F","\u003Cp>Lightweight Social Icons is an easy to use, lightweight social icon widget which lets you display your favorite social profile icons.\u003C\u002Fp>\n\u003Cp>The icons use an icon font, meaning you can choose the size, border radius (roundess), color and hover color of your icons!\u003C\u002Fp>\n\u003Cp>Check out GeneratePress, our awesome WordPress theme! (https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fgeneratepress)\u003C\u002Fp>\n\u003Ch4>Features include:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Choose your own order\u003C\u002Fli>\n\u003Cli>Icon size\u003C\u002Fli>\n\u003Cli>Border radius\u003C\u002Fli>\n\u003Cli>Background color\u003C\u002Fli>\n\u003Cli>Text\u002Ficon color\u003C\u002Fli>\n\u003Cli>Background color on hover\u003C\u002Fli>\n\u003Cli>Text\u002Ficon color on hover\u003C\u002Fli>\n\u003Cli>Open links in new window\u003C\u002Fli>\n\u003Cli>Enable\u002Fdisable tooltips\u003C\u002Fli>\n\u003Cli>Alignment of icons\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Included icons:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Facebook\u003C\u002Fli>\n\u003Cli>Twitter\u003C\u002Fli>\n\u003Cli>Google+\u003C\u002Fli>\n\u003Cli>Instagram\u003C\u002Fli>\n\u003Cli>LinkedIn\u003C\u002Fli>\n\u003Cli>Pinterest\u003C\u002Fli>\n\u003Cli>Flickr\u003C\u002Fli>\n\u003Cli>Email\u003C\u002Fli>\n\u003Cli>RSS\u003C\u002Fli>\n\u003Cli>Stumbleupon\u003C\u002Fli>\n\u003Cli>Tumblr\u003C\u002Fli>\n\u003Cli>Vimeo\u003C\u002Fli>\n\u003Cli>YouTube\u003C\u002Fli>\n\u003Cli>Github\u003C\u002Fli>\n\u003Cli>Soundcloud\u003C\u002Fli>\n\u003Cli>DeviantArt\u003C\u002Fli>\n\u003Cli>Phone\u003C\u002Fli>\n\u003Cli>Skype\u003C\u002Fli>\n\u003Cli>Dribbble\u003C\u002Fli>\n\u003Cli>Foursquare\u003C\u002Fli>\n\u003Cli>Reddit\u003C\u002Fli>\n\u003Cli>Spotify\u003C\u002Fli>\n\u003Cli>Digg\u003C\u002Fli>\n\u003Cli>Vine\u003C\u002Fli>\n\u003Cli>Codepen\u003C\u002Fli>\n\u003Cli>Delicious\u003C\u002Fli>\n\u003Cli>JSFiddle\u003C\u002Fli>\n\u003Cli>Stack Overflow\u003C\u002Fli>\n\u003Cli>WordPress\u003C\u002Fli>\n\u003Cli>Dropbox\u003C\u002Fli>\n\u003Cli>Steam\u003C\u002Fli>\n\u003Cli>Behance\u003C\u002Fli>\n\u003Cli>iTunes\u003C\u002Fli>\n\u003Cli>Yelp\u003C\u002Fli>\n\u003Cli>500px\u003C\u002Fli>\n\u003Cli>AngelList\u003C\u002Fli>\n\u003Cli>Blog Lovin’\u003C\u002Fli>\n\u003Cli>Paper Plane (Newsletter)\u003C\u002Fli>\n\u003Cli>VK\u003C\u002Fli>\n\u003Cli>Xing\u003C\u002Fli>\n\u003Cli>Bandcamp\u003C\u002Fli>\n\u003Cli>BitBucket\u003C\u002Fli>\n\u003Cli>Snapchat\u003C\u002Fli>\n\u003Cli>Trip Advisor\u003C\u002Fli>\n\u003Cli>Houzz\u003C\u002Fli>\n\u003Cli>Mixcloud\u003C\u002Fli>\n\u003Cli>Last.fm\u003C\u002Fli>\n\u003C\u002Ful>\n","Looking to add simple social icons to your widget areas? Choose the size and color of your icons, and then choose from 47 different social profiles.",30000,466313,63,"2020-03-18T17:14:00.000Z","5.4.19",[138,139,72,73,74],"social-icon-widget","social-icons","http:\u002F\u002Fgeneratepress.com\u002Flightweight-social-icons","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flightweight-social-icons.1.1.zip",85,{"slug":144,"name":145,"version":146,"author":147,"author_profile":148,"description":149,"short_description":150,"active_installs":132,"downloaded":151,"rating":111,"num_ratings":152,"last_updated":153,"tested_up_to":68,"requires_at_least":154,"requires_php":155,"tags":156,"homepage":161,"download_link":162,"security_score":111,"vuln_count":163,"unpatched_count":48,"last_vuln_date":164,"fetched_at":29},"social-pug","Hubbub Lite – Fast, free social sharing and follow buttons","1.36.3","NerdPress","https:\u002F\u002Fprofiles.wordpress.org\u002Fnerdpressteam\u002F","\u003Cp>\u003Cstrong>Your content is worth sharing. Let’s make it easier.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Hubbub gives you simple, customizable social share and follow buttons that work right out of the box. No coding, no clutter. Just an easy way for visitors to share your content to tons of popular social media platforms, like Facebook, Pinterest, X, Threads, and more. Unlock additional growth features when you register for free or upgrade.\u003C\u002Fp>\n\u003Ch4>What’s in Hubbub Lite:\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>⏩️ \u003Ca href=\"https:\u002F\u002Fmorehubbub.com\u002Fshare-buttons\u002F\" rel=\"nofollow ugc\">Add social share buttons\u003C\u002Fa>:\u003C\u002Fstrong> Above your content, below your content. Add social share buttons wherever they make the most sense.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>📍 Floating social share sidebar:\u003C\u002Fstrong> A tidy little toolbar that sticks with your readers as they scroll.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>📊 Show off your share counts:\u003C\u002Fstrong> Social proof that shows visitors how many people love your content.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>🖼️ Crisp social icons\u003C\u002Fstrong>: Hubbub uses SVG icons so everything looks clean and sharp, on every screen, in every size.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>📈 \u003Ca href=\"https:\u002F\u002Fmorehubbub.com\u002Fdashboard\u002F\" rel=\"nofollow ugc\">Engagement Stats dashboard\u003C\u002Fa>\u003C\u002Fstrong> – Get a quick look at the most-shared content across your entire site. Plus, find out how many times your content has been saved by email when you get Hubbub Pro+!\u003C\u002Fp>\n\u003Ch4>Unlock Hubbub Lite for even more features, free!\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Register your copy of Hubbub Lite and get the following features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>🌐 17+ more platforms for sharing:\u003C\u002Fstrong> Flipboard, Threads, Reddit, WhatsApp, Tumblr, and more (including email sharing).\u003C\u002Fp>\n\u003Cp>📥 \u003Ca href=\"https:\u002F\u002Fmorehubbub.com\u002Fdashboard\u002F\" rel=\"nofollow ugc\">\u003Cstrong>Follow buttons\u003C\u002Fstrong>\u003C\u002Fa>\u003Cstrong>:\u003C\u002Fstrong> Grow your followers on other platforms by linking your audience directly to Instagram, YouTube, Twitch, Behance, Apple Podcasts, Spotify and more.\u003C\u002Fp>\n\u003Ch4>What’s in Hubbub Pro when you’re ready for more\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>📍 Additional Pinterest options:\u003C\u002Fstrong> Get specific with how your audience shares your content to Pinterest using hidden images, image hover buttons, and more.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>📸 Control your social previews:\u003C\u002Fstrong> Customize the titles, descriptions, and images that show up when someone shares your post.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>📱 Sticky mobile footer bar:\u003C\u002Fstrong> Buttons stay right where readers can tap them, perfect for readers on mobile devices.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>🎯 Pop-up share buttons:\u003C\u002Fstrong>  Trigger a sharing pop-up based on actions or timing (it’s subtle, not spammy).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>📈 Show off your most-shared posts:\u003C\u002Fstrong> Add a widget that spotlights your most-shared content, automatically.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>👋 Best-in-class support:\u003C\u002Fstrong> Provided by the \u003Ca href=\"https:\u002F\u002Fwww.nerdpress.net\u002F\" rel=\"nofollow ugc\">helpful team of Nerds at NerdPress\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>And more!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch4>What’s in Hubbub Pro+ when you’re ready to go beyond Pro\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>📧 \u003Ca href=\"https:\u002F\u002Fmorehubbub.com\u002Fsave-this\u002F\" rel=\"nofollow ugc\">Save This\u003C\u002Fa>:\u003C\u002Fstrong> Grow your mailing list by inserting a highly customizable form into your content so visitors can save your content to their inbox.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>🔍 \u003Ca href=\"https:\u002F\u002Fmorehubbub.com\u002Ffind-and-fix\u002F\" rel=\"nofollow ugc\">Find & Fix\u003C\u002Fa>\u003C\u002Fstrong>: See which blog posts are missing social sharing info and quickly update them without opening the full post.\u003C\u002Fp>\n\u003Cp>💡 \u003Ca href=\"https:\u002F\u002Fmorehubbub.com\u002F\" rel=\"nofollow ugc\">Learn more about Hubbub Pro and Pro+\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Website and Documentation\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmorehubbub.com\u002F\" rel=\"nofollow ugc\">Visit morehubbub.com\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmorehubbub.com\u002Fdocs\u002F\" rel=\"nofollow ugc\">Hubbub Support docs\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Made with ❤️ and ☕ by \u003Ca href=\"https:\u002F\u002Fwww.nerdpress.net\u002F\" rel=\"nofollow ugc\">NerdPress\u003C\u002Fa>.\u003C\u002Fp>\n","Your content is worth sharing. Let's makes it easier!",1994428,172,"2026-05-21T14:32:00.000Z","5.3","7.2.24",[157,72,158,159,160],"social-buttons","social-network","social-share","social-sharing","https:\u002F\u002Fmorehubbub.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsocial-pug.1.36.3.zip",9,"2025-11-05 18:42:05",{"attackSurface":166,"codeSignals":178,"taintFlows":193,"riskAssessment":231,"analyzedAt":246},{"hooks":167,"ajaxHandlers":174,"restRoutes":175,"shortcodes":176,"cronEvents":177,"entryPointCount":48,"unprotectedCount":48},[168],{"type":169,"name":170,"callback":171,"file":172,"line":173},"action","admin_menu","rtdpDuplicateMenu","index.php",19,[],[],[],[],{"dangerousFunctions":179,"sqlUsage":180,"outputEscaping":182,"fileOperations":184,"externalRequests":48,"nonceChecks":48,"capabilityChecks":48,"bundledLibraries":192},[],{"prepared":48,"raw":48,"locations":181},[],{"escaped":183,"rawEcho":184,"locations":185},6,3,[186,189,191],{"file":172,"line":187,"context":188},66,"raw output",{"file":172,"line":190,"context":188},77,{"file":172,"line":190,"context":188},[],[194,220],{"entryPoint":195,"graph":196,"unsanitizedCount":184,"severity":39},"rtdpDuplicateAdmin (index.php:22)",{"nodes":197,"edges":217},[198,203,209,213],{"id":199,"type":200,"label":201,"file":172,"line":202},"n0","source","$_REQUEST (x2)",37,{"id":204,"type":205,"label":206,"file":172,"line":207,"wp_function":208},"n1","sink","file_put_contents() [File Write]",51,"file_put_contents",{"id":210,"type":200,"label":211,"file":172,"line":212},"n2","$_REQUEST",43,{"id":214,"type":205,"label":215,"file":172,"line":187,"wp_function":216},"n3","echo() [XSS]","echo",[218,219],{"from":199,"to":204,"sanitized":47},{"from":210,"to":214,"sanitized":47},{"entryPoint":221,"graph":222,"unsanitizedCount":184,"severity":39},"\u003Cindex> (index.php:0)",{"nodes":223,"edges":228},[224,225,226,227],{"id":199,"type":200,"label":201,"file":172,"line":202},{"id":204,"type":205,"label":206,"file":172,"line":207,"wp_function":208},{"id":210,"type":200,"label":211,"file":172,"line":212},{"id":214,"type":205,"label":215,"file":172,"line":187,"wp_function":216},[229,230],{"from":199,"to":204,"sanitized":47},{"from":210,"to":214,"sanitized":47},{"summary":232,"deductions":233},"The theme-duplicator plugin v1.1 exhibits a mixed security posture. On the positive side, the static analysis reveals no identified dangerous functions, a complete reliance on prepared statements for SQL queries, and no external HTTP requests. This indicates some good development practices. However, there are significant areas of concern. The taint analysis shows two flows with unsanitized paths, which, while not flagged as critical or high severity, represent potential vulnerabilities that could lead to unintended data manipulation or disclosure if exploited.  Furthermore, the complete absence of nonce checks and capability checks across all entry points is a major weakness, leaving the plugin susceptible to various attacks, particularly CSRF, as suggested by its vulnerability history.\n\nThe vulnerability history is a critical indicator of ongoing security issues. With one known CVE, currently unpatched and categorized as medium severity, and a history of common CSRF vulnerabilities, it suggests a pattern of insecure coding practices that have resulted in exploitable flaws. The fact that the last vulnerability was dated as recent (2025-04-01) further amplifies the risk. While the plugin avoids some common pitfalls like raw SQL and has a limited attack surface, the identified unsanitized paths and the complete lack of robust authorization and integrity checks, coupled with a recent unpatched vulnerability, make this plugin a significant security risk that requires immediate attention.",[234,237,240,242,244],{"reason":235,"points":236},"Unpatched medium severity CVE",15,{"reason":238,"points":239},"Taint analysis: 2 flows with unsanitized paths",10,{"reason":241,"points":239},"No nonce checks implemented",{"reason":243,"points":239},"No capability checks implemented",{"reason":245,"points":184},"Output escaping only 67% proper","2026-03-16T19:38:21.868Z",{"wat":248,"direct":254},{"assetPaths":249,"generatorPatterns":251,"scriptPaths":252,"versionParams":253},[250],"\u002Fwp-content\u002Fplugins\u002Ftheme-duplicator\u002Ftheme-duplicator.php",[],[],[],{"cssClasses":255,"htmlComments":256,"htmlAttributes":257,"restEndpoints":262,"jsGlobals":263,"shortcodeOutput":264},[],[],[258,259,260,261],"name=\"td_source_theme\"","name=\"td_dest_theme\"","name=\"td_new_name\"","name=\"td_create_theme\"",[],[],[],{"error":266,"url":267,"statusCode":268,"statusMessage":269,"message":269},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Ftheme-duplicator\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":27,"versions":271},[272],{"version":273,"download_url":274,"svn_tag_url":275,"released_at":37,"has_diff":47,"diff_files_changed":276,"diff_lines":37,"trac_diff_url":37,"vulnerabilities":277,"is_current":47},"1.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftheme-duplicator.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Ftheme-duplicator\u002Ftags\u002F1.0\u002F",[],[278],{"id":33,"url_slug":34,"title":35,"severity":39,"cvss_score":40,"vuln_type":42,"patched_in_version":37}]