[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fY_AOAKVkIdNDXfC8eqdqFKJ6WdnIDlkiqD5pAvDauXM":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":17,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":37,"analysis":116,"fingerprints":172},"theme-grep-by-boldgrid","Theme Grep by BoldGrid","1.0.0","BoldGrid","https:\u002F\u002Fprofiles.wordpress.org\u002Fboldgrid\u002F","\u003Cp>Theme Grep is a plugin designed to help review WordPress themes. While Theme Check and Theme Sniffer are designed to find specific issues, Theme Grep was built to help automate some of the searches (greps) used to “snoop around” the theme’s code.\u003C\u002Fp>\n","Theme Grep helps to review WordPress themes by automating many searches (greps) used to \"snoop around\" the theme's code.",30,2667,0,"2025-12-01T21:42:00.000Z","6.9.4","3.0.1","",[19,20,21,22,23],"check","checker","coding-standards","theme","tool","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftheme-grep-by-boldgrid.zip",100,null,"2026-03-15T15:16:48.613Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":33,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"boldgrid",15,1098260,96,841,76,"2026-04-03T18:44:04.741Z",[38,56,72,91,107],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":13,"num_ratings":13,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":17,"tags":51,"homepage":53,"download_link":54,"security_score":55,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"campuspress-theme-check","CampusPress Code Check","1.2.3","Ignacio Cruz Moreno","https:\u002F\u002Fprofiles.wordpress.org\u002Figmoweb\u002F","\u003Cp>This plugin is a fork of Theme Check created by Otto42 and pross. There are just a few checks more for CampusPress users.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Note: Please, do not use this plugin if you don’t have a site in CampusPress network.\u003Cbr \u002F>\nYou can found the original Theme Check \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftheme-check\u002F\" rel=\"ugc\">here\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>It checks plugins and themes against WordPress.org guidelines as well as additional requirements needed to pass in order to be supported on sites hosted by CampusPress and WPMU DEV Hosting.\u003C\u002Fp>\n\u003Cp>Any ‘Warnings’ listed should be fixed before submitting for further manual review.\u003C\u002Fp>\n\u003Ch4>How to use it?\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Download the latest version, upload it to your wp-content\u002Fplugins and activate it in your local development installation.\u003C\u002Fli>\n\u003Cli>New menus should appear under Appereance menu called Theme Check and under Plugins menu called Plugin Check.\u003C\u002Fli>\n\u003Cli>Just select the theme in the selection box and click on \u003Ccode>Check it!\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Fol>\n","A simple and easy way to test your theme or plugin for all the latest WordPress standards and practices. A great theme development tool!",10,2335,"2017-07-28T16:10:00.000Z","4.8.28","3.8",[19,20,52,22,23],"template","https:\u002F\u002Fgithub.com\u002Figmoweb\u002Ftheme-check","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcampuspress-theme-check.1.2.3.zip",85,{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":46,"downloaded":64,"rating":25,"num_ratings":65,"last_updated":17,"tested_up_to":66,"requires_at_least":67,"requires_php":68,"tags":69,"homepage":17,"download_link":70,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":71},"color-changer","Color Changer","1.5","rahulraykor","https:\u002F\u002Fprofiles.wordpress.org\u002Frahulraykor\u002F","\u003Cp>Color Changer:\u003Cbr \u002F>\n\u003Cstrong>Changes color on click\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Cstrong>picks color at Random\u003C\u002Fstrong>\u003Cbr \u002F>\nNot Any.\u003C\u002Fp>\n","Color Changer is there to help you out when you get bored of seeing the black & white colors of the editor. Click in the Color Changer Button and  &hellip;",1683,1,"4.5.33","3.7","7.2.0",[19,20,52,22,23],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcolor-changer.1.5.zip","2026-03-15T10:48:56.248Z",{"slug":73,"name":74,"version":75,"author":76,"author_profile":77,"description":78,"short_description":79,"active_installs":11,"downloaded":80,"rating":13,"num_ratings":13,"last_updated":81,"tested_up_to":15,"requires_at_least":82,"requires_php":82,"tags":83,"homepage":89,"download_link":90,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"eligibility-checklist-for-adsense","Eligibility Checklist for AdSense","3.0.2","mimusjobs","https:\u002F\u002Fprofiles.wordpress.org\u002Fmimusjobs\u002F","\u003Cp>**Eligibility Checklist for AdSense is a complete AdSense readiness and policy scanner designed to help site owners get approved faster and avoid policy violations.\u003C\u002Fp>\n\u003Cp>This plugin performs a \u003Cstrong>deep audit\u003C\u002Fstrong> of your site using:\u003Cbr \u002F>\n– External keyword lists (GitHub profanity, adult, and harmful content lists)\u003Cbr \u002F>\n– Content length + duplication checks\u003Cbr \u002F>\n– Thin content detection\u003Cbr \u002F>\n– Page structure audits (H1\u002FH2, essential pages, navigation)\u003Cbr \u002F>\n– Mobile friendliness checks\u003Cbr \u002F>\n– SEO visibility + indexability checks\u003Cbr \u002F>\n– Policy risk scoring and warnings\u003C\u002Fp>\n\u003Cp>You also get \u003Cstrong>Fix buttons\u003C\u002Fstrong>, remediation guides, and optional premium services (full PDF report, article packages, content optimization).\u003C\u002Fp>\n\u003Ch3>🔥 Key Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Full AdSense readiness score (0–100)\u003C\u002Fli>\n\u003Cli>Essential pages detection (Home, About, Contact, Privacy Policy)\u003C\u002Fli>\n\u003Cli>Duplicate content + partial plagiarism heuristics\u003C\u002Fli>\n\u003Cli>AI\u002Fspun content risk scoring\u003C\u002Fli>\n\u003Cli>Page-level word count audits\u003C\u002Fli>\n\u003Cli>Image audit (alt text presence)\u003C\u002Fli>\n\u003Cli>H1\u002FH2 structure scan\u003C\u002Fli>\n\u003Cli>Mobile-friendly test link\u003C\u002Fli>\n\u003Cli>Sitemap, robots, canonical, and indexability checks\u003C\u002Fli>\n\u003Cli>Re-run audit using AJAX (instant)\u003C\u002Fli>\n\u003Cli>Monetized service cards:\n\u003Cul>\n\u003Cli>$10 full PDF audit report\u003C\u002Fli>\n\u003Cli>$50 article bundle + site optimization\u003C\u002Fli>\n\u003Cli>$1\u002Farticle human-written custom content\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Why This Plugin Exists\u003C\u002Fh3>\n\u003Cp>AdSense approvals in 2025 require stronger content quality, page trust indicators, and consistent site structure. Many site owners fail due to missing pages or thin content.\u003Cbr \u002F>\nThis plugin solves that by providing a \u003Cstrong>one-page dashboard\u003C\u002Fstrong> showing everything Google expects from a compliant site.\u003C\u002Fp>\n","A full AdSense approval & policy audit dashboard for 2025. Scans your site using external keyword lists, content heuristics, and policy checks — w &hellip;",268,"2025-12-06T21:01:00.000Z","5.0",[84,85,86,87,88],"adsense-policy-compliance-checker","adsense-rejection-troubleshooting-tool","adsense-site-audit-and-analysis","google-adsense-approval-checklist-2026","google-adsense-content-quality-audit","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Feligibility-checklist-for-adsense","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feligibility-checklist-for-adsense.zip",{"slug":92,"name":93,"version":94,"author":95,"author_profile":96,"description":97,"short_description":98,"active_installs":46,"downloaded":99,"rating":13,"num_ratings":13,"last_updated":100,"tested_up_to":66,"requires_at_least":16,"requires_php":17,"tags":101,"homepage":17,"download_link":106,"security_score":55,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"backlink-checker-seo","Backlink Checker SEO","1.0","metric buzz","https:\u002F\u002Fprofiles.wordpress.org\u002Fmetricbuzz\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fgoo.gl\u002FAYM0zt\" rel=\"nofollow ugc\">Backlink Checker Demo:\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Have you ever wonder how your site is linking to other sites?\u003Cbr \u002F>\nWhat content other bloggers are linking to your pages?\u003Cbr \u002F>\nBacklink Checker shows an instant result of earned backlinks to your site.\u003C\u002Fp>\n\u003Cp>Below is the guide showing users how to get a free Bing API Key:\u003C\u002Fp>\n\u003Cp>** How the Backlink report data is shown?\u003C\u002Fp>\n\u003Cp>The tool is using ‘Bing Web Search API’, you can sign up and get free 1000 report data for each month, if the search exceeds the free report data, then the tool will stop reporting until the start of the new month. You can also pay for the extra report API data.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fcognitive-services\u002Fen-us\u002Fbing-web-search-api\" rel=\"nofollow ugc\">Get a free Bing API Key here:\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Demo API Key: 3e1c968176b844c7b61d7f80948e12be\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Plugin Main Features are:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>The tool is great for any SEO & Marketing service business, your will find this tool useful to glimpse your site mentioned by others online.\u003C\u002Fli>\n\u003Cli>Mobile responsive\u003C\u002Fli>\n\u003Cli>Animated report graphic design\u003C\u002Fli>\n\u003Cli>Instant check up to 1000 earned external backlinks\u003C\u002Fli>\n\u003C\u002Fol>\n","Backlink Checker SEO tool shows an instant result of earned backlinks to your site.",2394,"2016-11-23T07:35:00.000Z",[102,92,103,104,105],"backlink-checker","backlink-checker-tool","backlink-watch","seo","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbacklink-checker-seo.zip",{"slug":108,"name":109,"version":94,"author":95,"author_profile":96,"description":110,"short_description":111,"active_installs":46,"downloaded":112,"rating":25,"num_ratings":65,"last_updated":17,"tested_up_to":66,"requires_at_least":16,"requires_php":17,"tags":113,"homepage":17,"download_link":115,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":71},"keyword-difficulty-tool","Keyword Difficulty Tool","\u003Cp>\u003Ca href=\"https:\u002F\u002Fgoo.gl\u002FDXU8uV\" rel=\"nofollow ugc\">Keyword Difficulty Tool Demo:\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Not all keywords are easier to rank, use our Keyword Difficulty Tool to find an easy one to get ranked.\u003C\u002Fp>\n\u003Cp>TIP: We suggest you pick a low competition keyword if you run a small business site. 3 word phrases like ‘keyword difficulty tool’ example is a good choice to pick a less competitive niche.\u003C\u002Fp>\n\u003Cp>Note: If the tool stops responding, that means too many queries from Google, you might want to wait another day to check again.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Plugin Main Features are:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>The tool is great for finding easier to rank keyword phrases, the competition is based by Alexa global ranking. Sites with higher Alexa Rank means harder to compete with.\u003C\u002Fli>\n\u003Cli>Mobile responsive design\u003C\u002Fli>\n\u003Cli>Animated report graphic design\u003C\u002Fli>\n\u003Cli>Instant keyword search results\u003C\u002Fli>\n\u003C\u002Fol>\n","Be smart, competitive keywords are hard to rank, let's find an easier one.",1534,[114,108],"keyword-difficulty-checker","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkeyword-difficulty-tool.zip",{"attackSurface":117,"codeSignals":137,"taintFlows":160,"riskAssessment":161,"analyzedAt":171},{"hooks":118,"ajaxHandlers":133,"restRoutes":134,"shortcodes":135,"cronEvents":136,"entryPointCount":13,"unprotectedCount":13},[119,125,128,130],{"type":120,"name":121,"callback":122,"file":123,"line":124},"action","plugins_loaded","anonymous","includes\\class-boldgrid-theme-grep.php",135,{"type":120,"name":126,"callback":122,"file":123,"line":127},"admin_enqueue_scripts",150,{"type":120,"name":126,"callback":122,"file":123,"line":129},151,{"type":120,"name":131,"callback":122,"file":123,"line":132},"admin_menu",154,[],[],[],[],{"dangerousFunctions":138,"sqlUsage":148,"outputEscaping":150,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":159},[139,144],{"fn":140,"file":141,"line":142,"context":143},"shell_exec","admin\\class-boldgrid-theme-grep-admin-grep.php",57,"$output = trim( shell_exec( $cmd ) ); \u002F\u002Fphpcs:ignore",{"fn":140,"file":145,"line":146,"context":147},"admin\\partials\\boldgrid-theme-grep-admin-display.php",34,"if ( null === shell_exec( 'pwd' ) ) { \u002F\u002F phpcs:ignore",{"prepared":13,"raw":13,"locations":149},[],{"escaped":151,"rawEcho":152,"locations":153},16,2,[154,157],{"file":145,"line":155,"context":156},71,"raw output",{"file":145,"line":158,"context":156},94,[],[],{"summary":162,"deductions":163},"The plugin \"theme-grep-by-boldgrid\" v1.0.0 presents a mixed security posture.  On the positive side, the static analysis indicates a clean attack surface with no AJAX handlers, REST API routes, shortcodes, or cron events exposed. All detected SQL queries utilize prepared statements, and the vast majority of output is properly escaped, suggesting good practices in handling user-provided data and database interactions.  The absence of any recorded vulnerabilities (CVEs) in its history is also a strong indicator of a well-maintained and secure codebase.\n\nHowever, the presence of two instances of the `shell_exec` function raises a significant concern. While the static analysis does not reveal any specific taint flows originating from these functions in this version, their mere existence represents a potential entry point for command injection vulnerabilities if the input passed to them is not rigorously sanitized and validated.  Furthermore, the complete lack of nonce and capability checks across the entire plugin, while seemingly mitigated by the zero attack surface, leaves a theoretical backdoor if any entry points were to be introduced in future updates without proper security considerations.  Therefore, while the current version appears robust due to a limited attack surface and strong SQL\u002Foutput handling, the `shell_exec` usage and absence of authorization checks warrant careful monitoring and potential remediation.",[164,166,169],{"reason":165,"points":31},"Dangerous function shell_exec found",{"reason":167,"points":168},"No nonce checks implemented",5,{"reason":170,"points":168},"No capability checks implemented","2026-03-16T22:39:38.788Z",{"wat":173,"direct":184},{"assetPaths":174,"generatorPatterns":178,"scriptPaths":179,"versionParams":180},[175,176,177],"\u002Fwp-content\u002Fplugins\u002Ftheme-grep-by-boldgrid\u002Fcss\u002Fboldgrid-theme-grep-admin.css","\u002Fwp-content\u002Fplugins\u002Ftheme-grep-by-boldgrid\u002Fjs\u002Fboldgrid-theme-grep-admin.js","\u002Fwp-content\u002Fplugins\u002Ftheme-grep-by-boldgrid\u002Fjs\u002Fjquery.sticky.js",[],[176,177],[181,182,183],"boldgrid-theme-grep-admin.css?ver=","boldgrid-theme-grep-admin.js?ver=","jquery.sticky.js?ver=",{"cssClasses":185,"htmlComments":186,"htmlAttributes":189,"restEndpoints":190,"jsGlobals":191,"shortcodeOutput":193},[],[187,188],"Include this file with a build process.","https:\u002F\u002Fgithub.com\u002Fgarand\u002Fsticky",[],[],[192],"bgthgr-sticky",[]]