[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ft8saZ4iEiRPUUDQQXqwETjVRAGYl9LmbEFg7xKEJPv0":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":37,"analysis":130,"fingerprints":187},"tinymce-smiley-button","TinyMCE Smiley Button","1.0.9","Cople","https:\u002F\u002Fprofiles.wordpress.org\u002Fcople\u002F","\u003Cp>Add Smiley Button to TinyMCE.\u003C\u002Fp>\n","Add Smiley Button to TinyMCE.",700,18726,100,1,"2020-09-07T11:52:00.000Z","5.5.18","4.2","",[20,21,22,23,24],"emoji","emoticon","emoticons","smiley","smilies","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Ftinymce-smiley-button\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftinymce-smiley-button.1.0.9.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"cople",30,84,"2026-04-04T16:22:36.728Z",[38,55,73,93,109],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":18,"requires_php":18,"tags":52,"homepage":18,"download_link":54,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"really-disable-emojis","Really Disable Emojis","1.1","Christian Leuenberg","https:\u002F\u002Fprofiles.wordpress.org\u002Fcleuenberg\u002F","\u003Cp>WordPress comes with a built-in replacement function that turns 🙂 etc. into emojis. If you need to switch this off, simply install and activate this plugin. It’s that simple.\u003C\u002Fp>\n","Disables the automatic emojis (smilies) replacement function. Really! :-)",800,6374,98,8,"2023-09-11T08:10:00.000Z","6.3.8",[53,22,24],"emojis","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Freally-disable-emojis.1.1.zip",{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":63,"downloaded":64,"rating":28,"num_ratings":28,"last_updated":65,"tested_up_to":66,"requires_at_least":67,"requires_php":18,"tags":68,"homepage":71,"download_link":72,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"custom-smilies-directory","Custom Smilies Directory","1.2","Jose Pardilla","https:\u002F\u002Fprofiles.wordpress.org\u002Fmoskis\u002F","\u003Cp>Custom Smilies Directory is a plugin that tells WordPress to load Smilies from your theme’s directory. This allows you to use custom Smilies without loosing them when you update WordPress.\u003C\u002Fp>\n\u003Cp>Since version 1.1 plugin will check that the smilies folder exists in the active theme. If it doesn’t, it will load the default WordPress smilies and show an error notice in the admin panel letting the user know he has to upload the smilies to the theme directory.\u003C\u002Fp>\n\u003Ch4>Where do i find smiley packs?\u003C\u002Fh4>\n\u003Cp>You can find many pack in the Internet, by googling for them or searching on sites like deviantArt.com. You can also check out two packs i made a some time ago: \u003Ca href=\"http:\u002F\u002Fjosepardilla.com\u002Ffreebies\u002Fmoskis-smilies-pack-1\u002F\" rel=\"nofollow ugc\">Pack #1\u003C\u002Fa> – \u003Ca href=\"http:\u002F\u002Fjosepardilla.com\u002Ffreebies\u002Fmoskis-smilies-pack-2\u002F\" rel=\"nofollow ugc\">Pack #2\u003C\u002Fa>.\u003C\u002Fp>\n","Light plugin that tells WordPress to load Smilies from your theme's directory. This allows you to use custom Smilies without loosing them when yo …",10,3229,"2012-02-05T19:26:00.000Z","3.3.2","2.8",[22,69,23,24,70],"pack","smilies-pack","http:\u002F\u002Fplugins.josepardilla.com\u002Fcustom-smilies-directory\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-smilies-directory.1.2.zip",{"slug":74,"name":75,"version":76,"author":77,"author_profile":78,"description":79,"short_description":80,"active_installs":81,"downloaded":82,"rating":83,"num_ratings":84,"last_updated":85,"tested_up_to":86,"requires_at_least":17,"requires_php":18,"tags":87,"homepage":91,"download_link":92,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"native-emoji","Native Emoji","3.0.1","Danny BS","https:\u002F\u002Fprofiles.wordpress.org\u002Fdavabuu\u002F","\u003Cp>This is not just a plugin, this is the plugin for use emoji in a native way in your posts and comments. When activated you will see a new button in your wordpress editor or comments box, from there you will be able to include more than 2,000 emojis.\u003C\u002Fp>\n\u003Cp>If the Operative System doesn’t support emoji, this plugin insert an image instead of the emoji code.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Very Easy To Use\u003C\u002Fli>\n\u003Cli>More Than 2,000 emojis\u003C\u002Fli>\n\u003Cli>Supports Any Theme\u003C\u002Fli>\n\u003Cli>Supports Custom Posts Types\u003C\u002Fli>\n\u003Cli>Supports Front End Comments\u003C\u002Fli>\n\u003Cli>iOS Native Emoji\u003C\u002Fli>\n\u003Cli>Android Native Emoji\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>See a live working demo \u003Ca href=\"http:\u002F\u002Fnative-emoji.davabuu.net\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>If you like this plugin, please \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fview\u002Fplugin-reviews\u002Fnative-emoji\" rel=\"ugc\">leave a review\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Donate\u003C\u002Fh3>\n\u003Cp>Believe it or not, there is a lot of work behind the plugins and themes we develop. We do not want that in the future we have to make them premium is why we ask your support with a small contribution; this will motivate us to further develop themes and plugins that are free.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fpaypal.me\u002Fdanybranding\" rel=\"nofollow ugc\">Donate\u003C\u002Fa> and support the development of free plugins like this\u003C\u002Fp>\n","Insert emojis in your posts, pages, custom post types, and comments",5000,61032,74,19,"2018-06-25T00:18:00.000Z","4.9.29",[88,20,89,22,90],"comments","emoji-comments","icons","http:\u002F\u002Fnative-emoji.davabuu.net\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnative-emoji.3.0.1.zip",{"slug":94,"name":95,"version":96,"author":97,"author_profile":98,"description":99,"short_description":100,"active_installs":46,"downloaded":101,"rating":13,"num_ratings":49,"last_updated":102,"tested_up_to":103,"requires_at_least":18,"requires_php":18,"tags":104,"homepage":106,"download_link":107,"security_score":108,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"keep-emoticons-as-text","Keep Emoticons as Text","1.0.0","Geek Goddess","https:\u002F\u002Fprofiles.wordpress.org\u002Fgeek-goddess\u002F","\u003Cp>As of the release of 4.3, WordPress removed the “Formatting” section from the Writing settings.  Included in there was the option to turn off WordPress’s default action to convert text emoticons to image smilies.  This plugin does the same thing as unchecking the “convert to smilies” box that used to be available via the settings.\u003C\u002Fp>\n","Disables the default WordPress option of converting emoticons to image smilies",7799,"2024-07-03T18:52:00.000Z","6.5.8",[22,105,24],"formatting","https:\u002F\u002Fwww.geekgoddess.com\u002Fkeep-emoticons-as-text-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkeep-emoticons-as-text.zip",92,{"slug":110,"name":111,"version":112,"author":113,"author_profile":114,"description":115,"short_description":116,"active_installs":46,"downloaded":117,"rating":118,"num_ratings":119,"last_updated":120,"tested_up_to":121,"requires_at_least":122,"requires_php":18,"tags":123,"homepage":125,"download_link":126,"security_score":127,"vuln_count":128,"unpatched_count":28,"last_vuln_date":129,"fetched_at":30},"wp-monalisa","wp-Monalisa","6.6","tuxlog","https:\u002F\u002Fprofiles.wordpress.org\u002Ftuxlog\u002F","\u003Cp>wp-monalisa is the plugin that smiles at you like monalisa does. place the smilies of your choice in posts, pages or comments.\u003C\u002Fp>\n\u003Cp>There are a lot plugins for smiley support out there and some of them are really useful.\u003Cbr \u002F>\nMost of them don’t work out of the box and this is what wp-monalisa tries to achieve, giving you the ability to maintain your smilies and even turn them into img tags.\u003C\u002Fp>\n\u003Cp>it’s easy and it smiles at you…what else do you want?\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>maintain your smilies in a separate directory\u003C\u002Fli>\n\u003Cli>activate or deactivate smilies for posts or comments\u003C\u002Fli>\n\u003Cli>replace smilies with img tags\u003C\u002Fli>\n\u003Cli>extend or replace wordpress smiley replacement\u003C\u002Fli>\n\u003Cli>while edit posts or pages, pops-up in a draggable meta-box\u003C\u002Fli>\n\u003Cli>extends your comment form to give you visitors the freedom to smile 🙂\u003C\u002Fli>\n\u003Cli>support for fckeditor (tested with v3.3.1)\u003C\u002Fli>\n\u003Cli>fully integrated with BuddyPress, bbPress and wpForo\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The video shows a short overview of what wp-monalisa can do for you. \u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FuHXlELn27ko?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>Credits:\u003Cbr \u002F>\nThanks go to all who support this plugin, with  hints and suggestions for improvment and specially to\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Michal Maciejewski, polish translation\u003C\u002Fli>\n\u003Cli>Denny from http:\u002F\u002Fwww.vau3.de for testing and giving input for the BuddyPress integration\u003C\u002Fli>\n\u003Cli>FJ Bakry, Camisto (https:\u002F\u002Fcamisto.com) for indonesian translation\u003C\u002Fli>\n\u003C\u002Ful>\n","wp-monalisa is the plugin that smiles at you like monalisa does. place the smilies of your choice in posts, pages or comments.",99662,96,25,"2025-12-06T06:09:00.000Z","6.9.4","4.0",[88,124,20,21,23],"editor","http:\u002F\u002Fwww.tuxlog.de\u002Fwordpress\u002F2009\u002Fwp-monalisa\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-monalisa.6.6.zip",99,2,"2024-10-09 00:00:00",{"attackSurface":131,"codeSignals":159,"taintFlows":172,"riskAssessment":173,"analyzedAt":186},{"hooks":132,"ajaxHandlers":155,"restRoutes":156,"shortcodes":157,"cronEvents":158,"entryPointCount":28,"unprotectedCount":28},[133,139,143,148,151],{"type":134,"name":135,"callback":136,"file":137,"line":138},"filter","mce_buttons","mce_smiley_button","tinymce-smiley-button.php",15,{"type":134,"name":140,"callback":141,"file":137,"line":142},"mce_external_plugins","mce_smiley_js",21,{"type":144,"name":145,"callback":146,"file":137,"line":147},"action","admin_enqueue_scripts","mce_smiley_css",26,{"type":144,"name":149,"callback":146,"file":137,"line":150},"wp_enqueue_scripts",27,{"type":134,"name":152,"callback":153,"file":137,"line":154},"tiny_mce_before_init","mce_smiley_settings",45,[],[],[],[],{"dangerousFunctions":160,"sqlUsage":161,"outputEscaping":163,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":168},[],{"prepared":28,"raw":28,"locations":162},[],{"escaped":28,"rawEcho":14,"locations":164},[165],{"file":137,"line":166,"context":167},40,"raw output",[169],{"name":170,"version":6,"knownCves":171},"TinyMCE",[],[],{"summary":174,"deductions":175},"The tinymce-smiley-button plugin v1.0.9 exhibits a seemingly strong security posture based on the provided static analysis and vulnerability history. The absence of known CVEs, critical taint flows, dangerous functions, and SQL injection vulnerabilities using prepared statements are all positive indicators. The plugin also boasts a zero attack surface from common entry points like AJAX handlers, REST API routes, shortcodes, and cron events, meaning there are no direct interaction points for attackers to exploit through these vectors.  Furthermore, the lack of file operations and external HTTP requests reduces the potential for remote code execution or data exfiltration.\n\nHowever, the analysis reveals a significant concern regarding output escaping, with 100% of observed outputs being improperly escaped. This is a critical weakness that could lead to Cross-Site Scripting (XSS) vulnerabilities if any user-supplied data is rendered directly in the browser without sanitization. The complete lack of nonce and capability checks is also worrying, as it implies that even if an entry point were discovered, there are no built-in mechanisms to verify user authorization or prevent CSRF attacks.  While the plugin's known vulnerability history is clean, the presence of unescaped output and missing capability checks represent inherent risks that could be exploited by an attacker with sufficient knowledge of the plugin's internal workings. The bundled TinyMCE library is also noted, and its specific version might warrant further investigation for known vulnerabilities if it's not the latest or if its integration is not secure.\n\nIn conclusion, tinymce-smiley-button v1.0.9 has a good foundation by avoiding common vulnerabilities and attack vectors. Nevertheless, the critical flaw in output escaping and the absence of essential security checks like nonces and capability checks present a substantial risk. The vulnerability history being clean is a positive, but it does not mitigate the immediate dangers posed by the unescaped output. Prioritizing the fixing of output escaping and implementing proper authorization checks is paramount for securing this plugin.",[176,178,181,183],{"reason":177,"points":49},"Unescaped output found",{"reason":179,"points":180},"Missing nonce checks",7,{"reason":182,"points":180},"Missing capability checks",{"reason":184,"points":185},"Bundled outdated library (TinyMCE v1.0.9)",4,"2026-03-16T19:25:33.377Z",{"wat":188,"direct":197},{"assetPaths":189,"generatorPatterns":191,"scriptPaths":192,"versionParams":194},[190],"\u002Fwp-content\u002Fplugins\u002Ftinymce-smiley-button\u002Fplugin.css",[],[193],"\u002Fwp-content\u002Fplugins\u002Ftinymce-smiley-button\u002Fplugin.js",[195,196],"tinymce-smiley-button\u002Fplugin.css?ver=","tinymce-smiley-button\u002Fplugin.js?ver=",{"cssClasses":198,"htmlComments":199,"htmlAttributes":200,"restEndpoints":201,"jsGlobals":202,"shortcodeOutput":204},[],[],[],[],[203],"window._smileySettings",[]]