[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBK3FV-axKeeqlhlnnQyotOZDyEqSo0p1PLUvRGM29UQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":13,"vuln_count":11,"unpatched_count":11,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":35,"analysis":139,"fingerprints":414},"turtle-ad-network","Turtle Ad Network","1.0.13","gord0b","https:\u002F\u002Fprofiles.wordpress.org\u002Fgord0b\u002F","\u003Cp>The Turtle Ad Network offer Peer-to-Peer Ads. Simple, fast and open source.\u003Cbr \u002F>\n– Ad Network utilizes a WordPress plugin for managing and hosting Ads.\u003Cbr \u002F>\n– Ad Network utilizes the Turtle Network blockchain for sending and purchasing Ads.\u003C\u002Fp>\n\u003Cp>Website: https:\u002F\u002Fwww.turtleadnetwork.com\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key features & Highlights:\u003C\u002Fstrong>\u003Cbr \u002F>\n  * Text Ad Network\u003Cbr \u002F>\n  * Cost per Impression (CPI) Ads\u003Cbr \u002F>\n  * Peer-to-Peer transactions\u003Cbr \u002F>\n  * TANstats – Ad statistics & monitoring\u003Cbr \u002F>\n  * Ad payments in TrueUSD (tUSD) or $TN (Receive 100%, no middlemen)\u003Cbr \u002F>\n  * Send Ad text and payment in one easy transaction\u003Cbr \u002F>\n  * Blacklist, Spam Management, Ad Stop|Start\u003Cbr \u002F>\n  * Auto or manual Ad Approval\u003Cbr \u002F>\n  * Multi-Ad support, Auto Rotate Ads\u003Cbr \u002F>\n  * 0.02 $TN transaction fee per Ad\u003Cbr \u002F>\n  * Zero license costs\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Requirements:\u003C\u002Fstrong>\u003Cbr \u002F>\n  – WordPress.\u003Cbr \u002F>\n  – Wallet address: https:\u002F\u002Fwallet.turtlenetwork.eu\u003Cbr \u002F>\n  – Note: tUSD & $TN can be purchased in wallet.\u003Cbr \u002F>\n  – Note: View transactions: https:\u002F\u002Fexplorer.turtlenetwork.eu\u003C\u002Fp>\n","The Turtle Ad Network offer Peer-to-Peer Ads. Simple, fast and open source.",0,1582,100,2,"","5.5.18","4.9.8","5.3",[20,21,22,23,24],"ad","ad-network","blockchain","tn","turtle-network","https:\u002F\u002Ft.me\u002Fturtleadnetwork","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fturtle-ad-network.1.0.13.zip",null,"2026-03-15T10:48:56.248Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":13,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},1,30,94,"2026-04-05T17:53:44.724Z",[36,54,77,97,122],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":11,"downloaded":44,"rating":11,"num_ratings":11,"last_updated":45,"tested_up_to":46,"requires_at_least":15,"requires_php":18,"tags":47,"homepage":50,"download_link":51,"security_score":52,"vuln_count":11,"unpatched_count":11,"last_vuln_date":27,"fetched_at":53},"mir-ad-network","Mir Ad Network","1.0.0","Роман Иноземцев","https:\u002F\u002Fprofiles.wordpress.org\u002Fmirone\u002F","\u003Cp>\u003Cstrong>KEY FEATURES & HIGHLIGHTS:\u003C\u002Fstrong>\u003Cbr \u002F>\n  * Text Ad Network\u003Cbr \u002F>\n  * Peer-to-Peer transactions\u003Cbr \u002F>\n  * Ad payments in $MIR (Receive 100%, no middlemen)\u003Cbr \u002F>\n  * Send Ad text and payment in one easy transaction\u003Cbr \u002F>\n  * 0.01 $MIR transaction fee per Ad\u003Cbr \u002F>\n  * Zero license costs\u003C\u002Fp>\n\u003Cp>\u003Cstrong>REQUIREMENTS:\u003C\u002Fstrong>\u003Cbr \u002F>\n  * WordPress installation to host Ads\u003Cbr \u002F>\n  * MirNetwork Wallet to send\u002Freceive payments & send Ad: https:\u002F\u002Fclient.mir.one (Note: Save SEED securely & dont share)\u003Cbr \u002F>\n  * $MIR can be purchased on the DEX: https:\u002F\u002Fclient.mir.one\u003Cbr \u002F>\n  * Note: View transactions for wallet on explorer – https:\u002F\u002Fexplorer.mir.one\u003C\u002Fp>\n","Peer-to-Peer Ad Network using the MirNetwork blockchain",1038,"2019-04-27T22:26:00.000Z","5.2.24",[20,21,22,48,49],"mir","mirnetwork","https:\u002F\u002Ft.me\u002Fmirplatform","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmir-ad-network.zip",85,"2026-03-15T15:16:48.613Z",{"slug":55,"name":56,"version":57,"author":58,"author_profile":59,"description":60,"short_description":61,"active_installs":62,"downloaded":63,"rating":64,"num_ratings":65,"last_updated":66,"tested_up_to":67,"requires_at_least":68,"requires_php":15,"tags":69,"homepage":75,"download_link":76,"security_score":13,"vuln_count":11,"unpatched_count":11,"last_vuln_date":27,"fetched_at":53},"easy-footnotes","Easy Footnotes","1.1.13","Jason Yingling","https:\u002F\u002Fprofiles.wordpress.org\u002Fyingling017\u002F","\u003Cp>Easy Footnotes lets you add footnotes throughout your WordPress posts by using the shortcode [efn_note]Footnote content.[\u002Fefn_note]. Easy Footnotes will automatically add the number of the footnote where the shortcode was entered and add the full footnote text to the bottom of your post in an ordered list with a corresponding number.\u003C\u002Fp>\n\u003Cp>Hovering the footnote label will show the user the full text of the footnote using the jQuery Qtip2 plugin. Clicking on the footnote label will take the user down the page to the corresponding footnote at the bottom of the WordPress post. Each footnote at the bottom of the post has a icon that can be clicked to return to that particular footnote within the post copy.\u003C\u002Fp>\n\u003Cp>That’s all it takes to start adding footnotes to your WordPress blog!\u003C\u002Fp>\n","Easy Footnotes lets you quickly and easily add footnotes throughout your WordPress posts using a simple shortcode in the text editor.",8000,149637,96,33,"2025-07-07T17:31:00.000Z","6.8.5","3.0.1",[70,71,72,73,74],"blogging","footnotes","hover","read","tooltips","https:\u002F\u002Fjasonyingling.me\u002Feasy-footnotes-wordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-footnotes.1.1.13.zip",{"slug":78,"name":79,"version":80,"author":79,"author_profile":81,"description":82,"short_description":83,"active_installs":84,"downloaded":85,"rating":11,"num_ratings":11,"last_updated":86,"tested_up_to":87,"requires_at_least":88,"requires_php":15,"tags":89,"homepage":94,"download_link":95,"security_score":13,"vuln_count":31,"unpatched_count":11,"last_vuln_date":96,"fetched_at":53},"taboola","Taboola","3.0.2","https:\u002F\u002Fprofiles.wordpress.org\u002Ftaboolawordpress\u002F","\u003Cp>This plugin provides an easy way to integrate Taboola content into your WordPress pages.\u003Cbr \u002F>\nUsing Taboola’s mix of sponsored and editorial content, you can generate revenue and drive engagement.\u003Cbr \u002F>\n(Requires an account with Taboola. For more detail, see the \u003Ca href=\"https:\u002F\u002Fdevelopers.taboola.com\u002Fweb-integrations\u002Fdocs\u002Fwordpress-plugin\u002F\" rel=\"nofollow ugc\">Taboola Dev Center\u003C\u002Fa>.)\u003C\u002Fp>\n","Use the Taboola plugin to generate revenue from native ads and drive engagement with editorial content.",3000,51300,"2025-10-29T11:42:00.000Z","6.8.0","5.2",[90,91,92,93,78],"ad-networks","ads","content-recommendations","discovery","https:\u002F\u002Fdevelopers.taboola.com\u002Fweb-integrations\u002Fdocs\u002Fwordpress-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftaboola.zip","2023-07-24 00:00:00",{"slug":98,"name":99,"version":100,"author":101,"author_profile":102,"description":103,"short_description":104,"active_installs":105,"downloaded":106,"rating":33,"num_ratings":107,"last_updated":108,"tested_up_to":109,"requires_at_least":110,"requires_php":15,"tags":111,"homepage":117,"download_link":118,"security_score":119,"vuln_count":120,"unpatched_count":11,"last_vuln_date":121,"fetched_at":53},"ebay-feeds-for-wordpress","WP eBay Product Feeds","3.4.10","Rhys Wynne","https:\u002F\u002Fprofiles.wordpress.org\u002Frhyswynne\u002F","\u003Cp>WP eBay Product Feeds allows you to quickly and easily place feeds from the eBay Partner Network into your WordPress blog. These can easily be embedded into posts, placed as widgets or inserted into the themes – flexibility is huge. This plugin is ideal for bloggers who wish to make more money through their blogs by promoting eBay’s affiliate programme, as well as users who sell their own items on eBay.\u003C\u002Fp>\n\u003Cp>\u003Cem>Please Note\u003C\u002Fem> From 1st September 2020 the Dynamic Feed Generator from eBay is being withdrawn. We’ve tested another service – \u003Ca href=\"https:\u002F\u002Fwww.winwar.co.uk\u002F?post_type=surl&p=4793&preview=true\" rel=\"nofollow ugc\">RSS Ground\u003C\u002Fa>, that will be used to handle feeds, though any other feed generator will work.\u003C\u002Fp>\n\u003Cp>\u003Cem>Having Problems?\u003C\u002Fem> Please use the either the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Febay-feeds-for-wordpress\u002F\" rel=\"ugc\">WordPress.org support forums\u003C\u002Fa> and I’ll attempt to get back to you quickly. In a rush? Use our \u003Ca href=\"http:\u002F\u002Fwinwar.co.uk\u002Fpriority-support\u002F?utm_source=description&utm_medium=wordpressorgreadme&utm_campaign=ebayfeedsforwordpress\" rel=\"nofollow ugc\">\u003Cstrong>Priority Support Forums\u003C\u002Fstrong>\u003C\u002Fa> to get an answer within 1 business day.\u003C\u002Fp>\n\u003Ch4>WP eBay Product Feeds Premium\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.winwar.co.uk\u002Fplugins\u002Febay-feeds-for-wordpress-premium\u002F?utm_source=ebayfeedsforwordpresspremium&utm_medium=wordpressorgreadme&utm_campaign=ebayfeedsforwordpress\" rel=\"nofollow ugc\">\u003Cstrong>WP eBay Product Feeds Premium\u003C\u002Fstrong>\u003C\u002Fa> is a plugin that extends the usability of WP eBay Product Feeds to allow you to create simple templates. You can turn feeds into beautiful shop style layouts, encouraging clickthroughs, higher sales and more referrals.\u003C\u002Fp>\n\u003Cp>Also, from 2.3, you can now use WP eBay Product Feeds Premium to introduce smart links into your post. Save time and effort creating affiliate links to eBay using Smart Links!\u003C\u002Fp>\n\u003Ch4>About Winwar Media\u003C\u002Fh4>\n\u003Cp>This plugin is made by \u003Ca href=\"http:\u002F\u002Fwinwar.co.uk\u002F?utm_source=about&utm_medium=wordpressorgreadme&utm_campaign=ebayfeedsforwordpress\" rel=\"nofollow ugc\">\u003Cstrong>Winwar Media\u003C\u002Fstrong>\u003C\u002Fa>, a WordPress Development and Training Agency in Manchester, UK.\u003C\u002Fp>\n\u003Cp>Why don’t you?\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwinwar.co.uk\u002Fplugins\u002Febay-feeds-wordpress\u002F?utm_source=about&utm_medium=wordpressorgreadme&utm_campaign=ebayfeedsforwordpress\" rel=\"nofollow ugc\">WP eBay Product Feeds\u003C\u002Fa> WordPress Plugin homepage with further instructions.\u003C\u002Fli>\n\u003Cli>Check out more of our \u003Ca href=\"http:\u002F\u002Fwinwar.co.uk\u002Fplugins\u002F?utm_source=about&utm_medium=wordpressorgreadme&utm_campaign=ebayfeedsforwordpress\" rel=\"nofollow ugc\">WordPress Plugins\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Follow us on Social Media, such as \u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fwinwaruk\" rel=\"nofollow ugc\">Facebook\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Fwinwaruk\" rel=\"nofollow ugc\">Twitter\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Fplus.google.com\u002F+WinwarCoUk\" rel=\"nofollow ugc\">Google+\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwinwar.co.uk\u002Fcontact-us\u002F?utm_source=about&utm_medium=wordpressorgreadme&utm_campaign=ebayfeedsforwordpress\" rel=\"nofollow ugc\">Send us an email\u003C\u002Fa>! We like hearing from plugin users.\u003C\u002Fli>\n\u003Cli>Check out our book, \u003Ca href=\"http:\u002F\u002Fwinwar.co.uk\u002Fbooks\u002Fbbpress-complete\u002F?utm_source=about&utm_medium=wordpressorgreadme&utm_campaign=ebayfeedsforwordpress\" rel=\"nofollow ugc\">bbPress Complete\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>For Support\u003C\u002Fh4>\n\u003Cp>We offer support in two places:-\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Support on the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Febay-feeds-for-wordpress\" rel=\"ugc\">WordPress.org Support Board\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Want to help development?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Fix (or submit) an issue on Github.\u003C\u002Fli>\n\u003C\u002Ful>\n","Display feeds of eBay Products from eBay Partner Network on your site.",800,100712,17,"2025-11-30T12:09:00.000Z","6.9.4","3.0",[112,113,114,115,116],"affiliate-marketing","block","ebay-partner-feeds","ebay-partner-network","gutenberg-ready","https:\u002F\u002Fwww.winwar.co.uk\u002Fplugins\u002Febay-feeds-wordpress\u002F?utm_source=plugin-link&utm_medium=plugin&utm_campaign=ebayfeedsforwordpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Febay-feeds-for-wordpress.3.4.10.zip",95,4,"2025-12-15 00:00:00",{"slug":123,"name":124,"version":125,"author":126,"author_profile":127,"description":128,"short_description":129,"active_installs":130,"downloaded":131,"rating":11,"num_ratings":11,"last_updated":132,"tested_up_to":133,"requires_at_least":134,"requires_php":15,"tags":135,"homepage":137,"download_link":138,"security_score":52,"vuln_count":11,"unpatched_count":11,"last_vuln_date":27,"fetched_at":53},"adbusters","Adbusters","1.0.7","Automattic","https:\u002F\u002Fprofiles.wordpress.org\u002Fautomattic\u002F","\u003Cp>Are you troubled by strange iframe ad files in the middle of the night? Do you experience feelings of dread in your revision control and source code management system? Have you or any of your colleagues ever had to manually add these files to your site as your ads team keeps making new deals?\u003C\u002Fp>\n\u003Cp>If the answer is yes, don’t wait another minute! ADBUSTERS! Download this plugin today and let us take care of your ad file serving needs.\u003C\u002Fp>\n\u003Cp>Caveat: while we have reviewed the included templates for obvious security issues (like XSS), we cannot guarantee the reliability of external scripts referenced by most of the adbusters. We highly recommend discussing with your ad network representative to discuss this if you have any concerns.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>“Adbusters”\u003Cbr \u002F>\nCopyright (C) 2013 Automattic\u003C\u002Fp>\n\u003Cp>This program is free software: you can redistribute it and\u002For modify\u003Cbr \u002F>\nit under the terms of the GNU General Public License as published by\u003Cbr \u002F>\nthe Free Software Foundation, either version 3 of the License, or\u003Cbr \u002F>\n(at your option) any later version.\u003C\u002Fp>\n\u003Cp>This program is distributed in the hope that it will be useful,\u003Cbr \u002F>\nbut WITHOUT ANY WARRANTY; without even the implied warranty of\u003Cbr \u002F>\nMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the\u003Cbr \u002F>\nGNU General Public License for more details.\u003C\u002Fp>\n\u003Cp>You should have received a copy of the GNU General Public License\u003Cbr \u002F>\nalong with this program.  If not, see \u003Ca href=\"http:\u002F\u002Fwww.gnu.org\u002Flicenses\u002F\" rel=\"nofollow ugc\">http:\u002F\u002Fwww.gnu.org\u002Flicenses\u002F\u003C\u002Fa>.\u003C\u002Fp>\n","A set of iframe busters for popular ad networks",400,72170,"2018-11-22T04:20:00.000Z","5.0.25","3.7",[21,91,136],"iframe-busters","https:\u002F\u002Fgithub.com\u002FAutomattic\u002FAdbusters","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadbusters.1.0.7.zip",{"attackSurface":140,"codeSignals":182,"taintFlows":301,"riskAssessment":405,"analyzedAt":413},{"hooks":141,"ajaxHandlers":176,"restRoutes":177,"shortcodes":178,"cronEvents":179,"entryPointCount":11,"unprotectedCount":11},[142,148,153,156,160,163,167,172],{"type":143,"name":144,"callback":145,"file":146,"line":147},"action","admin_menu","turtle_ads_network_menu_pages","includes\\create-menus.php",7,{"type":143,"name":149,"callback":150,"file":151,"line":152},"admin_post_submit-form-tn","tadn_handle_form_action","turtle-ad-network.php",49,{"type":143,"name":154,"callback":150,"file":151,"line":155},"admin_post_nopriv_submit-form-tn",50,{"type":143,"name":157,"callback":158,"file":151,"line":159},"admin_post_submit-form-add-ad-slots","tadn_handle_form_action_slot",52,{"type":143,"name":161,"callback":158,"file":151,"line":162},"admin_post_nopriv_submit-form-add-ad-slots",53,{"type":143,"name":164,"callback":165,"file":151,"line":166},"tan_cronjob","tadn_do_this_hourly",56,{"type":168,"name":169,"callback":170,"file":151,"line":171},"filter","cron_schedules","tadn_add_cron_interval",58,{"type":168,"name":173,"callback":174,"file":151,"line":175},"widget_text","do_shortcode",789,[],[],[],[180],{"hook":164,"callback":164,"file":151,"line":181},81,{"dangerousFunctions":183,"sqlUsage":184,"outputEscaping":251,"fileOperations":11,"externalRequests":31,"nonceChecks":298,"capabilityChecks":299,"bundledLibraries":300},[],{"prepared":185,"raw":32,"locations":186},5,[187,191,194,196,198,200,203,206,208,210,212,214,216,219,221,222,224,225,227,229,231,233,235,237,239,241,243,245,247,249],{"file":188,"line":189,"context":190},"includes\\ad-approval.php",25,"$wpdb->get_var() with variable interpolation",{"file":188,"line":192,"context":193},72,"$wpdb->get_results() with variable interpolation",{"file":188,"line":195,"context":193},132,{"file":188,"line":197,"context":193},140,{"file":188,"line":199,"context":190},145,{"file":201,"line":202,"context":193},"includes\\ad-settings.php",37,{"file":204,"line":205,"context":193},"includes\\add-ad-slots.php",34,{"file":204,"line":207,"context":193},62,{"file":204,"line":209,"context":193},65,{"file":204,"line":211,"context":193},157,{"file":204,"line":213,"context":193},165,{"file":204,"line":215,"context":193},168,{"file":217,"line":218,"context":193},"includes\\add-wallet-address.php",36,{"file":217,"line":220,"context":193},119,{"file":151,"line":197,"context":193},{"file":151,"line":223,"context":193},151,{"file":151,"line":211,"context":193},{"file":151,"line":226,"context":193},220,{"file":151,"line":228,"context":193},247,{"file":151,"line":230,"context":193},298,{"file":151,"line":232,"context":193},325,{"file":151,"line":234,"context":193},454,{"file":151,"line":236,"context":193},581,{"file":151,"line":238,"context":193},632,{"file":151,"line":240,"context":193},701,{"file":151,"line":242,"context":193},726,{"file":151,"line":244,"context":193},767,{"file":151,"line":246,"context":193},837,{"file":151,"line":248,"context":193},852,{"file":151,"line":250,"context":190},857,{"escaped":197,"rawEcho":252,"locations":253},23,[254,256,258,260,262,264,266,268,270,272,274,276,278,280,282,284,286,288,290,292,294,296,297],{"file":188,"line":211,"context":255},"raw output",{"file":188,"line":257,"context":255},189,{"file":188,"line":259,"context":255},190,{"file":188,"line":261,"context":255},197,{"file":188,"line":263,"context":255},204,{"file":188,"line":265,"context":255},207,{"file":188,"line":267,"context":255},208,{"file":201,"line":269,"context":255},180,{"file":201,"line":271,"context":255},181,{"file":204,"line":273,"context":255},70,{"file":204,"line":275,"context":255},77,{"file":204,"line":277,"context":255},93,{"file":204,"line":279,"context":255},115,{"file":204,"line":281,"context":255},127,{"file":204,"line":283,"context":255},177,{"file":204,"line":285,"context":255},179,{"file":204,"line":287,"context":255},184,{"file":204,"line":289,"context":255},186,{"file":204,"line":291,"context":255},191,{"file":204,"line":293,"context":255},193,{"file":217,"line":295,"context":255},131,{"file":217,"line":195,"context":255},{"file":151,"line":259,"context":255},6,11,[],[302,360,372,385,396],{"entryPoint":303,"graph":304,"unsanitizedCount":11,"severity":359},"\u003Cad-settings> (includes\\ad-settings.php:0)",{"nodes":305,"edges":350},[306,311,316,320,322,326,328,331,333,337,339,343,345,348],{"id":307,"type":308,"label":309,"file":201,"line":310},"n0","source","$_POST['min_amount']",27,{"id":312,"type":313,"label":314,"file":201,"line":310,"wp_function":315},"n1","sink","update_option() [Settings Manipulation]","update_option",{"id":317,"type":308,"label":318,"file":201,"line":319},"n2","$_POST['ad_time']",28,{"id":321,"type":313,"label":314,"file":201,"line":319,"wp_function":315},"n3",{"id":323,"type":308,"label":324,"file":201,"line":325},"n4","$_POST['ad_cost']",29,{"id":327,"type":313,"label":314,"file":201,"line":325,"wp_function":315},"n5",{"id":329,"type":308,"label":330,"file":201,"line":32},"n6","$_POST['api_server']",{"id":332,"type":313,"label":314,"file":201,"line":32,"wp_function":315},"n7",{"id":334,"type":308,"label":335,"file":201,"line":336},"n8","$_POST['blacklist']",31,{"id":338,"type":313,"label":314,"file":201,"line":336,"wp_function":315},"n9",{"id":340,"type":308,"label":341,"file":201,"line":342},"n10","$_POST['ad_approval']",32,{"id":344,"type":313,"label":314,"file":201,"line":342,"wp_function":315},"n11",{"id":346,"type":308,"label":347,"file":201,"line":65},"n12","$_POST['payment_type']",{"id":349,"type":313,"label":314,"file":201,"line":65,"wp_function":315},"n13",[351,353,354,355,356,357,358],{"from":307,"to":312,"sanitized":352},true,{"from":317,"to":321,"sanitized":352},{"from":323,"to":327,"sanitized":352},{"from":329,"to":332,"sanitized":352},{"from":334,"to":338,"sanitized":352},{"from":340,"to":344,"sanitized":352},{"from":346,"to":349,"sanitized":352},"low",{"entryPoint":361,"graph":362,"unsanitizedCount":11,"severity":359},"\u003Cadd-ad-slots> (includes\\add-ad-slots.php:0)",{"nodes":363,"edges":370},[364,366],{"id":307,"type":308,"label":365,"file":204,"line":65},"$_GET",{"id":312,"type":313,"label":367,"file":204,"line":368,"wp_function":369},"echo() [XSS]",122,"echo",[371],{"from":307,"to":312,"sanitized":352},{"entryPoint":373,"graph":374,"unsanitizedCount":11,"severity":359},"tadn_handle_form_action (turtle-ad-network.php:565)",{"nodes":375,"edges":383},[376,379],{"id":307,"type":308,"label":377,"file":151,"line":378},"$_POST (x4)",578,{"id":312,"type":313,"label":380,"file":151,"line":381,"wp_function":382},"wp_redirect() [Open Redirect]",586,"wp_redirect",[384],{"from":307,"to":312,"sanitized":352},{"entryPoint":386,"graph":387,"unsanitizedCount":11,"severity":359},"tadn_handle_form_action_slot (turtle-ad-network.php:614)",{"nodes":388,"edges":394},[389,392],{"id":307,"type":308,"label":390,"file":151,"line":391},"$_POST (x3)",630,{"id":312,"type":313,"label":380,"file":151,"line":393,"wp_function":382},637,[395],{"from":307,"to":312,"sanitized":352},{"entryPoint":397,"graph":398,"unsanitizedCount":11,"severity":359},"\u003Cturtle-ad-network> (turtle-ad-network.php:0)",{"nodes":399,"edges":403},[400,402],{"id":307,"type":308,"label":401,"file":151,"line":378},"$_POST (x7)",{"id":312,"type":313,"label":380,"file":151,"line":381,"wp_function":382},[404],{"from":307,"to":312,"sanitized":352},{"summary":406,"deductions":407},"The \"turtle-ad-network\" plugin version 1.0.13 exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The plugin demonstrates good practices by implementing a significant number of capability checks and nonce checks, indicating an effort to protect its functionalities. Furthermore, the absence of known vulnerabilities (CVEs) and critical or high-severity taint analysis flows is a very positive sign, suggesting a mature and well-maintained codebase regarding common attack vectors.\n\nHowever, there are areas for improvement. The SQL query usage is a notable concern, with only 14% of queries utilizing prepared statements. This leaves a substantial portion of database interactions vulnerable to SQL injection if not handled with extreme care elsewhere in the application's input validation and sanitization, which are not explicitly detailed here. While the output escaping is good at 86%, the remaining 14% could still lead to cross-site scripting (XSS) vulnerabilities if sensitive data is involved.\n\nIn conclusion, the plugin is currently in a good state with no known critical security issues. The strengths lie in its lack of historical vulnerabilities and its use of authentication and authorization mechanisms. The primary weaknesses are the suboptimal implementation of prepared statements for SQL queries and the small percentage of unescaped outputs, which represent potential, albeit not immediately critical, risks that should be addressed.",[408,411],{"reason":409,"points":410},"SQL queries not using prepared statements",10,{"reason":412,"points":185},"Outputs not properly escaped","2026-03-17T05:53:37.049Z",{"wat":415,"direct":422},{"assetPaths":416,"generatorPatterns":419,"scriptPaths":420,"versionParams":421},[417,418],"\u002Fwp-content\u002Fplugins\u002Fturtle-ad-network\u002Fincludes\u002Fcreate-menus.php","\u002Fwp-content\u002Fplugins\u002Fturtle-ad-network\u002Fbase58php\u002Ftest.php",[],[],[],{"cssClasses":423,"htmlComments":424,"htmlAttributes":441,"restEndpoints":444,"jsGlobals":446,"shortcodeOutput":447},[],[425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440],"\u002F**\n * \t@package TN ads network \n *\u002F","\u002F*\nPlugin Name: Turtle Ad Network\nPlugin URI: https:\u002F\u002Ft.me\u002Fturtleadnetwork\nDescription: Peer-to-Peer Ads using the Turtle Network blockchain\nVersion: 1.0.13\nAuther: https:\u002F\u002Ft.me\u002Fgordobtel\nAuther URI: https:\u002F\u002Ft.me\u002Fturtleadnetwork\nText Domain: turtle-ad-network\nLicense: GPLv3\n*\u002F","\u002F*\n\t**\tinitialize all tables and populate required predefined data \n\t*\u002F","\u002F*\n\t**\tInitialize some stuff to get started\n\t*\u002F","\u002F*\n\t**\thandle wallet address form request\n\t**\tsubmit-form-tn\n\t**\t  submit-form-add-ad-slots\n\t*\u002F","\u002F* Rename the table name Query*\u002F","\u002F\u002F nothing here","\u002F\u002F do something every one minute","\u002F\u002F include decoding file","\u002F\u002F db connection","\u002F\u002Ftables names","\u002F\u002Ffetch ad_seg data","\u002F\u002F some predefine value from settings","\u002F\u002F check for backlkist\u002Fspam address","\u002F\u002F get selected payment type from settings","\u002F\u002F when tUSD is selected ",[442,443],"submit-form-tn","submit-form-add-ad-slots",[445],"\u002Ftransactions\u002Faddress\u002Flimit\u002F10",[],[]]