[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fTmNfc4i7SfKtBDatQjBrvtakh1uoUlgz2X_9ihshu6k":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":45,"crawl_stats":36,"alternatives":53,"analysis":150,"fingerprints":327},"twittee-text-tweet","Twittee Text Tweet","1.0.8","Johnnie","https:\u002F\u002Fprofiles.wordpress.org\u002Fjohnnie2u\u002F","\u003Cp>Twittee Text Tweet is now available in Spanish; our many thanks to the dedicated translator that made a Spanish l10n possible.\u003C\u002Fp>\n\u003Cp>Twittee Text Tweet moves beyond the standard Twitter share button. It gives you complete control over the tweet content distributed throughout the Twitter communities. Your personal branding and keyword rich content can be distributed by your visitors in copy format. The plugin enables you to write compelling tweets that include hashtags (#), at sign (@) and Twitter abbreviation like HT (hat tip). Your visitors will love the ease of posting your tweets to their timeline. Visitors can add their own personal touch by editing your tweets personalizing your content to taste.\u003C\u002Fp>\n\u003Cp>Here’s how it works. Twittee generates short code to insert into your post. The first textbox is your tweet. This is the message your visitors will be tweeting to their Twitter communities. Make this tweet about family, your vacation, humorous, about food, your business or product. Whatever the tweet, make it keyword rich and use the most appropriate attention grabbers available in the Twitter Glossary.\u003C\u002Fp>\n\u003Cp>The second textbox is your keyword that will be hyperlinked to your Tweet Action window. This is the window that will contain your tweet and link to your post for visitor review. A press of the button and your tweet is on its way.\u003C\u002Fp>\n\u003Cp>The third textbox is the compelling description of your tweet. Write a great description. Action-oriented language is best. Use a call to action; this is exactly what a good description is. Verbs like “Laugh”, “Share”, or “Discover” will motivate visitors to post your tweet to their timeline.  Be sure to follow up with exactly how the community will benefit by tweeting your content. Write a short preview of the tweet telling the reader why they should share your content with their Twitter community. This is your chance to tell your visitors what you have to offer and why your content is informative and valuable.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>NOTE:\u003C\u002Fstrong> Tweets are only 140 characters long. The tweet textbox is limited to 140 characters. However, you must account for the URL of your post page. It will count towards the 140 character limit. I am working on a URL shortened option for Twittee Text Tweet. I just don’t know how it will be received by visitors. I know they like to use their own URL shortener for tracking their tweets. Your suggestions are welcome; please contact me with your thoughts.\u003C\u002Fp>\n\u003Cp>Each Twittee shortcode should have an ID. For best practice it is best to have a Shortcode ID for each generation. It is not necessary for individual shortcode in a post, however, if you go back later to insert another shortcode, it will have to have an ID.\u003C\u002Fp>\n\u003Cp>Lastly, choose the position and theme of the word balloon. This is the word balloon that will contain your compelling description. Generate your shortcode – cut and paste into your post. Enjoy and Thank You!\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>NOTE: All feedback and suggestions are welcome. I am constantly looking for ways to improve and upgrade Twittee Text Tweet. Please contact me with your ideas for a better plugin.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>NOTE: Twittee Text Tweet is I18n ready. I am proud to make Twittee Text Tweet available to users throughout the world in their native language. If you are interested in translating Twittee Text Tweet in your language, please send me an email. Thank you.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","Twittee enables visitors to tweet your keyword rich content on Twitter. Add Twittee shortcode to post and let your visitors do the rest. Easy!",10,2224,0,"2021-01-25T04:13:00.000Z","5.6.17","3.0.1","",[19,20,21,22,23],"shortcode","timeline","tweet","twittee","twitter","http:\u002F\u002Fjohnniejodelljr.com\u002Ftwittee-text-tweet\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftwittee-text-tweet.zip",64,1,"2023-07-10 00:00:00","2026-03-15T15:16:48.613Z",[31],{"id":32,"url_slug":33,"title":34,"description":35,"plugin_slug":4,"theme_slug":36,"affected_versions":37,"patched_in_version":36,"severity":38,"cvss_score":39,"cvss_vector":40,"vuln_type":41,"published_date":28,"updated_date":42,"references":43,"days_to_patch":36},"CVE-2023-0602","twittee-text-tweet-reflected-cross-site-scripting","Twittee Text Tweet \u003C= 1.0.8 - Reflected Cross-Site Scripting","The Twittee Text Tweet plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `tweetTooltip` and `tweetContent` parameters in versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",null,"\u003C=1.0.8","medium",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-01-22 19:56:02",[44],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fe16d8d28-e1e5-46ab-a64c-1da07747559e?source=api-prod",{"slug":46,"display_name":7,"profile_url":8,"plugin_count":47,"total_installs":48,"avg_security_score":49,"avg_patch_time_days":50,"trust_score":51,"computed_at":52},"johnnie2u",3,30010,78,30,79,"2026-04-05T03:29:32.965Z",[54,75,94,113,131],{"slug":23,"name":55,"version":56,"author":55,"author_profile":57,"description":58,"short_description":59,"active_installs":60,"downloaded":61,"rating":62,"num_ratings":63,"last_updated":64,"tested_up_to":65,"requires_at_least":66,"requires_php":17,"tags":67,"homepage":72,"download_link":73,"security_score":74,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":29},"Twitter","2.0.5","https:\u002F\u002Fprofiles.wordpress.org\u002Ftwitter\u002F","\u003Cp>Embed Twitter content, improve sharing on Twitter, convert your web audience into Twitter or Periscope subscribers, and easily track visits to your website from Twitter advertising.\u003C\u002Fp>\n\u003Cp>Requires PHP version 5.6 or greater.\u003C\u002Fp>\n\u003Ch4>Embed Twitter content\u003C\u002Fh4>\n\u003Cp>Embed Twitter content by pasting a URL, customizing a shortcode, or in a widget area.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftwitter\u002Fwordpress\u002Fwiki\u002FEmbedded-Tweet\" title=\"single Tweet embed\" rel=\"nofollow ugc\">single Tweet\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftwitter\u002Fwordpress\u002Fwiki\u002FEmbedded-Profile-Timeline\" title=\"Twitter embedded profile timeline\" rel=\"nofollow ugc\">profile timeline\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftwitter\u002Fwordpress\u002Fwiki\u002FEmbedded-List-Timeline\" title=\"Twitter embedded list timeline\" rel=\"nofollow ugc\">list timeline\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftwitter\u002Fwordpress\u002Fwiki\u002FEmbedded-Collection-Timeline\" title=\"Twitter embedded collection\" rel=\"nofollow ugc\">collection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftwitter\u002Fwordpress\u002Fwiki\u002FMoments\" title=\"Twitter embedded Moment\" rel=\"nofollow ugc\">Moment\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Customize embed display to match your theme. Choose a light or dark background, customize link and border colors, and customize timeline template components through your site’s WordPress administrative interface.\u003C\u002Fp>\n\u003Cp>The plugin automatically customizes an embed’s template text to match the locale of your site, optimally loads Twitter’s JavaScript to improve site speed and extensibility, and handles advanced use cases such as articles loaded asynchronously via the WordPress API.\u003C\u002Fp>\n\u003Ch4>Grow your Twitter audience\u003C\u002Fh4>\n\u003Cp>Automatically generate link previews for your site’s URLs shared on Twitter using \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftwitter\u002Fwordpress\u002Fwiki\u002FCards\" rel=\"nofollow ugc\">Twitter Cards markup\u003C\u002Fa> . Easily identify your site and author Twitter accounts through your site and user administrative interfaces.\u003C\u002Fp>\n\u003Cp>Add a \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftwitter\u002Fwordpress\u002Fwiki\u002FTweet-Button\" rel=\"nofollow ugc\">Tweet button\u003C\u002Fa> to public posts to encourage your visitors to share your content on Twitter. Visitors may see recommended accounts to follow after sharing your content including your site and its authors.\u003C\u002Fp>\n\u003Cp>Add a \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftwitter\u002Fwordpress\u002Fwiki\u002FFollow-Button\" rel=\"nofollow ugc\">Follow button\u003C\u002Fa> to convert your site visitors into Twitter subscribers.\u003C\u002Fp>\n\u003Cp>Add a \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftwitter\u002Fwordpress\u002Fwiki\u002FPeriscope-On-Air-Button\" rel=\"nofollow ugc\">Periscope On Air button\u003C\u002Fa> to convert your site visitors into Periscope subscribers.\u003C\u002Fp>\n\u003Ch4>Improve Twitter advertising campaigns\u003C\u002Fh4>\n\u003Cp>Easily add a Twitter website tag to your website to track the effectiveness and \u003Ca href=\"https:\u002F\u002Fbusiness.twitter.com\u002Fen\u002Fhelp\u002Fcampaign-measurement-and-analytics\u002Fconversion-tracking-for-websites.html\" rel=\"nofollow ugc\">conversion rates\u003C\u002Fa> of Twitter advertising campaigns or \u003Ca href=\"https:\u002F\u002Fbusiness.twitter.com\u002Fen\u002Ftargeting\u002Ftailored-audiences.html\" rel=\"nofollow ugc\">build tailored audiences\u003C\u002Fa> to target your Twitter advertisements for your website audience.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Docs and active development\u003C\u002Fstrong>\u003Cbr \u002F>\n  Contribute to the plugin, submit pull requests, or run test suites through the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftwitter\u002Fwordpress\" rel=\"nofollow ugc\">Twitter plugin for WordPress GitHub repository\u003C\u002Fa>.\u003Cbr \u002F>\n  View \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftwitter\u002Fwordpress\u002Fwiki\" rel=\"nofollow ugc\">Twitter for WordPress documentation\u003C\u002Fa> to learn more about customization through WordPress filters.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n","Official Twitter and Periscope plugin for WordPress. Embed content and grow your audience. Requires PHP 5.6 or greater.",10000,705891,50,32,"2019-07-24T22:59:00.000Z","5.2.24","4.7",[68,69,23,70,71],"embedded-timeline","embedded-tweet","twitter-list","twitter-profile","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ftwitter\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftwitter.zip",85,{"slug":76,"name":77,"version":78,"author":79,"author_profile":80,"description":81,"short_description":82,"active_installs":83,"downloaded":84,"rating":83,"num_ratings":27,"last_updated":85,"tested_up_to":86,"requires_at_least":87,"requires_php":17,"tags":88,"homepage":92,"download_link":93,"security_score":74,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":29},"twitter-hash-tag-shortcode","Twitter Hash Tag Shortcode","0.6.2","Bainternet","https:\u002F\u002Fprofiles.wordpress.org\u002Fbainternet\u002F","\u003Cp>Displaying the most recent twitter status updates for a particular hash tag in your posts\u002Fpages using shortcode.\u003C\u002Fp>\n\u003Cp>Usage:\u003Cbr \u002F>\n    [hashtag_tweets hashtag=”YOUR_TAG” number=”NUMBER_OF_TWEETS_TO_GET” cache=”hours to cache”]\u003C\u002Fp>\n\u003Cp>Feuture relase will have a templating feature but for now i’ll live the design to you with CSS\u003C\u002Fp>\n","Displaying the most recent twitter status updates for a particular hash tag in your posts\u002Fpages using shortcode.",20,6991,"2016-12-11T12:47:00.000Z","4.7.0","2.9.2",[89,90,91],"tweets-hashtag","twitter-hashtag","twitter-shortcode","http:\u002F\u002Fen.bainternet.info","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftwitter-hash-tag-shortcode.0.6.2.zip",{"slug":95,"name":96,"version":97,"author":98,"author_profile":99,"description":100,"short_description":101,"active_installs":11,"downloaded":102,"rating":103,"num_ratings":104,"last_updated":105,"tested_up_to":106,"requires_at_least":107,"requires_php":17,"tags":108,"homepage":111,"download_link":112,"security_score":74,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":29},"tweet-master","TechGasp Tweety Master","5.1.4","TechGasp","https:\u002F\u002Fprofiles.wordpress.org\u002Ftechgasp\u002F","\u003Cp>By far the best Twitter Tweets integration for WordPress websites. With Tweet Master you can display your latest tweets and or your favourite Twitter lists inside any widget position of your wordpress template. Besides your tweets display we also included a nice tweet button with bubble count reinforced with Via, Recommend and Hashtag. Your users and visitors can easily share your page boosting your website visits and social engagement.\u003C\u002Fp>\n\u003Cp>Since we are obsessed with clean, error free code and page load times, we made sure the widget updates your tweets in a blink of an eye without stalling it if twitter is responding slowly. And now you ask, how did you achieve that? The plugin is based upon the twitter widget when it comes to sizes and colours but we packed the module with it’s own iframe and html5.\u003C\u002Fp>\n\u003Cp>With Tweets Master you can professionally display your twitter tweets and integrate it into your wordpress like a chameleon.\u003C\u002Fp>\n\u003Cp>Again and as usual with TechGasp extensions, the code is pristine, error free and with fast page loading times. Professional or business pages need to be fast and gain google seo rank.\u003C\u002Fp>\n\u003Cp>All widgets are fully mobile devices responsive, a must for any professional website\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Tweet Master boosts your social engagement\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>IMPORTANT: Errors and conflicts free. NO JAVASCRIPT or AJAX.\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Cstrong>LITE Version Contains\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Display, Hide or Change any Widget Title\u003C\u002Fli>\n\u003Cli>Tweet Master Buttons Widget:\u003C\u002Fli>\n\u003Cli>All the Twitter buttons that you will need. Improved load speed and google seo\u003C\u002Fli>\n\u003Cli>Follow Button\u003C\u002Fli>\n\u003Cli>Tweet Button\u003C\u002Fli>\n\u003Cli>Hashtag Button\u003C\u002Fli>\n\u003Cli>Mention Button\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>ADVANCED Version Contains\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Fully Mobile Responsive\u003C\u002Fli>\n\u003Cli>WordPress Network or Multi-Sites Ready\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Display, Hide or Change any Widget Title\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Tweet Master Buttons Widget\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>All the Twitter buttons that you will need. Improved load speed and google seo\u003C\u002Fli>\n\u003Cli>Follow Button\u003C\u002Fli>\n\u003Cli>Tweet Button\u003C\u002Fli>\n\u003Cli>Hashtag Button\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Mention Button\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Tweet Master Tweets Widget\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Display your latest Tweets\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Tweet Master Twitter Lists Widget\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Display your favourite Twitter Lists\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Tweet Master Search Content Widget\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Display your favourite Twitter Searches\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Tweet Master Tweet Content Widget\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Display your favourite Tweets\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Tweet Master Video Content Widget\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Display your favourite Twitter Videos\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>TechGasp Shortcode Framework v5\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>Universal Shortcode for all pages and posts, same Shortcode applies to all pages and posts. Option to Automatically add the shortcode to all pages and posts or manually add the pre-built shortcode individually per page or post. Option to automatically only show the shortcode in Posts and not Pages. Option to Automatically show the shortcode After the Title or After the Content.\u003C\u002Fli>\n\u003Cli>Individual Shortcode for each page or post, individual customized shortcode per page or post\u003C\u002Fli>\n\u003Cli>Shortcodes allow you to professionally display your plugin inside pages and posts maintaining fast page load times and excellent Google SEO\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.techgasp.com\u002Ftweet-master\u002F\" rel=\"nofollow ugc\">Advanced Version Link\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>ONLINE DEMO\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Right of the page, sidebar widgets\u003C\u002Fli>\n\u003Cli>Inside the post, with shortcode framework v5\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.techgasp.com\u002Ftweet-master\u002F\" rel=\"nofollow ugc\">Demo Link\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>More High Quality Plugins?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>For professional wordpress websites\u003C\u002Fli>\n\u003Cli>Tested for fast page load times and SEO\u003C\u002Fli>\n\u003Cli>Errors and conflicts free. NO JAVASCRIPT or AJAX\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.techgasp.com\u002Fbuy-all-techgasp-wordpress-plugins\u002F\" rel=\"nofollow ugc\">Click Here\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","With TechGasp Tweety Master plugin you can display your latest tweets, favourite twitter lists and twitter buttons.",18137,60,2,"2021-03-11T11:08:00.000Z","5.7.15","3.5",[19,109,21,23,110],"techgasp","widget","https:\u002F\u002Fwordpress.techgasp.com\u002Ftweet-master\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftweet-master.5.1.4.zip",{"slug":114,"name":115,"version":116,"author":117,"author_profile":118,"description":119,"short_description":120,"active_installs":11,"downloaded":121,"rating":13,"num_ratings":13,"last_updated":17,"tested_up_to":122,"requires_at_least":123,"requires_php":124,"tags":125,"homepage":127,"download_link":128,"security_score":129,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":130},"wp-optinjeet","WP OptinJeet – Create Form Lists and Manage leads","1.0","Teknikforce Ventures","https:\u002F\u002Fprofiles.wordpress.org\u002Fteknikforce\u002F","\u003Cp>WP Optin Jeet List Manager is a powerful plugin that lets you generate email lists right from inside your blog.\u003C\u002Fp>\n\u003Cp>You can create simple forms to be filled in by your visitors and make email lists. The plug in will also help you in classifying the emails and make useful lists\u003C\u002Fp>\n\u003Ch3>Demo and Tutorial\u003C\u002Fh3>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FKtb19dj7MEM?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cp>Here a few features listed:\u003Cbr \u002F>\n* Create subscription forms\u003Cbr \u002F>\n* Create lists with unlimited fields\u003Cbr \u002F>\n* Send mails to your subscribers\u003C\u002Fp>\n","WP Optin Jeet List Manager is a powerful plugin that lets you generate email lists right from inside your blog.",1211,"5.3.21","4.6","5.2.4",[20,126,23],"tweets","http:\u002F\u002Fteknikforce.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-optinjeet.1.0.zip",100,"2026-03-15T10:48:56.248Z",{"slug":132,"name":133,"version":134,"author":135,"author_profile":136,"description":137,"short_description":138,"active_installs":60,"downloaded":139,"rating":140,"num_ratings":141,"last_updated":142,"tested_up_to":143,"requires_at_least":66,"requires_php":17,"tags":144,"homepage":148,"download_link":149,"security_score":74,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":29},"easy-twitter-feed-widget","Easy Twitter Feed Widget Plugin","0.9","DesignOrbital","https:\u002F\u002Fprofiles.wordpress.org\u002Fdesignorbital\u002F","\u003Cp>Easy Twitter Feed Widget plugin uses the \u003Ccode>Twitter Widget\u003C\u002Fcode> without creating an API to display tweets on your WordPress site. There is no need to create Twitter application. Easy Twitter Feed Widget Plugin provides a nice interface to implement your tweets in an easy way.\u003C\u002Fp>\n\u003Cp>If you are planning to display twitter timeline on your blog’s sidebar without bells and whistles than our plugin can be your ideal choice.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Easy Twitter Feed Widget Plugin is very easy to setup and use.\u003C\u002Fli>\n\u003Cli>You can blend your tweets professionally with the layout of any WordPress theme.\u003C\u002Fli>\n\u003Cli>Make it your own by customizing the link color, border color, background choice and other useful options.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Further Useful Stuff\u003C\u002Fh4>\n\u003Cp>Easy Twitter Feed Widget plugin is developed by DesignOrbital. You may be interested to use our \u003Ca href=\"https:\u002F\u002Fdesignorbital.com\u002F\" rel=\"nofollow ugc\">Premium WordPress Themes\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Fdesignorbital.com\u002Ffree-wordpress-themes\u002F\" rel=\"nofollow ugc\">Free WordPress Themes\u003C\u002Fa> to run your website under the clean and SEO optimized code.\u003C\u002Fp>\n","Add twitter feeds on your WordPress site by using the Easy Twitter Feed Widget plugin.",503422,74,55,"2017-12-20T18:46:00.000Z","4.9.29",[145,21,23,146,147],"feed","twitter-feed","twitter-widget","https:\u002F\u002Fdesignorbital.com\u002Feasy-twitter-feed-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-twitter-feed-widget.0.9.zip",{"attackSurface":151,"codeSignals":178,"taintFlows":230,"riskAssessment":311,"analyzedAt":326},{"hooks":152,"ajaxHandlers":171,"restRoutes":172,"shortcodes":173,"cronEvents":177,"entryPointCount":27,"unprotectedCount":13},[153,159,163,167],{"type":154,"name":155,"callback":156,"file":157,"line":158},"action","init","ttt_ap_action_init","ttt-twittee-text-tweet.php",38,{"type":154,"name":160,"callback":161,"file":157,"line":162},"wp_print_scripts","ttt_twittee_ScriptsAction",52,{"type":154,"name":164,"callback":165,"file":157,"line":166},"admin_menu","ttt_twittee_text_tweet_register_options_page",137,{"type":154,"name":168,"callback":169,"file":157,"line":170},"wp_enqueue_scripts","ttt_twittee_text_tweet_scripts_method",159,[],[],[174],{"tag":22,"callback":175,"file":157,"line":176},"ttt_twittee_tweeter",131,[],{"dangerousFunctions":179,"sqlUsage":180,"outputEscaping":182,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":229},[],{"prepared":13,"raw":13,"locations":181},[],{"escaped":13,"rawEcho":183,"locations":184},24,[185,188,190,192,194,196,197,198,199,200,201,203,205,207,209,211,213,215,217,219,221,223,225,227],{"file":157,"line":186,"context":187},171,"raw output",{"file":157,"line":189,"context":187},172,{"file":157,"line":191,"context":187},180,{"file":157,"line":193,"context":187},196,{"file":157,"line":195,"context":187},239,{"file":157,"line":195,"context":187},{"file":157,"line":195,"context":187},{"file":157,"line":195,"context":187},{"file":157,"line":195,"context":187},{"file":157,"line":195,"context":187},{"file":157,"line":202,"context":187},243,{"file":157,"line":204,"context":187},361,{"file":157,"line":206,"context":187},368,{"file":157,"line":208,"context":187},393,{"file":157,"line":210,"context":187},397,{"file":157,"line":212,"context":187},400,{"file":157,"line":214,"context":187},404,{"file":157,"line":216,"context":187},407,{"file":157,"line":218,"context":187},411,{"file":157,"line":220,"context":187},414,{"file":157,"line":222,"context":187},418,{"file":157,"line":224,"context":187},422,{"file":157,"line":226,"context":187},437,{"file":157,"line":228,"context":187},469,[],[231,284],{"entryPoint":232,"graph":233,"unsanitizedCount":283,"severity":38},"ttt_twittee_text_tweet_options_page (ttt-twittee-text-tweet.php:139)",{"nodes":234,"edges":274},[235,239,244,247,249,252,254,257,259,262,264,267,269,272],{"id":236,"type":237,"label":238,"file":157,"line":186},"n0","source","$_POST['tweetText'] (x3)",{"id":240,"type":241,"label":242,"file":157,"line":186,"wp_function":243},"n1","sink","echo() [XSS]","echo",{"id":245,"type":237,"label":246,"file":157,"line":189},"n2","$_POST['tweetURL']",{"id":248,"type":241,"label":242,"file":157,"line":189,"wp_function":243},"n3",{"id":250,"type":237,"label":251,"file":157,"line":191},"n4","$_POST['tweetTooltip'] (x3)",{"id":253,"type":241,"label":242,"file":157,"line":191,"wp_function":243},"n5",{"id":255,"type":237,"label":256,"file":157,"line":193},"n6","$_POST['tweetTheme'] (x2)",{"id":258,"type":241,"label":242,"file":157,"line":193,"wp_function":243},"n7",{"id":260,"type":237,"label":261,"file":157,"line":195},"n8","$_POST['tweetContent'] (x3)",{"id":263,"type":241,"label":242,"file":157,"line":195,"wp_function":243},"n9",{"id":265,"type":237,"label":266,"file":157,"line":195},"n10","$_POST['tweetPosition']",{"id":268,"type":241,"label":242,"file":157,"line":195,"wp_function":243},"n11",{"id":270,"type":237,"label":271,"file":157,"line":195},"n12","$_POST['tweetID'] (x2)",{"id":273,"type":241,"label":242,"file":157,"line":195,"wp_function":243},"n13",[275,277,278,279,280,281,282],{"from":236,"to":240,"sanitized":276},false,{"from":245,"to":248,"sanitized":276},{"from":250,"to":253,"sanitized":276},{"from":255,"to":258,"sanitized":276},{"from":260,"to":263,"sanitized":276},{"from":265,"to":268,"sanitized":276},{"from":270,"to":273,"sanitized":276},15,{"entryPoint":285,"graph":286,"unsanitizedCount":283,"severity":310},"\u003Cttt-twittee-text-tweet> (ttt-twittee-text-tweet.php:0)",{"nodes":287,"edges":302},[288,289,290,291,292,293,294,295,296,297,298,299,300,301],{"id":236,"type":237,"label":238,"file":157,"line":186},{"id":240,"type":241,"label":242,"file":157,"line":186,"wp_function":243},{"id":245,"type":237,"label":246,"file":157,"line":189},{"id":248,"type":241,"label":242,"file":157,"line":189,"wp_function":243},{"id":250,"type":237,"label":251,"file":157,"line":191},{"id":253,"type":241,"label":242,"file":157,"line":191,"wp_function":243},{"id":255,"type":237,"label":256,"file":157,"line":193},{"id":258,"type":241,"label":242,"file":157,"line":193,"wp_function":243},{"id":260,"type":237,"label":261,"file":157,"line":195},{"id":263,"type":241,"label":242,"file":157,"line":195,"wp_function":243},{"id":265,"type":237,"label":266,"file":157,"line":195},{"id":268,"type":241,"label":242,"file":157,"line":195,"wp_function":243},{"id":270,"type":237,"label":271,"file":157,"line":195},{"id":273,"type":241,"label":242,"file":157,"line":195,"wp_function":243},[303,304,305,306,307,308,309],{"from":236,"to":240,"sanitized":276},{"from":245,"to":248,"sanitized":276},{"from":250,"to":253,"sanitized":276},{"from":255,"to":258,"sanitized":276},{"from":260,"to":263,"sanitized":276},{"from":265,"to":268,"sanitized":276},{"from":270,"to":273,"sanitized":276},"low",{"summary":312,"deductions":313},"The \"twittee-text-tweet\" plugin version 1.0.8 presents a mixed security posture. On the positive side, the plugin demonstrates good practices by exclusively using prepared statements for SQL queries and not engaging in file operations or external HTTP requests. It also has a very limited attack surface, with all entry points identified not requiring explicit authentication checks. However, significant concerns arise from the static analysis results. Notably, 100% of its output is not properly escaped, indicating a high risk of Cross-Site Scripting (XSS) vulnerabilities where user-supplied data could be rendered directly in the browser without sanitization.\n\nThe plugin has a history of known vulnerabilities, with one medium severity Cross-Site Scripting (XSS) issue that remains unpatched. This pattern of XSS vulnerabilities, combined with the current lack of proper output escaping, strongly suggests that new XSS vulnerabilities could easily be introduced or may already exist. The taint analysis, while showing a small number of flows, flags two flows with unsanitized paths, which, coupled with the lack of output escaping, further exacerbates the XSS risk. The absence of nonce checks and capability checks on the identified entry points, although the attack surface is small, could be exploited if any of the unsanitized output flows are triggered in a context where an attacker can influence the input.\n\nIn conclusion, while the plugin has some strengths in its handling of database queries and external interactions, the pervasive lack of output escaping and the history of unpatched XSS vulnerabilities make it a significant security risk. The presence of unsanitized taint flows further amplifies this concern. It is strongly recommended that users update to a version that addresses the known vulnerability and that developers implement robust output escaping for all dynamic content.",[314,316,319,321,324],{"reason":315,"points":283},"Unpatched CVE: Medium severity XSS",{"reason":317,"points":318},"100% of output unescaped",16,{"reason":320,"points":11},"2 unsanitized taint flows",{"reason":322,"points":323},"No nonce checks",5,{"reason":325,"points":323},"No capability checks","2026-03-17T00:32:59.846Z",{"wat":328,"direct":337},{"assetPaths":329,"generatorPatterns":332,"scriptPaths":333,"versionParams":334},[330,331],"\u002Fwp-content\u002Fplugins\u002Ftwittee-text-tweet\u002Fjs\u002Fttt_tweetAction.js","\u002Fwp-content\u002Fplugins\u002Ftwittee-text-tweet\u002Fjs\u002Ftttwordballoon.js",[],[330,331],[335,336],"twittee-text-tweet\u002Fjs\u002Fttt_tweetAction.js?ver=","twittee-text-tweet\u002Fjs\u002Ftttwordballoon.js?ver=",{"cssClasses":338,"htmlComments":339,"htmlAttributes":340,"restEndpoints":343,"jsGlobals":344,"shortcodeOutput":346},[],[],[341,342],"data-tweetAction","data-tttwordballoon",[],[345],"ttt_wordballoon",[347,348,349,350,351],"[twittee","id=\"tweetLink","jQuery(\"#tweetLink","jQuery.fn.tweetAction","jQuery.fn.tttwordballoon"]