[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzUWGgqsmMK8l9cqMgP1NrU9P4QD1vSxcXo_GtP6yYFY":3,"$f3EipMSamo7SsUDHWr591ONhb6ksPcQfcf63ZAZ6lCO0":139,"$f02uztz0jfMHLFIDgnleuPi1XdGe-fYFo7izOO_q1Ecg":144},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28,"discovery_status":29,"vulnerabilities":30,"developer":31,"crawl_stats":27,"alternatives":36,"analysis":51,"fingerprints":124},"ultra-hide-comments-box","Ultra Hide Comment Box","1.1.3","tyankee","https:\u002F\u002Fprofiles.wordpress.org\u002Ftyankee\u002F","\u003Cp>This simple plugin lets you choose which category(s) you want to accept comments on. It has a simple admin interface that is very easy to use.  You simple check the category that you don’t want to see comments on and the comment box will not appear on any posts in that category.\u003C\u002Fp>\n\u003Ch3>Arbitrary section\u003C\u002Fh3>\n\u003Ch3>A brief Markdown Example\u003C\u002Fh3>\n","This simple plugin lets you choose which categories you want to accept comments on.  Just click on the box(s) to stop comments on any category.",60,11361,2,"2011-10-26T20:28:00.000Z","3.2.1","3.0","",[19,20,21,22],"comment-limiter","comments-by-category","limit-comments-by-category","spam-limiter","http:\u002F\u002Fwww.skinzee.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fultra-hide-comments-box.1.1.3.zip",85,0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":13,"total_installs":32,"avg_security_score":25,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},70,30,84,"2026-05-20T10:14:30.597Z",[37],{"slug":38,"name":39,"version":40,"author":7,"author_profile":8,"description":41,"short_description":42,"active_installs":43,"downloaded":44,"rating":45,"num_ratings":13,"last_updated":46,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":47,"homepage":49,"download_link":50,"security_score":25,"vuln_count":26,"unpatched_count":26,"last_vuln_date":27,"fetched_at":28},"comments-limit","Limit Comments","2.0","\u003Cp>This simple plugin lets you limit the number of comments on a particular post or for all of your posts. It has a simple admin interface that is very easy to use plus it puts a new field into the ‘edit posts’ area that lets you set the number of comments for a particular post.\u003C\u002Fp>\n\u003Ch3>Arbitrary section\u003C\u002Fh3>\n\u003Ch3>A brief Markdown Example\u003C\u002Fh3>\n","This simple plugin lets you limit the number of comments on a particular post or for all of your posts.",10,2601,100,"2011-10-26T01:41:00.000Z",[19,48,22],"limit-comments","http:\u002F\u002Fwww.userw.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcomments-limit.2.0.zip",{"attackSurface":52,"codeSignals":78,"taintFlows":91,"riskAssessment":110,"analyzedAt":123},{"hooks":53,"ajaxHandlers":74,"restRoutes":75,"shortcodes":76,"cronEvents":77,"entryPointCount":26,"unprotectedCount":26},[54,60,64,70],{"type":55,"name":56,"callback":57,"file":58,"line":59},"action","admin_menu","ultra_hidey_settings","ultra-hide-comment-box.php",149,{"type":55,"name":61,"callback":62,"file":58,"line":63},"admin_print_styles","ultra_hidey_add_styles",153,{"type":65,"name":66,"callback":67,"priority":68,"file":58,"line":69},"filter","the_posts","ultra_hide_disable_comment_box",1,156,{"type":65,"name":71,"callback":72,"priority":43,"file":58,"line":73},"preprocess_comment","comment_posting_checker2",159,[],[],[],[],{"dangerousFunctions":79,"sqlUsage":80,"outputEscaping":82,"fileOperations":26,"externalRequests":26,"nonceChecks":26,"capabilityChecks":26,"bundledLibraries":90},[],{"prepared":26,"raw":26,"locations":81},[],{"escaped":26,"rawEcho":13,"locations":83},[84,88],{"file":85,"line":86,"context":87},"includes\\main.php",36,"raw output",{"file":85,"line":89,"context":87},54,[],[92],{"entryPoint":93,"graph":94,"unsanitizedCount":68,"severity":109},"\u003Cmain> (includes\\main.php:0)",{"nodes":95,"edges":106},[96,101],{"id":97,"type":98,"label":99,"file":85,"line":100},"n0","source","$_POST[?]",24,{"id":102,"type":103,"label":104,"file":85,"line":100,"wp_function":105},"n1","sink","update_option() [Settings Manipulation]","update_option",[107],{"from":97,"to":102,"sanitized":108},false,"low",{"summary":111,"deductions":112},"The static analysis of \"ultra-hide-comments-box\" v1.1.3 reveals a generally secure code base with no identified dangerous functions, file operations, or external HTTP requests. The plugin also effectively utilizes prepared statements for its SQL queries, which is a strong security practice. However, a significant concern is the complete lack of output escaping on all identified outputs. This means that any dynamic content rendered by the plugin could potentially be exploited for cross-site scripting (XSS) attacks if not handled carefully by the surrounding WordPress environment.\n\nThe vulnerability history for this plugin is notably clean, with no recorded CVEs. This, combined with the absence of certain common vulnerabilities like SQL injection (due to prepared statements) and a limited attack surface, suggests a proactive approach to security in its development or a fortunate lack of discovered vulnerabilities. The taint analysis, while minimal, did identify one flow with unsanitized paths, which warrants attention despite not being classified as critical or high severity in this specific instance.\n\nIn conclusion, while the plugin demonstrates good practices in areas like SQL handling and avoids common attack vectors, the unescaped output represents a tangible security risk. The lack of vulnerability history is positive, but it doesn't negate the findings from the static analysis. The plugin's overall security posture is moderate, with the critical weakness being the output escaping.",[113,116,119,121],{"reason":114,"points":115},"0% of outputs are properly escaped",8,{"reason":117,"points":118},"Taint flow with unsanitized paths",5,{"reason":120,"points":118},"No nonce checks detected",{"reason":122,"points":118},"No capability checks detected","2026-03-16T21:53:15.476Z",{"wat":125,"direct":132},{"assetPaths":126,"generatorPatterns":128,"scriptPaths":129,"versionParams":130},[127],"\u002Fwp-content\u002Fplugins\u002Fultra-hide-comments-box\u002Fcss\u002Fdefault.css",[],[],[131],"ultra-hide-comments-box\u002Fcss\u002Fdefault.css?ver=",{"cssClasses":133,"htmlComments":134,"htmlAttributes":135,"restEndpoints":136,"jsGlobals":137,"shortcodeOutput":138},[],[],[],[],[],[],{"error":140,"url":141,"statusCode":142,"statusMessage":143,"message":143},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fultra-hide-comments-box\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":118,"versions":145},[146,151,158,165,172],{"version":6,"download_url":24,"svn_tag_url":147,"released_at":27,"has_diff":108,"diff_files_changed":148,"diff_lines":27,"trac_diff_url":149,"vulnerabilities":150,"is_current":140},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fultra-hide-comments-box\u002Ftags\u002F1.1.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fultra-hide-comments-box%2Ftags%2F1.1.2&new_path=%2Fultra-hide-comments-box%2Ftags%2F1.1.3",[],{"version":152,"download_url":153,"svn_tag_url":154,"released_at":27,"has_diff":108,"diff_files_changed":155,"diff_lines":27,"trac_diff_url":156,"vulnerabilities":157,"is_current":108},"1.1.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fultra-hide-comments-box.1.1.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fultra-hide-comments-box\u002Ftags\u002F1.1.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fultra-hide-comments-box%2Ftags%2F1.1.1&new_path=%2Fultra-hide-comments-box%2Ftags%2F1.1.2",[],{"version":159,"download_url":160,"svn_tag_url":161,"released_at":27,"has_diff":108,"diff_files_changed":162,"diff_lines":27,"trac_diff_url":163,"vulnerabilities":164,"is_current":108},"1.1.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fultra-hide-comments-box.1.1.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fultra-hide-comments-box\u002Ftags\u002F1.1.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fultra-hide-comments-box%2Ftags%2F1.1&new_path=%2Fultra-hide-comments-box%2Ftags%2F1.1.1",[],{"version":166,"download_url":167,"svn_tag_url":168,"released_at":27,"has_diff":108,"diff_files_changed":169,"diff_lines":27,"trac_diff_url":170,"vulnerabilities":171,"is_current":108},"1.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fultra-hide-comments-box.1.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fultra-hide-comments-box\u002Ftags\u002F1.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fultra-hide-comments-box%2Ftags%2F1.0&new_path=%2Fultra-hide-comments-box%2Ftags%2F1.1",[],{"version":173,"download_url":174,"svn_tag_url":175,"released_at":27,"has_diff":108,"diff_files_changed":176,"diff_lines":27,"trac_diff_url":27,"vulnerabilities":177,"is_current":108},"1.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fultra-hide-comments-box.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fultra-hide-comments-box\u002Ftags\u002F1.0\u002F",[],[]]