[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVLZSK4I1CXY2EuRrb3Ki1TgWQVulWBl1X2zwsHx7e-s":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":35,"analysis":128,"fingerprints":240},"user-cats-manager","User-Cats Manager","2.1","dgmike","https:\u002F\u002Fprofiles.wordpress.org\u002Fdgmike\u002F","\u003Cp>Provides to admin users a way to select what categorie determined users can write. (administrators have access to all categories)\u003C\u002Fp>\n","Provides to admin users a way to select what categorie determined users can write. (administrators have access to all categories)",10,10270,0,"2008-07-14T04:13:00.000Z","2.5","",[18,19,20,21,22],"access","categories","level","preferences","users","http:\u002F\u002Fdgmike.wordpress.com\u002Fuser-cats-manager","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuser-cats-manager.2.1.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":25,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},6,70,30,84,"2026-04-04T21:06:24.765Z",[36,55,77,99,115],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":11,"downloaded":44,"rating":45,"num_ratings":46,"last_updated":47,"tested_up_to":48,"requires_at_least":49,"requires_php":16,"tags":50,"homepage":53,"download_link":54,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"o3world-members-only-categories","O3World Members-Only Categories","1.03","kris-o3world","https:\u002F\u002Fprofiles.wordpress.org\u002Fkris-o3world\u002F","\u003Cp>If you’d like to make the content on your site visible only to certain users using categories, look no further!\u003C\u002Fp>\n\u003Cp>Designate certain categories as “members-only” via \u003Cstrong>Privacy Settings\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>An administrator may then assign a user to them via \u003Cstrong>Profile\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>Only content belonging to “public” categories (any top-level category you do not designate as “members-only”), and categories assigned to the logged-in user, and all subcategories of either, will be visible.\u003C\u002Fp>\n\u003Cp>I would like to thank the action hook \u003Cstrong>pre_get_posts\u003C\u002Fstrong>, without which this plugin would not have been possible.\u003C\u002Fp>\n\u003Ch3>O3World\u003C\u002Fh3>\n\u003Cp>This plugin was created by kris@o3world.com\u003C\u002Fp>\n\u003Cp>We’re an online marketing strategy \u002F custom web and mobile development agency in Philadelphia.\u003C\u002Fp>\n\u003Cp>Among other things, we love WordPress.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fo3world.com\" rel=\"nofollow ugc\">http:\u002F\u002Fo3world.com\u003C\u002Fa>\u003C\u002Fp>\n","Designate categories as \"members-only\" via 'Privacy Settings.' Assign them to users via 'Profile.'",4509,20,1,"2012-01-05T22:26:00.000Z","3.3.0","3.0.0",[18,51,19,52,22],"assign","content","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fo3world-members-only-categories\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fo3world-members-only-categories.zip",{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":63,"downloaded":64,"rating":65,"num_ratings":66,"last_updated":67,"tested_up_to":68,"requires_at_least":69,"requires_php":16,"tags":70,"homepage":74,"download_link":75,"security_score":76,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"simple-membership-form-shortcode","Simple Membership Form Shortcode","1.1","wp.insider","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpinsider-1\u002F","\u003Cp>This addon allows you to create a registration form for a particular membership level on any post or page.\u003C\u002Fp>\n\u003Cp>You can use it to give access to various different membership levels for free.\u003C\u002Fp>\n\u003Cp>You will be able to select a membership level from the dropdown and it will generate a registration form shortcode for that level.\u003C\u002Fp>\n\u003Cp>After you install this addon, go to the “Form Shortcode” menu from the admin dashboard to use it. More details \u003Ca href=\"https:\u002F\u002Fsimple-membership-plugin.com\u002Fsimple-membership-registration-form-shortcode-generator\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>This addon requires the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsimple-membership\u002F\" rel=\"ugc\">Simple Membership Plugin\u003C\u002Fa>.\u003C\u002Fp>\n","Simple Membership Addon to generate registration form shortcode for specific membership access level.",3000,38233,100,2,"2024-11-18T05:24:00.000Z","6.7.5","5.0",[18,71,72,73,22],"member","members","membership","https:\u002F\u002Fsimple-membership-plugin.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-membership-form-shortcode.zip",92,{"slug":78,"name":79,"version":80,"author":81,"author_profile":82,"description":83,"short_description":84,"active_installs":85,"downloaded":86,"rating":87,"num_ratings":88,"last_updated":89,"tested_up_to":90,"requires_at_least":91,"requires_php":16,"tags":92,"homepage":97,"download_link":98,"security_score":65,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"user-access-shortcodes","User Access Shortcodes","2.3","WP Darko","https:\u002F\u002Fprofiles.wordpress.org\u002Fspwebguy\u002F","\u003Cp>This is the simplest way of controlling who sees what in your posts\u002Fpages. This plugin allows you to restrict content to logged in users only (or guests, or by roles) with simple shortcodes. What you see is what you get, and it’s totally free.\u003C\u002Fp>\n\u003Ch4>Usage\u003C\u002Fh4>\n\u003Cp>Show content only for Guests\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[UAS_guest]\nThis content can only be seen by guests.\n[\u002FUAS_guest]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Show content only for Registered\u002FLogged in users\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[UAS_loggedin]\nThis content can only be seen by logged in users.\n[\u002FUAS_loggedin]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Show content ony for specific roles\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[UAS_role roles=\"administrator, editor\"]\nThis content can only be seen by administrators and editors.\n[\u002FUAS_role]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Show content ony for specific users\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[UAS_specific ids=\"23, 127\"]\nThis content can only be seen by users with IDs 23 and 127.\n[\u002FUAS_specific]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Several extra parameters are available, please go to \u003Ca href=\"https:\u002F\u002Fwpdarko.com\u002Fsupport\u002Fget-started-with-the-user-access-shortcodes-plugin\u002F\" rel=\"nofollow ugc\">the plugin’s documentation\u003C\u002Fa> if you need more information on how to use this plugin.\u003C\u002Fp>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cp>Find help on \u003Ca href=\"https:\u002F\u002Fwpdarko.com\u002Fsupport\" rel=\"nofollow ugc\">our support platform\u003C\u002Fa> for this plugin (we’ll answer you fast, promise).\u003C\u002Fp>\n","The simplest way of controlling who sees what in your posts\u002Fpages. Restrict content to logged in users only (or guests, or by roles) with simple short …",1000,23406,98,13,"2026-01-29T19:32:00.000Z","6.9.4","3.6",[93,94,95,96,22],"access-shortcodes","logged","logged-in","user","https:\u002F\u002Fwpdarko.com\u002Fsupport\u002Fget-started-with-the-user-access-shortcodes-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuser-access-shortcodes.2.3.zip",{"slug":100,"name":101,"version":102,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":31,"downloaded":107,"rating":13,"num_ratings":13,"last_updated":108,"tested_up_to":15,"requires_at_least":6,"requires_php":16,"tags":109,"homepage":113,"download_link":114,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"access-keys","Access Keys","1.0","Aaron Butacov","https:\u002F\u002Fprofiles.wordpress.org\u002Faaron-harun\u002F","\u003Cp>The WordPress Access Keys Plugin allows you to add access keys to pages and categories to improve accessibility of your WordPress website. This works with any page or category list that is called with \u003Ccode>wp_list_pages\u003C\u002Fcode> and \u003Ccode>wp_list_categories\u003C\u002Fcode> respectively.\u003C\u002Fp>\n\u003Cp>It is simple to use this this plugin. On the Admin panel it lists pages and categories with a current access key, and in a separate list it lists the pages and categories without access keys. Just add an access key just type a number or letter in a text box and click the save button. The categories or posts will then move to the top list, and you will feel great about be kind to your users.\u003C\u002Fp>\n","Add Access Keys to Category and Page navigation menus to make your website far more accessible.",8299,"2008-04-06T01:53:00.000Z",[100,110,111,19,112],"accessibility","admin","pages","http:\u002F\u002Fanthologyoi.com\u002Fwordpress\u002Fplugins\u002Fwordpress-access-keys.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faccess-keys.zip",{"slug":116,"name":117,"version":118,"author":103,"author_profile":104,"description":119,"short_description":120,"active_installs":31,"downloaded":121,"rating":65,"num_ratings":66,"last_updated":122,"tested_up_to":123,"requires_at_least":124,"requires_php":16,"tags":125,"homepage":126,"download_link":127,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"wordpress-nav-menus-access-keys","Access Keys for WP Navigation Menus","1.6","\u003Cp>The WordPress Access Keys Plugin allows you to add access keys to your navigation menus to improve accessibility of your WordPress website.\u003C\u002Fp>\n\u003Col>\n\u003Cli>Activate\u003C\u002Fli>\n\u003Cli>Add access keys to menu items under the Appearance > menu panel.\u003C\u002Fli>\n\u003Cli>???\u003C\u002Fli>\n\u003Cli>Profit from having an accessible site.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cem>For \u003Ccode>wp_list_pages\u003C\u002Fcode> and \u003Ccode>wp_list_categories\u003C\u002Fcode> support\u003C\u002Fem>\u003Cbr \u002F>\nDownload the older \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Faccess-keys\u002F\" rel=\"ugc\">Access Keys plugin\u003C\u002Fa>. The older version also allow you to add access keys to pages and categories. This works with any page or category list that is called with \u003Ccode>wp_list_pages\u003C\u002Fcode> and \u003Ccode>wp_list_categories\u003C\u002Fcode> respectively.\u003C\u002Fp>\n\u003Cp>It is simple to use this this plugin. On the Admin panel it lists pages and categories with a current access key, and in a separate list it lists the pages and categories without access keys. Just add an access key just type a number or letter in a text box and click the save button. The categories or posts will then move to the top list, and you will feel great about be kind to your users.\u003C\u002Fp>\n","Add Access Keys to WordPress 3.6 Nav menus to make your website far more accessible.",4936,"2013-10-18T19:31:00.000Z","3.6.1","3.3",[100,110,111,19,112],"http:\u002F\u002Faahacreative.com\u002Four-projects\u002Fwordpress-nav-menu-access-keys\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwordpress-nav-menus-access-keys.1.6.zip",{"attackSurface":129,"codeSignals":156,"taintFlows":175,"riskAssessment":225,"analyzedAt":239},{"hooks":130,"ajaxHandlers":152,"restRoutes":153,"shortcodes":154,"cronEvents":155,"entryPointCount":13,"unprotectedCount":13},[131,137,141,146,149],{"type":132,"name":133,"callback":134,"file":135,"line":136},"action","admin_menu","options","user-cats-manager.php",21,{"type":132,"name":138,"callback":139,"file":135,"line":140},"load-post.php","loadpost",22,{"type":142,"name":143,"callback":144,"priority":13,"file":135,"line":145},"filter","get_terms","filterCats",23,{"type":132,"name":147,"callback":147,"file":135,"line":148},"set_current_user",190,{"type":142,"name":150,"callback":150,"file":135,"line":151},"init",192,[],[],[],[],{"dangerousFunctions":157,"sqlUsage":158,"outputEscaping":161,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":174},[],{"prepared":159,"raw":13,"locations":160},19,[],{"escaped":13,"rawEcho":162,"locations":163},4,[164,168,170,172],{"file":165,"line":166,"context":167},"test.php",44,"raw output",{"file":165,"line":169,"context":167},48,{"file":165,"line":171,"context":167},49,{"file":135,"line":173,"context":167},76,[],[176,195,205],{"entryPoint":177,"graph":178,"unsanitizedCount":46,"severity":194},"optionsMenu (user-cats-manager.php:44)",{"nodes":179,"edges":191},[180,185],{"id":181,"type":182,"label":183,"file":135,"line":184},"n0","source","$_POST",45,{"id":186,"type":187,"label":188,"file":135,"line":189,"wp_function":190},"n1","sink","get_results() [SQLi]",47,"get_results",[192],{"from":181,"to":186,"sanitized":193},false,"high",{"entryPoint":196,"graph":197,"unsanitizedCount":46,"severity":194},"getCats (user-cats-manager.php:78)",{"nodes":198,"edges":203},[199,201],{"id":181,"type":182,"label":183,"file":135,"line":200},79,{"id":186,"type":187,"label":188,"file":135,"line":202,"wp_function":190},89,[204],{"from":181,"to":186,"sanitized":193},{"entryPoint":206,"graph":207,"unsanitizedCount":224,"severity":194},"\u003Cuser-cats-manager> (user-cats-manager.php:0)",{"nodes":208,"edges":221},[209,211,212,216],{"id":181,"type":182,"label":210,"file":135,"line":184},"$_POST (x3)",{"id":186,"type":187,"label":188,"file":135,"line":189,"wp_function":190},{"id":213,"type":182,"label":214,"file":135,"line":215},"n2","$_POST (x2)",117,{"id":217,"type":187,"label":218,"file":135,"line":219,"wp_function":220},"n3","query() [SQLi]",133,"query",[222,223],{"from":181,"to":186,"sanitized":193},{"from":213,"to":217,"sanitized":193},5,{"summary":226,"deductions":227},"The user-cats-manager plugin v2.1 exhibits a mixed security posture. On the positive side, it demonstrates good practices by utilizing prepared statements for all SQL queries and has no recorded vulnerability history, suggesting a potentially well-maintained codebase or a lack of past exploitation.  However, significant concerns arise from the static analysis.  The plugin has no explicit capability checks or nonce checks, which are crucial for securing WordPress actions.  Furthermore, all analyzed output is unescaped, and all identified taint flows are unsanitized, presenting a high risk of Cross-Site Scripting (XSS) vulnerabilities and potential data manipulation if any data originating from these flows were to reach the user's browser or be used in sensitive operations. The absence of any attack surface entries might be misleading if entry points exist that were not detected by the analysis tools, or if the plugin's functionality is limited. Nevertheless, the lack of fundamental security controls like capability and nonce checks, coupled with prevalent unescaped output and unsanitized taint flows, creates a considerable risk profile despite the absence of known CVEs.",[228,231,234,237],{"reason":229,"points":230},"Unescaped output detected",12,{"reason":232,"points":233},"Unsanitized taint flows (high severity)",15,{"reason":235,"points":236},"Missing nonce checks",8,{"reason":238,"points":11},"Missing capability checks","2026-03-17T01:13:55.322Z",{"wat":241,"direct":247},{"assetPaths":242,"generatorPatterns":244,"scriptPaths":245,"versionParams":246},[243],"\u002Fwp-content\u002Fplugins\u002Fuser-cats-manager\u002Foptions.html",[],[],[],{"cssClasses":248,"htmlComments":250,"htmlAttributes":251,"restEndpoints":254,"jsGlobals":255,"shortcodeOutput":256},[249],"popular-category",[],[252,253],"name=\"categoria[]\"","id=\"ck_*",[],[],[]]