[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwXkexhpJwBKHoSzrrghCXziZBrivplMRH_A9iHR-fmc":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":15,"tags":18,"homepage":22,"download_link":23,"security_score":13,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":33,"analysis":136,"fingerprints":181},"user-links-for-wp-menus","User Links for WP Menus","0.2","Jon Brown","https:\u002F\u002Fprofiles.wordpress.org\u002Fjb510\u002F","\u003Cp>Adds a metabox to the menu admin page listing users so they can be more easily added as custom links to the WordPress Custom Menus.\u003C\u002Fp>\n","Adds a metabox to the menu admin page listing users so they can be more easily added as custom links to the WordPress Custom Menus",10,1976,100,1,"","3.5.2","3.5",[19,20,21],"authors","menus","users","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fuserlinks-for-wp-menus","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuser-links-for-wp-menus.0.2.zip",0,null,"2026-03-15T10:48:56.248Z",[],{"slug":29,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":13,"avg_patch_time_days":30,"trust_score":31,"computed_at":32},"jb510",30,94,"2026-04-05T15:03:38.892Z",[34,59,82,103,122],{"slug":35,"name":36,"version":37,"author":38,"author_profile":39,"description":40,"short_description":41,"active_installs":42,"downloaded":43,"rating":44,"num_ratings":45,"last_updated":46,"tested_up_to":47,"requires_at_least":48,"requires_php":49,"tags":50,"homepage":54,"download_link":55,"security_score":56,"vuln_count":14,"unpatched_count":24,"last_vuln_date":57,"fetched_at":58},"co-authors-plus","Co-Authors Plus","3.7.0","Automattic","https:\u002F\u002Fprofiles.wordpress.org\u002Fautomattic\u002F","\u003Cp>Assign multiple bylines to posts, pages, and custom post types via a search-as-you-type input box. Co-authored posts appear on a co-author’s archive page and in their feed. Co-authors may edit the posts they are associated with, and co-authors who are contributors may only edit posts if they have not been published (as is core behavior).\u003C\u002Fp>\n\u003Cp>Add writers as bylines without creating WordPress user accounts. Simply \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FAutomattic\u002FCo-Authors-Plus\u002Fwiki\u002FCreating-and-editing-guest-authors\" rel=\"nofollow ugc\">create a guest author profile\u003C\u002Fa> for the writer and assign the byline as you normally would.\u003C\u002Fp>\n\u003Cp>On the frontend, use the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FAutomattic\u002FCo-Authors-Plus\u002Fwiki\u002FTemplate-tags\" rel=\"nofollow ugc\">Co-Authors Plus template tags\u003C\u002Fa> to list co-authors anywhere you’d normally list the author.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>For more detailed documentation refer to \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FAutomattic\u002FCo-Authors-Plus\u002Fwiki\" rel=\"nofollow ugc\">the GitHub Wiki for this plugin\u003C\u002Fa>.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Co-Authors Plus is an almost complete rewrite of the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fco-authors\u002F\" rel=\"ugc\">Co-Authors\u003C\u002Fa> plugin originally developed by Weston Ruter (2007). The original plugin was inspired by the ‘\u003Ca href=\"https:\u002F\u002Ftxfx.net\u002F2005\u002F08\u002F16\u002Fnew-plugin-multiple-authors\u002F\" rel=\"nofollow ugc\">Multiple Authors\u003C\u002Fa>‘ plugin by Mark Jaquith (2005).\u003C\u002Fp>\n","Assign multiple bylines to posts, pages, and custom post types with a search-as-you-type input box.",20000,1437154,70,77,"2025-10-20T05:08:00.000Z","6.8.5","5.9","7.4",[19,51,52,53,21],"co-authors","multi-author","multiple-authors","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fco-authors-plus\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fco-authors-plus.3.7.0.zip",99,"2022-06-07 00:00:00","2026-03-15T15:16:48.613Z",{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":67,"downloaded":68,"rating":69,"num_ratings":70,"last_updated":71,"tested_up_to":47,"requires_at_least":72,"requires_php":73,"tags":74,"homepage":15,"download_link":78,"security_score":79,"vuln_count":80,"unpatched_count":24,"last_vuln_date":81,"fetched_at":58},"starbox","Starbox – the Author Box for Humans","3.5.4","SEO Squirrly","https:\u002F\u002Fprofiles.wordpress.org\u002Fcifi\u002F","\u003Cp>\u003Cstrong>How Do I Get Support For This Plugin?\u003C\u002Fstrong>\u003Cbr \u002F>\nIf you want more Social Icons and Premium Support, that also comes with High Priority, go to:\u003C\u002Fp>\n\u003Cp>\u003Ca title=\"Support and PRO for Starbox\" href=\"https:\u002F\u002Fstarbox.squirrly.co\u002F\" rel=\"nofollow ugc\">SUPPORT for Starbox Plugin\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>We added new features in the PRO version (see in the videos):\u003C\u002Fp>\n\u003Cp>https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=7LkqPPQ6gaM\u003Cbr \u002F>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F4_xSLNBCb90?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003Cbr \u002F>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FuUP1rtQu5is?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003Cbr \u002F>\nhttps:\u002F\u002Fwww.youtube.com\u002Fwatch?v=lYXSl09qzCw\u003C\u002Fp>\n\u003Cp>We’ve added many options for our PRO users and the new highly visual themes will be the game changers you’ve waited for.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Starbox is the Author Box for Humans\u003C\u002Fstrong>\u003Cbr \u002F>\nWhile search engines and other software that read your site care about files like robots.txt, you need Human readers to actually engage with your content and fall in love with it.\u003C\u002Fp>\n\u003Cp>Humans look at beauty more than anything else (as you most probably already know, men and women alike). That’s why you’ll get an \u003Cstrong>Author Box that’s gorgeous to look at and it makes your readers click all the way through\u003C\u002Fstrong> to see more about the Authors.\u003C\u002Fp>\n\u003Cp>Now, if you have just yourself as an Author on your site, or a super-star team of Authors, you’ll love Starbox. You can \u003Cstrong>choose from the professionaly built themes and landscaping\u003C\u002Fstrong>. If you are the super-star type, or want to boost social proof, place your Author Box on top of the page, so that your Human readers will know that they’re reading stuff that a real awesome person has written.\u003C\u002Fp>\n\u003Cp>You want the classy, bottom-of-the-page Author Box? You can choose that one as well.\u003C\u002Fp>\n\u003Cp>And if your star Authors want different things, satisfy their needs by allowing them to place their Author Box at the top or bottom, with the default theme, or a better looking one. You can make each of them shine in their own way.\u003C\u002Fp>\n\u003Cp>The \u003Cstrong>Social Profiles\u003C\u002Fstrong> of your writers will be obvious and clickable, getting you Humans that will engage with content on your blog and also on your social media streams.\u003C\u002Fp>\n\u003Cp>Because your authors are stars or will be very soon, \u003Cstrong>Google Authorship and Facebook Authorship\u003C\u002Fstrong> are here for them with Starbox, and it’s just type->click->boom! to set up. Amazingly easy.\u003C\u002Fp>\n\u003Cp>Are you afraid of having to spend too much time setting Starbox up? Don’t worry. You’re covered by our “For Humans” guarantee. With NO coding or complicated menus whatsoever, you’ll set your Author Box in a matter of minutes. And since we took a lot of care regarding all the coding, it will work well and you won’t have to worry about that.\u003C\u002Fp>\n\u003Cp>You’ll build up some good social proof, you’ll give your Human readers a sense of quality and they’ll be happy to return for more (which will help you with the search engines who track your site).\u003C\u002Fp>\n\u003Cp>If you’re doing the tech stuff on your site or want to know what Starbox’s inner workings are all about, here’s a list:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>HTML 5\u003C\u002Fli>\n\u003Cli>Google Microformats (vCard), to display Rich Snippets in google search results\u003C\u002Fli>\n\u003Cli>Easy to customize for each Author\u003C\u002Fli>\n\u003Cli>You’ll get Google Authorship on your hands 🙂 For all your authors.\u003C\u002Fli>\n\u003Cli>Have it work only on blog posts, only on pages, or both!\u003C\u002Fli>\n\u003Cli>Links to the social media profiles of your authors: Facebook, Twitter,  Google+, LinkedIN, Instagram, Flickr, Pinterest, Tumblr, Youtube, Vimeo\u003C\u002Fli>\n\u003Cli>Each of your Authors can have a different set of social media profiles added\u003C\u002Fli>\n\u003Cli>Links to all the articles written by that author\u003C\u002Fli>\n\u003Cli>A section that displays the latest posts of a certain author\u003C\u002Fli>\n\u003Cli>Themes to choose from\u003C\u002Fli>\n\u003Cli>Themes setup for each individual Author, to really make them shine\u003C\u002Fli>\n\u003Cli>You Can set the Name of the Author\u003C\u002Fli>\n\u003Cli>You Can set the Job Title of each Author\u003C\u002Fli>\n\u003Cli>Can set Company (with a link to the company’s site)\u003C\u002Fli>\n\u003Cli>Each Author can make the Author Box look like it’s her own\u003C\u002Fli>\n\u003Cli>You can choose not to display it for certain authors\u003C\u002Fli>\n\u003Cli>Removes any other author box from the page, so that there aren’t duplicates\u003C\u002Fli>\n\u003Cli>Enables you to upload your own image (so that you won’t need a Gravatar)\u003C\u002Fli>\n\u003Cli>Paragraphs in the Author Bio to have a better looking text\u003C\u002Fli>\n\u003Cli>Displays the Author Box in the special pages built for each author.\u003C\u002Fli>\n\u003Cli>Special Pages for your authors\u003C\u002Fli>\n\u003Cli>Works even with sites that have woocommerce or other ecommerce plugins\u003C\u002Fli>\n\u003Cli>Add Starbox in your post’s content or wordpress widgets using the shortcode [starbox] or [starbox id=USER_ID]\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>So get your very own Starbox now:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Your Authors will become real Stars\u003C\u002Fli>\n\u003Cli>Your readers will notice the persons behind the articles better\u003C\u002Fli>\n\u003Cli>It increases your social proof and credibility as an Author\u003C\u002Fli>\n\u003Cli>It will increase the subscriber numbers across social media channels\u003C\u002Fli>\n\u003Cli>Your readers will feel like they know you better and feel a connection, so they’ll return more often\u003C\u002Fli>\n\u003Cli>You know that right now for Google it matters a lot that you have returning visitors (because it means your site is: quality)\u003C\u002Fli>\n\u003Cli>You’ll get Google Authorship on your hands 🙂 For all your authors.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Download it from the WordPress directory and try it out. Having an author box after posts will certainly increase engagement and help your authors grow their authority on the web.\u003C\u002Fp>\n","Starbox is the Author Box for Humans. Professional Themes to choose from, HTML5, Social Media Profiles, Google Authorship",10000,517684,90,203,"2025-05-09T07:26:00.000Z","4.6","7.0",[75,76,77,53,21],"author","author-bio","author-box","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstarbox.zip",97,6,"2024-09-09 00:00:00",{"slug":83,"name":84,"version":85,"author":86,"author_profile":87,"description":88,"short_description":89,"active_installs":90,"downloaded":91,"rating":92,"num_ratings":93,"last_updated":94,"tested_up_to":95,"requires_at_least":96,"requires_php":97,"tags":98,"homepage":15,"download_link":101,"security_score":102,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":58},"smart-user-slug-hider","Smart User Slug Hider","4.0.6","Peter Raschendorfer","https:\u002F\u002Fprofiles.wordpress.org\u002Fpetersplugins\u002F","\u003Cp>The Smart User Slug Hider Plugin hides usernames in Author Pages URLs to enhance Security\u003C\u002Fp>\n\u003Ch3>Retired Plugin\u003C\u002Fh3>\n\u003Cp>Development, maintenance and support of this plugin has been retired in october 2023. You can use this plugin as long as is works for you.\u003C\u002Fp>\n\u003Cp>There will be no more updates and I won’t answer any support questions. Thanks for your understanding.\u003C\u002Fp>\n\u003Cp>Feel free to fork this plugin.\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>The plugin automatically replaces user names with 16 digits coded strings. There are no settings. Just install and forget. Deactivating the Plugin restores the default WordPress behavior.\u003C\u002Fp>\n\u003Ch3>Why use this plugin?\u003C\u002Fh3>\n\u003Cp>WordPress uses the pattern \u003Ccode>example.com\u002Fauthor\u002Fname\u003C\u002Fcode> for author page URLs where \u003Ccode>name\u003C\u002Fcode> represents the users login name.\u003C\u002Fp>\n\u003Cp>This means that the \u003Cstrong>login names from all your users are publicly visible\u003C\u002Fstrong> which is a serious security flaw.\u003C\u002Fp>\n\u003Cp>The Smart User Slug Hider Plugin changes all author page URLs from e.g. \u003Ccode>example.com\u002Fauthor\u002Fjohn\u003C\u002Fcode> to something like \u003Ccode>example.com\u002Fauthor\u002Fe9e716def73f76ac\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cp>The codes are generated automatically and its impossible to make conclusions about the user names. The WordPress default URLs will cause a 404 (not found) error.\u003C\u002Fp>\n\u003Ch3>Shortcodes\u003C\u002Fh3>\n\u003Cp>The plugin adds three shortcodes you can use in your posts:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>[smart_user_slug]\u003C\u002Fcode> – the user slug of the post author – e.g. e9e716def73f76ac\u003C\u002Fli>\n\u003Cli>\u003Ccode>[smart_user_url]\u003C\u002Fcode> – the url of the post author’s profile page – e.g. example.com\u002Fauthor\u002Fe9e716def73f76ac\u003C\u002Fli>\n\u003Cli>\u003Ccode>[smart_user_link]\u003C\u002Fcode> – adds a link to the post author’s profile page\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Theme Functions\u003C\u002Fh3>\n\u003Cp>The plugin adds two functions that can be used in theme files:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>get_smart_user_slug( $author_id )\u003C\u002Fcode> to \u003Cstrong>get\u003C\u002Fstrong> the user slug for the author – the parameter $author_id is optional, if omitted the author`s ID of the current post is used\u003C\u002Fli>\n\u003Cli>\u003Ccode>the_smart_user_slug( $author_id )\u003C\u002Fcode> to \u003Cstrong>display\u003C\u002Fstrong> the user slug for the author – the parameter $author_id is optional, if omitted the author`s ID of the current post is used\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Plugin Privacy Information\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>This plugin does not set cookies\u003C\u002Fli>\n\u003Cli>This plugin does not collect or store any data\u003C\u002Fli>\n\u003Cli>This plugin does not send any data to external servers\u003C\u002Fli>\n\u003C\u002Ful>\n","Hide usernames in Author Pages URLs to enhance Security",3000,53583,98,55,"2024-04-17T20:26:00.000Z","6.3.8","4.0","5.4",[75,19,99,100,21],"url","user","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsmart-user-slug-hider.4.0.6.zip",92,{"slug":104,"name":105,"version":106,"author":107,"author_profile":108,"description":109,"short_description":110,"active_installs":111,"downloaded":112,"rating":13,"num_ratings":113,"last_updated":114,"tested_up_to":115,"requires_at_least":116,"requires_php":15,"tags":117,"homepage":119,"download_link":120,"security_score":102,"vuln_count":14,"unpatched_count":24,"last_vuln_date":121,"fetched_at":58},"simple-user-listing","Simple User Listing","2.0.4","HelgaTheViking","https:\u002F\u002Fprofiles.wordpress.org\u002Fhelgatheviking\u002F","\u003Cp>Other plugins output paginated lists of users, but I needed to be able to customize and style this list to fit my theme.  So I created this plugin to use templates that can be overridden and customized by theme developers.\u003C\u002Fp>\n\u003Cp>To customize any of the templates, copy the file from the plugin’s “templates” folder to your themes “simple-user-listing” folder.\u003C\u002Fp>\n\u003Ch4>Usage\u003C\u002Fh4>\n\u003Cp>Place this shortcode anywhere you’d like to display a full list of all your blog’s users.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[userlist]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>By default the plugin will print out the users based on the “Posts per Page” setting under Settings->Reading, but this and many other settings can be changed via the shortcode’s parameters.\u003C\u002Fp>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cp>If after reading the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsimple-user-listing\u002Ffaq\" rel=\"ugc\">FAQ\u003C\u002Fa> you still need help, support is handled in the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fsimple-user-listing\" rel=\"ugc\">WordPress forums\u003C\u002Fa>. Please note that support is limited and does not cover any custom implementation of the plugin.\u003C\u002Fp>\n\u003Cp>Please report any bugs, errors, warnings, code problems to \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fhelgatheviking\u002Fsimple-user-listing\u002Fissues\" rel=\"nofollow ugc\">Github\u003C\u002Fa>\u003C\u002Fp>\n","A shortcode for displaying paginated lists of users.",900,47976,17,"2025-02-21T16:10:00.000Z","6.7.0","6.1.0",[19,118,21],"directory","http:\u002F\u002Fwww.kathyisawesome.com\u002F489\u002Fsimple-user-listing\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-user-listing.2.0.4.zip","2023-10-25 00:00:00",{"slug":123,"name":124,"version":125,"author":86,"author_profile":87,"description":126,"short_description":127,"active_installs":128,"downloaded":129,"rating":13,"num_ratings":130,"last_updated":131,"tested_up_to":95,"requires_at_least":96,"requires_php":73,"tags":132,"homepage":134,"download_link":135,"security_score":102,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":58},"smart-custom-display-name","Smart Custom Display Name","5.0.3","\u003Cp>The Smart Custom Display Name Plugin allows you to set your Display Name to anything you like\u003C\u002Fp>\n\u003Ch3>Retired Plugin\u003C\u002Fh3>\n\u003Cp>Development, maintenance and support of this plugin has been retired in october 2023. You can use this plugin as long as is works for you.\u003C\u002Fp>\n\u003Cp>There will be no more updates and I won’t answer any support questions. Thanks for your understanding.\u003C\u002Fp>\n\u003Cp>Feel free to fork this plugin.\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>The “Display Name” is the name shown as post author – e.g. “posted by John Doe”. WordPress only allows you to select from a few given values. This plugin changes the Display Name field to a regular text input field where you can type in anything you like. There are no settings. Just install and activate.\u003C\u002Fp>\n\u003Ch3>Plugin Privacy Information\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>This plugin does not set cookies\u003C\u002Fli>\n\u003Cli>This plugin does not collect or store any data\u003C\u002Fli>\n\u003Cli>This plugin does not send any data to external servers\u003C\u002Fli>\n\u003C\u002Ful>\n","Allows you to change the value of \"Display name publicly as\" in user profiles to any string",200,10295,5,"2024-04-17T20:23:00.000Z",[75,19,133,100,21],"name","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsmart-custom-display-name\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsmart-custom-display-name.5.0.3.zip",{"attackSurface":137,"codeSignals":149,"taintFlows":169,"riskAssessment":170,"analyzedAt":180},{"hooks":138,"ajaxHandlers":145,"restRoutes":146,"shortcodes":147,"cronEvents":148,"entryPointCount":24,"unprotectedCount":24},[139],{"type":140,"name":141,"callback":142,"file":143,"line":144},"action","admin_init","u4wpm_add_user_metabox","user-links-for-wp-menus.php",58,[],[],[],[],{"dangerousFunctions":150,"sqlUsage":151,"outputEscaping":153,"fileOperations":24,"externalRequests":24,"nonceChecks":24,"capabilityChecks":24,"bundledLibraries":168},[],{"prepared":14,"raw":24,"locations":152},[],{"escaped":24,"rawEcho":154,"locations":155},7,[156,159,160,162,164,165,167],{"file":143,"line":157,"context":158},35,"raw output",{"file":143,"line":157,"context":158},{"file":143,"line":161,"context":158},37,{"file":143,"line":163,"context":158},38,{"file":143,"line":163,"context":158},{"file":143,"line":166,"context":158},39,{"file":143,"line":166,"context":158},[],[],{"summary":171,"deductions":172},"The 'user-links-for-wp-menus' plugin, in version 0.2, exhibits a mixed security posture. On the positive side, the static analysis reveals no direct entry points like AJAX handlers, REST API routes, shortcodes, or cron events that are exposed. Furthermore, there are no identified dangerous functions, file operations, external HTTP requests, or bundled libraries, which reduces the potential attack surface. The single SQL query observed is commendably using prepared statements, a strong security practice.\n\nHowever, significant concerns arise from the output escaping. With 7 total outputs and 0% properly escaped, this indicates a high risk of Cross-Site Scripting (XSS) vulnerabilities. Any user-supplied data that is displayed by the plugin is likely vulnerable to injection. The complete absence of nonce checks and capability checks, especially given the potential for user interaction even without explicit entry points, is also a significant weakness. The lack of any recorded vulnerability history suggests either a history of good security or a lack of scrutiny, but the current code analysis points to a clear and present danger with unescaped output.\n\nIn conclusion, while the plugin avoids many common pitfalls by having a limited attack surface and using prepared statements for its SQL query, the critical flaw in output escaping makes it highly susceptible to XSS attacks. The absence of authorization checks further exacerbates this risk. The vulnerability history being clear is a positive sign, but it does not mitigate the severe issues identified in the current code analysis.",[173,176,178],{"reason":174,"points":175},"Unescaped output detected",20,{"reason":177,"points":11},"Missing nonce checks",{"reason":179,"points":11},"Missing capability checks","2026-03-16T23:20:32.456Z",{"wat":182,"direct":187},{"assetPaths":183,"generatorPatterns":184,"scriptPaths":185,"versionParams":186},[],[],[],[],{"cssClasses":188,"htmlComments":191,"htmlAttributes":192,"restEndpoints":205,"jsGlobals":206,"shortcodeOutput":207},[189,190],"userlinks-menu-metabox","userlinks-checklist",[],[193,194,195,196,197,198,199,200,201,202,203,204],"id=\"userlinks-menu-metabox\"","id=\"tabs-panel-users\"","id=\"userlinks-checklist\"","class=\"menu-item-checkbox\"","name=\"menu-item[-.*][menu-item-object-id]\"","class=\"menu-item-type\"","name=\"menu-item[-.*][menu-item-type]\"","class=\"menu-item-title\"","name=\"menu-item[-.*][menu-item-title]\"","class=\"menu-item-url\"","name=\"menu-item[-.*][menu-item-url]\"","name=\"add-user-menu-item\"",[],[],[]]