[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f44gfHyNAs-PwuvrTjoaOJ6kKWUQtv7s2QvIq16Dhh-8":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":38,"analysis":139,"fingerprints":366},"w2pe-measurement-widget","w2pe Measurement Widget","1.00","wppluginexpert","https:\u002F\u002Fprofiles.wordpress.org\u002Fwppluginexpert\u002F","\u003Cp>w2pe Measurement Widget is a simple measurement converter. You can use both in page or widget. There is a possibility to add custom units in admin area and edit or delete units.\u003Cbr \u002F>\nMeasurements and units included as presets:\u003Cbr \u002F>\n* Area – foot, inch, meter, mile, kilometer\u003Cbr \u002F>\n* Currency – Bangladeshi TK, British pound, Euro, Indian rupee, Japanese Yen, US dollar\u003Cbr \u002F>\n* Length – kilometer, meter,  mile, yard\u003Cbr \u002F>\n* Mass – gram, kilogram, pound, ton\u003Cbr \u002F>\n* Temperature – Celsius, Fahrenheit, Kelvin\u003C\u002Fp>\n\u003Ch4>How to use?\u003C\u002Fh4>\n\u003Col>\n\u003Cli>If you want to use in widget, use “w2pe Measurement Widget”\u003C\u002Fli>\n\u003Cli>If you want to use in a page or post, use [w2pe_measurement]\u003C\u002Fli>\n\u003C\u002Fol>\n","w2pe Measurement Widget is especially designed to make your units conversion job a whole lot easier. Here you'll find instant conversions for tho …",10,2005,100,4,"2014-03-12T07:22:00.000Z","3.7.41","3.7","",[20,21,22,23,24],"distance-converter","measure","temperature-converter","unit-conversion","unit-converter","http:\u002F\u002Fwww.webworksbd.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fw2pe-measurement-widget.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":34,"avg_security_score":27,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},2,20,30,84,"2026-04-04T18:31:06.398Z",[39,59,78,97,116],{"slug":40,"name":41,"version":42,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":28,"num_ratings":28,"last_updated":49,"tested_up_to":50,"requires_at_least":51,"requires_php":52,"tags":53,"homepage":57,"download_link":58,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"metric-converter","Metric Converter","1.5.4","axeleus","https:\u002F\u002Fprofiles.wordpress.org\u002Faxeleus\u002F","\u003Cp>Metric Converter is a great time saver for everyone who has tried AliExpress dropshipping. This extension allows you to easily convert length, weight and volume units from imperial measurement system to international one and vice versa. Now you do not have to calculate everything manually. The extension will calculate the parameters and show the result of conversion with necessary intervals, dashes and measurement units. With Metric Converter your manual product editing is greatly simplified. Convert units in a couple of clicks and enjoy perfectly optimized product information.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features:\u003C\u002Fstrong>\u003Cbr \u002F>\n– Quick and easy unit conversion\u003Cbr \u002F>\n– American and international length, weight and volume units\u003Cbr \u002F>\n– Use hotkeys to convert units\u003Cbr \u002F>\n– No manual calculation\u003Cbr \u002F>\n– Save tons of time and get nice edited product information\u003Cbr \u002F>\n– Perfect for AliExpress dropshipping stores\u003Cbr \u002F>\n– Compatible with WooCommerce\u003C\u002Fp>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cp>To ask for help, report bugs or suggest changes, please contact support@alidropship.com. Sorry, we have no opportunuty to answer here on the support forum.\u003C\u002Fp>\n","Metric Converter is a WP extension for the visual editor that allows to convert metric units to American linear measures (inch, oz, lbs).",1000,43895,"2021-03-10T02:41:00.000Z","5.7.15","4.7","5.6",[54,55,23,24,56],"length-conversion","metric-conversion","woocommerce","https:\u002F\u002Fyellowduck.me\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmetric-converter.zip",{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":13,"downloaded":67,"rating":68,"num_ratings":14,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":18,"tags":72,"homepage":76,"download_link":77,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"unit-converter-pro","Unit Converter Pro","2.0","XWord Media","https:\u002F\u002Fprofiles.wordpress.org\u002Fxwordmedia\u002F","\u003Cp>This widget can be added anywhere in your site and provides a fully featured unit converter that can be used in various configurations. You can either have all types of measurement available and let the user decide depending on the use case, or you can specify in the widget settings which measurements you want to enable users to convert units in depending on you niche. This converters are super fast and have no underlaying api or server calls, Everything happens instantly in the same window with no page reload or extra load in the backend.\u003C\u002Fp>\n\u003Ch4>Measurements Available\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Length\u003C\u002Fli>\n\u003Cli>Area\u003C\u002Fli>\n\u003Cli>Mass\u003C\u002Fli>\n\u003Cli>Volume\u003C\u002Fli>\n\u003Cli>Volume Flow Rate\u003C\u002Fli>\n\u003Cli>Temperature\u003C\u002Fli>\n\u003Cli>Time\u003C\u002Fli>\n\u003Cli>Frequency\u003C\u002Fli>\n\u003Cli>Speed\u003C\u002Fli>\n\u003Cli>Pace\u003C\u002Fli>\n\u003Cli>Pressure\u003C\u002Fli>\n\u003Cli>Digital\u003C\u002Fli>\n\u003Cli>Illuminance\u003C\u002Fli>\n\u003Cli>Parts-Per\u003C\u002Fli>\n\u003Cli>Voltage\u003C\u002Fli>\n\u003Cli>Current\u003C\u002Fli>\n\u003Cli>Power\u003C\u002Fli>\n\u003Cli>Apparent Power\u003C\u002Fli>\n\u003Cli>Reactive Power\u003C\u002Fli>\n\u003Cli>Energy\u003C\u002Fli>\n\u003Cli>Reactive Energy\u003C\u002Fli>\n\u003Cli>Angle\u003C\u002Fli>\n\u003Cli>Charge\u003C\u002Fli>\n\u003Cli>Force\u003C\u002Fli>\n\u003Cli>Acceleration\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>This easy to use and implement widget has been developed and powered by \u003Ca href=\"https:\u002F\u002Fconverter.net\" rel=\"nofollow ugc\">Converter.net\u003C\u002Fa>!\u003C\u002Fli>\n\u003C\u002Ful>\n","This widget can be added anywhere in your site and provides a fully featured unit converter that can be used in various configurations.",2573,80,"2020-05-07T08:57:00.000Z","5.4.19","3.1",[73,74,75,22,24],"area-converter","length-converter","mass-converter","https:\u002F\u002Fconverter.net","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Funit-converter-pro.zip",{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":13,"downloaded":86,"rating":34,"num_ratings":87,"last_updated":88,"tested_up_to":89,"requires_at_least":90,"requires_php":18,"tags":91,"homepage":95,"download_link":96,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wp-unit-converter","WP Unit Converter","1.0.5","centangle","https:\u002F\u002Fprofiles.wordpress.org\u002Fcentangle\u002F","\u003Cp>WP Unit Converter allows you to convert following metrics in numerous different units of measurement.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Length\u002FDistance\u003C\u002Fli>\n\u003Cli>Temperature\u003C\u002Fli>\n\u003Cli>Time\u003C\u002Fli>\n\u003Cli>Weight\u003C\u002Fli>\n\u003Cli>Area\u003C\u002Fli>\n\u003Cli>Speed\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Automatic installation\u003C\u002Fh3>\n\u003Cp>Automatic installation is the easiest option as WordPress handles the file transfers itself and you don’t need to leave your web browser. To do an automatic install of this plugin, log in to your WordPress dashboard, navigate to the Plugins menu and click Add New.\u003C\u002Fp>\n\u003Cp>In the search field type “WP Unit Converter” and click Search Plugins. Once you’ve found this plugin, you can install it by simply clicking “Install Now”.\u003C\u002Fp>\n\u003Ch3>Manual installation\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Download and unzip the WP Unit Converter plugin\u003C\u002Fli>\n\u003Cli>Upload the entire wp-unit-converter\u002F directory to the \u002Fwp-content\u002Fplugins\u002F directory\u003C\u002Fli>\n\u003Cli>Activate the WP Unit Converter plugin through the Plugins menu in WordPress\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>How to use WP Unit Converter?\u003C\u002Fh3>\n\u003Cp>You can use WP Unit Converter in either Post\u002FPages or in Widget area.\u003C\u002Fp>\n\u003Ch3>Use in Post\u002FPages\u003C\u002Fh3>\n\u003Cp>Simply copy the following shortcode and paste it into your desired location.\u003Cbr \u002F>\n[wpuc_unit_converter]\u003C\u002Fp>\n\u003Ch3>Use in Widget\u003C\u002Fh3>\n\u003Cp>WP Unit Converter, creates a Widget Calculator under Available Widgets Area in Widgets Menu, which you can drag & drop to your desired sidebar location.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>WP Unit Converter is distributed under the terms of GNU GPL2.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>WP Unit Converter is based on following third-party resource:\u003C\u002Fp>\n\u003Ch3>Resources\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Icons made by \u003Ca href=\"https:\u002F\u002Fwww.freepik.com\u002F\" title=\"Freepik\" rel=\"nofollow ugc\">Freepik\u003C\u002Fa> from \u003Ca href=\"https:\u002F\u002Fwww.flaticon.com\u002F\" title=\"Flaticon\" rel=\"nofollow ugc\">www.flaticon.com\u003C\u002Fa> is licensed by \u003Ca href=\"http:\u002F\u002Fcreativecommons.org\u002Flicenses\u002Fby\u002F3.0\u002F\" title=\"Creative Commons BY 3.0\" rel=\"nofollow ugc\">CC 3.0 BY\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","WP Unit Converter allows you to convert Length\u002FDistance, Temperature, Time, Weight, Area and Speed metrics in different units of measurement.",4343,1,"2022-03-21T09:25:00.000Z","5.9.13","5.0",[92,93,94,24],"measurement","metrics","shortcode","https:\u002F\u002Fgithub.com\u002Fcentangle\u002Fwp-unit-converter","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-unit-converter.zip",{"slug":98,"name":99,"version":100,"author":101,"author_profile":102,"description":103,"short_description":104,"active_installs":11,"downloaded":105,"rating":28,"num_ratings":28,"last_updated":106,"tested_up_to":107,"requires_at_least":108,"requires_php":109,"tags":110,"homepage":114,"download_link":115,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"smart-convert-currency-unit-conversion","Smart Convert – Currency & Unit Conversion","1.0.1","Petr Novak","https:\u002F\u002Fprofiles.wordpress.org\u002Fpetrnovak\u002F","\u003Cp>Smart Convert – Currency & Unit Conversion is not just another calculator, it is a complete conversion infrastructure for WordPress sites. Designed for performance and flexibility, it handles everything from simple currency exchanges to complex, non-linear physical unit conversions (like Temperature).\u003C\u002Fp>\n\u003Cp>Whether you run a travel blog, or a technical documentation hub, this plugin ensures your visitors see accurate conversions in a format that fits your design.\u003C\u002Fp>\n\u003Cp>🚀 My Ambition: Premium Features for Free With this initial release, my goal is to set a new standard for what a free plugin can offer. I believe advanced tools shouldn’t be locked behind a paywall. That is why Smart Convert includes enterprise-grade features usually found only in paid versions: a Custom Unit Builder, a Template Engine, Import\u002FExport capabilities, and Automatic Geolocation—all completely free.\u003C\u002Fp>\n\u003Ch3>🌟 Key Features\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>💰 Advanced Currency Engine\u003C\u002Fstrong>\u003Cbr \u002F>\n* \u003Cstrong>Rates:\u003C\u002Fstrong> Supports 153 global currencies + cryptocurrencies (BTC, ETH, etc.).\u003Cbr \u002F>\n* \u003Cstrong>Smart Geo-Location:\u003C\u002Fstrong> Automatically detects visitor IP to display their local currency (powered by ipinfo.io).\u003Cbr \u002F>\n* \u003Cstrong>“Spread” & Fees:\u003C\u002Fstrong> Add a percentage markup (e.g., 2%) to exchange rates to simulate bank fees or retail pricing.\u003Cbr \u002F>\n* \u003Cstrong>Smart Rounding:\u003C\u002Fstrong> Intelligently adjusts decimals (e.g., 0 decimals for JPY, 6 decimals for BTC).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>📏 Comprehensive Unit Converter\u003C\u002Fstrong>\u003Cbr \u002F>\n* \u003Cstrong>105+ Built-in Units:\u003C\u002Fstrong> Covers 14 categories including Length, Mass, Volume, Temperature, Pressure, Energy, Speed, and Data.\u003Cbr \u002F>\n* \u003Cstrong>Bi-Directional Custom Units:\u003C\u002Fstrong> Creating a unit like “Box” (e.g., 1 Box = 12 Items). The plugin automatically generates the reverse conversion logic for you.\u003Cbr \u002F>\n* \u003Cstrong>Complex Math:\u003C\u002Fstrong> Handles non-linear conversions (like Fahrenheit to Celsius) with precision offset calculations.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>🎨 Visual & Editor Integration\u003C\u002Fstrong>\u003Cbr \u002F>\n* \u003Cstrong>Native Gutenberg Block:\u003C\u002Fstrong> Visually configure conversions (Amount, From, To, Decimals) with a live backend preview.\u003Cbr \u002F>\n* \u003Cstrong>Inline Toolbar Tool:\u003C\u002Fstrong> Select any text in your post and convert it instantly using the rich text toolbar button.\u003Cbr \u002F>\n* \u003Cstrong>Interactive Tooltips:\u003C\u002Fstrong> Solves the common “overflow:hidden” clipping issue using a smart portal strategy to display rates on hover.\u003Cbr \u002F>\n* \u003Cstrong>Template System:\u003C\u002Fstrong> Design your output using placeholders like \u003Ccode>{FROM}\u003C\u002Fcode>, \u003Ccode>{TO}\u003C\u002Fcode>, \u003Ccode>{RATE}\u003C\u002Fcode>, and \u003Ccode>{DATE}\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>⚙️ Performance & Workflow\u003C\u002Fstrong>\u003Cbr \u002F>\n* \u003Cstrong>Zero Database Bloat:\u003C\u002Fstrong> Uses robust Object Caching and Transients.\u003Cbr \u002F>\n* \u003Cstrong>Import\u002FExport:\u003C\u002Fstrong> Transfer your custom templates and custom units between sites via JSON.\u003Cbr \u002F>\n* \u003Cstrong>Privacy First:\u003C\u002Fstrong> External connections are disabled by default until explicit consent is given via the Onboarding Wizard.\u003C\u002Fp>\n\u003Ch3>🌍 Internationalization & Translations\u003C\u002Fh3>\n\u003Cp>Smart Convert – Currency & Unit Conversion is fully localized and ready for global audiences. The plugin is translated into the following languages:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>English\u003C\u002Fli>\n\u003Cli>Spanish (Español)\u003C\u002Fli>\n\u003Cli>Japanese (日本語)\u003C\u002Fli>\n\u003Cli>German (Deutsch)\u003C\u002Fli>\n\u003Cli>French (Français)\u003C\u002Fli>\n\u003Cli>Russian (Русский)\u003C\u002Fli>\n\u003Cli>Brazilian Portuguese (Português do Brasil)\u003C\u002Fli>\n\u003Cli>Italian (Italiano)\u003C\u002Fli>\n\u003Cli>Czech (Čeština)\u003C\u002Fli>\n\u003Cli>Dutch (Nederlands)\u003C\u002Fli>\n\u003Cli>Turkish (Türkçe)\u003C\u002Fli>\n\u003Cli>Polish (Polski)\u003C\u002Fli>\n\u003Cli>Indonesian (Bahasa Indonesia)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>⚖️ Privacy & External Services Disclosure\u003C\u002Fh3>\n\u003Cp>To provide up-to-date exchange rates and geolocation features, this plugin may connect to selected third-party services.\u003Cbr \u002F>\n\u003Cstrong>No data is sent without your explicit consent via the settings page.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong>Currency & Unit Data (Google Sheets via Proxy)\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Service:\u003C\u002Fstrong> Downloads conversion rates from public datasets.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Mechanism:\u003C\u002Fstrong> Requests are routed through a static redirect wrapper on \u003Ccode>petrnovak.cz\u003C\u002Fcode> to ensure link stability.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Data Sent:\u003C\u002Fstrong> Your server’s IP address (standard HTTP request). No visitor data is sent.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Policy:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fpolicies.google.com\u002Fprivacy\" rel=\"nofollow ugc\">Google Privacy Policy\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Proxy Policy:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fpetrnovak.cz\u002Fplugins\u002Fsmart-convert-currency-unit-conversion\u002Fprivacy-policy.php\" rel=\"nofollow ugc\">PetrNovak.cz Privacy Policy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Geolocation (IPinfo.io)\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Service:\u003C\u002Fstrong> Used \u003Cstrong>only\u003C\u002Fstrong> if “Auto-detect currency from IP” is enabled in settings.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Mechanism:\u003C\u002Fstrong> Sends the visitor’s IP address to IPinfo.io to determine their country code (e.g., “US”).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Data Sent:\u003C\u002Fstrong> Visitor IP Address.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Policy:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fipinfo.io\u002Fprivacy\" rel=\"nofollow ugc\">IPinfo Privacy Policy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n","The ultimate conversion engine: 153 Currencies, 105+ Units, Custom Unit Builder, GeoIP detection, and a native Gutenberg Block with live previews.",208,"2026-03-13T14:04:00.000Z","6.9.4","5.4","7.2",[111,112,113,92,24],"currency-converter","exchange-rates","geoip","https:\u002F\u002Fpetrnovak.cz\u002Fplugins\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsmart-convert-currency-unit-conversion.1.0.1.zip",{"slug":117,"name":118,"version":119,"author":120,"author_profile":121,"description":122,"short_description":123,"active_installs":124,"downloaded":125,"rating":126,"num_ratings":127,"last_updated":128,"tested_up_to":129,"requires_at_least":130,"requires_php":109,"tags":131,"homepage":136,"download_link":137,"security_score":13,"vuln_count":87,"unpatched_count":28,"last_vuln_date":138,"fetched_at":30},"performance-lab","Performance Lab","4.1.0","WordPress Performance Team","https:\u002F\u002Fprofiles.wordpress.org\u002Fperformanceteam\u002F","\u003Cp>The Performance Lab plugin is a collection of features focused on enhancing the performance of your site, most of which should eventually be merged into WordPress core. The plugin facilitates the discovery and activation of the individual performance feature plugins which the performance team is developing. In this way you can test the features to get their benefits before they become available in WordPress core. You can also play an important role by providing feedback to further improve the solutions.\u003C\u002Fp>\n\u003Cp>The feature plugins which are currently featured by this plugin are:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fembed-optimizer\u002F\" rel=\"ugc\">Embed Optimizer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fauto-sizes\u002F\" rel=\"ugc\">Enhanced Responsive Images\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdominant-color-images\u002F\" rel=\"ugc\">Image Placeholders\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fimage-prioritizer\u002F\" rel=\"ugc\">Image Prioritizer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fnocache-bfcache\u002F\" rel=\"ugc\">Instant Back\u002FForward\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwebp-uploads\u002F\" rel=\"ugc\">Modern Image Formats\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Foptimization-detective\u002F\" rel=\"ugc\">Optimization Detective\u003C\u002Fa> (dependency for Embed Optimizer and Image Prioritizer)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fperformant-translations\u002F\" rel=\"ugc\">Performant Translations\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fspeculation-rules\u002F\" rel=\"ugc\">Speculative Loading\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fview-transitions\u002F\" rel=\"ugc\">View Transitions\u003C\u002Fa> \u003Cem>(experimental)\u003C\u002Fem>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>These plugins can also be installed separately from installing Performance Lab, but having the Performance Lab plugin also active will ensure you find out about new performance features as they are developed.\u003C\u002Fp>\n","Performance plugin from the WordPress Performance Team, which is a collection of standalone performance features.",200000,3452248,86,50,"2026-02-27T20:19:00.000Z","7.0","6.6",[132,92,133,134,135],"diagnostics","optimization","performance","site-health","https:\u002F\u002Fgithub.com\u002FWordPress\u002Fperformance","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fperformance-lab.4.1.0.zip","2023-05-18 00:00:00",{"attackSurface":140,"codeSignals":180,"taintFlows":284,"riskAssessment":345,"analyzedAt":365},{"hooks":141,"ajaxHandlers":157,"restRoutes":172,"shortcodes":173,"cronEvents":178,"entryPointCount":179,"unprotectedCount":14},[142,148,152],{"type":143,"name":144,"callback":145,"file":146,"line":147},"action","admin_menu","w2pe_measure_widget_menu","index.php",108,{"type":143,"name":149,"callback":150,"file":146,"line":151},"wp_head","pluginname_ajaxurl",135,{"type":143,"name":153,"callback":154,"file":155,"line":156},"widgets_init","wpb_load_widget","widget.php",96,[158,163,166,170],{"action":159,"nopriv":160,"callback":161,"hasNonce":160,"hasCapCheck":160,"file":146,"line":162},"w2p_measure_category",false,"w2p_measure_category_callback",146,{"action":159,"nopriv":164,"callback":161,"hasNonce":160,"hasCapCheck":160,"file":146,"line":165},true,148,{"action":167,"nopriv":160,"callback":168,"hasNonce":160,"hasCapCheck":160,"file":146,"line":169},"w2p_measure_unit1","w2p_measure_unit1_callback",169,{"action":167,"nopriv":164,"callback":168,"hasNonce":160,"hasCapCheck":160,"file":146,"line":171},171,[],[174],{"tag":175,"callback":176,"file":146,"line":177},"w2pe_measurement","w2p_measure",200,[],5,{"dangerousFunctions":181,"sqlUsage":182,"outputEscaping":204,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":283},[],{"prepared":183,"raw":184,"locations":185},3,6,[186,190,193,195,198,202],{"file":187,"line":188,"context":189},"category.php",127,"$wpdb->get_var() with variable interpolation",{"file":146,"line":191,"context":192},156,"$wpdb->get_results() with variable interpolation",{"file":146,"line":194,"context":192},180,{"file":146,"line":196,"context":197},212,"$wpdb->query() with variable interpolation",{"file":199,"line":200,"context":201},"units.php",125,"$wpdb->get_row() with variable interpolation",{"file":199,"line":203,"context":192},257,{"escaped":183,"rawEcho":205,"locations":206},43,[207,210,212,214,216,218,220,222,223,224,226,227,228,230,232,234,237,239,241,242,244,246,248,250,252,254,256,258,260,262,264,265,266,268,269,270,272,274,275,277,278,280,282],{"file":187,"line":208,"context":209},59,"raw output",{"file":187,"line":211,"context":209},62,{"file":187,"line":213,"context":209},78,{"file":187,"line":215,"context":209},79,{"file":187,"line":217,"context":209},130,{"file":187,"line":219,"context":209},131,{"file":187,"line":221,"context":209},133,{"file":187,"line":221,"context":209},{"file":187,"line":221,"context":209},{"file":187,"line":225,"context":209},134,{"file":187,"line":225,"context":209},{"file":187,"line":225,"context":209},{"file":146,"line":229,"context":209},140,{"file":146,"line":231,"context":209},159,{"file":146,"line":233,"context":209},183,{"file":235,"line":236,"context":209},"page.php",29,{"file":199,"line":238,"context":209},116,{"file":199,"line":240,"context":209},119,{"file":199,"line":229,"context":209},{"file":199,"line":243,"context":209},150,{"file":199,"line":245,"context":209},158,{"file":199,"line":247,"context":209},166,{"file":199,"line":249,"context":209},174,{"file":199,"line":251,"context":209},202,{"file":199,"line":253,"context":209},262,{"file":199,"line":255,"context":209},263,{"file":199,"line":257,"context":209},264,{"file":199,"line":259,"context":209},265,{"file":199,"line":261,"context":209},266,{"file":199,"line":263,"context":209},269,{"file":199,"line":263,"context":209},{"file":199,"line":263,"context":209},{"file":199,"line":267,"context":209},270,{"file":199,"line":267,"context":209},{"file":199,"line":267,"context":209},{"file":199,"line":271,"context":209},289,{"file":155,"line":273,"context":209},26,{"file":155,"line":236,"context":209},{"file":155,"line":276,"context":209},61,{"file":155,"line":211,"context":209},{"file":155,"line":279,"context":209},76,{"file":155,"line":281,"context":209},77,{"file":155,"line":281,"context":209},[],[285,307],{"entryPoint":286,"graph":287,"unsanitizedCount":183,"severity":306},"\u003Ccategory> (category.php:0)",{"nodes":288,"edges":303},[289,293,298,301],{"id":290,"type":291,"label":292,"file":187,"line":215},"n0","source","$_REQUEST['cid']",{"id":294,"type":295,"label":296,"file":187,"line":215,"wp_function":297},"n1","sink","echo() [XSS]","echo",{"id":299,"type":291,"label":300,"file":187,"line":221},"n2","$_SERVER['PHP_SELF'] (x2)",{"id":302,"type":295,"label":296,"file":187,"line":221,"wp_function":297},"n3",[304,305],{"from":290,"to":294,"sanitized":160},{"from":299,"to":302,"sanitized":160},"low",{"entryPoint":308,"graph":309,"unsanitizedCount":343,"severity":344},"\u003Cunits> (units.php:0)",{"nodes":310,"edges":337},[311,314,318,319,322,326,328,331,333,335],{"id":290,"type":291,"label":312,"file":199,"line":313},"$_REQUEST['did']",106,{"id":294,"type":295,"label":315,"file":199,"line":316,"wp_function":317},"query() [SQLi]",101,"query",{"id":299,"type":291,"label":292,"file":199,"line":200},{"id":302,"type":295,"label":320,"file":199,"line":200,"wp_function":321},"get_row() [SQLi]","get_row",{"id":323,"type":291,"label":324,"file":199,"line":325},"n4","$_POST",60,{"id":327,"type":295,"label":296,"file":199,"line":229,"wp_function":297},"n5",{"id":329,"type":291,"label":330,"file":199,"line":200},"n6","$_REQUEST (x4)",{"id":332,"type":295,"label":296,"file":199,"line":243,"wp_function":297},"n7",{"id":334,"type":291,"label":300,"file":199,"line":263},"n8",{"id":336,"type":295,"label":296,"file":199,"line":263,"wp_function":297},"n9",[338,339,340,341,342],{"from":290,"to":294,"sanitized":160},{"from":299,"to":302,"sanitized":160},{"from":323,"to":327,"sanitized":160},{"from":329,"to":332,"sanitized":160},{"from":334,"to":336,"sanitized":160},9,"high",{"summary":346,"deductions":347},"The w2pe-measurement-widget plugin version 1.00 exhibits several significant security concerns despite having no recorded vulnerability history. The most alarming aspect is the large attack surface, with 4 out of 5 entry points lacking any form of authentication or authorization checks. This means that any unauthenticated user could potentially interact with these AJAX handlers, leading to unintended actions or information disclosure. Furthermore, the taint analysis reveals 2 flows with unsanitized paths, one of which is classified as high severity. This indicates a risk of attackers being able to inject malicious data that is not properly validated before being processed, potentially leading to code execution or other severe vulnerabilities. The code analysis also highlights a concerning lack of proper output escaping, with only 7% of outputs being correctly escaped. This significantly increases the risk of cross-site scripting (XSS) vulnerabilities, where attackers could inject malicious scripts into the website that are then executed in the browsers of other users. While the plugin has no known CVEs, this can often be due to a lack of rigorous security auditing or the vulnerabilities simply not having been discovered or publicly disclosed yet. The overall security posture is weak due to the numerous unprotected entry points, high-severity taint flows, and pervasive lack of output escaping, which outweigh the absence of known historical vulnerabilities.",[348,350,353,356,359,361,363],{"reason":349,"points":11},"Unprotected AJAX handlers",{"reason":351,"points":352},"High severity taint flow",12,{"reason":354,"points":355},"Unsanitized paths in taint flows",8,{"reason":357,"points":358},"Low output escaping percentage",7,{"reason":360,"points":179},"Missing nonce checks on AJAX",{"reason":362,"points":179},"Missing capability checks",{"reason":364,"points":179},"SQL queries not using prepared statements","2026-03-17T01:22:51.859Z",{"wat":367,"direct":380},{"assetPaths":368,"generatorPatterns":377,"scriptPaths":378,"versionParams":379},[369,370,371,372,373,374,375,376],"\u002Fwp-content\u002Fplugins\u002Fw2pe-measurement-widget\u002Funits.php","\u002Fwp-content\u002Fplugins\u002Fw2pe-measurement-widget\u002Fcategory.php","\u002Fwp-content\u002Fplugins\u002Fw2pe-measurement-widget\u002Fwidget.php","\u002Fwp-content\u002Fplugins\u002Fw2pe-measurement-widget\u002Fpage.php","\u002Fwp-content\u002Fplugins\u002Fw2pe-measurement-widget\u002Fsupport.php","\u002Fwp-content\u002Fplugins\u002Fw2pe-measurement-widget\u002Fimages\u002Fmenu.png","\u002Fwp-content\u002Fplugins\u002Fw2pe-measurement-widget\u002Ffiles\u002Fw2pe_measure.css","\u002Fwp-content\u002Fplugins\u002Fw2pe-measurement-widget\u002Ffiles\u002Fw2pe_measure.js",[],[],[],{"cssClasses":381,"htmlComments":382,"htmlAttributes":383,"restEndpoints":384,"jsGlobals":385,"shortcodeOutput":387},[],[],[],[],[386],"ajaxurl",[388],"[w2pe_measurement]"]