[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZSYCBl43yE8dWTZUmM1uoMNNpt5hIwexjeX7wvrvV2U":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":38,"analysis":128,"fingerprints":239},"w3dev-fancybox","fancyBox 3 for WordPress","1.2.4","w3dev","https:\u002F\u002Fprofiles.wordpress.org\u002Fw3dev\u002F","\u003Cp>Seamlessly integrates the fancyBox 3 script into your WordPress installation: Upload, activate, and you’re done. Additional configuration is optional.\u003C\u002Fp>\n\u003Cp>You can easily customize almost anything you can think about fancyBox lightbox. By default, the plugin will use jQuery to apply fancyBox to ANY thumbnails that link directly to an image. It will also automatically convert WordPress image galleries into fancyBox galleries.\u003C\u002Fp>\n\u003Cp>For Inline content linking\u003Cbr \u002F>\n– Create a link to any hidden or visible div with an ID attribate, and the plugin will transform the link and enable it for fancyBox usage.\u003Cbr \u002F>\n– Note: this may cause a conflict if your page or website is using a smooth scrolling function to jump between page sections!\u003C\u002Fp>\n\u003Cp>In upcoming versions, additional functionality for ajax calls and iframe data will be implemented.\u003C\u002Fp>\n","Seamlessly integrates the fancyBox 3 script into your WordPress installation: Upload, activate, and you're done. Additional configuration is opti …",1000,15612,98,7,"2023-11-06T22:53:00.000Z","6.3.8","3.4","",[20,21,22,23,24],"fancybox","fancybox-3","gallery","jquery","lightbox","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fw3dev-fancybox\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fw3dev-fancybox.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":34,"avg_security_score":35,"avg_patch_time_days":36,"trust_score":27,"computed_at":37},3,1270,87,30,"2026-04-03T20:08:51.326Z",[39,56,75,91,110],{"slug":40,"name":41,"version":42,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":28,"num_ratings":28,"last_updated":49,"tested_up_to":50,"requires_at_least":51,"requires_php":18,"tags":52,"homepage":54,"download_link":55,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"fancyboxify","Fancyboxify","1.1","omerk","https:\u002F\u002Fprofiles.wordpress.org\u002Fomerk\u002F","\u003Cp>\u003Ca href=\"http:\u002F\u002Ffancybox.net\u002F\" rel=\"nofollow ugc\">Fancybox\u003C\u002Fa> is a tool for displaying images, html content and multi-media\u003Cbr \u002F>\nin a Mac-style “lightbox” that floats overtop of web page. It was built using the jQuery library.\u003C\u002Fp>\n\u003Cp>This plugin inserts the necessary elements required to run Fancybox on your blog. It also groups\u003Cbr \u002F>\nimages within posts using rel attributes. (Based on the code found on \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Ftopic\u002Fautomatic-adding-lightbox-rel-and-group-to-images-in-posts\" rel=\"ugc\">this\u003C\u002Fa>\u003Cbr \u002F>\nforum thread)\u003C\u002Fp>\n\u003Cp>To disable Fancybox per post: Add a custom field called ‘nofancybox’ and set it’s value to ‘true’.\u003Cbr \u002F>\nInstructions on how to add custom fields to posts can be found at \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FCustom_Fields\" rel=\"nofollow ugc\">this\u003C\u002Fa>\u003Cbr \u002F>\ncodex article.\u003C\u002Fp>\n","This simple plugin enables Fancybox on image links. It groups all images within a single post and can also be disabled per post.",60,9556,"2011-03-24T02:30:00.000Z","3.1.4","2.6",[20,22,23,24,53],"photo","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Ffancyboxify\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffancyboxify.1.1.zip",{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":64,"downloaded":65,"rating":28,"num_ratings":28,"last_updated":66,"tested_up_to":67,"requires_at_least":68,"requires_php":18,"tags":69,"homepage":18,"download_link":74,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wp-post-gallery-fancybox","WP Post Gallery Fancybox","1.0.0","Ajay Maurya","https:\u002F\u002Fprofiles.wordpress.org\u002Fajmaurya\u002F","\u003Cp>WP Post Gallery Fancybox  is a WordPress plugin that converts the default WordPress Media Gallery into a Fancybox Gallery.\u003C\u002Fp>\n\u003Cp>Just add the gallery shortcode to display the thumbnails in your posts\u002Fpages and this plugin does the rest, It makes your gallery to appear as a Fancybox Gallery.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Ffancyapps.com\u002Ffancybox\u002F3\u002F#images-1\" rel=\"nofollow ugc\">Demo of Fancybox\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Touch Enabled and Fully Responsive Lightbox.\u003Cbr \u002F>\nSlideshow and Full screen options available.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Mobile optimized\u003C\u002Fli>\n\u003Cli>Responsive, touch-enabled and customizable.\u003C\u002Fli>\n\u003Cli>Multiple instances (Add Multiple Galleries on a single page)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>The FancyBox jQuery plugin is written by Janis Skarnelis:\u003Cbr \u002F>\nhttps:\u002F\u002Ffancyapps.com\u002Ffancybox\u002F3\u002F\u003C\u002Fp>\n","WP Post Gallery Fancybox is a WordPress plugin that converts the default WordPress Media Gallery into a Fancybox Gallery.",10,1313,"2018-11-05T10:39:00.000Z","4.9.29","2.6.3",[21,70,71,72,73],"gallery-popup","lightbox-gallery","wordpress-fancybox-gallery","wordpress-gallery","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-post-gallery-fancybox.zip",{"slug":76,"name":77,"version":78,"author":79,"author_profile":80,"description":81,"short_description":82,"active_installs":83,"downloaded":84,"rating":85,"num_ratings":64,"last_updated":86,"tested_up_to":87,"requires_at_least":51,"requires_php":18,"tags":88,"homepage":89,"download_link":90,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"jquery-lightbox-for-native-galleries","jQuery Lightbox For Native Galleries","3.2.2","Automattic","https:\u002F\u002Fprofiles.wordpress.org\u002Fautomattic\u002F","\u003Cp>\u003Cstrong>DISCONTINUATION NOTICE:\u003C\u002Fstrong> Development on this plugin has ceased in favor of the carousel module in the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fjetpack\u002F\" rel=\"ugc\">Jetpack plugin\u003C\u002Fa>. I recommend you use that plugin instead — it’s much more full featured.\u003C\u002Fp>\n\u003Cp>Makes the native WordPress galleries use a lightbox script called \u003Ca href=\"http:\u002F\u002Fcolorpowered.com\u002Fcolorbox\u002F\" rel=\"nofollow ugc\">ColorBox\u003C\u002Fa> to display the fullsize images right there in the page. No modifications required.\u003C\u002Fp>\n\u003Cp>You can also make single non-\u003Ccode>[gallery]\u003C\u002Fcode> images use the lightbox by giving their links a class of “lightbox”, like so:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Ca href=\"...\" class=\"lightbox\">\u003Cimg src=\"...\" alt=\"...\" \u002F>\u003C\u002Fa>\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Makes the native WordPress galleries use a lightbox script called ColorBox to display the fullsize images.",5000,225633,80,"2017-11-28T08:58:00.000Z","3.4.2",[22,23,24],"http:\u002F\u002Fwww.viper007bond.com\u002Fwordpress-plugins\u002Fjquery-lightbox-for-native-galleries\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjquery-lightbox-for-native-galleries.zip",{"slug":92,"name":93,"version":94,"author":95,"author_profile":96,"description":97,"short_description":98,"active_installs":99,"downloaded":100,"rating":101,"num_ratings":102,"last_updated":103,"tested_up_to":18,"requires_at_least":104,"requires_php":18,"tags":105,"homepage":108,"download_link":109,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"cleaner-gallery","Cleaner Gallery","1.1.0","Justin Tadlock","https:\u002F\u002Fprofiles.wordpress.org\u002Fgreenshady\u002F","\u003Cp>This plugin was written to take care of the invalid HTML that WordPress produces when using the \u003Ccode>[gallery]\u003C\u002Fcode> shortcode.\u003C\u002Fp>\n\u003Cp>It does a bit more than that though.  It will integrate with many Lightbox-type scripts and allow you to do much cooler things with your galleries.  Plus, it has a couple of extra options that you can play around with.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Uses HTML5 \u003Ccode>\u003Cfig>\u003C\u002Fcode> and \u003Ccode>\u003Cfigcaption>\u003C\u002Fcode> elements.\u003C\u002Fli>\n\u003Cli>Integrates with \u003Ca href=\"http:\u002F\u002Fschema.org\" rel=\"nofollow ugc\">Schema.org microdata\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Uses the \u003Ccode>aria-describedby\u003C\u002Fcode> attribute to make images + captions more accessible to users with disabilities.\u003C\u002Fli>\n\u003Cli>Validates the invalid code that WordPress spits out.\u003C\u002Fli>\n\u003Cli>Several options on how you want your gallery images.\u003C\u002Fli>\n\u003Cli>Allows multiple galleries in a single post.\u003C\u002Fli>\n\u003Cli>Ability to set the number of images shown in each gallery.\u003C\u002Fli>\n\u003Cli>Ability to exclude or include any images from your gallery.\u003C\u002Fli>\n\u003Cli>Doesn’t load any extra CSS or JavaScript unless you choose to do so.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Integrates with 18 different Lightbox-type scripts\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.huddletogether.com\u002Fprojects\u002Flightbox2\u002F\" rel=\"nofollow ugc\">Lightbox 2\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.digitalia.be\u002Fsoftware\u002Fslimbox\" rel=\"nofollow ugc\">Slimbox\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.digitalia.be\u002Fsoftware\u002Fslimbox2\" rel=\"nofollow ugc\">Slimbox 2\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fjquery.com\u002Fdemo\u002Fthickbox\u002F\" rel=\"nofollow ugc\">Thickbox\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fdolem.com\u002Flytebox\u002F\" rel=\"nofollow ugc\">Lytebox\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Forangoo.com\u002Flabs\u002FGreyBox\u002F\" rel=\"nofollow ugc\">Greybox\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.nickstakenburg.com\u002Fprojects\u002Flightview\u002F\" rel=\"nofollow ugc\">Lightview\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.balupton.com\u002Fsandbox\u002Fjquery_lightbox\u002F\" rel=\"nofollow ugc\">jQuery Lightbox Plugin\u003C\u002Fa> (balupton edition)\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fleandrovieira.com\u002Fprojects\u002Fjquery\u002Flightbox\u002F\" rel=\"nofollow ugc\">jQuery Lightbox Plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.laptoptips.ca\u002Fprojects\u002Fwp-shutter-reloaded\u002F\" rel=\"nofollow ugc\">Shutter Reloaded\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fmjijackson.com\u002Fshadowbox\u002Findex.html\" rel=\"nofollow ugc\">Shadowbox\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Ffancy.klade.lv\" rel=\"nofollow ugc\">FancyBox\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fgithub.com\u002Fkrewenki\u002Fjquery-lightbox\u002Ftree\u002Fmaster\" rel=\"nofollow ugc\">jQuery Lightbox\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.stickmanlabs.com\u002Flightwindow\" rel=\"nofollow ugc\">LightWindow\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.cabel.name\u002F2008\u002F02\u002Ffancyzoom-10.html\" rel=\"nofollow ugc\">FancyZoom\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Frandomous.com\u002Ffloatbox\u002Fhome\" rel=\"nofollow ugc\">Floatbox\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fcolorpowered.com\u002Fcolorbox\" rel=\"nofollow ugc\">Colorbox\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.no-margin-for-errors.com\u002Fprojects\u002Fprettyphoto-jquery-lightbox-clone\" rel=\"nofollow ugc\">prettyPhoto\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Professional Support\u003C\u002Fh3>\n\u003Cp>If you need professional plugin support from me, the plugin author, you can access the support forums at \u003Ca href=\"http:\u002F\u002Fthemehybrid.com\u002Fsupport\" rel=\"nofollow ugc\">Theme Hybrid\u003C\u002Fa>, which is a professional WordPress help\u002Fsupport site where I handle support for all my plugins and themes for a community of 40,000+ users (and growing).\u003C\u002Fp>\n\u003Ch3>Plugin Development\u003C\u002Fh3>\n\u003Cp>If you’re a theme author, plugin author, or just a code hobbyist, you can follow the development of this plugin on it’s \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fjustintadlock\u002Fcleaner-gallery\" rel=\"nofollow ugc\">GitHub repository\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Donations\u003C\u002Fh3>\n\u003Cp>Yes, I do accept donations.  If you want to buy me a beer or whatever, you can do so from my \u003Ca href=\"http:\u002F\u002Fthemehybrid.com\u002Fdonate\" rel=\"nofollow ugc\">donations page\u003C\u002Fa>.  I appreciate all donations, no matter the size.  Further development of this plugin is not contingent on donations, but they are always a nice incentive.\u003C\u002Fp>\n","A cleaner WordPress [gallery] that integrates with multiple Lightbox-type scripts.",2000,216255,96,23,"2017-11-28T16:13:00.000Z","3.9",[22,106,23,24,107],"images","slimbox","http:\u002F\u002Fthemehybrid.com\u002Fplugins\u002Fcleaner-gallery","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcleaner-gallery.1.1.0.zip",{"slug":111,"name":112,"version":113,"author":114,"author_profile":115,"description":116,"short_description":117,"active_installs":99,"downloaded":118,"rating":119,"num_ratings":33,"last_updated":120,"tested_up_to":121,"requires_at_least":122,"requires_php":18,"tags":123,"homepage":126,"download_link":127,"security_score":119,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"wp-featherlight-disabled","WP Featherlight Disabled","1.0.4","treeflips","https:\u002F\u002Fprofiles.wordpress.org\u002Ftreeflips\u002F","\u003Cp>This minimal WordPress lightbox plugin adds high performance, responsive jQuery lightbox functionality to your images. When standard WordPress images\u002Fgalleries are clicked, the background fades out into black as images display in lightbox popup. Galleries can be navigated with on-screen arrows, touchscreen swipes, or pressing arrows keys.\u003C\u002Fp>\n\u003Cp>In order for WordPress images and galleries to be lightboxed:\u003Cbr \u002F>\n– You must select the “Media File” option when choosing where thumbnails should link. You can also select the “Custom Link” option if it links directly to an image file. This should work for any image file, even if it’s hosted on another website.\u003Cbr \u002F>\n– Enable on each post by checking “Enable lightbox” on the WP Featherlight settings.\u003Cbr \u002F>\n– You can also lightbox videos, iframes, and ajax content by adding data attributes to your content. For more details on custom content loading, check out the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fnoelboss\u002Ffeatherlight\u002F#usage\" rel=\"nofollow ugc\">featherlight documentation\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>My plugin is simply a forked version of the original \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fwp-featherlight\" rel=\"ugc\">WP Featherlight plugin\u003C\u002Fa>. Only difference is the original loads the featherlight CSS\u002FJS on every page whereas mine only loads when you manually enable. Big thanks to Yin and Walter for contributing.\u003C\u002Fp>\n\u003Ch4>Features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Ultra-lightweight – even more lightweight than the original WP Featherlight since the lightbox CSS\u002FJS is not loaded automatically.\u003C\u002Fli>\n\u003Cli>Manual activation – to enable lightbox functionality, simply click the checkbox in your post settings.\u003C\u002Fli>\n\u003Cli>Retains WP Featherlight features – has all the same features and filters as the original WP Featherlight plugin (up to version 1.3.3)\u003C\u002Fli>\n\u003Cli>Supports WEBP image format.\u003C\u002Fli>\n\u003C\u002Ful>\n","The most lightweight WordPress lightbox plugin...and the featherlight CSS\u002FJS (only 7kb) is automatically disabled unless you manually enable within ea …",17115,100,"2025-05-14T09:05:00.000Z","6.8.5","4.0",[22,124,23,125,24],"image","jquery-lightbox","https:\u002F\u002Fwpjohnny.com\u002Fwp-featherlight-disabled\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-featherlight-disabled.1.0.4.zip",{"attackSurface":129,"codeSignals":168,"taintFlows":226,"riskAssessment":227,"analyzedAt":238},{"hooks":130,"ajaxHandlers":164,"restRoutes":165,"shortcodes":166,"cronEvents":167,"entryPointCount":28,"unprotectedCount":28},[131,137,141,144,147,151,155,160],{"type":132,"name":133,"callback":134,"file":135,"line":136},"action","init","fb3fw_register_scripts","fancybox-3-for-wordpress.php",86,{"type":132,"name":138,"callback":139,"file":135,"line":140},"wp_enqueue_scripts","fb3fw_scripts",94,{"type":132,"name":138,"callback":142,"file":135,"line":143},"fb3fw_styles",103,{"type":132,"name":133,"callback":145,"file":135,"line":146},"fb3fw_textdomain",113,{"type":132,"name":148,"callback":149,"file":135,"line":150},"admin_init","fb3fw_admin_options",122,{"type":132,"name":152,"callback":153,"file":135,"line":154},"admin_menu","fb3fw_admin_menu",135,{"type":156,"name":157,"callback":158,"priority":64,"file":135,"line":159},"filter","plugin_action_links","fb3fw_plugin_action_links",163,{"type":132,"name":161,"callback":162,"priority":119,"file":135,"line":163},"wp_footer","fb3fw_init",260,[],[],[],[],{"dangerousFunctions":169,"sqlUsage":170,"outputEscaping":172,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":225},[],{"prepared":28,"raw":28,"locations":171},[],{"escaped":28,"rawEcho":173,"locations":174},25,[175,179,181,182,184,186,188,190,192,193,195,197,199,201,203,205,207,209,211,213,215,217,219,221,223],{"file":176,"line":177,"context":178},"fancybox-3-for-wordpress-admin.php",69,"raw output",{"file":176,"line":180,"context":178},74,{"file":176,"line":27,"context":178},{"file":176,"line":183,"context":178},174,{"file":176,"line":185,"context":178},233,{"file":176,"line":187,"context":178},273,{"file":176,"line":189,"context":178},281,{"file":176,"line":191,"context":178},288,{"file":135,"line":185,"context":178},{"file":135,"line":194,"context":178},234,{"file":135,"line":196,"context":178},235,{"file":135,"line":198,"context":178},236,{"file":135,"line":200,"context":178},237,{"file":135,"line":202,"context":178},238,{"file":135,"line":204,"context":178},239,{"file":135,"line":206,"context":178},240,{"file":135,"line":208,"context":178},241,{"file":135,"line":210,"context":178},242,{"file":135,"line":212,"context":178},243,{"file":135,"line":214,"context":178},244,{"file":135,"line":216,"context":178},245,{"file":135,"line":218,"context":178},246,{"file":135,"line":220,"context":178},247,{"file":135,"line":222,"context":178},248,{"file":135,"line":224,"context":178},250,[],[],{"summary":228,"deductions":229},"The w3dev-fancybox plugin, version 1.2.4, presents a mixed security posture. On the positive side, the static analysis indicates a very small attack surface with no apparent direct entry points like AJAX handlers, REST API routes, or shortcodes. The code also demonstrates good practices by exclusively using prepared statements for any SQL queries and not performing file operations or external HTTP requests, which are common vectors for vulnerabilities.  There are also no registered CVEs associated with this plugin, suggesting a history of relative stability.\n\nHowever, a significant concern arises from the complete lack of output escaping. With 25 outputs analyzed and 0% properly escaped, this plugin is highly susceptible to Cross-Site Scripting (XSS) vulnerabilities. Any data rendered by this plugin without proper sanitization can be exploited by attackers to inject malicious scripts into the user's browser. Furthermore, the absence of nonce checks and capability checks on all identified entry points (even though there are zero, the lack of any checks is noteworthy for future code) is a weakness. While the current attack surface is minimal, if any new entry points are added in the future without these essential security measures, the plugin would become immediately vulnerable to CSRF and unauthorized access attacks. The lack of taint analysis flows might be due to the limited scope or complexity of the analyzed code, but it doesn't negate the identified output escaping issues.\n\nIn conclusion, while the plugin boasts a small attack surface and avoids common pitfalls like raw SQL and external requests, the critical lack of output escaping presents a substantial risk of XSS vulnerabilities. The absence of any capability or nonce checks also represents a potential future vulnerability if the plugin evolves. Users should be cautious and consider the implications of rendering unsanitized data, especially if the plugin handles user-provided content.",[230,233,236],{"reason":231,"points":232},"No output escaping",15,{"reason":234,"points":235},"No nonce checks",5,{"reason":237,"points":235},"No capability checks","2026-03-16T18:47:06.294Z",{"wat":240,"direct":252},{"assetPaths":241,"generatorPatterns":246,"scriptPaths":247,"versionParams":249},[242,243,244,245],"\u002Fwp-content\u002Fplugins\u002Fw3dev-fancybox\u002Ffancybox\u002Fjquery.fancybox.min.css","\u002Fwp-content\u002Fplugins\u002Fw3dev-fancybox\u002Ffancybox\u002Fjquery.fancybox.min.js","\u002Fwp-content\u002Fplugins\u002Fw3dev-fancybox\u002Fcss\u002Ffancybox-admin.css","\u002Fwp-content\u002Fplugins\u002Fw3dev-fancybox\u002Fjs\u002Fadmin.js",[],[248],"fancybox\u002Fjquery.fancybox.min.js",[250,251],"w3dev-fancybox\u002Ffancybox\u002Fjquery.fancybox.min.js?ver=","w3dev-fancybox\u002Ffancybox\u002Fjquery.fancybox.min.css?ver=",{"cssClasses":253,"htmlComments":254,"htmlAttributes":257,"restEndpoints":260,"jsGlobals":261,"shortcodeOutput":263},[],[255,256],"\u003C!-- fancyBox 3 for Wordpress -->","\u003C!-- END fancyBox 3 for Wordpress -->",[258,259],"data-fancybox","data-caption",[],[262],"jQuery",[]]