[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fk1YzO9Q8UH2POFGWSZG0cpy8dIZ6LdSfMNBjnLSicbk":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":6,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":19,"download_link":20,"security_score":21,"vuln_count":13,"unpatched_count":13,"last_vuln_date":22,"fetched_at":23,"vulnerabilities":24,"developer":25,"crawl_stats":22,"alternatives":32,"analysis":125,"fingerprints":237},"weixin-helper","微信群发助手(WeChat Helper)","1.0.1","smyx","https:\u002F\u002Fprofiles.wordpress.org\u002Fsmyx\u002F","\u003Cp>目前插件的功能：\u003C\u002Fp>\n\u003Col>\n\u003Cli>使用微信公众号、微博粉丝服务的[高级群发接口]实现WordPress自动群发给用户（群发助手仅限微信认证用户使用，新浪微博加V用户可以使用。）\u003C\u002Fli>\n\u003Cli>支持手动群发和自动定时群发，目前仅支持文本和图文，图文根据文章自动生成，免除您手动上传素材的烦恼。\u003C\u002Fli>\n\u003Cli>微信群发内容支持在正文头部和底部插入文字或者图片，用来引导用户关注等。\u003C\u002Fli>\n\u003Cli>支持从微信公众平台网站同步素材到本地，方便在您的网站一键群发，也支持在本地创建群发素材，其中永久素材能同步到微信公众平台网站。\u003C\u002Fli>\n\u003Cli>支持从WordPress连接微信插件的【自定义回复】中获取群发素材。\u003C\u002Fli>\n\u003Cli>支持客服群发，即不限制群发次数，但是只能群发给48小时内跟您的公众号有互动的粉丝（比如用户发送消息，关注\u002F订阅事件，点击自定义菜单，扫描二维码事件等）。\u003C\u002Fli>\n\u003C\u002Fol>\n","使用微信公众号、微博粉丝服务的[高级群发接口]实现WordPress自动群发给用户",10,4939,0,"2021-03-16T06:23:00.000Z","3.5","",[18],"weixin","https:\u002F\u002Fwptao.com\u002Fweixin-helper.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fweixin-helper.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":26,"total_installs":27,"avg_security_score":28,"avg_patch_time_days":29,"trust_score":30,"computed_at":31},6,150,88,30,86,"2026-04-04T16:01:11.479Z",[33,56,77,93,109],{"slug":34,"name":35,"version":36,"author":37,"author_profile":38,"description":39,"short_description":40,"active_installs":41,"downloaded":42,"rating":43,"num_ratings":44,"last_updated":45,"tested_up_to":46,"requires_at_least":47,"requires_php":48,"tags":49,"homepage":54,"download_link":55,"security_score":21,"vuln_count":13,"unpatched_count":13,"last_vuln_date":22,"fetched_at":23},"woo-wechatpay","Payment gateway for WooCommerce – Woo WeChatPay","1.3.16","Alexandre Froger","https:\u002F\u002Fprofiles.wordpress.org\u002Ffrogerme\u002F","\u003Cp>Woo WeChatPay is a companion plugin for WP Weixin that adds a WeChat Pay payment gateway to WooCommerce-powered websites.\u003Cbr \u002F>\nCustomers can pay both in the WeChat browser (JSAPI), mobile browsers (H5), or from their computer via a QR code.\u003Cbr \u002F>\nUpon purchase and if activated in settings, customers may receive a notification in the WeChat Official Account with a templated message if they are a follower.\u003C\u002Fp>\n\u003Ch3>Requirements\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>A \u003Ca href=\"https:\u002F\u002Fmp.weixin.qq.com\" rel=\"nofollow ugc\">China Mainland WeChat Official Account\u003C\u002Fa> – \u003Cstrong>Service account\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>A \u003Ca href=\"https:\u002F\u002Fpay.weixin.qq.com\" rel=\"nofollow ugc\">China Mainland WeChat Pay account\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-weixin\" rel=\"ugc\">WP Weixin\u003C\u002Fa>\u003C\u002Fstrong> installed, activated, enabled and properly configured.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Important Notes\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Does NOT support \u003Ca href=\"https:\u002F\u002Fpay.weixin.qq.com\u002Fwechatpay_guide\u002Fintro_settle.shtml\" rel=\"nofollow ugc\">cross-border payments\u003C\u002Fa> (possibly planned for v1.4).\u003C\u002Fli>\n\u003Cli>Make sure to read the “TROUBLESHOOT, FEATURE REQUESTS AND 3RD PARTY INTEGRATION” section below and \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffroger-me\u002Fwoo-wechatpay\u002Fblob\u002Fmaster\u002FREADME.md\" rel=\"nofollow ugc\">the full documentation\u003C\u002Fa> before contacting the author.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Overview\u003C\u002Fh3>\n\u003Cp>This plugin adds the following major features to WooCommerce and WP Weixin:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Payment of WooCommerce orders in WeChat mobile app:\u003C\u002Fstrong> uses the WeChat JSAPI for a seamless experience.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Payment of WooCommerce orders in mobile web browser app:\u003C\u002Fstrong> calls the WeChat H5 API for a seamless experience.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Payment of WooCommerce orders with WeChat via QR Code:\u003C\u002Fstrong> for customers using WeChat Pay in classic browsers.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Support for “pay again”:\u003C\u002Fstrong> allows customers to continue the payment process of Pending orders.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Refund of WooCommerce orders:\u003C\u002Fstrong> possibility to refund orders manually in a few clicks, and support for automatic refund in case the transaction failed.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Templated message notification in WeChat:\u003C\u002Fstrong> send a WeChat templated message to the customer upon purchase (if following the Official Account – completely customisable via \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffroger-me\u002Fwoo-wechatpay\u002Fblob\u002Fmaster\u002FREADME.md#user-content-filters\" rel=\"nofollow ugc\">filters\u003C\u002Fa>).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multi-currency support:\u003C\u002Fstrong> using an exchange rate against Chinese Yuan configured in the settings.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Compatible with \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoocommerce-multilingual\u002F\" rel=\"ugc\">WooCommerce Multilingual\u003C\u002Fa>, \u003Ca href=\"http:\u002F\u002Fwpml.org\u002F\" rel=\"nofollow ugc\">WPML\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fultimate-member\u002F\" rel=\"ugc\">Ultimate Member\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FCreate_A_Network\" rel=\"nofollow ugc\">WordPress Multisite\u003C\u002Fa>, and \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffroger-me\u002Fwp-weixin\u002Fblob\u002Fmaster\u002FREADME.md#user-content-object-cache-considerations\" rel=\"nofollow ugc\">many caching plugins\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Troubleshoot, feature requests and 3rd party integration\u003C\u002Fh3>\n\u003Cp>Unlike most WeChat integration plugins, Woo WeChatPay is provided for free.\u003C\u002Fp>\n\u003Cp>Woo WeChatPay is regularly updated, and bug reports are welcome, preferably on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ffroger-me\u002Fwoo-wechatpay\u002Fissues\" rel=\"nofollow ugc\">Github\u003C\u002Fa>. Each bug report will be addressed in a timely manner, but issues reported on WordPress may take significantly longer to receive a response.\u003C\u002Fp>\n\u003Cp>Woo WeChatPay has been tested with the latest version of WordPress and WooCommerce – in case of issue, please ensure you are able to reproduce it with a default installation of WordPress, WooCommerce plugin, and Storefront theme and any of the aforementioned supported plugins if used before reporting a bug.\u003C\u002Fp>\n\u003Cp>Feature requests (such as “it would be nice to have XYZ”) or 3rd party integration requests (such as “it is not working with XYZ plugin” or “it is not working with my theme”) will be considered only after receiving a red envelope (红包) of a minimum RMB 500 on WeChat (guarantee of best effort, no guarantee of result).\u003C\u002Fp>\n\u003Cp>To add the author on WeChat, click \u003Ca href=\"https:\u002F\u002Ffroger.me\u002Fwp-content\u002Fuploads\u002F2018\u002F04\u002Fwechat-qr.png\" rel=\"nofollow ugc\">here\u003C\u002Fa>, scan the WeChat QR code, and add “Woo WeChatPay” as a comment in your contact request.\u003C\u002Fp>\n","WeChat Pay payment gateway for WooCommerce.",90,8811,100,5,"2024-03-12T03:17:00.000Z","6.4.8","4.9.5","7.0",[50,51,52,53,18],"payments","wechat","wechat-payments","wechatpay","https:\u002F\u002Fgithub.com\u002Ffroger-me\u002Fwoo-wechatpay","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwoo-wechatpay.1.3.16.zip",{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":64,"downloaded":65,"rating":13,"num_ratings":13,"last_updated":66,"tested_up_to":67,"requires_at_least":68,"requires_php":69,"tags":70,"homepage":75,"download_link":76,"security_score":43,"vuln_count":13,"unpatched_count":13,"last_vuln_date":22,"fetched_at":23},"apoyl-grabweixin","[Aotuman] Grab WeChat Articles","2.0.0","apoyl","https:\u002F\u002Fprofiles.wordpress.org\u002Fapoyl\u002F","\u003Cp>Enter the WeChat Official Account article link in the editor, click “Grab WeChat Articles,” and the content will be automatically captured into the editor. This makes it very convenient for users to obtain WeChat article content.\u003C\u002Fp>\n\u003Ch3>Feature Overview\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>Supports displaying a WeChat article link input field next to the editor\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Supports one-click grabbing of WeChat articles in both the block editor and classic editor\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Supports one-click grabbing of WeChat Official Account articles\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Supports one-click grabbing of images and text from WeChat Official Account articles\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Supports automatic localization and conversion of grabbed images\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Some of the above features are free. Click to purchase the paid version: \u003Ca href=\"http:\u002F\u002Fwww.girltm.com\u002F\" rel=\"nofollow ugc\">Aotuman Plugin\u003C\u002Fa>\u003Cbr \u002F>\nYou can also contact the developer via QQ: 3201361925 or email: 3201361925@qq.com\u003Cbr \u002F>\nThis plugin hereby declares: It is intended to help users grab compliant and original author-authorized WeChat content. Please do not use the articles for commercial or illegal purposes.\u003C\u002Fp>\n\u003Cp>Recommended Plugin Pairing\u003Cbr \u002F>\nAuto Sync Alibaba Cloud Object Storage OSS: Automatically syncs website images and attachments to Alibaba Cloud Object Storage OSS, separating images\u002Fattachments from website code and distributing traffic to make your website load faster.\u003C\u002Fp>\n","Enter the WeChat Official Account article link in the editor, click \"Grab WeChat Articles,\" and the content will be automatically captured i &hellip;",70,4885,"2025-09-29T08:15:00.000Z","6.8.5","6.0","7.4",[71,72,73,74,18],"crawl","grab","wechat-articles","wechat-official-account","http:\u002F\u002Fwww.girltm.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fapoyl-grabweixin.zip",{"slug":78,"name":79,"version":80,"author":60,"author_profile":61,"description":81,"short_description":82,"active_installs":83,"downloaded":84,"rating":13,"num_ratings":13,"last_updated":85,"tested_up_to":86,"requires_at_least":68,"requires_php":69,"tags":87,"homepage":91,"download_link":92,"security_score":43,"vuln_count":13,"unpatched_count":13,"last_vuln_date":22,"fetched_at":23},"apoyl-weixin","[凹凸曼]一键微信登录","2.4.0","\u003Cp>这是一款实现微信互联一键登录网站，让用户不在繁琐去注册用户，一键实现微信登录，可以让电脑版网站扫描登录和手机微信登录，多个公众号，甚至以后需要移动APP应用微信登录，统一用户账号的需求，极大的方便用户登录网站.\u003C\u002Fp>\n\u003Ch3>插件功能\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>支持登录一键微信登录,可以实现手机快捷登录和PC扫描登录微信\u003C\u002Fli>\n\u003Cli>支持自动同步微信昵称到网站用户名,前提满足wordpress用户的注册要求\u003C\u002Fli>\n\u003Cli>支持一键微信登录用户，自定义角色：订阅者，贡献者，作者，编辑，管理员，这个站点没有任何用户角色\u003C\u002Fli>\n\u003Cli>支持查看管理绑定记录管理+\u003C\u002Fli>\n\u003Cli>支持已登录账号可以绑定微信\u003C\u002Fli>\n\u003Cli>支持管理员解绑账号\u003C\u002Fli>\n\u003Cli>支持微信账户中文昵称自动注册wordpress昵称\u003C\u002Fli>\n\u003Cli>支持你想实现电脑版网站扫描登录和手机微信登录，多个公众号，甚至以后需要移动APP应用微信登录，统一用户账号的需求，此插件也满足\u003C\u002Fli>\n\u003Cli>支持微信头像同步到用户并显示\u003C\u002Fli>\n\u003Cli>支持其他插件或者模板页面调用微信登录，需要手动部署（如woocommerce的页面实现微信登录）\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>以上功能部分免费,点击购买付费版：\u003Ca href=\"http:\u002F\u002Fwww.girltm.com\u002F\" rel=\"nofollow ugc\">凹凸曼插件\u003C\u002Fa>\u003Cbr \u002F>\n也可以加开发者QQ：3201361925 email: 3201361925@qq.com\u003C\u002Fp>\n","这是一款实现微信互联一键登录网站，让用户不在繁琐去注册用户，一键实现微信登录，可以让电脑版网站扫描登录和手机微信登录，多个公众号，甚至以后需要移动APP应用微信登录，统一用户账号的需求，极大的方便用户登录网站.",20,3796,"2025-12-25T08:57:00.000Z","6.9.4",[88,89,51,18,90],"%e7%99%bb%e5%bd%95","oauth2","%e5%be%ae%e4%bf%a1","http:\u002F\u002Fwww.girltm.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fapoyl-weixin.zip",{"slug":94,"name":94,"version":95,"author":96,"author_profile":97,"description":98,"short_description":99,"active_installs":83,"downloaded":100,"rating":13,"num_ratings":13,"last_updated":101,"tested_up_to":102,"requires_at_least":103,"requires_php":104,"tags":105,"homepage":107,"download_link":108,"security_score":21,"vuln_count":13,"unpatched_count":13,"last_vuln_date":22,"fetched_at":23},"zhanzhangb-share","1.0.0","站长帮","https:\u002F\u002Fprofiles.wordpress.org\u002Fywtywt\u002F","\u003Cp>插件功能：支持微信分享：带缩略图与摘要、朋友圈分享带缩略图与摘要（均支持未认证公众号）；QQ分享：带缩略图；QQ空间分享：带缩略图与摘要；微博分享：带缩略图与摘要；LinkedIn分享：带缩略图与摘要；邮件分享：调起系统默认邮箱客户端\u003Cbr \u002F>\n支持后台设置分享图标的位置，可选出现在文章页面的正文之前或正文之后。\u003Cbr \u002F>\n支持短代码，可以通过短代码自定义分享图标的位置。\u003Cbr \u002F>\n分享时自动获取文章标题、文章摘要、特色图片等信息。\u003C\u002Fp>\n\u003Ch3>Arbitrary section\u003C\u002Fh3>\n\u003Cp>隐私说明：本插件需要通过微信官方API接口鉴权，如果使用本插件，代表您同意将微信公众号的密钥（SecretId与SecretKey）等信息发送至”api.weixin.qq.com”。\u003C\u002Fp>\n\u003Cp>API隐私政策及其它说明（Privacy Policy）：https:\u002F\u002Fmp.weixin.qq.com\u002Fcgi-bin\u002Fannounce?action=getannouncement&key=1503979103&version=1&lang=zh_CN&platform=2\u003C\u002Fp>\n\u003Cp>插件支持：https:\u002F\u002Fwww.zhanzhangb.com\u003C\u002Fp>\n\u003Cp>本插件由站长帮制作并发行，官网：https:\u002F\u002Fwww.zhanzhangb.com\u003C\u002Fp>\n\u003Ch3>A brief Markdown Example\u003C\u002Fh3>\n\u003Cp>无\u003C\u002Fp>\n","插件功能：支持微信分享：带缩略图与摘要、朋友圈分享带缩略图与摘要（均支持未认证公众号）；QQ分享：带缩略图；QQ空间分享：带缩略图与摘要；微博分享：带缩略图与摘要；LinkedIn分享：带缩略图与摘要；邮件分享：调起系统默认邮箱客户端",2409,"2020-04-23T10:03:00.000Z","5.4.19","5.0","5.5",[106,18],"share","https:\u002F\u002Fwww.zhanzhangb.com\u002F2020-817.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fzhanzhangb-share.zip",{"slug":110,"name":111,"version":112,"author":113,"author_profile":114,"description":115,"short_description":116,"active_installs":11,"downloaded":117,"rating":13,"num_ratings":13,"last_updated":118,"tested_up_to":119,"requires_at_least":103,"requires_php":48,"tags":120,"homepage":123,"download_link":124,"security_score":21,"vuln_count":13,"unpatched_count":13,"last_vuln_date":22,"fetched_at":23},"qrcode-login-for-weixin","微信二维码登陆","1.3","markchenlife","https:\u002F\u002Fprofiles.wordpress.org\u002Fbaialaps\u002F","\u003Cp>请注意：\u003Cbr \u002F>\n必须使用认证过的微信服务号！\u003Cbr \u002F>\n必须使用认证过的微信服务号！\u003Cbr \u002F>\n必须使用认证过的微信服务号！\u003C\u002Fp>\n\u003Cp>如果实在没有认证微信服务号，请到\u003Ca href=\"https:\u002F\u002Fmp.weixin.qq.com\u002Fdebug\u002Fcgi-bin\u002Fsandbox?t=sandbox\u002Flogin\" rel=\"nofollow ugc\">点击这里\u003C\u002Fa>，申请一个微信debug账号使用。\u003C\u002Fp>\n\u003Cp>基于公司内部的网站系统，同事老是记不住密码，也不习惯使用浏览器保存等行为，估开发出这个工具方便各种不记密码党。\u003C\u002Fp>\n\u003Cp>有问题，请加开发者微信进入讨论群：markchenlife\u003C\u002Fp>\n","请注意：",2037,"2019-07-25T12:26:00.000Z","5.2.24",[18,121,90,122],"%e5%b8%a6%e5%8f%82%e6%95%b0%e4%ba%8c%e7%bb%b4%e7%a0%81","%e4%ba%8c%e7%bb%b4%e7%a0%81%e7%99%bb%e9%99%86","http:\u002F\u002Fmarkchen.me\u002Fweixin-qrcode-login","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fqrcode-login-for-weixin.zip",{"attackSurface":126,"codeSignals":142,"taintFlows":225,"riskAssessment":226,"analyzedAt":236},{"hooks":127,"ajaxHandlers":138,"restRoutes":139,"shortcodes":140,"cronEvents":141,"entryPointCount":13,"unprotectedCount":13},[128,134],{"type":129,"name":130,"callback":131,"file":132,"line":133},"action","init","weixin_helper_init","weixin-helper.php",17,{"type":129,"name":135,"callback":136,"file":132,"line":137},"admin_menu","weixin_helper_add_page",19,[],[],[],[],{"dangerousFunctions":143,"sqlUsage":144,"outputEscaping":146,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":224},[],{"prepared":13,"raw":13,"locations":145},[],{"escaped":13,"rawEcho":147,"locations":148},38,[149,152,154,156,158,160,162,164,166,168,170,172,174,176,178,180,182,184,185,187,189,191,193,195,197,198,200,202,204,206,208,210,212,214,216,218,220,222],{"file":132,"line":150,"context":151},58,"raw output",{"file":132,"line":153,"context":151},98,{"file":132,"line":155,"context":151},117,{"file":132,"line":157,"context":151},121,{"file":132,"line":159,"context":151},135,{"file":132,"line":161,"context":151},152,{"file":132,"line":163,"context":151},156,{"file":132,"line":165,"context":151},160,{"file":132,"line":167,"context":151},197,{"file":132,"line":169,"context":151},201,{"file":132,"line":171,"context":151},220,{"file":132,"line":173,"context":151},224,{"file":132,"line":175,"context":151},228,{"file":132,"line":177,"context":151},256,{"file":132,"line":179,"context":151},263,{"file":132,"line":181,"context":151},272,{"file":132,"line":183,"context":151},276,{"file":132,"line":183,"context":151},{"file":132,"line":186,"context":151},303,{"file":132,"line":188,"context":151},352,{"file":132,"line":190,"context":151},354,{"file":132,"line":192,"context":151},361,{"file":132,"line":194,"context":151},366,{"file":132,"line":196,"context":151},370,{"file":132,"line":196,"context":151},{"file":132,"line":199,"context":151},371,{"file":132,"line":201,"context":151},372,{"file":132,"line":203,"context":151},383,{"file":132,"line":205,"context":151},419,{"file":132,"line":207,"context":151},420,{"file":132,"line":209,"context":151},421,{"file":132,"line":211,"context":151},422,{"file":132,"line":213,"context":151},423,{"file":132,"line":215,"context":151},424,{"file":132,"line":217,"context":151},425,{"file":132,"line":219,"context":151},426,{"file":132,"line":221,"context":151},427,{"file":132,"line":223,"context":151},428,[],[],{"summary":227,"deductions":228},"The weixin-helper v1.0.1 plugin presents a concerning security posture despite a clean vulnerability history and an absence of identified taint flows.  The static analysis reveals a significant weakness in output escaping, with 0% of 38 outputs being properly escaped. This is a critical oversight, as unescaped output can lead to cross-site scripting (XSS) vulnerabilities, allowing attackers to inject malicious scripts into web pages viewed by other users. Furthermore, the complete lack of nonce checks and capability checks on any potential entry points, while the attack surface is reported as zero, is still a point of vigilance. If any functionality were to be inadvertently exposed, these checks would be absent, leaving it vulnerable to unauthorized actions.",[229,232,234],{"reason":230,"points":231},"All outputs are unescaped",8,{"reason":233,"points":44},"No nonce checks found",{"reason":235,"points":44},"No capability checks found","2026-03-17T00:28:30.135Z",{"wat":238,"direct":247},{"assetPaths":239,"generatorPatterns":242,"scriptPaths":243,"versionParams":244},[240,241],"\u002Fwp-content\u002Fplugins\u002Fweixin-helper\u002Fimages\u002Ficon_weixin.png","\u002Fwp-content\u002Fplugins\u002Fweixin-helper\u002Fimages\u002Fweixin-logo.png",[],[],[245,246],"weixin-helper\u002Fstyle.css?ver=","weixin-helper\u002Fjs\u002Fadmin.js?ver=",{"cssClasses":248,"htmlComments":256,"htmlAttributes":260,"restEndpoints":276,"jsGlobals":277,"shortcodeOutput":279},[249,250,251,252,253,254,255],"wptao-container","wptao-grid","wptao-main","wptao-sidebar","wptao-box","wptao-box.yellow","input-panel",[257,258,259],"\u003C!-- end of inside -->","\u003C!-- end of postbox -->","\u003C!-- end of group -->",[261,262,263,264,265,266,267,268,269,270,271,272,273,274,275],"upid=\"helper_image\"","name=\"helper[post_types][]\"","name=\"helper[item]\"","name=\"helper[nopic]\"","name=\"helper[image]\"","name=\"helper[top]\"","name=\"helper[content]\"","name=\"helper[bottom]\"","name=\"helper[weixin][0]\"","name=\"helper[weixin][1]\"","name=\"mp_users[weixin]\"","name=\"helper[weixin][2]\"","name=\"helper[cron][hour]\"","name=\"helper[cron][minute]\"","name=\"helper[cron][ampm]\"",[],[278],"weixin_url",[]]