[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJRMFp41paZeKJtm3jBORXgzLuNPFRlWeSdSJbHeZGA8":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":36,"analysis":134,"fingerprints":170},"wordpress-comment-images","Comment-Images","1.5","fitztrev","https:\u002F\u002Fprofiles.wordpress.org\u002Ffitztrev\u002F","\u003Cp>Comment Image Embedder is a very simple plugin that, once installed, lets your visitors add an image to their comments.\u003C\u002Fp>\n\u003Cp>It’s rather common for a WordPress user to ask how visitors can embed images in the comments section of their blogs.\u003C\u002Fp>\n\u003Cp>This plugin will add a link just below the comment box that a user can click on. When clicked, a prompt will appear for the user to enter the URL of the image. It will then be added to their comment.\u003C\u002Fp>\n\u003Cp>Trevor Fitzgerald\u003Cbr \u002F>\nhttp:\u002F\u002Ftrevorfitzgerald.com\u002F\u003C\u002Fp>\n","Comment Image Embedder is a very simple plugin that, once installed, lets your visitors add an image to their comments.",50,14579,0,"2009-12-02T00:02:00.000Z","2.9.2","2.6","",[19,20,21,22,23],"comments","images","photos","picture","upload","http:\u002F\u002Ftrevorfitzgerald.com\u002Fwordpress-comment-images\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwordpress-comment-images.1.5.zip",85,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":26,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},3,150,30,84,"2026-04-04T08:10:39.033Z",[37,60,79,101,120],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":56,"download_link":57,"security_score":58,"vuln_count":31,"unpatched_count":13,"last_vuln_date":59,"fetched_at":28},"fancybox-for-wordpress","FancyBox for WordPress","3.3.7","colorlibplugins","https:\u002F\u002Fprofiles.wordpress.org\u002Fcolorlibplugins\u002F","\u003Cp>Seamlessly integrates FancyBox into your blog: Upload, activate, and you’re done. Additional configuration optional.\u003C\u002Fp>\n\u003Cp>You can easily customize almost anything you can think about fancybox lightbox: the border, margin width and color, zoom speed, animation type, close button position, overlay color and opacity and even more advanced option like several options to group images into galleries, and more…\u003C\u002Fp>\n\u003Cp>By default, the plugin will use jQuery to apply FancyBox to ANY thumbnails that link directly to an image. This includes posts, the sidebar, etc, so you can activate it and it will be applied automatically.\u003C\u002Fp>\n\u003Ch4>Further Reading\u003C\u002Fh4>\n\u003Cp>This plugin is developed and maintained by Colorlib. Which is well know for their free \u003Ca href=\"https:\u002F\u002Fcolorlib.com\u002Fwp\u002Fthemes\u002F\" rel=\"nofollow ugc\">\u003C\u002Fa>WordPress themes. However, now they are looking to extend their presence in plugin development and believe that FancyBox lightbox is a great way to start.\u003C\u002Fp>\n\u003Cp>If you are new to WordPress and want to lear more we have got you covered. Colorlib will teach you have to \u003Ca href=\"https:\u002F\u002Fcolorlib.com\u002F\" rel=\"nofollow ugc\">start a blog\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Fcolorlib.com\u002Fwp\u002Fhow-to-make-a-website\u002F\" rel=\"nofollow ugc\">create a website\u003C\u002Fa> and much more. If you are already familiar with WordPress you likely want to learn how to make it faster and more reliable. That’s when you want to look into hosting and more specifically \u003Ca href=\"http:\u002F\u002Fcolorlib.com\u002Fwp\u002Fwordpress-hosting\" rel=\"nofollow ugc\">WordPress hosting\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>If you enjoy using FancyBox lightbox for WordPress please leave a \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Ffancybox-for-wordpress\u002Freviews\u002F?filter=5\" rel=\"ugc\">positive feedback\u003C\u002Fa>. We are committed to make it the best lightbox plugin for WordPress.\u003C\u002Fp>\n","Seamlessly integrates FancyBox lightbox into your WordPress blog: Upload, activate, and you're done. Additional configuration optional.",40000,1940597,92,"2025-05-07T14:18:00.000Z","6.8.5","5.6","7.4",[53,20,54,21,55],"fancybox","lightbox","pictures","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ffancybox-for-wordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffancybox-for-wordpress.3.3.7.zip",96,"2025-05-13 00:00:00",{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":68,"downloaded":69,"rating":34,"num_ratings":70,"last_updated":71,"tested_up_to":72,"requires_at_least":73,"requires_php":50,"tags":74,"homepage":77,"download_link":78,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"comment-image","Comment Image","1.2.3","Stefano Lissa","https:\u002F\u002Fprofiles.wordpress.org\u002Fsatollo\u002F","\u003Cp>Comment Image enables blog readers to attach an image while leaving their comments.\u003Cbr \u002F>\nSupported formats are JPG, PNG, GIF.\u003C\u002Fp>\n\u003Cp>Uploaded images are inserted below the comment text as thumbnail (of configurable max dimensions) and linked to the original pictures.\u003C\u002Fp>\n\u003Cp>File selection field can be injected automatically or added manually.\u003C\u002Fp>\n\u003Cp>Original pictures and their thumbnails are stored in a separate folder for easy management.\u003C\u002Fp>\n\u003Cp>See the official \u003Ca href=\"http:\u002F\u002Fwww.satollo.net\u002Fplugins\u002Fcomment-image\" rel=\"nofollow ugc\">Comment Image\u003C\u002Fa> page for more.\u003C\u002Fp>\n\u003Cp>Other plugins by Stefano Lissa:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.satollo.net\u002Fplugins\u002Fhyper-cache\" rel=\"nofollow ugc\">Hyper Cache\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.thenewsletterplugin.com\" rel=\"nofollow ugc\">Newsletter\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.satollo.net\u002Fplugins\u002Fheader-footer\" rel=\"nofollow ugc\">Header and Footer\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.satollo.net\u002Fplugins\u002Fthumbnails\" rel=\"nofollow ugc\">Thumbnails\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.satollo.net\u002Fplugins\u002Finclude-me\" rel=\"nofollow ugc\">Include Me\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Enable readers to attach an image to their comments.",1000,40981,6,"2021-08-28T08:40:00.000Z","5.8.13","4.6",[75,19,76,20,55],"attachments","gif","http:\u002F\u002Fwww.satollo.net\u002Fplugins\u002Fcomment-image","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcomment-image.1.2.3.zip",{"slug":80,"name":81,"version":82,"author":83,"author_profile":84,"description":85,"short_description":86,"active_installs":68,"downloaded":87,"rating":88,"num_ratings":89,"last_updated":90,"tested_up_to":91,"requires_at_least":92,"requires_php":17,"tags":93,"homepage":96,"download_link":97,"security_score":98,"vuln_count":99,"unpatched_count":99,"last_vuln_date":100,"fetched_at":28},"facebook-photo-fetcher","Social Photo Fetcher","3.0.4","JK","https:\u002F\u002Fprofiles.wordpress.org\u002Fjustin_k\u002F","\u003Cp>Social Photo Fetcher (previously called “Facebook Photo Fetcher”) allows you to quickly and easily generate WordPress photo galleries from Facebook albums.\u003C\u002Fp>\n\u003Cp>The idea was inspired by \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Ffotobook\u002F\" rel=\"ugc\">Fotobook\u003C\u002Fa>, though its approach is fundamentally different: while Fotobook’s emphasis is on automation, this plugin allows a great deal of customization.  With it you can create galleries in any Post or Page you like, right alongside your regular content. You do this simply by putting a “magic HTML tag” in the post’s content – much like \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FGallery_Shortcode\" rel=\"nofollow ugc\">WordPress Shortcode\u003C\u002Fa>. Upon saving, the tag will instantly be populated with the Facebook album content. Presentation is fully customizable via parameters to the “magic tag” – you can choose to show only a subset of an album’s photos, change the number of photos per column, show photo captions, and more.  Plus, Social Photo Fetcher doesn’t limit you to just your own albums: it can create galleries from fanpages as well.\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Uses Facebook’s API to instantly create WordPress photo galleries from Facebook albums.\u003C\u002Fli>\n\u003Cli>Galleries are fully customizable: you can import complete albums, select excerpts, random excerpts, album descriptions, photo captions, and more.\u003C\u002Fli>\n\u003Cli>Galleries can be organized however you like: in any post or page, alone or alongside your other content.\u003C\u002Fli>\n\u003Cli>Simple PHP template function allows programmers to manually embed albums in any template or widget.\u003C\u002Fli>\n\u003Cli>Built-in LightBox: Photos appear in attractive pop-up overlays without the need for any other plugins.\u003C\u002Fli>\n\u003Cli>Admin panel handles all the setup for you: Just login and you’re ready to start making albums.\u003C\u002Fli>\n\u003Cli>No custom database tables required; galleries live in regular post content.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For a Demo Gallery, see the \u003Ca href=\"https:\u002F\u002Fwww.justin-klein.com\u002Fprojects\u002Ffacebook-photo-fetcher\" rel=\"nofollow ugc\">plugin’s homepage\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Donate\u003C\u002Fh3>\n\u003Cp>Many hours have gone into developing & maintaining this plugin, far beyond my own personal needs. If you find it useful, please consider \u003Ca href=\"https:\u002F\u002Fwww.justin-klein.com\u002Fprojects\u002Ffacebook-photo-fetcher\u002F#donate\" rel=\"nofollow ugc\">making a donation\u003C\u002Fa> to help support its continued development.\u003C\u002Fp>\n\u003Ch3>Privacy\u003C\u002Fh3>\n\u003Cp>This plugin uses the Facebook API to fetch photo albums from Facebook. Facebook’s security rules require that apps must authorize from one specific, known location. In order comply with this requirement, when you first authorize the plugin from its admin panel, a Facebook dialog will be initiated via my own authentication server. The dialog itself is shown directly by Facebook, and Facebook handles the entire login process – no personal information will be transferred via my server, as Facebook only supplies a single-use token which I then hand back to your site to be stored. This is what the plugin uses in order to fetch the photos. For more information about how the Facebook authorization process works, please see \u003Ca href=\"https:\u002F\u002Fdevelopers.facebook.com\u002Fdocs\u002Ffacebook-login\u002Fweb\" rel=\"nofollow ugc\">Facebook’s documentation\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Usage of this plugin means the site administrator is consenting to \u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fpolicy.php\" rel=\"nofollow ugc\">Facebook’s data policy\u003C\u002Fa>. Fetched album data will be stored in your WordPress database, in posts or pages of your choosing. It can be removed by deleting those posts or pages. You are solely responsible for the security and protection of the fetched data, as it resides on and is hosted within your own WordPress site.\u003C\u002Fp>\n\u003Cp>I do not store or process any of your data.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>Please direct all support requests \u003Ca href=\"https:\u002F\u002Fwww.justin-klein.com\u002Fprojects\u002Ffacebook-photo-fetcher#feedback\" rel=\"nofollow ugc\">here\u003C\u002Fa>\u003C\u002Fp>\n","Allows you to automatically create Wordpress photo galleries from Facebook albums.  Simple to use and highly customizable.",258658,74,12,"2024-04-04T23:45:00.000Z","6.5.8","2.5",[94,95,20,21,55],"facebook","gallery","https:\u002F\u002Fwww.justin-klein.com\u002Fprojects\u002Ffacebook-photo-fetcher","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffacebook-photo-fetcher.3.0.4.zip",70,1,"2025-12-08 00:00:00",{"slug":102,"name":103,"version":104,"author":105,"author_profile":106,"description":107,"short_description":108,"active_installs":109,"downloaded":110,"rating":111,"num_ratings":70,"last_updated":112,"tested_up_to":113,"requires_at_least":114,"requires_php":17,"tags":115,"homepage":118,"download_link":119,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"photo-protect","Photo Protect","1.1","chebum","https:\u002F\u002Fprofiles.wordpress.org\u002Fchebum\u002F","\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fvisualwatermark.com\u002Fwp-photo-protect\u002F\" rel=\"nofollow ugc\">Photo Protect\u003C\u002Fa> adds an invisible layer over your post images to protect them from copying.\u003Cbr \u002F>\nVisitors trying to save an image will get a blank image instead of your photo.\u003C\u002Fp>\n\u003Cp>Here is why you should download it:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cem>Protects your images\u003C\u002Fem>. 9 out of 10 visitors won’t be able to download and copy your images.\u003C\u002Fli>\n\u003Cli>\u003Cem>Works in every modern browser\u003C\u002Fem>. No plugins required!\u003C\u002Fli>\n\u003Cli>Has \u003Cem>no dependencies\u003C\u002Fem>. Correctly works with every framework your theme may have jQuery, MooTools, ExtJS, GWT, etc.\u003C\u002Fli>\n\u003Cli>Supports \u003Cem>responsive themes\u003C\u002Fem>. Applies protection in a way both theme and protection layer continue to function properly. Even if your visitor resizes her browser.\u003C\u002Fli>\n\u003Cli>\u003Cem>Works on smartphones\u003C\u002Fem>.\u003C\u002Fli>\n\u003C\u002Ful>\n","Adds an invisible layer over your images to protect them from copying.",200,10218,46,"2018-10-03T10:01:00.000Z","4.9.29","3.0.1",[116,20,117,21,22],"image","photo","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fphoto-protect\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fphoto-protect.1.1.zip",{"slug":121,"name":122,"version":123,"author":124,"author_profile":125,"description":126,"short_description":127,"active_installs":33,"downloaded":128,"rating":13,"num_ratings":13,"last_updated":129,"tested_up_to":130,"requires_at_least":92,"requires_php":17,"tags":131,"homepage":132,"download_link":133,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"simplegal","SimpleGal","1.2","dath","https:\u002F\u002Fprofiles.wordpress.org\u002Fdath\u002F","\u003Cp>With the \u003Cstrong>SimpleGal\u003C\u002Fstrong> plugin you can simply create galleries.\u003Cbr \u002F>\nJust upload your images, add the \u003Cstrong>SimpleGal\u003C\u002Fstrong> Shortcode to your posts or pages and the gallery will appear.\u003Cbr \u002F>\nFor an optimal gallery view you should install a lightbox plugin.\u003C\u002Fp>\n\u003Cp>Mit dem \u003Cstrong>SimpleGal\u003C\u002Fstrong> Plugin kannst du ganz einfach Galerien erstellen.\u003Cbr \u002F>\nEinfach deine Bilder hochladen, den \u003Cstrong>SimpleGal\u003C\u002Fstrong> Shortcode deinem Artikel oder deiner Seite hinzufügen und schon ist deine Galerie fertig.\u003Cbr \u002F>\nFür eine optimale Galerie-Darstellung solltest du ein Lightbox-Plugin installieren.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Available languages:\u003C\u002Fstrong> English and German\u003C\u002Fp>\n","Create an Image-Gallery in 5 simple Steps. Just add the shortcode to your posts.",6209,"2012-03-01T16:34:00.000Z","3.3.2",[95,20,54,21,55],"http:\u002F\u002Fwww.dath.info\u002Fwebwork\u002Fwp-plugins\u002Fsimplegal\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimplegal.1.2.zip",{"attackSurface":135,"codeSignals":152,"taintFlows":162,"riskAssessment":163,"analyzedAt":169},{"hooks":136,"ajaxHandlers":148,"restRoutes":149,"shortcodes":150,"cronEvents":151,"entryPointCount":13,"unprotectedCount":13},[137,143],{"type":138,"name":139,"callback":140,"file":141,"line":142},"filter","comment_text","embed_images","wp-comment-images.php",21,{"type":144,"name":145,"callback":146,"file":141,"line":147},"action","comment_form","embed_image_instructions",22,[],[],[],[],{"dangerousFunctions":153,"sqlUsage":157,"outputEscaping":159,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":161},[154],{"fn":155,"file":141,"line":89,"context":156},"preg_replace(\u002Fe)","preg_replace('\u002F\\[img=?\\]*(.*?)(\\[\\\u002Fimg)?\\]\u002Fe'",{"prepared":13,"raw":13,"locations":158},[],{"escaped":13,"rawEcho":13,"locations":160},[],[],[],{"summary":164,"deductions":165},"The wordpress-comment-images plugin, version 1.5, exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The absence of any known CVEs, unpatched vulnerabilities, or recorded common vulnerability types is a significant positive indicator. Furthermore, the code analysis shows a commendable adherence to secure coding practices, with 100% of SQL queries using prepared statements and 100% of outputs being properly escaped. The plugin also demonstrates a limited attack surface with no identified AJAX handlers, REST API routes, shortcodes, or cron events that are exposed. \n\nDespite these strengths, a potential area of concern lies within the 'Dangerous functions' category, specifically the presence of `preg_replace(\u002Fe)`. While the provided taint analysis indicates no unsanitized flows, the use of this function can, in certain contexts, be prone to regular expression injection vulnerabilities if not handled with extreme care and proper sanitization. The lack of nonce checks and capability checks on any identified entry points (which are zero in this case) is not a deduction as there are no entry points to check. However, it does mean that if future functionality is added that introduces entry points, these security measures will need to be carefully implemented.\n\nIn conclusion, the wordpress-comment-images plugin appears to be well-developed from a security perspective, with a clean vulnerability history and good coding practices evident in SQL and output handling. The single identified dangerous function warrants awareness, but without evidence of exploitation or taint flows, it doesn't represent an immediate critical risk. The absence of any found vulnerabilities in its history is a strong testament to its security over time.",[166],{"reason":167,"points":168},"Use of preg_replace with \u002Fe modifier",7,"2026-03-16T21:57:01.742Z",{"wat":171,"direct":178},{"assetPaths":172,"generatorPatterns":174,"scriptPaths":175,"versionParams":176},[173],"\u002Fwp-content\u002Fplugins\u002Fwordpress-comment-images\u002Fjs\u002Fcomment-images.js",[],[173],[177],"wordpress-comment-images\u002Fjs\u002Fcomment-images.js?ver=1.4",{"cssClasses":179,"htmlComments":180,"htmlAttributes":181,"restEndpoints":182,"jsGlobals":183,"shortcodeOutput":184},[],[],[],[],[],[185],"\u003Cp>You can add images to your comment by \u003Ca id=\"addCommentImage\" href=\"#\">clicking here\u003C\u002Fa>.\u003C\u002Fp>"]