[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3Y9Fk4io-SGO7xeiRaILjMDk7P6ZlDnVe2LDuV-EUJk":3,"$f0qkebcG-h6iUqDtBdxniskZ8aRtKngDpT88z9qEJRIY":217,"$fJVWIPHn1u_2E8hKXYfc7O7ocBTZ4JWDtCxdIgEZdLY8":222},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"discovery_status":31,"vulnerabilities":32,"developer":33,"crawl_stats":29,"alternatives":40,"analysis":132,"fingerprints":200},"wordpress-mu-theme-stats","Multisite Theme Statistics","2.8.3","Ron Rennick","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpmuguru\u002F","\u003Cp>Adds a Theme Stats option to the super admin menu. The admin panel lists all the themes in use site-wide. At the top of the list will be the most popular theme and a number in brackets of how many are in use. Click on the name, and a drop-down list will appear of all blogs using that theme, with a link to each blog’s home and dashboard.\u003C\u002Fp>\n\u003Cp>This plugin goes in the mu-plugins folder. This is an updated version of the theme stats (for subdomain installs) plugin we released in 2007. This version is designed for either subdomain or subdirectory installs.\u003C\u002Fp>\n","Adds theme usage statistics within your network, shows themes by user and most popular themes.",10,9654,100,3,"2015-08-06T21:50:00.000Z","4.2.39","3.0","",[20,21,22,23,24],"multisite","network","statistics","stats","theme","http:\u002F\u002Fwpmututorials.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwordpress-mu-theme-stats.2.8.3.zip",85,0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":34,"display_name":7,"profile_url":8,"plugin_count":35,"total_installs":36,"avg_security_score":27,"avg_patch_time_days":37,"trust_score":38,"computed_at":39},"wpmuguru",13,1350,30,84,"2026-05-20T00:59:59.058Z",[41,61,80,98,117],{"slug":42,"name":43,"version":44,"author":45,"author_profile":46,"description":47,"short_description":48,"active_installs":49,"downloaded":50,"rating":13,"num_ratings":51,"last_updated":52,"tested_up_to":53,"requires_at_least":54,"requires_php":18,"tags":55,"homepage":59,"download_link":60,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"network-plugin-auditor","Network Plugin Auditor","1.10.1","Katherine Semel-Munson","https:\u002F\u002Fprofiles.wordpress.org\u002Fksemel\u002F","\u003Cp>As my WordPress network grew I found it challenging to track which plugins and themes were used on each site, and the only way to check was to visit each dashboard one at a time.  What a hassle!\u003C\u002Fp>\n\u003Cp>This plugin adds columns to your Network Admin on the Sites, Themes and Plugins pages to show which of your sites have each plugin and theme activated.  Now you can easily determine which plugins and themes are used on your network sites and which can be safely removed.\u003C\u002Fp>\n","For multisite\u002Fnetwork installations only.  Adds columns to your network admin to show which sites are using each plugin and theme.",80,45624,22,"2016-10-30T22:05:00.000Z","4.6.30","3.2.1",[56,20,21,57,58],"admin","plugin-management","theme-management","http:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fnetwork-plugin-auditor","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnetwork-plugin-auditor.1.10.1.zip",{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":11,"downloaded":69,"rating":49,"num_ratings":70,"last_updated":71,"tested_up_to":72,"requires_at_least":73,"requires_php":18,"tags":74,"homepage":78,"download_link":79,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"hyper-admins","Hyper Admins","1.1","scribu","https:\u002F\u002Fprofiles.wordpress.org\u002Fscribu\u002F","\u003Cp>With this plugin, super-admins can:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>view any theme on any site, without enabling it\u003C\u002Fli>\n\u003Cli>access any site through Admin Bar -> My Sites, without having a role on it\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Intended for \u003Ca href=\"http:\u002F\u002Fscribu.net\u002Fwordpress\u002Fthe-future-of-multisite.html\" rel=\"nofollow ugc\">small Multisite installs\u003C\u002Fa>.\u003C\u002Fp>\n","Simplify administration tasks for super-admins.",27506,1,"2014-04-09T21:51:00.000Z","3.7.41","3.4",[75,20,21,76,77],"administration","themes","users","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fhyper-admins\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhyper-admins.zip",{"slug":81,"name":82,"version":83,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":11,"downloaded":88,"rating":13,"num_ratings":70,"last_updated":89,"tested_up_to":53,"requires_at_least":90,"requires_php":18,"tags":91,"homepage":96,"download_link":97,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"mission-control","Mission Control","0.1-alpha","rheinardkorf","https:\u002F\u002Fprofiles.wordpress.org\u002Frheinardkorf\u002F","\u003Cp>With Mission Control you can assign levels to each of the sites on your network. Create as many levels as you need and assign different restrictions or features to the levels by using extensions.\u003C\u002Fp>\n\u003Cp>The following core extensions are available:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Plugin Control: Assign which plugins are available for each level. Choose any plugins that should always be active for a level and\u002For choose plugins that should automatically be enabled once a site gets assigned the level.\u003C\u002Fli>\n\u003Cli>Theme Control: Choose which themes should be available to each site level. Choose to show unavailable themes with an indicator of the required level for those themes.\u003C\u002Fli>\n\u003Cli>Level Message: Create a message that will be shown for each level. The message can be added by a shortcode or automatically added before or after your post content.\u003C\u002Fli>\n\u003Cli>Quota Manager: Set the upload quota for each of  your site levels. The available space will show in the site dashboard and on the upload page in the media library.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>REST API:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Mission Control uses the REST API to manage the extensions enabled on your network for a better admin user experience.\u003C\u002Fli>\n\u003Cli>Mission Control also allows for third party extensions to tap into the API to add their own endpoints to the Mission Control namespace.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Have any ideas for extensions?  Please let us know!\u003C\u002Fp>\n","Effortlessly take control of all the sites on your network. Assign levels to your sites and manage the features available to each level.",1160,"2016-09-01T12:24:00.000Z","4.6",[92,93,20,21,94,95],"feature-manager","levels","plugin-control","theme-control","http:\u002F\u002Frheinardkorf.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmission-control.zip",{"slug":99,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":11,"downloaded":106,"rating":13,"num_ratings":107,"last_updated":108,"tested_up_to":109,"requires_at_least":110,"requires_php":111,"tags":112,"homepage":115,"download_link":116,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"multisite-administration-tools","Multisite Administration Tools","1.22","Aaron Axelsen","https:\u002F\u002Fprofiles.wordpress.org\u002Faxelseaa\u002F","\u003Cp>The Multisite Administration Tools plugin adds additional columns to the Sites, Plugins and Themes tables in the Network Admin interface.\u003C\u002Fp>\n\u003Cp>On the Sites table, two additional columns are added to allow admins to easily view the theme of the site, and also any plugins that are enabled.\u003C\u002Fp>\n\u003Cp>On the Themes table, there is an additional column added which allows the administrator to see all sites that are actively using that theme.\u003C\u002Fp>\n\u003Cp>On the Plugins table, there is an additional column added which allows the administrator to see all sites that are actively using that plugin.\u003C\u002Fp>\n","Adds information to the network admin sites, plugins and themes page. Allows you to easily see what theme and plugins are enabled on a site.",3507,2,"2026-04-03T01:47:00.000Z","6.9.4","5.8","7.2",[113,20,21,114,76],"admintools","plugins","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmultisite-administration-tools\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmultisite-administration-tools.1.22.zip",{"slug":118,"name":119,"version":120,"author":121,"author_profile":122,"description":123,"short_description":124,"active_installs":11,"downloaded":125,"rating":49,"num_ratings":14,"last_updated":126,"tested_up_to":127,"requires_at_least":128,"requires_php":18,"tags":129,"homepage":130,"download_link":131,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"redistats","Redistats – Multisite stats","0.3","Jim Westergren","https:\u002F\u002Fprofiles.wordpress.org\u002Fjimwestergren\u002F","\u003Cp>Stats are iframed from \u003Ca href=\"https:\u002F\u002Fredistats.com\" rel=\"nofollow ugc\">Redistats\u003C\u002Fa> – see a demo \u003Ca href=\"https:\u002F\u002Fredistats.com\u002Fdemo\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Works on a single blog as well as on multisite.\u003C\u002Fli>\n\u003Cli>No ads and no branding.\u003C\u002Fli>\n\u003Cli>Global stats of all the blogs on your Multisite.\u003C\u002Fli>\n\u003Cli>Stats are collected and processed in real time.\u003C\u002Fli>\n\u003Cli>High privacy.\u003C\u002Fli>\n\u003Cli>High performance with no additional load to you.\u003C\u002Fli>\n\u003Cli>This plugin is just 3 PHP files with around 200 lines of code in total.\u003C\u002Fli>\n\u003Cli>Hosted on Github, \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FTodaysWeb\u002FRedistats-WP-Plugin\" rel=\"nofollow ugc\">Redistats-WP-Plugin\u003C\u002Fa>, pull requests appreciated.\u003C\u002Fli>\n\u003C\u002Ful>\n","Web stats especially made for WordPress Multisite with a large number of blogs but also works on a single blog. No additional load on your server.",2472,"2013-08-21T21:12:00.000Z","3.6.1","3.4.2",[20,118,22,23],"https:\u002F\u002Fredistats.com\u002Fwordpress-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fredistats.0.3.zip",{"attackSurface":133,"codeSignals":159,"taintFlows":187,"riskAssessment":188,"analyzedAt":199},{"hooks":134,"ajaxHandlers":155,"restRoutes":156,"shortcodes":157,"cronEvents":158,"entryPointCount":28,"unprotectedCount":28},[135,141,145,149,153],{"type":136,"name":137,"callback":138,"file":139,"line":140},"action","network_admin_menu","add_network_page","ra-theme-stats.php",32,{"type":136,"name":142,"callback":143,"file":139,"line":144},"admin_menu","add_page",34,{"type":136,"name":146,"callback":147,"file":139,"line":148},"plugins_loaded","localization",35,{"type":136,"name":150,"callback":151,"file":139,"line":152},"admin_head","show_hide_css",51,{"type":136,"name":150,"callback":151,"file":139,"line":154},57,[],[],[],[],{"dangerousFunctions":160,"sqlUsage":161,"outputEscaping":163,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":70,"bundledLibraries":186},[],{"prepared":70,"raw":28,"locations":162},[],{"escaped":28,"rawEcho":11,"locations":164},[165,168,170,172,174,176,178,180,182,184],{"file":139,"line":166,"context":167},97,"raw output",{"file":139,"line":169,"context":167},115,{"file":139,"line":171,"context":167},143,{"file":139,"line":173,"context":167},148,{"file":139,"line":175,"context":167},153,{"file":139,"line":177,"context":167},164,{"file":139,"line":179,"context":167},177,{"file":139,"line":181,"context":167},195,{"file":139,"line":183,"context":167},197,{"file":139,"line":185,"context":167},201,[],[],{"summary":189,"deductions":190},"The \"wordpress-mu-theme-stats\" v2.8.3 plugin demonstrates a generally strong security posture, particularly in its handling of entry points and SQL queries. The absence of any detected AJAX handlers, REST API routes, shortcodes, or cron events significantly reduces the potential attack surface. Furthermore, the plugin correctly utilizes prepared statements for its single SQL query, a crucial practice for preventing SQL injection vulnerabilities. The lack of reported CVEs and historical vulnerabilities also suggests a history of responsible development and security awareness.\n\nHowever, a significant concern arises from the output escaping. With 10 total outputs and 0% properly escaped, this presents a considerable risk of Cross-Site Scripting (XSS) vulnerabilities. Any data displayed to users that originates from user input or external sources without proper sanitization and escaping could be exploited to inject malicious scripts. While the taint analysis shows no unsanitized flows, this is likely due to the limited scope of the analysis (0 flows analyzed). The absence of nonce checks and the single capability check on a critical function without further context also warrant caution, as they could represent missed opportunities for robust access control.\n\nIn conclusion, while the plugin excels in minimizing its attack surface and secure database interactions, the complete lack of output escaping is a critical weakness that needs immediate attention. The vulnerability history is a positive indicator, but the current code analysis reveals a glaring security flaw. Addressing the output escaping issue should be the highest priority to mitigate XSS risks.",[191,194,197],{"reason":192,"points":193},"0% output escaping",15,{"reason":195,"points":196},"No nonce checks on potential sensitive actions",5,{"reason":198,"points":14},"Single capability check on a potentially sensitive action","2026-04-16T11:56:02.324Z",{"wat":201,"direct":206},{"assetPaths":202,"generatorPatterns":203,"scriptPaths":204,"versionParams":205},[],[],[],[],{"cssClasses":207,"htmlComments":209,"htmlAttributes":211,"restEndpoints":213,"jsGlobals":214,"shortcodeOutput":216},[208],"ra-hide",[210],"\u003C!--\n\t\tfunction ra_show(id, newclass)\n\t\t{\n\t\t  var el = document.getElementById(id);\n\t\t  if(el) {\n\t\t    if(newclass) {\n\t\t\tif(el.className==newclass) el.className=\"ra-hide\";\n\t\t\telse el.className=newclass;\n\t\t    } else {\n\t\t\tif(el.className==\"\") el.className=\"ra-hide\";\n\t\t\telse el.className=\"\";\n\t\t    }\n\t\t  }\n\t\t}\n\t\t-->",[212],"onclick",[],[215],"ra_show",[],{"error":218,"url":219,"statusCode":220,"statusMessage":221,"message":221},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fwordpress-mu-theme-stats\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":223,"versions":224},4,[225,231,238,245],{"version":6,"download_url":26,"svn_tag_url":226,"released_at":29,"has_diff":227,"diff_files_changed":228,"diff_lines":29,"trac_diff_url":229,"vulnerabilities":230,"is_current":218},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwordpress-mu-theme-stats\u002Ftags\u002F2.8.3\u002F",false,[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fwordpress-mu-theme-stats%2Ftags%2F2.8.2&new_path=%2Fwordpress-mu-theme-stats%2Ftags%2F2.8.3",[],{"version":232,"download_url":233,"svn_tag_url":234,"released_at":29,"has_diff":227,"diff_files_changed":235,"diff_lines":29,"trac_diff_url":236,"vulnerabilities":237,"is_current":227},"2.8.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwordpress-mu-theme-stats.2.8.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwordpress-mu-theme-stats\u002Ftags\u002F2.8.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fwordpress-mu-theme-stats%2Ftags%2F2.8.1&new_path=%2Fwordpress-mu-theme-stats%2Ftags%2F2.8.2",[],{"version":239,"download_url":240,"svn_tag_url":241,"released_at":29,"has_diff":227,"diff_files_changed":242,"diff_lines":29,"trac_diff_url":243,"vulnerabilities":244,"is_current":227},"2.8.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwordpress-mu-theme-stats.2.8.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwordpress-mu-theme-stats\u002Ftags\u002F2.8.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fwordpress-mu-theme-stats%2Ftags%2F2.8&new_path=%2Fwordpress-mu-theme-stats%2Ftags%2F2.8.1",[],{"version":246,"download_url":247,"svn_tag_url":248,"released_at":29,"has_diff":227,"diff_files_changed":249,"diff_lines":29,"trac_diff_url":29,"vulnerabilities":250,"is_current":227},"2.8","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwordpress-mu-theme-stats.2.8.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwordpress-mu-theme-stats\u002Ftags\u002F2.8\u002F",[],[]]