[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9buqj0VVbuomx_Z-3VrfMC0pvt0JTw9GiHTU_0CkgUk":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":168,"crawl_stats":38,"alternatives":176,"analysis":274,"fingerprints":1169},"wp-auto-affiliate-links","Auto Affiliate Links","6.8.3.1","Lucian Apostol","https:\u002F\u002Fprofiles.wordpress.org\u002Fthedark\u002F","\u003Cp>Auto Affiliate Links will automatically add affiliate links into your content. You can manually set affiliate links and keywords where they should be added into your content, or you can let the plugin to automatically extract and display links from Amazon, Clickbank, Shareasale, Ebay, Walmart, Commission Junction, BestBuy and Envato Marketplace.\u003C\u002Fp>\n\u003Cp>IMPORTANT: Your content won’t be modified in any way. The links are added when the content is displayed.\u003C\u002Fp>\n\u003Cp>If you prefer to select your keywords and add your links manually, you can do this from “Auto Affiliate Links” menu in your administration panel. In “General Settings” you can set if you want the links to be cloaked, if you want them to be added on your homepage or not and several other options.\u003C\u002Fp>\n\u003Cp>Also, you will have options to make the links nofollow or dofollow, to open in new page or same page and to cloak links. The plugin will give you the most used 100 keywords from your content si you can easily add affiliate links to appear when they are displayed.\u003C\u002Fp>\n\u003Cp>You can limit the number of links that are shown in every article. The frequency range from “Very Low” to “Very High”. At Very Low level only 1 link will be displayed in every article. At “Very High” frequency a maximum of 5 links will be added to every article.\u003C\u002Fp>\n\u003Cp>If you choose to automatically generate and display links from Amazon, Clickbank or Shareasale you have to first request an API key, and then to activate each module. The links will be added trough javascript so you do not have to worry about nofollowing and search engines.\u003C\u002Fp>\n","Automatically display affiliate links in your website content so you can make more money. It is also working well for internal linking.",3000,950827,82,39,"2026-03-11T05:32:00.000Z","6.9.4","3.5","",[20,21,22,23,24],"affiliate","auto","content","keywords","posts","https:\u002F\u002Fautoaffiliatelinks.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-auto-affiliate-links.6.8.3.1.zip",91,10,0,"2024-09-18 00:00:00","2026-03-15T15:16:48.613Z",[33,49,64,79,94,106,119,130,144,155],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48},"CVE-2024-9838","auto-affiliate-links-authenticated-admin-sql-injection","Auto Affiliate Links \u003C= 6.4.6 - Authenticated (Admin+) SQL Injection","The Auto Affiliate Links plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 6.4.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.",null,"\u003C=6.4.6","6.4.7","medium",4.9,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","2025-05-29 22:34:03",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fab9f69ce-8589-47a8-80b1-6829c5a5bad1?source=api-prod",254,{"id":50,"url_slug":51,"title":52,"description":53,"plugin_slug":4,"theme_slug":38,"affected_versions":54,"patched_in_version":55,"severity":56,"cvss_score":57,"cvss_vector":58,"vuln_type":44,"published_date":59,"updated_date":60,"references":61,"days_to_patch":63},"CVE-2024-34386","auto-affiliate-links-authenticated-editor-sql-injection","Auto Affiliate Links \u003C= 6.4.3.1 - Authenticated (Editor+) SQL Injection","The Auto Affiliate Links plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 6.4.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with editor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","\u003C=6.4.3.1","6.4.4","critical",9.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","2024-05-06 00:00:00","2024-05-07 20:22:32",[62],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F2d34b675-ff66-475e-b838-657dd51fc48c?source=api-prod",2,{"id":65,"url_slug":66,"title":67,"description":68,"plugin_slug":4,"theme_slug":38,"affected_versions":69,"patched_in_version":70,"severity":41,"cvss_score":71,"cvss_vector":72,"vuln_type":73,"published_date":74,"updated_date":75,"references":76,"days_to_patch":78},"CVE-2024-1843","auto-affiliate-links-missing-authorization-via-aaladdlink","Auto Affiliate Links \u003C= 6.4.3 - Missing Authorization via aalAddLink","The Auto Affiliate Links plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the aalAddLink function in all versions up to, and including, 6.4.3. This makes it possible for authenticated attackers, with subscriber access or higher, to add arbitrary links to posts.","\u003C=6.4.3","6.4.3.1",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Missing Authorization","2024-03-11 00:00:00","2024-03-13 15:26:33",[77],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F09e5aa34-ab28-4349-ac5f-6a0479e641e5?source=api-prod",3,{"id":80,"url_slug":81,"title":82,"description":83,"plugin_slug":4,"theme_slug":38,"affected_versions":84,"patched_in_version":85,"severity":41,"cvss_score":86,"cvss_vector":87,"vuln_type":88,"published_date":89,"updated_date":90,"references":91,"days_to_patch":93},"WF-d89918e1-b525-4d32-9b11-5e014eb02c16-wp-auto-affiliate-links","auto-affiliate-links-cross-site-request-forgery-2","Auto Affiliate Links \u003C= 6.4.2.7 - Cross-Site Request Forgery","The Auto Affiliate Links plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.4.2.7. This is due to missing or incorrect nonce validation on the wpaal_stats() function. This makes it possible for unauthenticated attackers to reset stats via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.","\u003C=6.4.2.7","6.4.2.8",5.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:N\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2024-01-09 00:00:00","2024-01-22 19:56:02",[92],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fd89918e1-b525-4d32-9b11-5e014eb02c16?source=api-prod",14,{"id":95,"url_slug":96,"title":97,"description":98,"plugin_slug":4,"theme_slug":38,"affected_versions":99,"patched_in_version":100,"severity":41,"cvss_score":71,"cvss_vector":101,"vuln_type":88,"published_date":102,"updated_date":90,"references":103,"days_to_patch":105},"WF-17453fa5-af14-477b-9b3d-b245511ad8ce-wp-auto-affiliate-links","auto-affiliate-links-cross-site-request-forgery","Auto Affiliate Links \u003C= 6.4.2.5 - Cross-Site Request Forgery","The Auto Affiliate Links plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.4.2.5. This is due to missing or incorrect nonce validation on several functions such as aal_exclude_terms_actions and aal_exclude_words_actions. This makes it possible for unauthenticated attackers to update plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.","\u003C=6.4.2.5","6.4.2.6","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","2023-11-20 00:00:00",[104],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F17453fa5-af14-477b-9b3d-b245511ad8ce?source=api-prod",64,{"id":107,"url_slug":108,"title":109,"description":110,"plugin_slug":4,"theme_slug":38,"affected_versions":111,"patched_in_version":112,"severity":41,"cvss_score":113,"cvss_vector":114,"vuln_type":88,"published_date":115,"updated_date":90,"references":116,"days_to_patch":118},"CVE-2023-47652","auto-affiliate-links-cross-site-request-forgery-to-stored-cross-site-scripting","Auto Affiliate Links \u003C= 6.4.2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting","The Auto Affiliate Links plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.4.2.4. This is due to missing or incorrect nonce validation on several functions such as aalUpdateExcludePosts(). This makes it possible for unauthenticated attackers to update plugin settings and inject malicious JavaScript via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.","\u003C=6.4.2.4","6.4.2.5",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","2023-11-07 00:00:00",[117],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F8c84ffd3-e000-4d67-9789-e439e7c128e8?source=api-prod",77,{"id":120,"url_slug":121,"title":122,"description":123,"plugin_slug":4,"theme_slug":38,"affected_versions":124,"patched_in_version":125,"severity":41,"cvss_score":71,"cvss_vector":101,"vuln_type":88,"published_date":126,"updated_date":90,"references":127,"days_to_patch":129},"CVE-2023-25973","auto-affiliate-links-cross-site-request-forgery-via-aalchangeoptions-function","Auto Affiliate Links \u003C= 6.3.0.2 - Cross-Site Request Forgery via aalChangeOptions function","The Auto Affiliate Links plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.3.0.2. This is due to missing or incorrect nonce validation on the 'aalChangeOptions' function. This makes it possible for unauthenticated attackers to modify plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.","\u003C=6.3.0.2","6.3.0.3","2023-02-22 00:00:00",[128],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F611af50f-7f60-4c09-be64-3f2705e06206?source=api-prod",335,{"id":131,"url_slug":132,"title":133,"description":134,"plugin_slug":4,"theme_slug":38,"affected_versions":135,"patched_in_version":136,"severity":41,"cvss_score":137,"cvss_vector":138,"vuln_type":139,"published_date":140,"updated_date":90,"references":141,"days_to_patch":143},"CVE-2022-45840","auto-affiliate-links-authenticated-subscriber-plugin-settings-change","Auto Affiliate Links \u003C= 6.2.1.5 - Authenticated (Subscriber+) Plugin Settings Change","The Auto Affiliate Links plugin for WordPress is vulnerable to improper access control via multiple AJAX actions in versions up to, and including, 6.2.1.5. This allows authenticated attackers with subscriber-level permissions or above to modify plugin settings such as adding exclusions for posts and words and to view statistics.","\u003C=6.2.1.5","6.2.1.6",5.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N","Improper Access Control","2023-02-06 00:00:00",[142],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F7f787c75-7b27-4256-ac0c-abc2988ea7c8?source=api-prod",351,{"id":145,"url_slug":146,"title":147,"description":148,"plugin_slug":4,"theme_slug":38,"affected_versions":149,"patched_in_version":150,"severity":41,"cvss_score":71,"cvss_vector":101,"vuln_type":88,"published_date":151,"updated_date":90,"references":152,"days_to_patch":154},"CVE-2023-22689","auto-affiliate-links-cross-site-request-forgery-via-aaldeletelink-function","Auto Affiliate Links \u003C= 6.3 - Cross-Site Request Forgery via aalDeleteLink function","The Auto Affiliate Links plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.3.0.1. This is due to missing or incorrect nonce validation on the aalDeleteLink() function. This makes it possible for unauthenticated attackers to delete links via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.","\u003C=6.3","6.3.0.1","2023-02-02 00:00:00",[153],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Ff738ecf3-5f10-43ab-b8ce-34ac41229e9b?source=api-prod",355,{"id":156,"url_slug":157,"title":158,"description":159,"plugin_slug":4,"theme_slug":38,"affected_versions":160,"patched_in_version":161,"severity":56,"cvss_score":162,"cvss_vector":163,"vuln_type":44,"published_date":164,"updated_date":90,"references":165,"days_to_patch":167},"WF-438d73bb-80f1-460f-8c62-2a40856e4c29-wp-auto-affiliate-links","auto-affiliate-links-sql-injection","Auto Affiliate Links \u003C 5.0 - SQL Injection","The Auto Affiliate Links plugin for WordPress is vulnerable to multiple SQL Injections via the 'aal_massstring' and 'aalorder' parameters in versions before 5.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","\u003C5.0","5.0",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","2015-07-15 00:00:00",[166],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F438d73bb-80f1-460f-8c62-2a40856e4c29?source=api-prod",3114,{"slug":169,"display_name":7,"profile_url":8,"plugin_count":170,"total_installs":171,"avg_security_score":172,"avg_patch_time_days":173,"trust_score":174,"computed_at":175},"thedark",6,3080,86,457,69,"2026-04-04T09:53:56.174Z",[177,198,220,238,255],{"slug":178,"name":179,"version":180,"author":181,"author_profile":182,"description":183,"short_description":184,"active_installs":185,"downloaded":186,"rating":187,"num_ratings":118,"last_updated":188,"tested_up_to":189,"requires_at_least":190,"requires_php":18,"tags":191,"homepage":195,"download_link":196,"security_score":197,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"automatic-post-tagger","Automatic Post Tagger","1.8.2","Devtard","https:\u002F\u002Fprofiles.wordpress.org\u002Fdevtard\u002F","\u003Cp>This plugin automatically searches posts when they are published\u002Fimported\u002Fsaved and adds new taxonomy terms (\u003Cstrong>tags\u003C\u002Fstrong> by default) if term names or related keywords from a user-created keyword list are found.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Compatible with several post import plugins (\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fautomatic-post-tagger\u002Ffaq\u002F\" rel=\"ugc\">FAQ #4\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>Supports \u003Cstrong>custom taxonomies\u003C\u002Fstrong> and \u003Cstrong>post types\u003C\u002Fstrong>; for example, APT is able to categorize posts (\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fautomatic-post-tagger\u002Ffaq\u002F\" rel=\"ugc\">FAQ #6\u003C\u002Fa>), add tags\u002Fcategories to WooCommerce products (\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fautomatic-post-tagger\u002Ffaq\u002F\" rel=\"ugc\">FAQ #7\u003C\u002Fa>)\u003C\u002Fli>\n\u003Cli>Supports \u003Cstrong>UTF-8\u003C\u002Fstrong> characters, non-Latin and logographic alphabets (\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fautomatic-post-tagger\u002Ffaq\u002F\" rel=\"ugc\">FAQ #5\u003C\u002Fa>), including Arabic, Chinese, Cyrillic etc.\u003C\u002Fli>\n\u003Cli>Bulk tagging tool (with a \u003Cstrong>scheduler\u003C\u002Fstrong>) for processing multiple posts\u003C\u002Fli>\n\u003Cli>Import\u002FExport tools (CSV & JSON format support)\u003C\u002Fli>\n\u003Cli>Configuration groups with custom rules for selected keyword sets; wildcard (regex) support for related keywords\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>See \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fautomatic-post-tagger\u002Fscreenshots\u002F\" rel=\"ugc\">Screenshots\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fautomatic-post-tagger\u002Ffaq\u002F\" rel=\"ugc\">FAQ\u003C\u002Fa> for more information.\u003C\u002Fp>\n","Adds relevant taxonomy terms to posts using a keyword list provided by the user.",2000,87652,96,"2017-11-28T16:51:00.000Z","4.4.34","3.0",[192,23,193,24,194],"auto-tags","post","seo","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fautomatic-post-tagger\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fautomatic-post-tagger.1.8.2.zip",85,{"slug":199,"name":200,"version":201,"author":202,"author_profile":203,"description":204,"short_description":205,"active_installs":206,"downloaded":207,"rating":208,"num_ratings":28,"last_updated":209,"tested_up_to":210,"requires_at_least":211,"requires_php":212,"tags":213,"homepage":217,"download_link":218,"security_score":219,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"links-auto-replacer","Keywords to Links Converter","2.2.4","Waseem Senjer","https:\u002F\u002Fprofiles.wordpress.org\u002Fwaseem_senjer\u002F","\u003Cp>Are you tired of linking websites in your post? This plugin will solve your problem. Link your keywords once and forget about them.\u003C\u002Fp>\n\u003Cp>Manage them in one place and create your own shortcuts via Keywords.\u003C\u002Fp>\n\u003Cp>Are you an affiliate marketer, you don’t have to manually insert your affiliate links manually every time you write a blog post. Also, it has a link shortening feature to hide and protect your links.\u003C\u002Fp>\n\u003Ch4>Affiliate Butler Pro\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpruby.com\u002Fplugin\u002Faffiliate-butler-pro\u002F\" title=\"Upgrade to Affiliate Butler Pro\" rel=\"nofollow ugc\">Upgrade to Affiliate Butler Pro\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cem>Affiliate Butler Pro\u003C\u002Fem> is a \u003Cstrong>significant upgrade\u003C\u002Fstrong> to \u003Cem>Affiliate Butler Lite\u003C\u002Fem> that adds many features such as internal, images, galleries, videos, maps and sharing tooltip and much more features.\u003C\u002Fp>\n\u003Ch3>Plugin’s Features\u003C\u002Fh3>\n\u003Ch3>Auto-Linking\u003C\u002Fh3>\n\u003Cp>The plugin allows you to add one or multiple keywords in order to automatically link them to an external link.\u003C\u002Fp>\n\u003Ch3>Do Follow\u003C\u002Fh3>\n\u003Cp>You can set whether you want the keyword’s link to have the dofollow or nofollow values in order to allow search engines to follow this link and use it in ranking or not.\u003C\u002Fp>\n\u003Ch3>Open Target\u003C\u002Fh3>\n\u003Cp>Set the opening behavior of the keyword’s link whether to open in the same window or a new window.\u003C\u002Fp>\n\u003Ch3>Auto Shortening\u003C\u002Fh3>\n\u003Cp>You can shorten the keyword’s link in order to make them clean links and prettified.\u003C\u002Fp>\n\u003Ch3>Case Sensitive\u003C\u002Fh3>\n\u003Cp>You can set the Auto-Link to be letters case sensitive for more accurate replacement\u003C\u002Fp>\n\u003Ch3>Pro Plugin’s Features\u003C\u002Fh3>\n\u003Ch3>Linking Types\u003C\u002Fh3>\n\u003Cp>We have 8 types of linking your keywords:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Internal URL:\u003C\u002Fstrong> You can link your keywords to an internal page of your website. You can find the page by an easy auto-complete list.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom HTML Popup:\u003C\u002Fstrong> The keyword can be linked to a popup that contains any design you want as the plugin accept HTML code to be integrated into the popup. For example, you can add an opt-in form HTML code to collect visitors emails.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Image Popup:\u003C\u002Fstrong> Keywords can be linked to display a popup which contains a single image.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Gallery Popup:\u003C\u002Fstrong> Do you need to display a gallery of images when your users click on certain keywords? No problem, the plugin allows you to link keywords to gallery popups.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Video Popup:\u003C\u002Fstrong> I bet sometimes you want to show the visitors a video but you don’t want them to exit your website to YouTube. You can link your keywords to video popups which support YouTube and Vimeo videos.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Google Maps Popup:\u003C\u002Fstrong> Let’s say you are reviewing a restaurant on your website. It would be a good idea to link the restaurant name with a Map Popup that displays the location of that restaurant.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Social Media Sharing Tooltip:\u003C\u002Fstrong> Let your visitors share any content\u002Flinks you want to their social media accounts. By linking your keywords to a social media sharing tooltip, the keyword link will prompt the visitor with a tooltip that contains variant social media networks to share your content on.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Linking Categories and Custom Taxonomies\u003C\u002Fh3>\n\u003Cp>You can auto link your website categories and custom taxonomies.  Categories terms will be linked to their archive pages whenever they appear in posts or pages.\u003C\u002Fp>\n\u003Ch3>Limits Per Post\u003C\u002Fh3>\n\u003Cp>Limit the number of times that the keyword will be converted to a link per post if you don’t need your pages to be overwhelmed with links 🙂\u003C\u002Fp>\n\u003Ch3>Comprehensive Stats\u003C\u002Fh3>\n\u003Cp>Even if the link was external or a popup, the plugin will be able to track the link and provides you with many statistics (Visits per day, Countries, Browsers, Operating Systems and languages ). I will add more features in the statistics page in order to provide the plugin user of the maximum benefits of statistics and tracking. Moreover, each keyword has its own stats in the keyword editing page.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpruby.com\u002Fplugin\u002Faffiliate-butler-pro\u002F\" title=\"Upgrade to Affiliate Butler Pro\" rel=\"nofollow ugc\">Upgrade to Affiliate Butler Pro\u003C\u002Fa>\u003C\u002Fp>\n","Convert your post content keywords to Links automatically, Using the same links over and over again in your posts? This is the solution.",900,41427,60,"2024-10-19T10:19:00.000Z","6.6.5","3.0.1","5.6",[20,214,23,215,216],"automation","links","marketing","https:\u002F\u002Fwpruby.com\u002Fplugin\u002Faffiliate-butler-pro\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flinks-auto-replacer.2.2.4.zip",92,{"slug":221,"name":222,"version":223,"author":224,"author_profile":225,"description":226,"short_description":227,"active_installs":228,"downloaded":229,"rating":29,"num_ratings":29,"last_updated":230,"tested_up_to":231,"requires_at_least":232,"requires_php":18,"tags":233,"homepage":236,"download_link":237,"security_score":197,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"automated-keywords-generator","Automated Keywords Generator","2.25","Julian Widya Perdana","https:\u002F\u002Fprofiles.wordpress.org\u002Fjulianwp\u002F","\u003Cp>Automatically adds keywords and description meta tag on every page based on title, tags, categories, etc. Simple but powerful !\u003C\u002Fp>\n\u003Cp>If the page is post, it will sets all title, category, and tags as keywords meta tag. If it is category page, the keywords will be your category name, same work for tags.\u003C\u002Fp>\n\u003Cp>It may reduce your work on typing manual keywords every post or even every page of your blog and it is easy-to-use.\u003C\u002Fp>\n","Automatically adds keywords and description meta tag on every page based on title, tags, categories, etc. Simple but powerful !",100,21690,"2010-03-07T00:23:00.000Z","2.8.2","2.0.2",[234,235,23,193,24],"automatic","description","http:\u002F\u002Fmr.hokya.com\u002Fautomated-keywords-generator","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fautomated-keywords-generator.zip",{"slug":239,"name":240,"version":241,"author":242,"author_profile":243,"description":244,"short_description":245,"active_installs":246,"downloaded":247,"rating":29,"num_ratings":29,"last_updated":248,"tested_up_to":16,"requires_at_least":212,"requires_php":249,"tags":250,"homepage":253,"download_link":254,"security_score":228,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"rankyak","RankYak – AI SEO Agent for Autoblogging","1.0.0","RankYak","https:\u002F\u002Fprofiles.wordpress.org\u002Frankyak\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Frankyak.com\" rel=\"nofollow ugc\">RankYak\u003C\u002Fa>‘s AI agents automate your SEO growth: they find low-competition keywords, create a monthly content plan, and automatically write and publish SEO-optimized articles that drive traffic and boost your ranking.\u003C\u002Fp>\n\u003Ch4>✨ RankYak Features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Automatic keyword research:\u003C\u002Fstrong> Once you connect your website, RankYak will start researching keywords based on your website, target audience, and industry.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Monthly content plan:\u003C\u002Fstrong> A monthly content plan for related keywords is automatically generated, view the keywords and adjust if needed.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>High-quality article every day:\u003C\u002Fstrong> Every day, an SEO-optimized article is generated for the planned keyword.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Internal and external linking:\u003C\u002Fstrong> Relevant internal and external links are automatically added to the articles, improving your website’s authority and relevance.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Featured images:\u003C\u002Fstrong> A featured image is automatically generated for each article, enhancing its visual appeal.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Automatically published:\u003C\u002Fstrong> Your articles are automatically published to your website every day so you can just sit back and watch your traffic increase.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Review our \u003Ca href=\"https:\u002F\u002Frankyak.com\u002Flegal\u002Fprivacy-policy\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Frankyak.com\u002Flegal\u002Fterms-of-service\" rel=\"nofollow ugc\">Terms of Service\u003C\u002Fa> for more details.\u003C\u002Fp>\n","RankYak's AI Agents automate SEO — finding keywords, planning content, and publishing optimized articles to boost traffic and rankings effortlessly.",80,513,"2026-01-30T08:33:00.000Z","7.0",[251,252,22,23,194],"ai","autoblog","https:\u002F\u002Frankyak.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frankyak.1.0.0.zip",{"slug":256,"name":257,"version":258,"author":259,"author_profile":260,"description":261,"short_description":262,"active_installs":263,"downloaded":264,"rating":228,"num_ratings":63,"last_updated":265,"tested_up_to":16,"requires_at_least":161,"requires_php":249,"tags":266,"homepage":272,"download_link":273,"security_score":228,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"duplicate-and-auto-draft-cleaner","Duplicate and Auto Draft Cleaner","1.5.2","Mainul Kabir Aion","https:\u002F\u002Fprofiles.wordpress.org\u002Faion11\u002F","\u003Cp>Duplicate and Auto Draft Cleaner helps WordPress site owners keep the database cleaner by removing stale drafts, finding duplicate posts, and giving admins safer cleanup controls before anything is deleted.\u003C\u002Fp>\n\u003Ch4>Why site owners use it\u003C\u002Fh4>\n\u003Cp>When drafts pile up and duplicate posts slip into a site, the admin area becomes harder to manage and content cleanup becomes risky. This plugin focuses on a simple workflow:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Review drafts and duplicates from one settings screen.\u003C\u002Fli>\n\u003Cli>Filter what you want to clean before taking action.\u003C\u002Fli>\n\u003Cli>Confirm manual deletions before they run.\u003C\u002Fli>\n\u003Cli>Track recent cleanup activity for better transparency.\u003C\u002Fli>\n\u003Cli>Automate repeat cleanup tasks on a schedule.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Key features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Remove old \u003Ccode>draft\u003C\u002Fcode> and \u003Ccode>auto-draft\u003C\u002Fcode> posts manually or automatically.\u003C\u002Fli>\n\u003Cli>Detect duplicate posts and pages based on matching titles within the selected post type and status filters.\u003C\u002Fli>\n\u003Cli>Move drafts and duplicate posts to Trash or permanently delete them, depending on your settings.\u003C\u002Fli>\n\u003Cli>Review the last 20 cleanup actions in the activity log.\u003C\u002Fli>\n\u003Cli>Confirm manual delete actions before cleanup starts.\u003C\u002Fli>\n\u003Cli>Run cleanup every 5 minutes, hourly, twice daily, daily, weekly, or monthly.\u003C\u002Fli>\n\u003Cli>Limit cleanup by post type and duplicate status filters.\u003C\u002Fli>\n\u003Cli>See the last successful automated draft and duplicate cleanup times from the settings screen.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>What you can manage\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Draft Cleaner\u003C\u002Fstrong>\u003Cbr \u002F>\nClean old drafts by age, choose allowed post types, and decide whether selected drafts go to Trash or are permanently deleted.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Duplicate Cleaner\u003C\u002Fstrong>\u003Cbr \u002F>\nReview duplicate content, filter by post type and post status, then move selected duplicates to Trash or delete them permanently.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Automation\u003C\u002Fstrong>\u003Cbr \u002F>\nEnable scheduled draft cleanup and scheduled duplicate cleanup separately from the plugin settings page.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Cleanup Activity Log\u003C\u002Fstrong>\u003Cbr \u002F>\nSee the latest cleanup actions with date, cleanup type, and number of items deleted.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Safe cleanup workflow\u003C\u002Fh4>\n\u003Cp>The plugin is designed to reduce accidental data loss:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Manual cleanup actions show a confirmation dialog before deletion.\u003C\u002Fli>\n\u003Cli>Draft cleanup can be routed to Trash instead of permanent deletion.\u003C\u002Fli>\n\u003Cli>Recent cleanup history stays visible in the activity log.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support, bug reports, or feature requests, please visit:\u003C\u002Fp>\n\u003Cp>https:\u002F\u002Fmkaion.com\u002Fduplicate-and-auto-draft-cleaner\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>Plugin developed by Mainul Kabir Aion.\u003C\u002Fp>\n","Clean auto-drafts and duplicate posts with manual controls, scheduled cleanup, activity logs, and safer delete confirmation.",50,1920,"2026-03-13T00:23:00.000Z",[267,268,269,270,271],"auto-draft","content-cleanup","database-cleanup","draft-cleaner","duplicate-posts","https:\u002F\u002Fmkaion.com\u002Fduplicate-and-auto-draft-cleaner","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fduplicate-and-auto-draft-cleaner.1.5.2.zip",{"attackSurface":275,"codeSignals":545,"taintFlows":949,"riskAssessment":1151,"analyzedAt":1168},{"hooks":276,"ajaxHandlers":472,"restRoutes":536,"shortcodes":537,"cronEvents":543,"entryPointCount":544,"unprotectedCount":485},[277,282,286,290,293,298,302,307,311,315,319,324,329,333,336,340,343,346,350,354,357,360,363,366,369,373,378,383,387,390,393,396,399,402,405,408,411,414,417,420,423,426,428,431,434,437,441,444,447,451,454,458,462,466,469],{"type":278,"name":279,"callback":280,"file":281,"line":93},"action","admin_init","aal_api_register_settings","aal_apimanagement.php",{"type":278,"name":283,"callback":284,"file":281,"line":285},"admin_post_wpaal_api_delete_cache","wpaal_handle_api_delete_cache",34,{"type":278,"name":279,"callback":287,"file":288,"line":289},"aal_exclude_cats_actions","aal_excludecats.php",4,{"type":278,"name":279,"callback":291,"file":292,"line":289},"aal_exclude_words_actions","aal_excludewords.php",{"type":278,"name":294,"callback":295,"file":296,"line":297},"wpmu_new_blog","aal_setup_new_blog","aal_install.php",214,{"type":278,"name":299,"callback":300,"file":296,"line":301},"admin_notices","aal_admin_notice",261,{"type":278,"name":303,"callback":304,"file":305,"line":306},"add_meta_boxes","aal_add_meta_box","aal_metabox.php",20,{"type":278,"name":308,"callback":309,"file":305,"line":310},"save_post","aal_save_meta_box_data",136,{"type":278,"name":279,"callback":312,"file":313,"line":314},"aal_stats_register_settings","aal_stats.php",5,{"type":278,"name":316,"callback":317,"file":313,"line":318},"wp_enqueue_scripts","aal_stats_enqueue",259,{"type":278,"name":320,"callback":321,"file":322,"line":323},"admin_footer","aal_urlcheck_enqueue","aal_urlcheck.php",18,{"type":278,"name":325,"callback":326,"file":327,"line":328},"widgets_init","aal_register_widget","aal_widget.php",79,{"type":278,"name":279,"callback":330,"file":331,"line":332},"aal_amazon_register_settings","modules\\amazon\\amazon.php",454,{"type":278,"name":279,"callback":334,"file":335,"line":28},"aal_awin_register_settings","modules\\awin\\awin.php",{"type":278,"name":279,"callback":337,"file":338,"line":339},"aal_bestbuy_register_settings","modules\\bestbuy\\bestbuy.php",11,{"type":278,"name":279,"callback":341,"file":342,"line":339},"aal_cj_register_settings","modules\\cj\\cj.php",{"type":278,"name":279,"callback":344,"file":345,"line":28},"aal_clickbank_register_settings","modules\\clickbank\\clickbank.php",{"type":278,"name":279,"callback":347,"file":348,"line":349},"aalModuleCustomFeedAction","modules\\customfeed.php",53,{"type":278,"name":279,"callback":351,"file":352,"line":353},"aal_discoveryjapan_register_settings","modules\\discoveryjapan\\discoveryjapan.php",12,{"type":278,"name":279,"callback":355,"file":356,"line":339},"aal_ebay_register_settings","modules\\ebay\\ebay.php",{"type":278,"name":279,"callback":358,"file":359,"line":339},"aal_envato_register_settings","modules\\envato\\envato.php",{"type":278,"name":279,"callback":361,"file":362,"line":339},"aal_rakuten_register_settings","modules\\rakuten\\rakuten.php",{"type":278,"name":279,"callback":364,"file":365,"line":339},"aal_shareasale_register_settings","modules\\shareasale\\shareasale.php",{"type":278,"name":279,"callback":367,"file":368,"line":339},"aal_walmart_register_settings","modules\\walmart\\walmart.php",{"type":278,"name":370,"callback":371,"priority":28,"file":372,"line":118},"wp_footer","aal_print_footer_scripts","WP-auto-affiliate-links.php",{"type":278,"name":374,"callback":375,"priority":376,"file":372,"line":377},"init","closure",200,130,{"type":379,"name":380,"callback":381,"priority":78,"file":372,"line":382},"filter","the_content","adverts_the_content",133,{"type":379,"name":384,"callback":385,"file":372,"line":386},"tablepress_table_output","wpaal_add_affiliate_links",138,{"type":379,"name":388,"callback":385,"file":372,"line":389},"bp_get_the_profile_field_value",141,{"type":379,"name":391,"callback":385,"file":372,"line":392},"bp_get_activity_content_body",142,{"type":379,"name":394,"callback":385,"file":372,"line":395},"wpsc_the_product_description",145,{"type":379,"name":397,"callback":385,"file":372,"line":398},"bricks\u002Ffrontend\u002Frender_data",148,{"type":379,"name":400,"callback":385,"file":372,"line":401},"bbp_get_topic_content",152,{"type":379,"name":403,"callback":385,"file":372,"line":404},"bbp_get_reply_content",153,{"type":379,"name":406,"callback":385,"priority":314,"file":372,"line":407},"wpforo_content_after",159,{"type":379,"name":409,"callback":385,"file":372,"line":410},"rwmb_meta",183,{"type":379,"name":412,"callback":385,"file":372,"line":413},"asgarosforum_filter_post_content",187,{"type":379,"name":415,"callback":385,"file":372,"line":416},"peepso_activity_content_before",190,{"type":379,"name":418,"callback":385,"file":372,"line":419},"wprm_get_template",193,{"type":379,"name":421,"callback":385,"file":372,"line":422},"em_event_output",196,{"type":379,"name":424,"callback":385,"file":372,"line":425},"elementor\u002Ffrontend\u002Fthe_content",199,{"type":379,"name":380,"callback":385,"file":372,"line":427},202,{"type":379,"name":429,"callback":385,"file":372,"line":430},"wps_forum_item_content_filter",207,{"type":379,"name":432,"callback":385,"file":372,"line":433},"get_the_excerpt",211,{"type":379,"name":435,"callback":385,"file":372,"line":436},"category_description",215,{"type":379,"name":438,"callback":439,"file":372,"line":440},"widget_text","wpaal_add_affiliate_links_widget",222,{"type":278,"name":279,"callback":442,"file":372,"line":443},"wpaal_actions",232,{"type":278,"name":279,"callback":445,"file":372,"line":446},"aalChangeOptions",233,{"type":278,"name":448,"callback":449,"file":372,"line":450},"admin_menu","wpaal_create_menu",234,{"type":278,"name":374,"callback":452,"file":372,"line":453},"wpaal_rewrite_rules",235,{"type":278,"name":455,"callback":456,"file":372,"line":457},"query_vars","wpaal_add_query_var",236,{"type":278,"name":459,"callback":460,"file":372,"line":461},"wp","wpaal_check_for_goto",237,{"type":278,"name":463,"callback":464,"file":372,"line":465},"wp_print_scripts","aal_load_css",238,{"type":278,"name":320,"callback":467,"file":372,"line":468},"aal_load_js",240,{"type":278,"name":316,"callback":470,"file":372,"line":471},"aal_load_front_scripts",248,[473,480,484,486,489,491,495,499,501,505,508,509,513,517,521,525,528,532],{"action":474,"nopriv":475,"callback":476,"hasNonce":477,"hasCapCheck":475,"file":478,"line":479},"aal_get_ai_keywords",false,"aal_ajax_get_ai_keywords",true,"aal_ajax.php",343,{"action":481,"nopriv":475,"callback":482,"hasNonce":477,"hasCapCheck":475,"file":483,"line":170},"aal_cache_set","aal_cache_set_func","aal_cache.php",{"action":481,"nopriv":477,"callback":482,"hasNonce":477,"hasCapCheck":475,"file":483,"line":485},7,{"action":487,"nopriv":475,"callback":488,"hasNonce":477,"hasCapCheck":475,"file":483,"line":118},"aal_cache_get","aal_cache_get_func",{"action":487,"nopriv":477,"callback":488,"hasNonce":477,"hasCapCheck":475,"file":483,"line":490},78,{"action":492,"nopriv":475,"callback":493,"hasNonce":477,"hasCapCheck":475,"file":296,"line":494},"aal_dismiss_notice","aalDismissNotice",262,{"action":496,"nopriv":475,"callback":497,"hasNonce":477,"hasCapCheck":475,"file":313,"line":498},"aal_stats_save","aal_url_stats_save_action",291,{"action":496,"nopriv":477,"callback":497,"hasNonce":477,"hasCapCheck":475,"file":313,"line":500},292,{"action":502,"nopriv":475,"callback":503,"hasNonce":477,"hasCapCheck":475,"file":322,"line":504},"aal_url_check","aal_url_check_action",36,{"action":506,"nopriv":475,"callback":507,"hasNonce":477,"hasCapCheck":475,"file":331,"line":339},"aal_amazon_get","aal_amazon_ajax",{"action":506,"nopriv":477,"callback":507,"hasNonce":477,"hasCapCheck":475,"file":331,"line":353},{"action":510,"nopriv":475,"callback":511,"hasNonce":475,"hasCapCheck":475,"file":372,"line":512},"aal_delete_link","aalDeleteLink",241,{"action":514,"nopriv":475,"callback":515,"hasNonce":475,"hasCapCheck":475,"file":372,"line":516},"aal_update_link","aalUpdateLink",242,{"action":518,"nopriv":475,"callback":519,"hasNonce":475,"hasCapCheck":475,"file":372,"line":520},"aal_add_link","aalAddLink",243,{"action":522,"nopriv":475,"callback":523,"hasNonce":475,"hasCapCheck":475,"file":372,"line":524},"aal_kw_suggestion","aalKWSuggestionAjax",244,{"action":526,"nopriv":475,"callback":445,"hasNonce":475,"hasCapCheck":475,"file":372,"line":527},"aal_change_options",245,{"action":529,"nopriv":475,"callback":530,"hasNonce":475,"hasCapCheck":475,"file":372,"line":531},"aal_add_exclude_posts","aalAddExcludePost",246,{"action":533,"nopriv":475,"callback":534,"hasNonce":475,"hasCapCheck":475,"file":372,"line":535},"aal_update_exclude_posts","aalUpdateExcludePosts",247,[],[538],{"tag":539,"callback":540,"file":541,"line":542},"autolink","aal_addlink_shortcode","aal_shortcodelinking.php",84,[],19,{"dangerousFunctions":546,"sqlUsage":547,"outputEscaping":611,"fileOperations":485,"externalRequests":78,"nonceChecks":947,"capabilityChecks":306,"bundledLibraries":948},[],{"prepared":314,"raw":548,"locations":549},28,[550,553,556,558,560,563,566,568,569,571,573,576,578,580,582,584,586,588,591,593,595,597,599,601,603,605,607,609],{"file":478,"line":551,"context":552},26,"$wpdb->query() with variable interpolation",{"file":478,"line":554,"context":555},70,"$wpdb->get_results() with variable interpolation",{"file":478,"line":557,"context":555},118,{"file":478,"line":559,"context":555},165,{"file":561,"line":562,"context":555},"aal_cloaking.php",52,{"file":564,"line":565,"context":555},"aal_engine.php",146,{"file":564,"line":567,"context":555},151,{"file":541,"line":93,"context":555},{"file":313,"line":570,"context":552},23,{"file":313,"line":572,"context":555},31,{"file":313,"line":574,"context":575},110,"$wpdb->get_var() with variable interpolation",{"file":313,"line":577,"context":555},111,{"file":313,"line":579,"context":575},180,{"file":313,"line":581,"context":555},182,{"file":313,"line":583,"context":575},319,{"file":313,"line":585,"context":555},323,{"file":313,"line":587,"context":555},327,{"file":589,"line":590,"context":575},"classes\\link.php",93,{"file":589,"line":592,"context":555},123,{"file":589,"line":594,"context":555},239,{"file":589,"line":596,"context":555},251,{"file":348,"line":598,"context":552},105,{"file":600,"line":14,"context":552},"uninstall.php",{"file":600,"line":602,"context":552},40,{"file":372,"line":604,"context":555},337,{"file":372,"line":606,"context":552},391,{"file":372,"line":608,"context":555},400,{"file":372,"line":610,"context":555},510,{"escaped":612,"rawEcho":613,"locations":614},95,197,[615,618,619,621,623,625,627,629,630,632,633,635,637,639,641,643,645,647,649,651,653,655,657,659,661,663,665,667,669,671,673,675,676,677,678,679,681,683,684,686,688,690,692,694,695,696,697,699,701,703,705,706,708,710,712,714,716,717,719,720,722,724,725,727,728,729,731,733,736,738,740,742,744,746,748,749,750,751,752,754,756,758,760,762,764,766,768,770,772,774,776,777,779,780,781,783,785,786,788,790,792,794,796,798,800,801,803,805,807,809,811,813,815,817,819,821,823,825,827,828,829,830,832,833,834,836,837,839,841,842,843,845,847,849,850,851,852,854,856,857,859,861,862,863,865,866,868,870,872,873,874,876,878,880,882,884,886,888,890,892,893,895,896,897,898,900,901,902,904,905,906,908,910,911,912,913,915,916,917,918,920,921,922,923,924,925,927,928,930,931,933,935,937,939,941,943,945],{"file":478,"line":616,"context":617},135,"raw output",{"file":478,"line":129,"context":617},{"file":281,"line":620,"context":617},150,{"file":281,"line":622,"context":617},189,{"file":281,"line":624,"context":617},213,{"file":281,"line":626,"context":617},303,{"file":281,"line":628,"context":617},315,{"file":281,"line":587,"context":617},{"file":281,"line":631,"context":617},339,{"file":281,"line":143,"context":617},{"file":281,"line":634,"context":617},363,{"file":281,"line":636,"context":617},375,{"file":281,"line":638,"context":617},387,{"file":281,"line":640,"context":617},399,{"file":281,"line":642,"context":617},411,{"file":281,"line":644,"context":617},423,{"file":281,"line":646,"context":617},552,{"file":281,"line":648,"context":617},553,{"file":281,"line":650,"context":617},554,{"file":281,"line":652,"context":617},555,{"file":281,"line":654,"context":617},556,{"file":281,"line":656,"context":617},557,{"file":281,"line":658,"context":617},558,{"file":281,"line":660,"context":617},559,{"file":281,"line":662,"context":617},560,{"file":281,"line":664,"context":617},561,{"file":483,"line":666,"context":617},116,{"file":564,"line":668,"context":617},785,{"file":670,"line":572,"context":617},"aal_exclude.php",{"file":670,"line":672,"context":617},87,{"file":670,"line":674,"context":617},162,{"file":288,"line":565,"context":617},{"file":288,"line":620,"context":617},{"file":288,"line":401,"context":617},{"file":288,"line":404,"context":617},{"file":288,"line":680,"context":617},154,{"file":288,"line":682,"context":617},156,{"file":288,"line":682,"context":617},{"file":288,"line":685,"context":617},160,{"file":288,"line":687,"context":617},168,{"file":288,"line":689,"context":617},171,{"file":288,"line":691,"context":617},185,{"file":288,"line":693,"context":617},186,{"file":288,"line":693,"context":617},{"file":288,"line":693,"context":617},{"file":288,"line":693,"context":617},{"file":292,"line":698,"context":617},113,{"file":292,"line":700,"context":617},114,{"file":702,"line":551,"context":617},"aal_generatedlinks.php",{"file":702,"line":704,"context":617},132,{"file":702,"line":704,"context":617},{"file":702,"line":707,"context":617},137,{"file":702,"line":709,"context":617},176,{"file":702,"line":711,"context":617},177,{"file":702,"line":713,"context":617},179,{"file":702,"line":715,"context":617},181,{"file":702,"line":581,"context":617},{"file":702,"line":718,"context":617},270,{"file":702,"line":718,"context":617},{"file":702,"line":721,"context":617},273,{"file":702,"line":723,"context":617},276,{"file":702,"line":723,"context":617},{"file":726,"line":548,"context":617},"aal_importexport.php",{"file":296,"line":516,"context":617},{"file":296,"line":524,"context":617},{"file":305,"line":730,"context":617},68,{"file":305,"line":732,"context":617},73,{"file":734,"line":735,"context":617},"aal_settings.php",333,{"file":734,"line":737,"context":617},345,{"file":734,"line":739,"context":617},348,{"file":734,"line":741,"context":617},359,{"file":734,"line":743,"context":617},370,{"file":734,"line":745,"context":617},377,{"file":734,"line":747,"context":617},384,{"file":734,"line":747,"context":617},{"file":734,"line":638,"context":617},{"file":734,"line":640,"context":617},{"file":734,"line":608,"context":617},{"file":734,"line":753,"context":617},401,{"file":734,"line":755,"context":617},402,{"file":734,"line":757,"context":617},403,{"file":734,"line":759,"context":617},404,{"file":734,"line":761,"context":617},405,{"file":734,"line":763,"context":617},406,{"file":734,"line":765,"context":617},407,{"file":734,"line":767,"context":617},408,{"file":734,"line":769,"context":617},409,{"file":734,"line":771,"context":617},418,{"file":734,"line":773,"context":617},424,{"file":734,"line":775,"context":617},427,{"file":734,"line":775,"context":617},{"file":734,"line":778,"context":617},431,{"file":734,"line":778,"context":617},{"file":734,"line":778,"context":617},{"file":734,"line":782,"context":617},434,{"file":734,"line":784,"context":617},436,{"file":734,"line":784,"context":617},{"file":734,"line":787,"context":617},441,{"file":734,"line":789,"context":617},444,{"file":734,"line":791,"context":617},446,{"file":734,"line":793,"context":617},448,{"file":734,"line":795,"context":617},450,{"file":734,"line":797,"context":617},452,{"file":734,"line":799,"context":617},455,{"file":734,"line":173,"context":617},{"file":734,"line":802,"context":617},462,{"file":734,"line":804,"context":617},466,{"file":734,"line":806,"context":617},480,{"file":734,"line":808,"context":617},481,{"file":734,"line":810,"context":617},487,{"file":734,"line":812,"context":617},488,{"file":734,"line":814,"context":617},492,{"file":734,"line":816,"context":617},495,{"file":734,"line":818,"context":617},507,{"file":313,"line":820,"context":617},117,{"file":313,"line":822,"context":617},122,{"file":313,"line":824,"context":617},129,{"file":313,"line":826,"context":617},143,{"file":313,"line":826,"context":617},{"file":313,"line":395,"context":617},{"file":313,"line":620,"context":617},{"file":313,"line":831,"context":617},219,{"file":313,"line":831,"context":617},{"file":313,"line":440,"context":617},{"file":313,"line":835,"context":617},225,{"file":313,"line":835,"context":617},{"file":313,"line":838,"context":617},228,{"file":313,"line":840,"context":617},231,{"file":327,"line":323,"context":617},{"file":327,"line":306,"context":617},{"file":327,"line":844,"context":617},25,{"file":327,"line":846,"context":617},54,{"file":327,"line":848,"context":617},55,{"file":327,"line":848,"context":617},{"file":589,"line":616,"context":617},{"file":589,"line":410,"context":617},{"file":589,"line":853,"context":617},184,{"file":589,"line":855,"context":617},192,{"file":589,"line":419,"context":617},{"file":589,"line":858,"context":617},194,{"file":589,"line":860,"context":617},198,{"file":589,"line":425,"context":617},{"file":589,"line":376,"context":617},{"file":589,"line":864,"context":617},201,{"file":589,"line":427,"context":617},{"file":589,"line":867,"context":617},203,{"file":589,"line":869,"context":617},204,{"file":589,"line":871,"context":617},208,{"file":589,"line":871,"context":617},{"file":589,"line":436,"context":617},{"file":589,"line":875,"context":617},216,{"file":589,"line":877,"context":617},218,{"file":331,"line":879,"context":617},314,{"file":331,"line":881,"context":617},490,{"file":331,"line":883,"context":617},518,{"file":331,"line":885,"context":617},611,{"file":331,"line":887,"context":617},613,{"file":331,"line":889,"context":617},626,{"file":335,"line":891,"context":617},48,{"file":335,"line":490,"context":617},{"file":335,"line":894,"context":617},81,{"file":335,"line":219,"context":617},{"file":335,"line":425,"context":617},{"file":338,"line":208,"context":617},{"file":338,"line":899,"context":617},75,{"file":342,"line":27,"context":617},{"file":342,"line":590,"context":617},{"file":342,"line":903,"context":617},115,{"file":342,"line":413,"context":617},{"file":345,"line":848,"context":617},{"file":345,"line":907,"context":617},65,{"file":345,"line":909,"context":617},94,{"file":345,"line":598,"context":617},{"file":345,"line":704,"context":617},{"file":345,"line":398,"context":617},{"file":352,"line":914,"context":617},61,{"file":352,"line":105,"context":617},{"file":352,"line":490,"context":617},{"file":356,"line":208,"context":617},{"file":356,"line":919,"context":617},74,{"file":359,"line":846,"context":617},{"file":359,"line":246,"context":617},{"file":362,"line":208,"context":617},{"file":365,"line":208,"context":617},{"file":365,"line":672,"context":617},{"file":365,"line":926,"context":617},89,{"file":365,"line":577,"context":617},{"file":365,"line":929,"context":617},167,{"file":368,"line":208,"context":617},{"file":368,"line":932,"context":617},76,{"file":372,"line":934,"context":617},421,{"file":372,"line":936,"context":617},536,{"file":372,"line":938,"context":617},669,{"file":372,"line":940,"context":617},800,{"file":372,"line":942,"context":617},810,{"file":372,"line":944,"context":617},818,{"file":372,"line":946,"context":617},819,27,[],[950,974,984,996,1011,1021,1030,1040,1048,1056,1067,1075,1086,1094,1110,1121,1135],{"entryPoint":951,"graph":952,"unsanitizedCount":973,"severity":41},"aal_ajax_get_ai_keywords (aal_ajax.php:345)",{"nodes":953,"edges":970},[954,959,963],{"id":955,"type":956,"label":957,"file":478,"line":958},"n0","source","$_POST",360,{"id":960,"type":961,"label":962,"file":478,"line":958},"n1","transform","→ aal_get_remote_metadata()",{"id":964,"type":965,"label":966,"file":967,"line":968,"wp_function":969},"n2","sink","wp_remote_get() [SSRF]","aal_functions.php",131,"wp_remote_get",[971,972],{"from":955,"to":960,"sanitized":475},{"from":960,"to":964,"sanitized":475},1,{"entryPoint":975,"graph":976,"unsanitizedCount":973,"severity":41},"\u003Caal_ajax> (aal_ajax.php:0)",{"nodes":977,"edges":981},[978,979,980],{"id":955,"type":956,"label":957,"file":478,"line":958},{"id":960,"type":961,"label":962,"file":478,"line":958},{"id":964,"type":965,"label":966,"file":967,"line":968,"wp_function":969},[982,983],{"from":955,"to":960,"sanitized":475},{"from":960,"to":964,"sanitized":475},{"entryPoint":985,"graph":986,"unsanitizedCount":314,"severity":41},"wpaal_generatedlinks (aal_generatedlinks.php:3)",{"nodes":987,"edges":994},[988,991],{"id":955,"type":956,"label":989,"file":702,"line":990},"$_GET (x5)",172,{"id":960,"type":965,"label":992,"file":702,"line":709,"wp_function":993},"echo() [XSS]","echo",[995],{"from":955,"to":960,"sanitized":475},{"entryPoint":997,"graph":998,"unsanitizedCount":973,"severity":41},"aal_url_check_action (aal_urlcheck.php:39)",{"nodes":999,"edges":1008},[1000,1003,1005],{"id":955,"type":956,"label":1001,"file":322,"line":1002},"$_POST['url']",42,{"id":960,"type":961,"label":1004,"file":322,"line":1002},"→ aal_url_exists()",{"id":964,"type":965,"label":1006,"file":322,"line":848,"wp_function":1007},"fopen() [File Access]","fopen",[1009,1010],{"from":955,"to":960,"sanitized":475},{"from":960,"to":964,"sanitized":475},{"entryPoint":1012,"graph":1013,"unsanitizedCount":973,"severity":41},"\u003Caal_urlcheck> (aal_urlcheck.php:0)",{"nodes":1014,"edges":1018},[1015,1016,1017],{"id":955,"type":956,"label":1001,"file":322,"line":1002},{"id":960,"type":961,"label":1004,"file":322,"line":1002},{"id":964,"type":965,"label":1006,"file":322,"line":848,"wp_function":1007},[1019,1020],{"from":955,"to":960,"sanitized":475},{"from":960,"to":964,"sanitized":475},{"entryPoint":1022,"graph":1023,"unsanitizedCount":973,"severity":41},"wpaal_manage_affiliates (WP-auto-affiliate-links.php:492)",{"nodes":1024,"edges":1028},[1025,1027],{"id":955,"type":956,"label":1026,"file":372,"line":818},"$_SERVER",{"id":960,"type":965,"label":992,"file":372,"line":936,"wp_function":993},[1029],{"from":955,"to":960,"sanitized":475},{"entryPoint":1031,"graph":1032,"unsanitizedCount":29,"severity":1039},"aal_cache_get_func (aal_cache.php:81)",{"nodes":1033,"edges":1037},[1034,1036],{"id":955,"type":956,"label":957,"file":483,"line":1035},88,{"id":960,"type":965,"label":992,"file":483,"line":666,"wp_function":993},[1038],{"from":955,"to":960,"sanitized":477},"low",{"entryPoint":1041,"graph":1042,"unsanitizedCount":29,"severity":1039},"\u003Caal_cache> (aal_cache.php:0)",{"nodes":1043,"edges":1046},[1044,1045],{"id":955,"type":956,"label":957,"file":483,"line":1035},{"id":960,"type":965,"label":992,"file":483,"line":666,"wp_function":993},[1047],{"from":955,"to":960,"sanitized":477},{"entryPoint":1049,"graph":1050,"unsanitizedCount":314,"severity":1039},"\u003Caal_generatedlinks> (aal_generatedlinks.php:0)",{"nodes":1051,"edges":1054},[1052,1053],{"id":955,"type":956,"label":989,"file":702,"line":990},{"id":960,"type":965,"label":992,"file":702,"line":709,"wp_function":993},[1055],{"from":955,"to":960,"sanitized":475},{"entryPoint":1057,"graph":1058,"unsanitizedCount":29,"severity":1039},"aalDismissNotice (aal_install.php:250)",{"nodes":1059,"edges":1065},[1060,1061],{"id":955,"type":956,"label":957,"file":296,"line":48},{"id":960,"type":965,"label":1062,"file":296,"line":1063,"wp_function":1064},"update_option() [Settings Manipulation]",255,"update_option",[1066],{"from":955,"to":960,"sanitized":477},{"entryPoint":1068,"graph":1069,"unsanitizedCount":29,"severity":1039},"\u003Caal_install> (aal_install.php:0)",{"nodes":1070,"edges":1073},[1071,1072],{"id":955,"type":956,"label":957,"file":296,"line":48},{"id":960,"type":965,"label":1062,"file":296,"line":1063,"wp_function":1064},[1074],{"from":955,"to":960,"sanitized":477},{"entryPoint":1076,"graph":1077,"unsanitizedCount":29,"severity":1039},"aal_url_stats_save_action (aal_stats.php:295)",{"nodes":1078,"edges":1084},[1079,1081],{"id":955,"type":956,"label":957,"file":313,"line":1080},300,{"id":960,"type":965,"label":1082,"file":313,"line":587,"wp_function":1083},"get_results() [SQLi]","get_results",[1085],{"from":955,"to":960,"sanitized":477},{"entryPoint":1087,"graph":1088,"unsanitizedCount":29,"severity":1039},"\u003Caal_stats> (aal_stats.php:0)",{"nodes":1089,"edges":1092},[1090,1091],{"id":955,"type":956,"label":957,"file":313,"line":1080},{"id":960,"type":965,"label":1082,"file":313,"line":587,"wp_function":1083},[1093],{"from":955,"to":960,"sanitized":477},{"entryPoint":1095,"graph":1096,"unsanitizedCount":29,"severity":1039},"aalModuleCustomFeedAction (modules\\customfeed.php:54)",{"nodes":1097,"edges":1107},[1098,1101,1102,1103],{"id":955,"type":956,"label":1099,"file":348,"line":1100},"$_FILES",83,{"id":960,"type":965,"label":1082,"file":348,"line":574,"wp_function":1083},{"id":964,"type":956,"label":1099,"file":348,"line":1100},{"id":1104,"type":965,"label":1105,"file":348,"line":557,"wp_function":1106},"n3","query() [SQLi]","query",[1108,1109],{"from":955,"to":960,"sanitized":477},{"from":964,"to":1104,"sanitized":477},{"entryPoint":1111,"graph":1112,"unsanitizedCount":29,"severity":1039},"\u003Ccustomfeed> (modules\\customfeed.php:0)",{"nodes":1113,"edges":1118},[1114,1115,1116,1117],{"id":955,"type":956,"label":1099,"file":348,"line":1100},{"id":960,"type":965,"label":1082,"file":348,"line":574,"wp_function":1083},{"id":964,"type":956,"label":1099,"file":348,"line":1100},{"id":1104,"type":965,"label":1105,"file":348,"line":557,"wp_function":1106},[1119,1120],{"from":955,"to":960,"sanitized":477},{"from":964,"to":1104,"sanitized":477},{"entryPoint":1122,"graph":1123,"unsanitizedCount":29,"severity":1039},"wpaal_actions (WP-auto-affiliate-links.php:310)",{"nodes":1124,"edges":1132},[1125,1127,1130,1131],{"id":955,"type":956,"label":1026,"file":372,"line":1126},350,{"id":960,"type":965,"label":1128,"file":372,"line":143,"wp_function":1129},"wp_redirect() [Open Redirect]","wp_redirect",{"id":964,"type":956,"label":957,"file":372,"line":753},{"id":1104,"type":965,"label":992,"file":372,"line":934,"wp_function":993},[1133,1134],{"from":955,"to":960,"sanitized":477},{"from":964,"to":1104,"sanitized":477},{"entryPoint":1136,"graph":1137,"unsanitizedCount":29,"severity":1039},"\u003CWP-auto-affiliate-links> (WP-auto-affiliate-links.php:0)",{"nodes":1138,"edges":1147},[1139,1140,1141,1142,1143,1145],{"id":955,"type":956,"label":1026,"file":372,"line":1126},{"id":960,"type":965,"label":1128,"file":372,"line":143,"wp_function":1129},{"id":964,"type":956,"label":957,"file":372,"line":753},{"id":1104,"type":965,"label":992,"file":372,"line":934,"wp_function":993},{"id":1144,"type":956,"label":1026,"file":372,"line":818},"n4",{"id":1146,"type":965,"label":992,"file":372,"line":936,"wp_function":993},"n5",[1148,1149,1150],{"from":955,"to":960,"sanitized":477},{"from":964,"to":1104,"sanitized":477},{"from":1144,"to":1146,"sanitized":477},{"summary":1152,"deductions":1153},"The plugin \"wp-auto-affiliate-links\" v6.8.4 exhibits a concerning security posture, primarily due to a significant number of unprotected entry points and a history of diverse and severe vulnerabilities. While the static analysis indicates a lack of dangerous functions and a reasonable number of nonce and capability checks, the presence of 7 AJAX handlers without authentication is a critical weakness, opening the door for unauthorized actions. The taint analysis, while not showing critical or high severity flows, still reveals 7 flows with unsanitized paths, suggesting potential risks if these paths are exposed to user input. The vulnerability history is a major red flag, with 10 known CVEs, including past critical vulnerabilities of SQL Injection, Missing Authorization, CSRF, and Improper Access Control. The fact that these critical issues have been resolved is positive, but the sheer number and type of past vulnerabilities indicate a pattern of insecure coding practices within the plugin that attackers have historically exploited.  While the current version may have patched its known CVEs, the substantial unprotected attack surface and the historical pattern of serious flaws necessitate caution.",[1154,1156,1158,1161,1163,1166],{"reason":1155,"points":485},"7 unprotected AJAX handlers",{"reason":1157,"points":485},"7 flows with unsanitized paths",{"reason":1159,"points":1160},"SQL queries: 85% not using prepared statements",8,{"reason":1162,"points":485},"Output escaping: 67% not properly escaped",{"reason":1164,"points":1165},"Total 10 known CVEs historically",15,{"reason":1167,"points":28},"Past critical vulnerabilities (SQLi, Missing Auth)","2026-03-16T18:20:52.922Z",{"wat":1170,"direct":1183},{"assetPaths":1171,"generatorPatterns":1175,"scriptPaths":1176,"versionParams":1179},[1172,1173,1174],"\u002Fwp-content\u002Fplugins\u002Fwp-auto-affiliate-links\u002Fcss\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fwp-auto-affiliate-links\u002Fjs\u002Fapi.js","\u002Fwp-content\u002Fplugins\u002Fwp-auto-affiliate-links\u002Fjs\u002Fjs.js",[],[1177,1178],"js\u002Fapi.js","js\u002Fjs.js",[1180,1181,1182],"wp-auto-affiliate-links\u002Fcss\u002Fstyle.css?ver=","wp-auto-affiliate-links\u002Fjs\u002Fapi.js?ver=","wp-auto-affiliate-links\u002Fjs\u002Fjs.js?ver=",{"cssClasses":1184,"htmlComments":1185,"htmlAttributes":1186,"restEndpoints":1187,"jsGlobals":1188,"shortcodeOutput":1192},[],[],[],[],[1189,1190,1191],"ajax_script","aal_amazon_obj","aal_data",[]]