[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffqDX4rHh8mp9eMN8LUqKcGxT35jXGRDJLRxYVRZ3ll4":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":23,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":35,"analysis":137,"fingerprints":234},"wp-clean-characters","WP Clean Characters","0.1.0","prettyboymp","https:\u002F\u002Fprofiles.wordpress.org\u002Fprettyboymp\u002F","\u003Cp>Copying and pasting content from the web or other documents can insert invalid characters into post content and create invalid RSS feeds.  WP Clean Characters fixes this by converting those invalid characters into valid UTF-8 entities when saving a post. A feature is also included to go through your post archive and clean any invalid characters in those as well.\u003C\u002Fp>\n","This plugin will convert the characters pasted from any character set to a valid UTF-8 entities.",10,3465,0,"2014-04-17T01:42:00.000Z","3.0.","2.9","",[19,20,21,22],"entities","html","utf-8","valid","http:\u002F\u002Fvoceconnect.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-clean-characters.0.1.0.zip",85,null,"2026-03-15T14:54:45.397Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":25,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},4,50,30,84,"2026-04-04T11:16:04.855Z",[36,61,84,103,118],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":46,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":17,"tags":51,"homepage":56,"download_link":57,"security_score":25,"vuln_count":58,"unpatched_count":13,"last_vuln_date":59,"fetched_at":60},"validated","Validated","2.1.2","Allan Collins","https:\u002F\u002Fprofiles.wordpress.org\u002Fcollinsinternet\u002F","\u003Cp>Is your website up to W3C HTML coding standards?  This plugin will allow you to test each page or post on your site against the W3C Validator.\u003C\u002Fp>\n\u003Cp>Want to contribute? Fork it: https:\u002F\u002Fgithub.com\u002Fallan23\u002Fvalidated\u003C\u002Fp>\n","This plugin will allow you to check your pages\u002Fposts HTML against the W3C Validator.",700,25451,80,5,"2019-12-04T00:15:00.000Z","5.3.21","3.7",[52,20,53,54,55],"code","validation","w3c","xhtml","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fvalidated\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvalidated.zip",1,"2014-05-28 00:00:00","2026-03-15T15:16:48.613Z",{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":69,"downloaded":70,"rating":71,"num_ratings":58,"last_updated":72,"tested_up_to":73,"requires_at_least":74,"requires_php":75,"tags":76,"homepage":81,"download_link":82,"security_score":83,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":60},"html-validation","HTML Validation","1.0.17","seshelby","https:\u002F\u002Fprofiles.wordpress.org\u002Fseshelby\u002F","\u003Cp>The HTML Validation Plugin runs in the background, identifies and reports HTML validation errors on your website. Once activated, the HTML Validation plugin uses WordPress cron to scan your website content in the background. A progress bar on the report screen indicates scan progress. HTML Validation is provided by \u003Ca href=\"https:\u002F\u002Fabout.validator.nu\u002F\" rel=\"nofollow ugc\">Validator.nu\u003C\u002Fa>. Please refer to the provided \u003Ca href=\"https:\u002F\u002Fabout.validator.nu\u002F#tos\" rel=\"nofollow ugc\">privacy policy and terms of use\u003C\u002Fa>. Posts may also be scanned using the Validate HTML link provided on the “All Posts” screen.\u003C\u002Fp>\n\u003Cp>The HTML Validation Pro extension adds options to automatically correct many HTML Validation issues. This one of a kind plugin could save you hundreds of hours of work finding and correcting HTML validation issues. \u003Ca href=\"https:\u002F\u002Fwww.alumnionlineservices.com\u002Fphp-scripts\u002Fhtml-validation\u002F#proext\" rel=\"nofollow ugc\">Visit our website to learn more and add the Pro Extension\u003C\u002Fa>\u003C\u002Fp>\n","The HTML Validation Plugin runs in the background, identifies and reports HTML validation errors on your website. Once activated, the HTML Validation  …",400,9075,20,"2025-11-16T12:47:00.000Z","6.8.5","4.6","5.5",[77,78,62,79,80],"accessibility","code-validation","html-validator","markup-validation","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fhtml-validation","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhtml-validation.1.0.17.zip",100,{"slug":85,"name":86,"version":87,"author":88,"author_profile":89,"description":90,"short_description":91,"active_installs":71,"downloaded":92,"rating":13,"num_ratings":13,"last_updated":93,"tested_up_to":94,"requires_at_least":95,"requires_php":17,"tags":96,"homepage":101,"download_link":102,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":60},"tinymce-entities-patch","TinyMCE Entities Patch","1.0","EnglishMike","https:\u002F\u002Fprofiles.wordpress.org\u002Fstringfold\u002F","\u003Cblockquote>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Important Note: The recent release of WordPress 2.6 has fixed the disappearing entities bug this plugin was designed to fix, so once you upgrade to WordPress 2.6 please discontinue using this plugin.  I may release a new plugin that prevents spaces from being stripped from the beginning of lines sometime in the near future.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003C\u002Fblockquote>\n\u003Cp>After a few weeks of writing posts on WordPress, I was getting very irritated when all the HTML entities I added to my examples kept being converted into characters — e.g. HTML entities like > \u003C \" would convert to > \u003C \" — when I saved the post I was working on.\u003C\u002Fp>\n\u003Cp>To make matters worse, all the spaces I was using to align my coding examples would disappear when switching between “HTML” mode and “Visual” mode, even if I used the   entity.\u003C\u002Fp>\n\u003Cp>So, I finally bit the bullet and wrote this little plugin to fix these problems.  It does just two things:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Allows you to enter HTML entities like > \u003C & etc. while in “Visual” mode and they will stay put, even after you save your post.\u003C\u002Fli>\n\u003Cli>Allows you to type extra spaces while in “Visual” mode (or   in “HTML” mode) and they will stay put too, allowing you to correctly indent code samples, etc. \u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>If you are writing blog posts with source code or HTML examples, you may find this little plugin helps you avoid a ton of aggravation.\u003C\u002Fp>\n\u003Cp>Works with TinyMCE and the TinyMCE Advanced plugin.\u003C\u002Fp>\n\u003Cp>Please note, this plugin is a patch for issues with WordPress’s uses of TinyMCE, and not the editor itself.\u003C\u002Fp>\n\u003Cp>If you try this plugin and like what you see, or you have questions or problems, feel free to email me at mike@englishmike.net or visit the \u003Ca href=\"http:\u002F\u002Fenglishmike.net\u002Ftinymceentities-plugin\u002F\" rel=\"nofollow ugc\">TinyMCE Entities Patch Plugin Home Page\u003C\u002Fa> with your feedback.\u003C\u002Fp>\n\u003Cp>\u003Cem>(Not tested on any version of WordPress older than 2.5.1.  It may work on earlier versions, but I just don’t know for sure.  Try it and see.  If it doesn’t work simply deactivate the plugin.  If it does work, please let me know!!)\u003C\u002Fem>\u003C\u002Fp>\n\u003Ch3>Release Notes version 1.0\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Changes in version 1.0\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>This is the initial version of the plugin.\u003C\u002Fli>\n\u003C\u002Ful>\n","Prevent spaces and HTML entities (e.g. > or ') from disappearing when editing posts with TinyMCE.",3420,"2008-07-15T17:20:00.000Z","2.5.1","2.5",[97,20,98,99,100],"bug","html-entities","posts","tinymce","http:\u002F\u002Fenglishmike.net\u002Ftinymceentities-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftinymce-entities-patch.zip",{"slug":104,"name":105,"version":106,"author":107,"author_profile":108,"description":109,"short_description":110,"active_installs":71,"downloaded":111,"rating":46,"num_ratings":58,"last_updated":17,"tested_up_to":112,"requires_at_least":17,"requires_php":17,"tags":113,"homepage":17,"download_link":116,"security_score":83,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":117},"xhtml-easy-validator","(x)html easy validator","0.4","Nikoya","https:\u002F\u002Fprofiles.wordpress.org\u002Fnicolas-andre\u002F","\u003Cp>Check the doctype validity using W3c validator (html , xhtml , … ) when creating or updating  page \u002F post \u002F custom post type and show the result in backend\u003Cbr \u002F>\nIt show the result in back-end in sortable column, a link is add to the w3c for all file to help you to correct html error.\u003C\u002Fp>\n\u003Cp>Very easy to see if a post \u002F page is valid or not.\u003C\u002Fp>\n\u003Cp>This plugin can check the W3C validity of your page \u002F post or custom post type even if the site is not accessible from the Internet (if you work on local system for example)\u003C\u002Fp>\n","Check the doctype validity using W3c validator (html , xhtml , ... ) when creating or updating  page \u002F post \u002F custom post type and show the result in  …",5538,"3.2.1",[20,114,54,115,55],"html5","w3c-validation","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fxhtml-easy-validator.0.4.zip","2026-03-15T10:48:56.248Z",{"slug":119,"name":120,"version":121,"author":122,"author_profile":123,"description":124,"short_description":125,"active_installs":11,"downloaded":126,"rating":13,"num_ratings":13,"last_updated":17,"tested_up_to":127,"requires_at_least":128,"requires_php":17,"tags":129,"homepage":135,"download_link":136,"security_score":83,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":117},"advanced-videobox","Advanced Videobox","1.0.2","wptom","https:\u002F\u002Fprofiles.wordpress.org\u002Fhellysium\u002F","\u003Cp>With this plugin you can add videos to your sidebar (or any other widgetized area of your site). Just copy and paste code of the video into the Advanced Video widget.\u003Cbr \u002F>\nThe Youtube’s original video code doesn’t pass W3C validation. The filtered video code of the Advanced Videobox will keep your site XHTML valid.\u003Cbr \u002F>\nThe plugin is easily customizable through widget panel. This plugin is ideal for music, tutorial, ads videos. Check for more on \u003Ca href=\"http:\u002F\u002Fwptom.com\u002Fwordpress\u002Fplugins\u002Fadvanced-videobox\u002F\" rel=\"nofollow ugc\">the plugin’s page\u003C\u002Fa>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easy to manage\u003C\u002Fli>\n\u003Cli>Option to change width and height\u003C\u002Fli>\n\u003Cli>Option to disable parameters that produce invalid XHTML code\u003C\u002Fli>\n\u003Cli>Web 2.0 graphics\u003C\u002Fli>\n\u003Cli>Add up to 20 videos\u003C\u002Fli>\n\u003Cli>Easily customizable via CSS\u003C\u002Fli>\n\u003Cli>Ideal plugin for music, tutorials, ads videos\u003C\u002Fli>\n\u003Cli>You can add ANY videos, not only from Youtube. Just keep “Enable parameters” option checked.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Contributors\u002FChangelog\u003C\u002Fh3>\n\u003Cpre>\u003Ccode> Version Date       Changes\n\n 1.0.0   2009\u002F14\u002F01 Initial release     \n 1.0.1   2009\u002F15\u002F01 Sucesfully tested on WordPress 2.9.2\n 1.0.2   2009\u002F15\u002F11 Sucesfully tested on WordPress 3.0.1, minor tweaks\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Thanks to all who sent bug reports and ideas for\u003Cbr \u002F>\nimprovements.\u003C\u002Fp>\n","With this plugin you can add videos to your sidebar (or any other widgetized area of your site). Just copy and paste code of the video into the Advanc …",7181,"3.0.5","1.5",[130,131,132,133,134],"embed","video","videobox","xhtml-valid","youtube","http:\u002F\u002Fwptom.com\u002Fwordpress\u002Fplugins\u002Fadvanced-videobox\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fadvanced-videobox.zip",{"attackSurface":138,"codeSignals":171,"taintFlows":190,"riskAssessment":227,"analyzedAt":233},{"hooks":139,"ajaxHandlers":161,"restRoutes":168,"shortcodes":169,"cronEvents":170,"entryPointCount":58,"unprotectedCount":13},[140,146,149,152,157],{"type":141,"name":142,"callback":143,"file":144,"line":145},"filter","pre_post_content","filter_characters","wp-clean-chars.php",34,{"type":141,"name":147,"callback":143,"file":144,"line":148},"pre_post_excerpt",35,{"type":141,"name":150,"callback":143,"file":144,"line":151},"pre_post_title",36,{"type":153,"name":154,"callback":155,"file":144,"line":156},"action","admin_menu","add_admin_menu",38,{"type":153,"name":158,"callback":159,"file":144,"line":160},"init","initialize",273,[162],{"action":163,"nopriv":164,"callback":165,"hasNonce":166,"hasCapCheck":166,"file":144,"line":167},"clean_characters",false,"ajax_clean_characters",true,39,[],[],[],{"dangerousFunctions":172,"sqlUsage":173,"outputEscaping":178,"fileOperations":13,"externalRequests":13,"nonceChecks":188,"capabilityChecks":188,"bundledLibraries":189},[],{"prepared":13,"raw":58,"locations":174},[175],{"file":144,"line":176,"context":177},172,"$wpdb->get_col() with variable interpolation",{"escaped":11,"rawEcho":179,"locations":180},3,[181,184,186],{"file":144,"line":182,"context":183},176,"raw output",{"file":144,"line":185,"context":183},178,{"file":144,"line":187,"context":183},193,2,[],[191,216],{"entryPoint":192,"graph":193,"unsanitizedCount":13,"severity":215},"clean_characters_page (wp-clean-chars.php:152)",{"nodes":194,"edges":212},[195,200,205,208],{"id":196,"type":197,"label":198,"file":144,"line":199},"n0","source","$_POST",169,{"id":201,"type":202,"label":203,"file":144,"line":176,"wp_function":204},"n1","sink","get_col() [SQLi]","get_col",{"id":206,"type":197,"label":207,"file":144,"line":199},"n2","$_POST (x2)",{"id":209,"type":202,"label":210,"file":144,"line":187,"wp_function":211},"n3","echo() [XSS]","echo",[213,214],{"from":196,"to":201,"sanitized":166},{"from":206,"to":209,"sanitized":166},"low",{"entryPoint":217,"graph":218,"unsanitizedCount":13,"severity":215},"\u003Cwp-clean-chars> (wp-clean-chars.php:0)",{"nodes":219,"edges":224},[220,221,222,223],{"id":196,"type":197,"label":198,"file":144,"line":199},{"id":201,"type":202,"label":203,"file":144,"line":176,"wp_function":204},{"id":206,"type":197,"label":207,"file":144,"line":199},{"id":209,"type":202,"label":210,"file":144,"line":187,"wp_function":211},[225,226],{"from":196,"to":201,"sanitized":166},{"from":206,"to":209,"sanitized":166},{"summary":228,"deductions":229},"The wp-clean-characters plugin v0.1.0 exhibits a generally good security posture, adhering to several best practices. The lack of known CVEs and a clean vulnerability history are positive indicators.  The static analysis reveals a small attack surface with no apparent unprotected entry points. Code signals show a responsible approach to output escaping, with a high percentage properly handled. Nonce and capability checks are present on its single AJAX handler, which is commendable.\n\nHowever, the plugin has one area of concern: the single SQL query it executes is not using prepared statements. This presents a risk of SQL injection vulnerabilities, especially if user-supplied data is directly incorporated into this query. While the taint analysis did not reveal any unsanitized paths, the presence of a raw SQL query without preparation remains a critical point of attention. The plugin's strengths lie in its minimal attack surface and robust auth checks, but the unescaped SQL query is a significant weakness that could be exploited.",[230],{"reason":231,"points":232},"Raw SQL query without prepared statements",7,"2026-03-16T23:34:15.669Z",{"wat":235,"direct":244},{"assetPaths":236,"generatorPatterns":239,"scriptPaths":240,"versionParams":241},[237,238],"\u002Fwp-content\u002Fplugins\u002Fwp-clean-characters\u002Fjquery-ui\u002Fui.progressbar.js","\u002Fwp-content\u002Fplugins\u002Fwp-clean-characters\u002Fjquery-ui\u002Fredmond\u002Fjquery-ui-1.7.2.custom.css",[],[237,238],[242,243],"wp-clean-characters\u002Fjquery-ui\u002Fui.progressbar.js?ver=","wp-clean-characters\u002Fjquery-ui\u002Fredmond\u002Fjquery-ui-1.7.2.custom.css?ver=",{"cssClasses":245,"htmlComments":246,"htmlAttributes":247,"restEndpoints":248,"jsGlobals":249,"shortcodeOutput":252},[],[],[],[],[250,251],"wp_create_nonce","plugins_url",[]]