[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6VKJRjTuZgaboEI_IXorBJUQAiM-b0mSzFq8wp8hzEQ":3,"$fRBgdDuG-JZQ7nxoo6Uaje0GZGZ59_VwnwFuu6ORTdpY":503,"$fPJWpmhk_EF2aZooAB1du0Esy8d5xVsAh-JNdYuYDF1U":507},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"discovery_status":31,"vulnerabilities":32,"developer":50,"crawl_stats":38,"alternatives":58,"analysis":149,"fingerprints":485},"wp-dynamic-links","WP Dynamic Links","1.0.1","Soflyy","https:\u002F\u002Fprofiles.wordpress.org\u002Fsoflyy\u002F","\u003Ch4>Shorten your links. Turn long URLs into your-domain.com\u002Fshort-url. Great for affiliate marketers who want to cloak their links, or anyone else who wants to have pretty URLs and track their outbound traffic.\u003C\u002Fh4>\n\u003Cp>Here’s how it works:\u003C\u002Fp>\n\u003Cp>1) Click on ‘Create Link’ in the WP Dynamic Links section of WordPress admin panel.\u003C\u002Fp>\n\u003Cp>2) Enter a name for the link (for management purposes) and a ‘slug’ name for the URL (for example, www.your-domain.com\u002Fslug-name).\u003C\u002Fp>\n\u003Cp>3) Enter the destination URL for the cloaked link, i.e. www.some-external-url.com\u002Fsome-page\u003C\u002Fp>\n\u003Cp>4) Click ‘Save Link.’\u003C\u002Fp>\n\u003Cp>\u003Cstrong>After that, you can use the WP Dynamic Links-powered link everywhere you would have used the original URL.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>WP Dynamic Links will track clicks on your links, providing a detailed summary and information on individual clicks like browser type, IP address, country code, and referring URL.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cp>Generate click reports for any time period, and export all click data to CSV for further analysis.\u003C\u002Fp>\n\u003Cp>Automatically turn keywords on your site into links. Specify the keyword and it will be replaced in your Pages\u002FPosts with a link.\u003C\u002Fp>\n\u003Cp>Send visitors in different countries to different destinations. Useful for affiliate marketers who want to promote country-specific offers. your-domain.com\u002F4-hour-work-week can send German visitors to Amazon.de and US visitors to Amazon.com.\u003C\u002Fp>\n\u003Cp>Automatically match existing URLs on your site in your existing Pages\u002FPosts. If you have links to whatever.com you can turn them all into links to your-domain.com\u002Fwhatever.\u003C\u002Fp>\n\u003Cp>Support for sub IDs.\u003C\u002Fp>\n\u003Cp>Support for a prefix so you can have your-domain.com\u002Fprefix\u002Fyour-link instead of your-domain.com\u002Fyour-link\u003C\u002Fp>\n","WP Dynamic Links makes it simple to shorten your URLs, track your links, split test, and geo-target.",60,9892,94,9,"2015-02-26T10:39:00.000Z","4.1.42","3.8","",[20,21,22,23,24],"affiliate","cloak","cloaker","link","pretty","http:\u002F\u002Fwww.wpdynamiclinks.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-dynamic-links.1.0.1.zip",63,1,"2025-08-12 00:00:00","2026-04-16T10:56:18.058Z","no_bundle",[33],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":38,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":29,"updated_date":44,"references":45,"days_to_patch":38,"patch_diff_files":47,"patch_trac_url":38,"research_status":38,"research_verified":48,"research_rounds_completed":49,"research_plan":38,"research_summary":38,"research_vulnerable_code":38,"research_fix_diff":38,"research_exploit_outline":38,"research_model_used":38,"research_started_at":38,"research_completed_at":38,"research_error":38,"poc_status":38,"poc_video_id":38,"poc_summary":38,"poc_steps":38,"poc_tested_at":38,"poc_wp_version":38,"poc_php_version":38,"poc_playwright_script":38,"poc_exploit_code":38,"poc_has_trace":48,"poc_model_used":38,"poc_verification_depth":38},"CVE-2025-49038","wp-dynamic-links-reflected-cross-site-scripting","WP Dynamic Links \u003C= 1.0.1 - Reflected Cross-Site Scripting","The WP Dynamic Links plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",null,"\u003C=1.0.1","medium",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-08-19 13:48:53",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F3dffd377-22e5-4fa3-879a-4924d01fd32d?source=api-prod",[],false,0,{"slug":51,"display_name":7,"profile_url":8,"plugin_count":52,"total_installs":53,"avg_security_score":54,"avg_patch_time_days":55,"trust_score":56,"computed_at":57},"soflyy",4,124060,87,285,70,"2026-05-19T17:10:41.845Z",[59,84,105,120,133],{"slug":60,"name":61,"version":62,"author":63,"author_profile":64,"description":65,"short_description":66,"active_installs":67,"downloaded":68,"rating":69,"num_ratings":70,"last_updated":71,"tested_up_to":72,"requires_at_least":73,"requires_php":18,"tags":74,"homepage":18,"download_link":80,"security_score":81,"vuln_count":82,"unpatched_count":49,"last_vuln_date":83,"fetched_at":30},"affiliate-links","Affiliate Links – Link Cloaking and Management","3.2.0","wecantrack","https:\u002F\u002Fprofiles.wordpress.org\u002Fwecantrack\u002F","\u003Cp>Create any redirect links to any website from your WordPress Admin. Perfect for the affiliate links masking.\u003C\u002Fp>\n\u003Ch3>Affiliate Links 🚀\u003C\u002Fh3>\n\u003Cp>Affiliate Links is a powerful WordPress plugin acquired by wecantrack (Q4 2024), designed to help you create, cloak, and manage both internal and external links effortlessly. Perfect for affiliate\u003Cbr \u002F>\nmarketers, this plugin allows you to generate clean, user-friendly links like ‘mysite.com\u002Fgo\u002Flink’, while also boosting SEO, protecting your earnings, and increasing revenue. With Affiliate Links, seamless link management and optimization are just a few clicks away.\u003Cbr \u002F>\nBy utilising the Affiliate Links plugin, your clickouts will automatically be tracked on server-side by our standard wecantrack WP plugin. This will ensure the highest attribution coverage possible, since server-side events cannot get blocked by your website visitors.\u003C\u002Fp>\n\u003Ch4>Why You Need Affiliate Links Plugin:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>🔍 Boost SEO: Cloak affiliate URLs to appear more trustworthy.\u003C\u002Fli>\n\u003Cli>💼 Protect Earnings: Conceal sensitive information from competitors.\u003C\u002Fli>\n\u003Cli>📈 Increase Revenue: Achieve higher click-through rates.\u003C\u002Fli>\n\u003Cli>⏰ Save Time: Manage links effortlessly with an intuitive interface.\u003C\u002Fli>\n\u003Cli>✅ Ad Network Friendly: Accepted by ad networks when the root domain is used.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Key Features ✔\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>📊 Link Click Stats: Track each click with detailed insights, including browser type, language,\u003Cbr \u002F>\nand more.\u003C\u002Fli>\n\u003Cli>🔄 Conditional Redirects: Personalise redirects based on visitor behavior, such as language\u003Cbr \u002F>\nor platform.\u003C\u002Fli>\n\u003Cli>🔀 301\u002F302\u002F307 HTTP Redirects: Choose from multiple redirect options to fit your needs.\u003C\u002Fli>\n\u003Cli>👀 Nofollow & Noindex: Control link visibility with nofollow and noindex options.\u003C\u002Fli>\n\u003Cli>🗂 Link Categories & Slugs: Organise links into categories and include category slugs in\u003Cbr \u002F>\nURLs if desired.\u003C\u002Fli>\n\u003Cli>⚙️ HTML & Shortcode Generator: Easily embed links using the built-in generator.\u003C\u002Fli>\n\u003Cli>🛠 Widgets: Display recent and popular affiliate links with customisable categories and\u003Cbr \u002F>\ncounts.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Pro Features 💪\u003C\u002Fh3>\n\u003Cp>Elevate your affiliate marketing with advanced analytics and ad network integrations:\u003C\u002Fp>\n\u003Ch3>Analytics Platform Integrations:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>🌐 \u003Ca href=\"https:\u002F\u002Fwecantrack.com\u002Faffiliate-sales-in-google-analytics\u002F?utm_source=wordpress&utm_medium=links-plugin&utm_campaign=description\" rel=\"nofollow ugc\">Google Analytics Integration\u003C\u002Fa>: Track affiliate conversions as purchase conversions within\u003Cbr \u002F>\nGoogle Analytics, gaining transparency on the performance of any available dimension.\u003C\u002Fli>\n\u003Cli>📊 \u003Ca href=\"https:\u002F\u002Fwecantrack.com\u002Faffiliate-sales-in-looker-studio\u002F?utm_source=wordpress&utm_medium=links-plugin&utm_campaign=description\" rel=\"nofollow ugc\">Google Looker Studio Integration\u003C\u002Fa>: Set up custom dashboards and reports with all your\u003Cbr \u002F>\ntraffic and affiliate conversion data in one dataset, keeping you updated at all times.\u003C\u002Fli>\n\u003Cli>💾 \u003Ca href=\"https:\u002F\u002Fwecantrack.com\u002Fzapier-affiliate-conversion-integration\u002F?utm_source=wordpress&utm_medium=links-plugin&utm_campaign=description\" rel=\"nofollow ugc\">Zapier Integration\u003C\u002Fa>: Integrate Affiliate Conversions Across 6000 Platforms With Zapier\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Ad Network Integrations:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>📈 \u003Ca href=\"https:\u002F\u002Fwecantrack.com\u002Faffiliate-sales-in-google-ads\u002F?utm_source=wordpress&utm_medium=links-plugin&utm_campaign=description\" rel=\"nofollow ugc\">Google Ads Integration\u003C\u002Fa>: Optimise your Google Ads campaigns by leveraging your\u003Cbr \u002F>\nconversion data, automating bid adjustments, and setting up relevant audiences to boost\u003Cbr \u002F>\nROAS.\u003C\u002Fli>\n\u003Cli>🔍 \u003Ca href=\"https:\u002F\u002Fwecantrack.com\u002Fmicrosoft-ads-affiliate-conversion-tracking\u002F?utm_source=wordpress&utm_medium=links-plugin&utm_campaign=description\" rel=\"nofollow ugc\">Microsoft Ads Integration\u003C\u002Fa>: Integrate your affiliate conversion data with Microsoft Ads to\u003Cbr \u002F>\noptimise campaigns and audiences, enhancing your return on ad spend.\u003C\u002Fli>\n\u003Cli>🎯 \u003Ca href=\"https:\u002F\u002Fwecantrack.com\u002Faffiliate-conversion-tracking-in-facebook\u002F?utm_source=wordpress&utm_medium=links-plugin&utm_campaign=description\" rel=\"nofollow ugc\">Facebook Ads Integration\u003C\u002Fa>: Feed conversion data to the Facebook Pixel to make your\u003Cbr \u002F>\ncampaigns profitable, building relevant audiences and utilizing Facebook’s AI to target the right\u003Cbr \u002F>\nusers.\u003C\u002Fli>\n\u003Cli>🎵 \u003Ca href=\"https:\u002F\u002Fwecantrack.com\u002Faffiliate-conversion-tracking-tiktok-ads\u002F?utm_source=wordpress&utm_medium=links-plugin&utm_campaign=description\" rel=\"nofollow ugc\">TikTok Ads Integration\u003C\u002Fa>: Optimise your TikTok campaigns based on ROAS or CPAs by\u003Cbr \u002F>\nintegrating all your affiliate sale and lead conversion data.\u003C\u002Fli>\n\u003Cli>📌 \u003Ca href=\"https:\u002F\u002Fwecantrack.com\u002Faffiliate-sales-tracking-in-pinterest-ads\u002F?utm_source=wordpress&utm_medium=links-plugin&utm_campaign=description\" rel=\"nofollow ugc\">Pinterest Ads Integration\u003C\u002Fa>: Use your affiliate conversion data to optimise Pinterest Ads\u003Cbr \u002F>\ncampaigns, fully utilizing their machine learning capabilities.\u003C\u002Fli>\n\u003Cli>🛡 \u003Ca href=\"https:\u002F\u002Fwecantrack.com\u002Faffiliate-conversion-tracking-in-reddit-ads\u002F?utm_source=wordpress&utm_medium=links-plugin&utm_campaign=description\" rel=\"nofollow ugc\">Reddit Ads Integration\u003C\u002Fa>: Analyse and optimise your Reddit Ads campaigns by integrating\u003Cbr \u002F>\nyour affiliate conversion data to boost ad revenue.\u003C\u002Fli>\n\u003Cli>👻 \u003Ca href=\"https:\u002F\u002Fwecantrack.com\u002Faffiliate-sales-tracking-in-snapchat-ads\u002F?utm_source=wordpress&utm_medium=links-plugin&utm_campaign=description\" rel=\"nofollow ugc\">Snapchat Ads Integration\u003C\u002Fa>: Track and integrate your affiliate conversion data in Snapchat\u003Cbr \u002F>\nAds to automatically optimise your campaigns based on purchase events.\u003C\u002Fli>\n\u003Cli>🐦 \u003Ca href=\"https:\u002F\u002Fwecantrack.com\u002Faffiliate-conversion-tracking-in-twitter-ads\u002F?utm_source=wordpress&utm_medium=links-plugin&utm_campaign=description\" rel=\"nofollow ugc\">X Ads Integration\u003C\u002Fa>: Optimise your native ad campaigns with X Ads by integrating your\u003Cbr \u002F>\naffiliate sale and lead conversion data.\u003C\u002Fli>\n\u003Cli>🌍 \u003Ca href=\"https:\u002F\u002Fwecantrack.com\u002Faffiliate-sales-tracking-in-outbrain\u002F?utm_source=wordpress&utm_medium=links-plugin&utm_campaign=description\" rel=\"nofollow ugc\">Outbrain Integration\u003C\u002Fa>: Properly analyse and optimise your Outbrain native ad campaigns\u003Cbr \u002F>\nwith integrated affiliate conversion data.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Performance Reports:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>📈 Advertiser Performance: Break down conversion performance per advertiser, comparing\u003Cbr \u002F>\ncurrent results with previous time ranges.\u003C\u002Fli>\n\u003Cli>🌐 Network Performance: Get a quick overview of your affiliate network accounts’ total\u003Cbr \u002F>\nperformance through our network report.\u003C\u002Fli>\n\u003Cli>📝 Content Performance: Discover which landing and click pages generate the most clicks,\u003Cbr \u002F>\nconversions, and commissions, allowing you to optimise content based on real data.\u003C\u002Fli>\n\u003Cli>🚦 Traffic Source Performance: Analyse the performance of your traffic sources, helping you\u003Cbr \u002F>\nemploy an omnichannel approach to avoid over-reliance on one source.\u003C\u002Fli>\n\u003Cli>📊 Campaign Performance: Accurately analyse your ad campaigns, ensuring your budget\u003Cbr \u002F>\nallocation maximises profits—no more guesswork!\u003C\u002Fli>\n\u003Cli>📝 Transaction Report: Access detailed transaction information, including subid parameters,\u003Cbr \u002F>\nstatus, and product details for certain partners.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Get Started Today! 🌟\u003C\u002Fp>\n\u003Cp>With Affiliate Links, managing and optimising your affiliate links has never been easier. Whether\u003Cbr \u002F>\nyou want to clean up messy URLs, protect your earnings, or boost your SEO, this plugin offers a\u003Cbr \u002F>\ncomprehensive solution for all your link management needs.\u003C\u002Fp>\n","Create any redirect links to any website from your WordPress Admin. Perfect for the affiliate links masking.",3000,78632,100,10,"2025-06-28T00:30:00.000Z","6.8.5","4.0",[75,76,77,78,79],"affiliate-link-manager","affiliate-link-masking","cloaking","link-redirects","pretty-links","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faffiliate-links.3.2.0.zip",97,3,"2025-04-10 00:00:00",{"slug":85,"name":86,"version":87,"author":88,"author_profile":89,"description":90,"short_description":91,"active_installs":70,"downloaded":92,"rating":49,"num_ratings":49,"last_updated":93,"tested_up_to":94,"requires_at_least":95,"requires_php":96,"tags":97,"homepage":18,"download_link":102,"security_score":103,"vuln_count":49,"unpatched_count":49,"last_vuln_date":38,"fetched_at":104},"my-affiliate-link","My Affiliate Link","1.0.7","ludwigmedia","https:\u002F\u002Fprofiles.wordpress.org\u002Fludwigmedia\u002F","\u003Cp>A plugin that creates shortcodes for use with any affiliate cloaking service or plugin. Formats affiliate links so they aren’t indexed by the search engines, ensures referral data is passed, and easier to style via CSS.\u003C\u002Fp>\n\u003Cp>My Affiliate Link is NOT a link management system. It works with your existing tool to better format your affiliate links.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Flarryludwig.com\u002Fplugins\u002Fmy-affiliate-link\u002F?utm_source=plugin&utm_medium=organic&utm_campaign=page\" rel=\"nofollow ugc\">Read Full Documentation\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Works With\u003C\u002Fh3>\n\u003Cp>Works with all of the major link cloaking services:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Thirsty Affiliates (Free and Pro versions)\u003C\u002Fli>\n\u003Cli>Pretty Links (Free and Pro versions)\u003C\u002Fli>\n\u003Cli>ClickMeter\u003C\u002Fli>\n\u003C\u002Ful>\n","A plugin that creates shortcodes for use with any affiliate cloaking service or plugin. Formats affiliate links so they aren't indexed by the sea &hellip;",1610,"2020-07-21T22:52:00.000Z","5.4.19","4.6","5.2.4",[20,98,99,100,101],"affiliate-link-management","clickmeter","link-cloaker","link-cloaking","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmy-affiliate-link.zip",85,"2026-04-06T09:54:40.288Z",{"slug":106,"name":107,"version":108,"author":109,"author_profile":110,"description":111,"short_description":112,"active_installs":70,"downloaded":113,"rating":49,"num_ratings":49,"last_updated":114,"tested_up_to":115,"requires_at_least":73,"requires_php":18,"tags":116,"homepage":118,"download_link":119,"security_score":103,"vuln_count":49,"unpatched_count":49,"last_vuln_date":38,"fetched_at":30},"premium-link-cloaker-lite","Premium Link Cloaker Lite","1.0","Yudhistira Mauris","https:\u002F\u002Fprofiles.wordpress.org\u002Fmaurisrx\u002F","\u003Cp>Cloak your affiliate link with Premium Link Cloaker (PLC) lite. The lite version comes with redirect cloaking type. If you need mask cloaking type, it’s available in the pro version.\u003C\u002Fp>\n\u003Cp>PLC lite also comes with click stats and link category features that will help you manage your links.\u003C\u002Fp>\n\u003Ch4>Pro version is available!\u003C\u002Fh4>\n\u003Cp>Here are some features in pro version:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Mask Cloaking Type: hide your affiliate links and increase your affiliate commission.\u003C\u002Fli>\n\u003Cli>Automatic Keyword Linking: turn keywords in your content into clickable affiliate link automatically.\u003C\u002Fli>\n\u003Cli>Click Stats Graphic: view the accurate graph of your link stats.\u003C\u002Fli>\n\u003Cli>Link Sharing Buttons: share your affiliate link to multiple social networks.\u003C\u002Fli>\n\u003Cli>One-time low price payment.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fpremiumlinkcloaker.com\u002F\" rel=\"nofollow ugc\">Click here\u003C\u002Fa> to get PRO version at low price!\u003C\u002Fp>\n","Awesome yet easy-to-use link cloaker, designed for affiliate marketers. 100% newbie friendly.",1956,"2016-10-23T06:41:00.000Z","4.6.30",[20,100,117],"marketing","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpremium-link-cloaker-lite\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpremium-link-cloaker-lite.1.0.zip",{"slug":121,"name":122,"version":108,"author":123,"author_profile":124,"description":125,"short_description":126,"active_installs":70,"downloaded":113,"rating":11,"num_ratings":127,"last_updated":128,"tested_up_to":129,"requires_at_least":73,"requires_php":18,"tags":130,"homepage":131,"download_link":132,"security_score":103,"vuln_count":49,"unpatched_count":49,"last_vuln_date":38,"fetched_at":104},"wp-affiliate-link","WP affiliate link","aijazsiddique","https:\u002F\u002Fprofiles.wordpress.org\u002Faijazsiddique\u002F","\u003Cp>this plugin will hide your affiliate link.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Video Demo\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>Arbitrary section 1\u003C\u002Fh3>\n","this plugin will hide your affiliate link.",2,"2014-10-26T06:55:00.000Z","4.0.38",[20,21,22,77,23],"http:\u002F\u002Fwww.wp-developer.net\u002Faffiliate-link-cloaker","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-affiliate-link.zip",{"slug":134,"name":135,"version":136,"author":137,"author_profile":138,"description":139,"short_description":140,"active_installs":49,"downloaded":141,"rating":49,"num_ratings":49,"last_updated":142,"tested_up_to":143,"requires_at_least":18,"requires_php":144,"tags":145,"homepage":147,"download_link":148,"security_score":103,"vuln_count":49,"unpatched_count":49,"last_vuln_date":38,"fetched_at":30},"wp-link-manager","WP Link Manager","0.1","ihamed","https:\u002F\u002Fprofiles.wordpress.org\u002Fihamed\u002F","\u003Cp>WordPress plugin to create pretty and short link based on your site URL for external (or internal) ugly links\u003Cbr \u002F>\n* Simple to use\u003Cbr \u002F>\n* Button for TinyMce editor to add from available shortlinks\u003Cbr \u002F>\n* Shortcode to show links with pagination , search and filter results\u003C\u002Fp>\n","Wordpress plugin to create pretty and short link based on your site URL for external (or internal) ugly links",1189,"2019-10-30T06:29:00.000Z","5.2.24","5.2",[20,98,23,100,146],"link-redirect","https:\u002F\u002Fgithub.com\u002Fihamedm\u002Fwordpress-link-manager","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-link-manager.zip",{"attackSurface":150,"codeSignals":182,"taintFlows":416,"riskAssessment":470,"analyzedAt":484},{"hooks":151,"ajaxHandlers":178,"restRoutes":179,"shortcodes":180,"cronEvents":181,"entryPointCount":49,"unprotectedCount":49},[152,158,161,165,168,174],{"type":153,"name":154,"callback":155,"file":156,"line":157},"filter","mce_external_plugins","anonymous","actions\\admin_init.php",6,{"type":153,"name":159,"callback":155,"file":156,"line":160},"mce_buttons",7,{"type":153,"name":162,"callback":155,"file":163,"line":164},"admin_body_class","controllers\\controller\\admin.php",81,{"type":153,"name":162,"callback":155,"file":166,"line":167},"controllers\\controller\\tinymce.php",14,{"type":169,"name":170,"callback":171,"file":172,"line":173},"action","admin_init","__adminInit","plugin.php",181,{"type":153,"name":175,"callback":176,"file":172,"line":177},"current_screen","getAdminCurrentScreen",256,[],[],[],[],{"dangerousFunctions":183,"sqlUsage":211,"outputEscaping":223,"fileOperations":14,"externalRequests":49,"nonceChecks":160,"capabilityChecks":157,"bundledLibraries":412},[184,187,189,193,196,198,199,204,208],{"fn":185,"file":156,"line":157,"context":186},"create_function","add_filter(\"mce_external_plugins\", create_function('$plugins', '$plugins[\"clink\"] = PMLC_Plugin::ROO",{"fn":185,"file":156,"line":160,"context":188},"add_filter('mce_buttons', create_function('$buttons', 'array_push($buttons, \"separator\", \"clink\"); r",{"fn":185,"file":190,"line":191,"context":192},"classes\\config.php",44,"$sandbox = create_function('', \"require '$filePath'; if(array_keys(get_defined_vars()) != array('con",{"fn":185,"file":163,"line":194,"context":195},32,"$this->input->addFilter(create_function('$str', 'return \"http:\u002F\u002F\" == $str ? \"\" : $str;'));",{"fn":185,"file":163,"line":164,"context":197},"add_filter('admin_body_class', create_function('', 'return \"' . PMLC_Plugin::PREFIX . 'plugin\";'));",{"fn":185,"file":166,"line":167,"context":197},{"fn":200,"file":201,"line":202,"context":203},"unserialize","models\\model\\list.php",88,"$result[$i][$k] = unserialize($v);",{"fn":200,"file":205,"line":206,"context":207},"models\\model\\record.php",33,"$result[$k] = unserialize($v);",{"fn":185,"file":172,"line":209,"context":210},347,"set_exception_handler(create_function('$e', 'trigger_error($e->getMessage(), E_USER_ERROR);'));",{"prepared":212,"raw":82,"locations":213},13,[214,217,221],{"file":205,"line":215,"context":216},99,"$wpdb->query() with variable interpolation",{"file":218,"line":219,"context":220},"models\\model.php",80,"$wpdb->get_results() with variable interpolation",{"file":218,"line":222,"context":216},192,{"escaped":224,"rawEcho":225,"locations":226},103,105,[227,231,232,234,237,239,242,245,247,250,251,253,254,256,257,259,260,261,263,265,268,269,271,273,276,278,279,281,282,284,286,287,289,290,292,294,295,297,299,300,302,303,305,307,309,310,311,312,313,315,317,319,320,322,324,326,328,330,332,334,336,338,340,342,343,345,348,350,352,354,356,357,359,361,363,365,366,367,368,369,371,373,375,377,379,381,383,385,387,389,391,393,394,396,398,399,400,402,403,405,406,407,408,409,410],{"file":228,"line":229,"context":230},"actions\\admin_notices.php",26,"raw output",{"file":228,"line":229,"context":230},{"file":233,"line":14,"context":230},"actions\\wp_head.php",{"file":235,"line":236,"context":230},"controllers\\admin\\edit.php",596,{"file":235,"line":238,"context":230},600,{"file":240,"line":241,"context":230},"helpers\\wp_redirect_or_javascript.php",12,{"file":243,"line":244,"context":230},"models\\destination\\record.php",46,{"file":243,"line":246,"context":230},48,{"file":248,"line":249,"context":230},"models\\rule\\record.php",34,{"file":248,"line":249,"context":230},{"file":248,"line":252,"context":230},36,{"file":248,"line":252,"context":230},{"file":248,"line":255,"context":230},40,{"file":248,"line":255,"context":230},{"file":248,"line":258,"context":230},42,{"file":248,"line":258,"context":230},{"file":248,"line":258,"context":230},{"file":248,"line":262,"context":230},45,{"file":172,"line":264,"context":230},224,{"file":266,"line":267,"context":230},"shortcodes\\clink.php",30,{"file":266,"line":252,"context":230},{"file":266,"line":270,"context":230},38,{"file":272,"line":270,"context":230},"views\\admin\\edit\\destination.php",{"file":274,"line":275,"context":230},"views\\admin\\edit\\index.php",8,{"file":274,"line":277,"context":230},16,{"file":274,"line":277,"context":230},{"file":274,"line":280,"context":230},77,{"file":274,"line":280,"context":230},{"file":274,"line":283,"context":230},82,{"file":274,"line":285,"context":230},95,{"file":274,"line":285,"context":230},{"file":274,"line":288,"context":230},111,{"file":274,"line":288,"context":230},{"file":274,"line":291,"context":230},134,{"file":274,"line":293,"context":230},161,{"file":274,"line":293,"context":230},{"file":274,"line":296,"context":230},169,{"file":274,"line":298,"context":230},182,{"file":274,"line":298,"context":230},{"file":274,"line":301,"context":230},201,{"file":274,"line":301,"context":230},{"file":274,"line":304,"context":230},229,{"file":274,"line":306,"context":230},243,{"file":308,"line":167,"context":230},"views\\admin\\links\\index.php",{"file":308,"line":194,"context":230},{"file":308,"line":249,"context":230},{"file":308,"line":255,"context":230},{"file":308,"line":258,"context":230},{"file":308,"line":314,"context":230},49,{"file":308,"line":316,"context":230},51,{"file":308,"line":318,"context":230},58,{"file":308,"line":11,"context":230},{"file":308,"line":321,"context":230},67,{"file":308,"line":323,"context":230},69,{"file":308,"line":325,"context":230},136,{"file":308,"line":327,"context":230},145,{"file":308,"line":329,"context":230},151,{"file":308,"line":331,"context":230},157,{"file":308,"line":333,"context":230},159,{"file":308,"line":335,"context":230},167,{"file":308,"line":337,"context":230},185,{"file":308,"line":339,"context":230},193,{"file":308,"line":341,"context":230},216,{"file":308,"line":304,"context":230},{"file":344,"line":160,"context":230},"views\\admin\\settings\\index.php",{"file":346,"line":347,"context":230},"views\\admin\\statistics\\index.php",53,{"file":346,"line":349,"context":230},59,{"file":346,"line":351,"context":230},65,{"file":346,"line":353,"context":230},71,{"file":346,"line":355,"context":230},78,{"file":346,"line":54,"context":230},{"file":346,"line":358,"context":230},101,{"file":346,"line":360,"context":230},118,{"file":362,"line":212,"context":230},"views\\admin\\statistics\\stats.php",{"file":362,"line":364,"context":230},18,{"file":362,"line":270,"context":230},{"file":362,"line":255,"context":230},{"file":362,"line":244,"context":230},{"file":362,"line":246,"context":230},{"file":362,"line":370,"context":230},55,{"file":362,"line":372,"context":230},57,{"file":362,"line":374,"context":230},64,{"file":362,"line":376,"context":230},66,{"file":362,"line":378,"context":230},72,{"file":362,"line":380,"context":230},114,{"file":362,"line":382,"context":230},115,{"file":362,"line":384,"context":230},116,{"file":362,"line":386,"context":230},117,{"file":362,"line":388,"context":230},141,{"file":362,"line":390,"context":230},147,{"file":362,"line":392,"context":230},153,{"file":362,"line":333,"context":230},{"file":362,"line":395,"context":230},165,{"file":362,"line":397,"context":230},170,{"file":362,"line":173,"context":230},{"file":362,"line":301,"context":230},{"file":401,"line":14,"context":230},"views\\admin\\tinymce\\index.php",{"file":401,"line":70,"context":230},{"file":401,"line":404,"context":230},11,{"file":401,"line":241,"context":230},{"file":401,"line":249,"context":230},{"file":401,"line":249,"context":230},{"file":401,"line":244,"context":230},{"file":401,"line":244,"context":230},{"file":411,"line":127,"context":230},"views\\controller\\error.php",[413],{"name":414,"version":38,"knownCves":415},"TinyMCE",[],[417,439,450,462],{"entryPoint":418,"graph":419,"unsanitizedCount":127,"severity":40},"force_ssl (controllers\\controller.php:43)",{"nodes":420,"edges":436},[421,426,431,434],{"id":422,"type":423,"label":424,"file":425,"line":244},"n0","source","$_SERVER['REQUEST_URI']","controllers\\controller.php",{"id":427,"type":428,"label":429,"file":425,"line":244,"wp_function":430},"n1","sink","wp_redirect() [Open Redirect]","wp_redirect",{"id":432,"type":423,"label":433,"file":425,"line":314},"n2","$_SERVER['HTTP_HOST']",{"id":435,"type":428,"label":429,"file":425,"line":314,"wp_function":430},"n3",[437,438],{"from":422,"to":427,"sanitized":48},{"from":432,"to":435,"sanitized":48},{"entryPoint":440,"graph":441,"unsanitizedCount":127,"severity":40},"\u003Ccontroller> (controllers\\controller.php:0)",{"nodes":442,"edges":447},[443,444,445,446],{"id":422,"type":423,"label":424,"file":425,"line":244},{"id":427,"type":428,"label":429,"file":425,"line":244,"wp_function":430},{"id":432,"type":423,"label":433,"file":425,"line":314},{"id":435,"type":428,"label":429,"file":425,"line":314,"wp_function":430},[448,449],{"from":422,"to":427,"sanitized":48},{"from":432,"to":435,"sanitized":48},{"entryPoint":451,"graph":452,"unsanitizedCount":49,"severity":461},"index (controllers\\admin\\edit.php:12)",{"nodes":453,"edges":458},[454,457],{"id":422,"type":423,"label":455,"file":235,"line":456},"$_GET (x2)",426,{"id":427,"type":428,"label":429,"file":235,"line":456,"wp_function":430},[459],{"from":422,"to":427,"sanitized":460},true,"low",{"entryPoint":463,"graph":464,"unsanitizedCount":49,"severity":461},"\u003Cedit> (controllers\\admin\\edit.php:0)",{"nodes":465,"edges":468},[466,467],{"id":422,"type":423,"label":455,"file":235,"line":456},{"id":427,"type":428,"label":429,"file":235,"line":456,"wp_function":430},[469],{"from":422,"to":427,"sanitized":460},{"summary":471,"deductions":472},"The \"wp-dynamic-links\" plugin v1.0.1 exhibits a mixed security posture. While it boasts a zero attack surface in terms of directly exposed entry points like AJAX, REST API, shortcodes, and cron events, this is somewhat misleading given the identified code signals. The presence of dangerous functions like `create_function` and `unserialize` raises immediate concerns about potential code execution vulnerabilities if these functions are invoked with untrusted input.  Furthermore, the fact that only 50% of output is properly escaped suggests a significant risk of Cross-Site Scripting (XSS) vulnerabilities, especially in conjunction with the taint analysis revealing two flows with unsanitized paths.  The plugin's vulnerability history, marked by a medium severity CVE for XSS that is currently unpatched and discovered in the future, strongly indicates a pattern of insecure coding practices regarding input sanitization and output encoding. This unpatched vulnerability is a critical immediate risk. While the use of prepared statements for SQL queries is a positive indicator, it doesn't outweigh the clear and present dangers highlighted by the dangerous functions, poor output escaping, and the unpatched XSS vulnerability. The plugin should not be considered secure in its current state.",[473,476,478,480,482],{"reason":474,"points":475},"Unpatched CVE (Medium severity, XSS)",15,{"reason":477,"points":70},"Dangerous functions: create_function, unserialize",{"reason":479,"points":275},"Low output escaping percentage (50%)",{"reason":481,"points":70},"Taint flows with unsanitized paths (2)",{"reason":483,"points":82},"File operations present","2026-03-16T21:37:46.021Z",{"wat":486,"direct":495},{"assetPaths":487,"generatorPatterns":490,"scriptPaths":491,"versionParams":492},[488,489],"\u002Fwp-content\u002Fplugins\u002Fwp-dynamic-links\u002Fassets\u002Fcss\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fwp-dynamic-links\u002Fassets\u002Fjs\u002Fscript.js",[],[489],[493,494],"wp-dynamic-links\u002Fassets\u002Fcss\u002Fstyle.css?ver=","wp-dynamic-links\u002Fassets\u002Fjs\u002Fscript.js?ver=",{"cssClasses":496,"htmlComments":497,"htmlAttributes":498,"restEndpoints":499,"jsGlobals":500,"shortcodeOutput":502},[],[],[],[],[501],"PMLC_ROOT_URL",[],{"error":460,"url":504,"statusCode":505,"statusMessage":506,"message":506},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fwp-dynamic-links\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":28,"versions":508},[509],{"version":6,"download_url":26,"svn_tag_url":510,"released_at":38,"has_diff":48,"diff_files_changed":511,"diff_lines":38,"trac_diff_url":38,"vulnerabilities":512,"is_current":460},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fwp-dynamic-links\u002Ftags\u002F1.0.1\u002F",[],[513],{"id":34,"url_slug":35,"title":36,"severity":40,"cvss_score":41,"vuln_type":43,"patched_in_version":38}]