[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpzYDkuB69jLhi_4_8RKZJzWZ6Cz2J33Upr68HhneXxA":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":35,"analysis":145,"fingerprints":984},"wp-essentials","WP Essentials","3.0","Craig F.","https:\u002F\u002Fprofiles.wordpress.org\u002Fiprogressltd\u002F","\u003Cp>All-in-one bundle of essential plugins and functions for all WordPress websites.\u003C\u002Fp>\n\u003Ch4>Features include:\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Twitter Feed\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Twitter feed shortcode and widget available.\u003C\u002Fli>\n\u003Cli>WP Essentials uses the new Twitter 1.1 API.\u003C\u002Fli>\n\u003Cli>Filter your Twitter feed by hashtags.\u003C\u002Fli>\n\u003Cli>Cache system prevents API call limit.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Flickr\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Flickr feed shortcode and widget available.\u003C\u002Fli>\n\u003Cli>Cache system prevents API call limit.\u003C\u002Fli>\n\u003Cli>Comes with multiple options, including a custom image count and a ‘random image’ feature.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Google Analytics\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Allows you to add multiple tracking codes to all pages of your website.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Google Maps\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easily include multiple Google Maps throughout your site either as a shortcode or a sidebar widget.\u003C\u002Fli>\n\u003Cli>Includes options for setting the address, zoom level, custom marker, etc.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>The ‘Email’ Button\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>The WYSIWYG editor comes with an email button for easily adding email links without any HTML knowledge.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Date Shortcode\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Includes a simple shortcode for displaying today’s date.\u003C\u002Fli>\n\u003Cli>Customise the date format to whatever you want.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Video Shortcode\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Includes a simple shortcode for embedding any YouTube, Vimeo, or Facebook videos anywhere on your website.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Get Shortcode\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Utulise URL query strings with a simple shortcode.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>The ‘Cleanup’ function:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Sets search engine friendly permalink structure (if one hasn’t already been set)\u003C\u002Fli>\n\u003Cli>Removes useless widgets from the dashboard\u003C\u002Fli>\n\u003Cli>Removes superfluous meta tags from your theme head (including the WordPress version number)\u003C\u002Fli>\n\u003Cli>Removes detailed login errors (for extra security)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>The ‘User Roles’ function:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Creates a new User Role and lets you customise their access rights.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Debug Mode\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>For developers, enable the debug mode to include detailed PHP errors when developing your theme.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>WordPress Error Reporting\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>WP Essentials can alert you to several potential problems that are important for when a site goes live. (Ensuring robots aren’t blocked, etc.)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Media Image Quality\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Change the quality of uploaded images to your website.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Custom Image Sizes\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Add your own custom thumbnail sizes for your images.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Advanced PHP Functions\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Custom Excerpt function lets you override the default WordPress excerpt with additional options.\u003C\u002Fli>\n\u003Cli>A Get Image Source function lets you get the image URL for any image uploaded to WordPress at any custom thumbnail size.\u003C\u002Fli>\n\u003Cli>An automatic link function lets you hyperlink any web or email addresses that may otherwise be plaintext.\u003C\u002Fli>\n\u003Cli>A Relative Time function lets you display dates and times in a relative manner (i.e. ‘5 minutes ago’).\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>And more…\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>We’re always open to new ideas and suggestions for adding new features to the plugin.\u003C\u002Fp>\n\u003Ch4>WP Essentails Premium\u003C\u002Fh4>\n\u003Cp>A Premium version of this plugin is also available.\u003C\u002Fp>\n\u003Cp>Features include:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Twitter Feed\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Supports multiple Twitter accounts.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Instagram Feed\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Include an Instagram feed either as a shortcode or a sidebar widget anywhere throughout your website.\u003C\u002Fli>\n\u003Cli>Includes a caching system to protect you from reaching your API call limit.\u003C\u002Fli>\n\u003Cli>Comes with multiple options, including a custom image count and a ‘random image’ feature.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Social Stream\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Combine Twitter, Instagram and Flickr into one social stream feed.\u003C\u002Fli>\n\u003Cli>Supports Isotope and infinite scrolling.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Login Notification\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Users will be automatically emailed any time their account is used to log in.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Holding Page\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Display a holding page with a custom title and message.\u003C\u002Fli>\n\u003Cli>Password protect your settings.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Unlimited User Roles:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>No restriction on the number of User Roles you can create.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>The ‘Database’ functions:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Allows you to email yourself a database backup at any time.\u003C\u002Fli>\n\u003Cli>Includes an automatic weekly backup function that emails you with full database backups.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Styling Options\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>WP Essentials includes functions to render LESS or SASS files directly on the server before outputting the CSS to the browser.\u003C\u002Fli>\n\u003Cli>Choose between CSS, LESS or SASS.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Get Shortcode\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Utulise URL query strings with a simple shortcode.\u003C\u002Fli>\n\u003C\u002Ful>\n","All-in-one bundle of essential plugins and functions for all WordPress websites.",30,11316,80,1,"2016-10-20T15:25:00.000Z","4.6.30","3.4","",[20,21,22,23,4],"backups","database-backups","iprogress","security","http:\u002F\u002Fwww.wp-essentials.net","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-essentials.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":32,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":11,"trust_score":33,"computed_at":34},"iprogressltd",84,"2026-04-04T13:51:22.578Z",[36,61,81,98,122],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":46,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":56,"download_link":57,"security_score":58,"vuln_count":59,"unpatched_count":27,"last_vuln_date":60,"fetched_at":29},"mainwp-child","MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites","6.0.2","mainwp","https:\u002F\u002Fprofiles.wordpress.org\u002Fmainwp\u002F","\u003Cp>\u003Cstrong>The MainWP Child Plugin securely connects the WordPress sites you want to manage to the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmainwp\u002F\" rel=\"ugc\">MainWP Dashboard\u003C\u002Fa>.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The MainWP Child plugin creates a secure connection between your WordPress sites and your self-hosted MainWP Dashboard, enabling you to efficiently manage WP installations from a single, centralized location.\u003C\u002Fp>\n\u003Cp>With MainWP Child and the MainWP Dashboard, you can update themes, plugins, and WordPress core across all connected sites, perform backups and security scans, manage posts, pages, users, and comments in bulk, and integrate with popular plugins like WooCommerce, Yoast SEO, and Wordfence.\u003C\u002Fp>\n\u003Cp>The \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmainwp\u002F\" rel=\"ugc\">MainWP Dashboard\u003C\u002Fa> also offers features for cost tracking and client management, making it an all-in-one solution for agencies and freelancers looking to manage WP sites efficiently. The functionality can be further extended with a growing library of \u003Ca href=\"https:\u002F\u002Fmainwp.com\u002Fmainwp-add-ons\u002F\" rel=\"nofollow ugc\">MainWP Add-ons\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fmainwp.com\u002F\" rel=\"nofollow ugc\">MainWP\u003C\u002Fa> is the ideal solution for freelancers and agencies managing client sites, developers and designers working on multiple projects, marketers and content managers overseeing various websites, and anyone responsible for maintaining multiple WordPress sites.\u003C\u002Fp>\n\u003Ch4>Why Choose MainWP for WordPress Management?\u003C\u002Fh4>\n\u003Cp>MainWP is 100% free and open-source, with no monthly fees, even for unlimited sites.\u003C\u002Fp>\n\u003Cp>As a self-hosted solution, it offers maximum control and privacy. MainWP provides comprehensive site management features and is highly customizable with add-ons and developer hooks.  The MainWP Child plugin even comes with its own privacy policy to guarantee your \u003Ca href=\"https:\u002F\u002Fmainwp.com\u002Fmainwp-plugin-privacy-policy\u002F\" rel=\"nofollow ugc\">privacy while using MainWP\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>All of this makes MainWP the best non-SaaS alternative to ManageWP, InfiniteWP, WPRemote, and WP Umbrella.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cp>MainWP Child, combined with the MainWP Dashboard, offers secure management of unlimited WordPress sites, one-click updates for plugins, themes, and WordPress core, automated backups and security monitoring, bulk management of posts, pages, users, and comments, white-labeling and custom branding options, and \u003Ca href=\"https:\u002F\u002Fmainwp.com\u002Fmainwp-add-ons\u002F\" rel=\"nofollow ugc\">powerful add-ons\u003C\u002Fa> for WooCommerce, Yoast SEO, Wordfence, and more.\u003C\u002Fp>\n\u003Ch4>Expand Your MainWP Dashboard with Add-ons\u003C\u002Fh4>\n\u003Cp>MainWP offers a growing library of add-ons that add advanced functionality to your Dashboard. From client reporting to SEO management, MainWP add-ons provide the tools you need to deliver top-notch service to your clients.\u003C\u002Fp>\n\u003Ch4>Join the MainWP Community\u003C\u002Fh4>\n\u003Cp>MainWP is more than just a plugin; it’s a thriving community of WordPress professionals. Join our \u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fgroups\u002FMainWPUsers\u002F\" rel=\"nofollow ugc\">MainWP Users Facebook Group\u003C\u002Fa> to connect with other users, share advice, and stay updated on the latest features and add-ons.\u003C\u002Fp>\n\u003Ch4>Developer-Friendly\u003C\u002Fh4>\n\u003Cp>MainWP is built with developers in mind. We provide extensive documentation, hooks, and an API to help you create custom extensions and integrations for the MainWP platform.  We have a site at \u003Ca href=\"https:\u002F\u002Fmainwp.dev\" rel=\"nofollow ugc\">MainWP.dev\u003C\u002Fa> dedicated to MainWP developers.\u003C\u002Fp>\n\u003Ch4>Get Started with MainWP Today\u003C\u002Fh4>\n\u003Cp>Take control of your WordPress site management with MainWP and the MainWP Child plugin. With its powerful features, unlimited site connections, and user-friendly interface, MainWP is the smart choice for anyone managing multiple WordPress sites.\u003C\u002Fp>\n\u003Ch4>Learn More About MainWP\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmainwp.com\" rel=\"nofollow ugc\">MainWP Website\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmainwp.com\u002Fkb\u002F\" rel=\"nofollow ugc\">MainWP Documentation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fcommunity.mainwp.com\u002Fc\u002Fsupport\u002Fmainwp-support\u002F\" rel=\"nofollow ugc\">MainWP Support\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmainwp.com\u002Fblog\u002F\" rel=\"nofollow ugc\">MainWP Blog\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmainwp\u002F\" rel=\"nofollow ugc\">MainWP on GitHub\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","MainWP Child establishes a secure link between your WordPress sites and your self-hosted MainWP Dashboard, simplifying site management.",700000,40485018,100,70,"2026-03-10T15:46:00.000Z","6.9.4","6.2","7.4",[20,53,23,54,55],"monitoring","site-management","update","https:\u002F\u002Fmainwp.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmainwp-child.6.0.2.zip",91,7,"2024-12-12 00:00:00",{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":69,"downloaded":70,"rating":46,"num_ratings":71,"last_updated":72,"tested_up_to":49,"requires_at_least":73,"requires_php":51,"tags":74,"homepage":76,"download_link":77,"security_score":78,"vuln_count":79,"unpatched_count":27,"last_vuln_date":80,"fetched_at":29},"modular-connector","Modular DS: Monitor, update, and backup multiple websites","2.7.5","Modular DS","https:\u002F\u002Fprofiles.wordpress.org\u002Fmodulards\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fmodulards.com\u002F\" rel=\"nofollow ugc\">Modular DS\u003C\u002Fa> is an all-in-one platform that makes managing multiple WordPress websites easy and efficient, helping you save time, demonstrate the value of your work, and grow a profitable maintenance business.\u003C\u002Fp>\n\u003Cp>From a single, intuitive dashboard, you can automate the most important maintenance tasks:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Manage and update plugins, themes, and WordPress core\u003C\u002Fstrong> across multiple sites at once.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Monitor uptime and performance\u003C\u002Fstrong> with real-time alerts.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Schedule automatic cloud backups\u003C\u002Fstrong> and restore them from Modular DS.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Know how likely a plugin update is to break your site\u003C\u002Fstrong> before applying it with Update Copilot, our AI-powered update scoring system.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Run safe updates\u003C\u002Fstrong> to compare changes after updating and quickly roll back if anything goes wrong.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Perform security scans\u003C\u002Fstrong> and get notified of vulnerabilities up to 48 hours before they’re publicly disclosed.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Optimize your WordPress databases\u003C\u002Fstrong> right from Modular DS.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Create and send automated maintenance reports for clients\u003C\u002Fstrong>, including work completed and key metrics from Google Analytics, Search Console, PageSpeed, and WooCommerce.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Display a custom maintenance mode page\u003C\u002Fstrong> to hide unfinished changes while you update or work on a site.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Modular DS is built with usability at its core and supported by a team with over a decade of hands-on experience in WordPress site management, always ready to help when you need it.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fmodulards.com\u002Ffeatures\u002F\" rel=\"nofollow ugc\">Explore more features on our website\u003C\u002Fa>\u003C\u002Fstrong> or \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fapp.modulards.com\u002Fregister\" rel=\"nofollow ugc\">get started for free\u003C\u002Fa>\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Ch3>Manage and monitor all your WordPress sites in one place\u003C\u002Fh3>\n\u003Cp>Connect your WordPress sites to Modular DS, access them with one-click login, and manage centralized updates, backups, security scans, uptime monitoring, and more in a single dashboard.\u003C\u002Fp>\n\u003Cp>Stay organized with tags and teams, and assign custom roles and permissions to collaborators.\u003C\u002Fp>\n\u003Ch3>Bulk updates and management\u003C\u002Fh3>\n\u003Cp>Update, install, activate, or delete plugins, themes, and WordPress versions across multiple websites at once (or one by one).\u003C\u002Fp>\n\u003Ch3>Backups and restores\u003C\u002Fh3>\n\u003Cp>Schedule regular, GDPR-compliant backups to safeguard your clients’ sites and data, or create one manually whenever you need.\u003C\u002Fp>\n\u003Cp>Choose between full or incremental backups and easily restore entire sites, files, or databases from Modular DS.\u003C\u002Fp>\n\u003Ch3>Uptime monitoring\u003C\u002Fh3>\n\u003Cp>Never get caught off guard by downtime. Get notified by email, WhatsApp, Slack, or Discord when any of your websites go down, before your clients even notice.\u003C\u002Fp>\n\u003Cp>Customize check frequency, response time, keyword detection, and alert settings to fit your workflow. Modular DS includes one of the most complete uptime monitor tools for WordPress.\u003C\u002Fp>\n\u003Ch3>Safer, smarter plugin updates\u003C\u002Fh3>\n\u003Cp>Update Copilot, our AI-powered scoring system, helps you understand how risky a plugin update might be before applying it. It analyzes multiple factors, such as code changes and the historical reliability of the plugin and the latest version based on other users, so you don’t have to make update decisions blindly.\u003C\u002Fp>\n\u003Cp>Pair it with safe updates to create restore points, compare “before and after” changes, and instantly roll back if anything goes wrong.\u003C\u002Fp>\n\u003Ch3>Health, performance, and security scans\u003C\u002Fh3>\n\u003Cp>Catch vulnerabilities in plugins, themes, and WordPress core up to 48 hours before they’re publicly disclosed, thanks to our integration with Patchstack.\u003C\u002Fp>\n\u003Cp>Stay on top of your sites’ health, performance, and security with alerts whenever other issues or errors require your attention, like outdated PHP or an expired SSL certificate.\u003C\u002Fp>\n\u003Ch3>Database optimization\u003C\u002Fh3>\n\u003Cp>Clean up post revisions, spam comments, transients, orphaned tables, and more directly from Modular DS. No need for extra plugins.\u003C\u002Fp>\n\u003Cp>Keep your websites running smoothly while saving time and having a clear record of every optimization made.\u003C\u002Fp>\n\u003Ch3>Client reports\u003C\u002Fh3>\n\u003Cp>Automatically generate and send professional maintenance reports that highlight the work you do behind each site, so clients understand the value of your service and keep paying for it.\u003C\u002Fp>\n\u003Cp>Add time logs, dates, and screenshots to showcase the full scope and impact of your efforts.\u003C\u002Fp>\n\u003Cp>Reports help you build trust, improve client retention, and turn your WordPress maintenance offering into recurring revenue.\u003C\u002Fp>\n\u003Ch3>Integrations\u003C\u002Fh3>\n\u003Cp>Modular DS integrates with Google Analytics, Search Console, WooCommerce, and PageSpeed, giving you an overview of your websites in one place and allowing you to include the data your clients care most about in your reports.\u003C\u002Fp>\n\u003Cp>To further strengthen your sites’ security, our Patch & Protect add-on, powered by Patchstack, lets you block vulnerabilities with virtual patching and hardening rules as soon as they’re detected, even before an official update is available.\u003C\u002Fp>\n\u003Ch3>Support that understands you\u003C\u002Fh3>\n\u003Cp>Modular DS is the first site management platform with support in both English and Spanish. Whether you have a question or run into an issue, our team has over 10 years of WordPress experience and is here to help you.\u003C\u002Fp>\n","Manage all your WordPress sites from one place. Automate updates, backups, uptime monitoring, security, maintenance reports, and more.",40000,1032052,96,"2026-03-11T12:06:00.000Z","6.0",[75,20,53,23,55],"backup","https:\u002F\u002Fmodulards.com\u002Fherramienta-gestion-webs\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmodular-connector.2.7.5.zip",87,3,"2026-03-10 00:00:00",{"slug":40,"name":82,"version":83,"author":40,"author_profile":41,"description":84,"short_description":85,"active_installs":86,"downloaded":87,"rating":88,"num_ratings":89,"last_updated":90,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":91,"homepage":56,"download_link":94,"security_score":95,"vuln_count":96,"unpatched_count":27,"last_vuln_date":97,"fetched_at":29},"MainWP Dashboard: Self-hosted WordPress Management for Agencies","6.0.3","\u003Cp>Managing multiple WordPress sites can be a time-consuming and frustrating task. The \u003Ca href=\"https:\u002F\u002Fmainwp.com\u002F\" rel=\"nofollow ugc\">MainWP Dashboard\u003C\u002Fa> empowers you to take back your time by allowing you to efficiently manage and secure all your WordPress sites from your own centralized Dashboard.\u003C\u002Fp>\n\u003Cp>Designed for agencies, freelancers, and web professionals, MainWP offers comprehensive control with a privacy-first approach. Harness the power of MainWP for updates, backups, and more, ensuring your sites are always running smoothly and securely.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features for Advanced WordPress Management:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Centralized Updates: Keep all your WordPress sites up-to-date with single-click updates.\u003C\u002Fli>\n\u003Cli>Secure Backups: Implement scheduled or on-demand backups for complete site security.\u003C\u002Fli>\n\u003Cli>Manage both your sites and your clients with the Client Management module\u003C\u002Fli>\n\u003Cli>The built-in Cost Tracker allows you to easily keep track of client costs\u003C\u002Fli>\n\u003Cli>Private and Self-hosted: Your data stays yours, with full privacy and control.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Stop the Software as a Service (SaaS) Treadmill:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Built on WordPress’s core principles, the MainWP Dashboard plugin is uniquely positioned as the go-to solution for WordPress management. It combines ease of use with robust features and unmatched privacy.\u003C\u002Fp>\n\u003Cp>The MainWP plugins are open-source and privacy-focused and come with their own privacy policies to ensure that the plugins do not collect any personally identifiable information (PII).\u003C\u002Fp>\n\u003Cp>The MainWP Dashboard is extendable, allowing third-party developers to hook into it. It also provides support for CLI and has its own REST API, so anything you need or want to run your business your way can be developed for your MainWP Dashboard.\u003C\u002Fp>\n\u003Cp>All of this makes MainWP the best non-SaaS alternative to ManageWP, InfiniteWP, WPRemote, and WP Umbrella.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Getting Started with MainWP:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>MainWP is designed to be user-friendly and intuitive, even for those new to WordPress management plugins. With a straightforward setup process and a clean, organized dashboard, you’ll be able to start managing your WordPress sites efficiently in no time.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Setting up MainWP is straightforward—install the dashboard on a private WordPress site, add the MainWP Child plugin to your other WordPress sites, and take control.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Your Guarantee of Privacy\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The MainWP plugins come with their own \u003Ca href=\"https:\u002F\u002Fmainwp.com\u002Fmainwp-plugin-privacy-policy\u002F\" rel=\"nofollow ugc\">privacy policies\u003C\u002Fa> to ensure that the plugins do not collect any personally identifiable information (PII).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>How Is MainWP Free? What’s the Catch? How Will You Continue to Pay Development Costs?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>MainWP Dashboard is \u003Ca href=\"https:\u002F\u002Fmainwp.com\u002Fmainwp-free-features\u002F\" rel=\"nofollow ugc\">100% FREE\u003C\u002Fa> and always will be. Whether you manage 5 sites or 5,000, the core dashboard remains free.\u003C\u002Fp>\n\u003Cp>We make money by offering \u003Ca href=\"https:\u002F\u002Fmainwp.com\u002Fsignup\u002F\" rel=\"nofollow ugc\">MainWP Pro\u003C\u002Fa>, which provides access to a wide range of premium add-ons. These premium add-ons are organized into two clear categories:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Integrations:\u003C\u002Fstrong>\u003Cbr \u002F>\nAdd-ons in this category enable seamless connections with popular third-party services and plugins, allowing you to integrate the tools you already use directly into your MainWP Dashboard.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Extensions:\u003C\u002Fstrong>\u003Cbr \u002F>\nThese are custom-built, standalone add-ons developed exclusively for the MainWP Dashboard, designed to add unique and specialized functionality to enhance your WordPress management experience.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For more details, visit our \u003Ca href=\"https:\u002F\u002Fmainwp.com\u002Fmainwp-add-ons\u002F\" rel=\"nofollow ugc\">Premium Add-ons\u003C\u002Fa> page and see how our free and pro features compare at \u003Ca href=\"https:\u002F\u002Fmainwp.com\u002Ffree-vs-pro\u002F\" rel=\"nofollow ugc\">Free vs. Pro: Know the Difference\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Experience the MainWP Difference\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Are you ready to take the hassle out of managing your WordPress sites? MainWP makes it easy to keep everything updated, secure, and running just the way you need it. With over 20k site owners trusting MainWP with over 700k WordPress sites, every day, you’ll quickly see how much simpler website management can be. Try it today and feel the difference for yourself!\u003C\u002Fp>\n","Run updates, backups, security and reporting across all client sites from your own server. Keep data private and prove your value with branded reports &hellip;",20000,1648191,98,2341,"2026-03-10T15:41:00.000Z",[20,92,23,55,93],"manage-multiple-wordpress-sites","wordpress-maintenance","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmainwp.6.0.3.zip",97,6,"2024-02-27 00:00:00",{"slug":99,"name":100,"version":101,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":106,"downloaded":107,"rating":108,"num_ratings":109,"last_updated":110,"tested_up_to":49,"requires_at_least":111,"requires_php":112,"tags":113,"homepage":118,"download_link":119,"security_score":71,"vuln_count":120,"unpatched_count":27,"last_vuln_date":121,"fetched_at":29},"wordfence","Wordfence Security – Firewall, Malware Scan, and Login Security","8.1.4","Mark Maunder","https:\u002F\u002Fprofiles.wordpress.org\u002Fmmaunder\u002F","\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002Fi4ZN2TwlaBE?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch4>THE MOST POPULAR WORDPRESS FIREWALL & SECURITY SCANNER\u003C\u002Fh4>\n\u003Cp>WordPress security requires a team of dedicated analysts researching the latest malware variants and WordPress exploits, turning them into firewall rules and malware signatures, and releasing those to customers in real-time.\u003C\u002Fp>\n\u003Cp>Choose the right protection for you: \u003Ca href=\"https:\u002F\u002Fwww.wordfence.com\u002Fproducts\u002Fpricing\u002F\" rel=\"nofollow ugc\">Wordfence Free, Premium, Care or Response\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Wordfence is widely acknowledged as the number one WordPress security research team in the World. Our plugin provides a comprehensive suite of security features, and our team’s research is what powers our plugin and provides the level of security that we are known for.\u003C\u002Fp>\n\u003Cp>At Wordfence, WordPress security isn’t a division of our business – WordPress security is all we do. We employ a global 24-hour dedicated incident response team that provides our priority customers with a 1 hour response time for any security incident.\u003C\u002Fp>\n\u003Cp>The sun never sets on our global security team and we run a sophisticated threat intelligence platform to aggregate, analyze and produce ground breaking security research on the newest security threats.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Wordfence Security includes an endpoint firewall, malware scanner, robust login security features, live traffic views, and more.\u003C\u002Fstrong> Our \u003Ca href=\"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002F\" rel=\"nofollow ugc\">Threat Defense Feed\u003C\u002Fa> arms Wordfence with the newest firewall rules, malware signatures, and malicious IP addresses it needs to keep your website safe.\u003C\u002Fp>\n\u003Cp>Rounded out by 2FA and a suite of additional features, Wordfence is the most comprehensive WordPress security solution available.\u003C\u002Fp>\n\u003Ch3>🔥 WORDPRESS FIREWALL\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.wordfence.com\u002Fhelp\u002Ffirewall\u002F\" rel=\"nofollow ugc\">Web Application Firewall\u003C\u002Fa>\u003C\u002Fstrong> identifies and blocks malicious traffic. Built and maintained by a large team focused 100% on WordPress security.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Real-time firewall rule and malware signature [Premium]\u003C\u002Fstrong> updates via the Threat Defense Feed (free version is delayed by 30 days).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.wordfence.com\u002Fhelp\u002Fblocking\u002F\" rel=\"nofollow ugc\">Real-time IP Blocklist\u003C\u002Fa> [Premium]\u003C\u002Fstrong> blocks all requests from the most malicious IPs, protecting your site while reducing load.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Protects your site at the endpoint\u003C\u002Fstrong>, enabling deep integration with WordPress. Unlike cloud alternatives, it does not break encryption, cannot be bypassed and cannot leak data.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.wordfence.com\u002Fhelp\u002Fscan\u002F\" rel=\"nofollow ugc\">Integrated malware scanner\u003C\u002Fa>\u003C\u002Fstrong> blocks requests that include malicious code or content.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.wordfence.com\u002Fhelp\u002Ffirewall\u002Fbrute-force\u002F\" rel=\"nofollow ugc\">Protection from brute force\u003C\u002Fa>\u003C\u002Fstrong> attacks by limiting login attempts.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>📡 WORDPRESS SECURITY SCANNER\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Malware scanner\u003C\u002Fstrong> checks core files, themes and plugins for malware, bad URLs, backdoors, SEO spam, malicious redirects and code injections.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Real-time malware signature updates [Premium]\u003C\u002Fstrong> via the Threat Defense Feed (free version is delayed by 30 days).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Compares with WordPress.org repository\u003C\u002Fstrong> your core files, themes and plugins, checking their integrity and reporting any changes to you.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Repair WordPress core, theme, and plugin files\u003C\u002Fstrong> that have changed by overwriting them with a pristine, original version. Delete any files that don’t belong easily within the Wordfence interface.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Malware Removal Tools\u003C\u002Fstrong> “Delete File” and “Delete All Deletable Files” options allow for efficient malware removal. Remember to investigate the scan results and backup files first!\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Checks your site for known security vulnerabilities\u003C\u002Fstrong> and alerts you to any issues. Also alerts you to potential security issues when a plugin has been closed or abandoned.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Checks your content safety\u003C\u002Fstrong> by scanning file contents, posts and comments for dangerous URLs and suspicious content.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Checks to see if your site or IP have been blocklisted [Premium]\u003C\u002Fstrong> for malicious activity, generating spam or other security issues.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🔒 LOGIN SECURITY\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.wordfence.com\u002Fhelp\u002Ftools\u002Ftwo-factor-authentication\u002F\" rel=\"nofollow ugc\">Two-factor authentication (2FA)\u003C\u002Fa>\u003C\u002Fstrong>, one of the most secure forms of remote system authentication available via any TOTP-based authenticator app or service.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.wordfence.com\u002Fhelp\u002Flogin-security\u002F\" rel=\"nofollow ugc\">Login Page CAPTCHA\u003C\u002Fa>\u003C\u002Fstrong> stops bots from logging in.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.wordfence.com\u002Fhelp\u002Flogin-security\u002F#woocommerce-and-custom-integrations\" rel=\"nofollow ugc\">2FA for WooCommerce and custom integrations\u003C\u002Fa>\u003C\u002Fstrong> allow for 2FA to be setup on custom account pages\u003C\u002Fli>\n\u003Cli>\u003Cstrong>XML-RPC\u003C\u002Fstrong> options including disabling or adding 2FA.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Password Security:\u003C\u002Fstrong> Block logins for administrators using known compromised passwords.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>📋 SECURITY AUDIT LOG [Premium]\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.wordfence.com\u002Fhelp\u002Faudit-log\" rel=\"nofollow ugc\">The Audit Log\u003C\u002Fa>\u003C\u002Fstrong> monitors all changes and actions in security-sensitive areas of the site.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Remote tamper-proof data storage\u003C\u002Fstrong> via Wordfence Central.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Monitor events and actions\u003C\u002Fstrong> ranging  from user creation and editing to plugin\u002Ftheme installation and updates to post and page changes.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Configurable\u003C\u002Fstrong> to log all events or significant events only, which includes all authentication, site configuration, and site functionality events.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🌐 WORDFENCE CENTRAL\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.wordfence.com\u002Fproducts\u002Fwordfence-central\u002F\" rel=\"nofollow ugc\">Wordfence Central\u003C\u002Fa>\u003C\u002Fstrong> is a powerful and efficient way to manage the security for multiple sites in one place.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Centralized management:\u003C\u002Fstrong> Efficiently assess the security status of all your websites in one view. View detailed security findings without leaving Wordfence Central.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Powerful templates\u003C\u002Fstrong> make configuring Wordfence a breeze.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Highly configurable alerts\u003C\u002Fstrong> can be delivered via email, SMS or Slack. Improve the signal to noise ratio by leveraging severity level options and a daily digest option.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Track and alert on important security events\u003C\u002Fstrong> including administrator logins, breached password usage and surges in attack activity.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Free to use\u003C\u002Fstrong> for unlimited sites.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🛠️ SECURITY TOOLS\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.wordfence.com\u002Fhelp\u002Ftools\u002Flive-traffic\u002F\" rel=\"nofollow ugc\">Live Traffic\u003C\u002Fa>\u003C\u002Fstrong> monitors visits and hack attempts not shown in other analytics packages in real time; including origin, their IP address, the time of day and time spent on your site.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Block attackers by IP\u003C\u002Fstrong> or build advanced rules based on IP Range, Hostname, User Agent and Referrer.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.wordfence.com\u002Fhelp\u002Fblocking\u002Fcountry-blocking\u002F\" rel=\"nofollow ugc\">Country blocking\u003C\u002Fa>\u003C\u002Fstrong> available with Wordfence Premium.\u003C\u002Fli>\n\u003C\u002Ful>\n","Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.",5000000,406617999,94,4829,"2025-12-20T21:06:00.000Z","4.7","7.0",[114,115,116,117,23],"2fa","firewall","malware","scanner","https:\u002F\u002Fwww.wordfence.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwordfence.8.1.4.zip",12,"2022-09-06 00:00:00",{"slug":123,"name":124,"version":125,"author":126,"author_profile":127,"description":128,"short_description":129,"active_installs":130,"downloaded":131,"rating":132,"num_ratings":133,"last_updated":134,"tested_up_to":49,"requires_at_least":135,"requires_php":136,"tags":137,"homepage":141,"download_link":142,"security_score":143,"vuln_count":14,"unpatched_count":27,"last_vuln_date":144,"fetched_at":29},"hostinger","Hostinger Tools","3.0.59","Hostinger","https:\u002F\u002Fprofiles.wordpress.org\u002Fhostinger\u002F","\u003Cp>Hostinger Tools is an all-in-one plugin designed to streamline essential tasks for WordPress site administrators. This plugin offers a range of features to help you manage your site’s information, maintenance mode, security, and redirects effectively.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cem>Basic Info\u003C\u002Fem>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Displays the current WordPress version with automatic update checks.\u003C\u002Fli>\n\u003Cli>Shows the current PHP version with automatic update checks.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cem>Maintenance Mode\u003C\u002Fem>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Easily enable or disable maintenance mode for your site.\u003C\u002Fli>\n\u003Cli>Provide a URL to bypass maintenance mode for selected users.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cem>Security\u003C\u002Fem>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Enable or disable XML-RPC requests to enhance your site’s security.\u003C\u002Fli>\n\u003Cli>Enable or disable Authorize application page to enhance your site’s security.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cem>Redirects\u003C\u002Fem>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Force all URLs to use HTTPS for secure browsing.\u003C\u002Fli>\n\u003Cli>Force all URLs to use WWW to ensure consistency in site access.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cem>LLMs.txt Generation\u003C\u002Fem>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Automatically generate a structured LLMs.txt file in Markdown format.\u003C\u002Fli>\n\u003Cli>Include website title, description, posts, pages, and products (if WooCommerce is active).\u003C\u002Fli>\n\u003Cli>Keep the file updated when content changes or new content is published.\u003C\u002Fli>\n\u003Cli>Help AI-powered tools better understand and interact with your website content.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Hostinger Tools is the new version of the previous Hostinger plugin, offering an updated and enhanced experience.\u003Cbr \u002F>\nThe Onboarding assistant and the Learning section previously included in this plugin were moved to the separate plugin Hostinger Easy Onboarding.\u003C\u002Fp>\n","Simplified WordPress management. Manage site info, maintenance, security, & redirects.",3000000,16730722,60,25,"2026-03-03T11:48:00.000Z","5.5","8.1",[123,138,139,23,140],"https","maintenance","tools","https:\u002F\u002Fhostinger.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhostinger.3.0.59.zip",99,"2024-01-05 00:00:00",{"attackSurface":146,"codeSignals":343,"taintFlows":684,"riskAssessment":967,"analyzedAt":983},{"hooks":147,"ajaxHandlers":295,"restRoutes":306,"shortcodes":307,"cronEvents":341,"entryPointCount":205,"unprotectedCount":197},[148,154,159,162,167,172,175,180,185,187,190,193,198,202,206,209,212,216,220,225,228,231,236,239,244,247,252,256,260,264,269,272,274,276,279,281,283,288,292],{"type":149,"name":150,"callback":151,"file":152,"line":153},"action","wp_head","google_analytics","plugins\\analytics.php",38,{"type":155,"name":156,"callback":156,"file":157,"line":158},"filter","mce_buttons","plugins\\email.php",20,{"type":155,"name":160,"callback":160,"file":157,"line":161},"mce_external_plugins",21,{"type":149,"name":163,"callback":164,"file":165,"line":166},"wp_footer","add_fb_script","plugins\\facebook.php",24,{"type":149,"name":168,"callback":169,"file":170,"line":171},"admin_footer","wpe_flickr_javascript","plugins\\flickr.php",150,{"type":149,"name":163,"callback":173,"file":174,"line":133},"google_api","plugins\\google-maps.php",{"type":149,"name":176,"callback":177,"file":178,"line":179},"init","wpe_load_responsive","plugins\\responsive.php",8,{"type":149,"name":181,"callback":182,"file":183,"line":184},"wp_enqueue_scripts","wpe_twitter_emoji","plugins\\twitter.php",51,{"type":149,"name":163,"callback":164,"file":186,"line":120},"shortcodes\\video.php",{"type":155,"name":156,"callback":188,"file":186,"line":189},"video_buttons",41,{"type":155,"name":160,"callback":191,"file":186,"line":192},"video_external_plugins",42,{"type":149,"name":194,"callback":195,"file":196,"line":197},"weekly_backup","weekly_hook","system\\backup.php",4,{"type":149,"name":199,"callback":200,"file":196,"line":201},"wp","auto_backup",10,{"type":155,"name":203,"callback":204,"file":196,"line":205},"cron_schedules","filter_cron_schedules",14,{"type":149,"name":168,"callback":207,"file":196,"line":208},"wpe_database_javascript",34,{"type":149,"name":176,"callback":210,"file":211,"line":179},"clean_urls","system\\cleanup.php",{"type":149,"name":213,"callback":214,"file":211,"line":215},"admin_menu","disable_default_dashboard_widgets",18,{"type":155,"name":217,"callback":218,"file":211,"line":219},"login_errors","login_error_message",31,{"type":149,"name":221,"callback":222,"file":223,"line":224},"admin_init","add_role_caps","system\\client-role.php",45,{"type":155,"name":226,"callback":226,"file":223,"line":227},"editable_roles",49,{"type":155,"name":229,"callback":229,"priority":201,"file":223,"line":230},"map_meta_cap",50,{"type":155,"name":232,"callback":233,"file":234,"line":235},"image_size_names_choose","add_image_sizes","system\\custom-image-sizes.php",15,{"type":149,"name":163,"callback":237,"file":238,"line":120},"maintenance_mode","system\\debug-mode.php",{"type":155,"name":240,"callback":241,"file":242,"line":243},"admin_notices","error_report","system\\error-reports.php",36,{"type":149,"name":163,"callback":245,"file":246,"line":96},"wpe_footer_link","system\\footer-link.php",{"type":155,"name":248,"callback":249,"file":250,"line":251},"jpeg_quality","anonymous","system\\image-quality.php",2,{"type":149,"name":253,"callback":254,"file":255,"line":59},"admin_head","loadJS","system\\javascript.php",{"type":155,"name":257,"callback":258,"file":259,"line":197},"wp_mail_content_type","set_html_content_type","system\\login-notification.php",{"type":149,"name":261,"callback":262,"priority":201,"file":259,"line":263},"wp_login","login_notification",62,{"type":155,"name":265,"callback":266,"priority":201,"file":267,"line":268},"sanitize_file_name","wpe_force_lowercase","system\\lowercase-filenames.php",9,{"type":149,"name":181,"callback":270,"file":271,"line":197},"theme_enqueue_styles","system\\style.php",{"type":149,"name":181,"callback":273,"file":271,"line":161},"generate_css",{"type":149,"name":181,"callback":270,"file":271,"line":275},26,{"type":149,"name":221,"callback":222,"file":277,"line":278},"system\\user-roles.php",122,{"type":155,"name":226,"callback":226,"file":277,"line":280},126,{"type":155,"name":229,"callback":229,"priority":201,"file":277,"line":282},127,{"type":149,"name":284,"callback":285,"file":286,"line":287},"widgets_init","essentials_load","wp-essentials.php",88,{"type":149,"name":289,"callback":290,"file":286,"line":291},"admin_enqueue_scripts","wpe_scripts",105,{"type":149,"name":213,"callback":293,"file":286,"line":294},"wpe_menu",162,[296,300,303,305],{"action":297,"nopriv":298,"callback":297,"hasNonce":298,"hasCapCheck":298,"file":170,"line":299},"wpe_flickr_cache",false,142,{"action":297,"nopriv":301,"callback":297,"hasNonce":298,"hasCapCheck":298,"file":170,"line":302},true,143,{"action":304,"nopriv":298,"callback":304,"hasNonce":298,"hasCapCheck":298,"file":196,"line":133},"wpe_database_backup",{"action":304,"nopriv":301,"callback":304,"hasNonce":298,"hasCapCheck":298,"file":196,"line":275},[],[308,311,314,317,320,323,326,329,333,337],{"tag":309,"callback":309,"file":165,"line":310},"facebook",28,{"tag":312,"callback":312,"file":170,"line":313},"flickr",76,{"tag":315,"callback":315,"file":174,"line":316},"wpe_google_maps",32,{"tag":318,"callback":315,"file":174,"line":319},"google_maps",33,{"tag":321,"callback":321,"file":178,"line":322},"wpe_responsive",39,{"tag":324,"callback":324,"file":183,"line":325},"wpe_twitter",156,{"tag":327,"callback":324,"file":183,"line":328},"twitter",157,{"tag":330,"callback":330,"file":331,"line":332},"wpe_get","shortcodes\\get.php",27,{"tag":334,"callback":335,"file":336,"line":235},"wpe_date","show_date","shortcodes\\php-date.php",{"tag":338,"callback":339,"file":186,"line":340},"wpe_video","embed_video",58,[342],{"hook":194,"callback":194,"file":196,"line":59},{"dangerousFunctions":344,"sqlUsage":353,"outputEscaping":377,"fileOperations":161,"externalRequests":251,"nonceChecks":27,"capabilityChecks":268,"bundledLibraries":683},[345,348],{"fn":346,"file":250,"line":251,"context":347},"create_function","add_filter('jpeg_quality',create_function('','return '.get_option('wpe_image_quality').';'));",{"fn":349,"file":350,"line":351,"context":352},"exec","system\\sass\\phpsass\\test.php",68,"$diff = exec('diff -ibwB \u002Ftmp\u002Fscss_test_0 \u002Ftmp\u002Fscss_test_1', $out);",{"prepared":197,"raw":354,"locations":355},11,[356,359,362,364,366,368,369,371,372,374,375],{"file":170,"line":357,"context":358},13,"$wpdb->query() with variable interpolation",{"file":170,"line":360,"context":361},53,"$wpdb->get_row() with variable interpolation",{"file":170,"line":263,"context":363},"$wpdb->get_results() with variable interpolation",{"file":170,"line":365,"context":363},64,{"file":170,"line":367,"context":358},196,{"file":183,"line":357,"context":358},{"file":183,"line":370,"context":358},47,{"file":183,"line":33,"context":361},{"file":183,"line":373,"context":358},112,{"file":183,"line":302,"context":363},{"file":183,"line":376,"context":363},145,{"escaped":378,"rawEcho":379,"locations":380},40,202,[381,384,385,387,389,390,392,394,396,398,399,400,401,402,403,405,406,407,409,411,412,413,414,415,416,417,418,420,421,423,424,425,427,429,430,432,433,434,435,437,439,440,441,443,445,446,447,448,450,451,453,455,456,457,459,460,462,463,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,486,487,488,490,492,493,494,495,497,498,499,501,503,505,507,509,511,512,513,515,517,518,520,522,524,525,526,528,530,531,533,535,536,537,539,541,542,543,545,547,548,551,552,553,555,557,559,561,563,565,567,569,571,572,573,575,576,578,580,582,583,585,586,588,589,591,593,595,597,599,601,603,605,607,609,611,612,614,616,617,619,620,622,623,625,626,628,629,631,633,635,637,639,641,642,644,646,647,648,649,651,652,653,654,655,656,657,658,659,660,662,663,664,665,666,668,669,670,671,672,674,675,678,681],{"file":382,"line":378,"context":383},"functions\\excerpt.php","raw output",{"file":382,"line":26,"context":383},{"file":386,"line":179,"context":383},"functions\\get-image-source.php",{"file":386,"line":388,"context":383},19,{"file":152,"line":158,"context":383},{"file":165,"line":391,"context":383},54,{"file":165,"line":393,"context":383},55,{"file":165,"line":395,"context":383},56,{"file":165,"line":397,"context":383},57,{"file":165,"line":33,"context":383},{"file":165,"line":26,"context":383},{"file":165,"line":26,"context":383},{"file":165,"line":26,"context":383},{"file":165,"line":287,"context":383},{"file":165,"line":404,"context":383},89,{"file":165,"line":404,"context":383},{"file":165,"line":404,"context":383},{"file":165,"line":408,"context":383},92,{"file":165,"line":410,"context":383},93,{"file":165,"line":410,"context":383},{"file":165,"line":410,"context":383},{"file":165,"line":71,"context":383},{"file":165,"line":95,"context":383},{"file":165,"line":95,"context":383},{"file":165,"line":95,"context":383},{"file":165,"line":46,"context":383},{"file":165,"line":419,"context":383},101,{"file":165,"line":419,"context":383},{"file":165,"line":422,"context":383},104,{"file":165,"line":291,"context":383},{"file":165,"line":291,"context":383},{"file":165,"line":426,"context":383},108,{"file":165,"line":428,"context":383},109,{"file":165,"line":428,"context":383},{"file":170,"line":431,"context":383},95,{"file":170,"line":71,"context":383},{"file":170,"line":95,"context":383},{"file":170,"line":88,"context":383},{"file":170,"line":436,"context":383},119,{"file":170,"line":438,"context":383},120,{"file":170,"line":438,"context":383},{"file":170,"line":438,"context":383},{"file":170,"line":442,"context":383},123,{"file":170,"line":444,"context":383},124,{"file":170,"line":444,"context":383},{"file":170,"line":444,"context":383},{"file":170,"line":282,"context":383},{"file":170,"line":449,"context":383},128,{"file":170,"line":449,"context":383},{"file":170,"line":452,"context":383},131,{"file":170,"line":454,"context":383},132,{"file":170,"line":454,"context":383},{"file":170,"line":454,"context":383},{"file":174,"line":458,"context":383},22,{"file":174,"line":132,"context":383},{"file":174,"line":461,"context":383},61,{"file":174,"line":263,"context":383},{"file":174,"line":464,"context":383},63,{"file":174,"line":408,"context":383},{"file":174,"line":410,"context":383},{"file":174,"line":410,"context":383},{"file":174,"line":410,"context":383},{"file":174,"line":71,"context":383},{"file":174,"line":95,"context":383},{"file":174,"line":95,"context":383},{"file":174,"line":95,"context":383},{"file":174,"line":46,"context":383},{"file":174,"line":419,"context":383},{"file":174,"line":419,"context":383},{"file":174,"line":419,"context":383},{"file":174,"line":422,"context":383},{"file":174,"line":291,"context":383},{"file":174,"line":291,"context":383},{"file":174,"line":426,"context":383},{"file":174,"line":428,"context":383},{"file":174,"line":428,"context":383},{"file":174,"line":373,"context":383},{"file":174,"line":485,"context":383},113,{"file":174,"line":485,"context":383},{"file":174,"line":485,"context":383},{"file":174,"line":489,"context":383},116,{"file":174,"line":491,"context":383},117,{"file":174,"line":491,"context":383},{"file":174,"line":491,"context":383},{"file":174,"line":438,"context":383},{"file":174,"line":496,"context":383},121,{"file":174,"line":496,"context":383},{"file":174,"line":496,"context":383},{"file":183,"line":500,"context":383},182,{"file":183,"line":502,"context":383},183,{"file":183,"line":504,"context":383},184,{"file":183,"line":506,"context":383},185,{"file":183,"line":508,"context":383},213,{"file":183,"line":510,"context":383},214,{"file":183,"line":510,"context":383},{"file":183,"line":510,"context":383},{"file":183,"line":514,"context":383},217,{"file":183,"line":516,"context":383},218,{"file":183,"line":516,"context":383},{"file":183,"line":519,"context":383},224,{"file":183,"line":521,"context":383},230,{"file":183,"line":523,"context":383},231,{"file":183,"line":523,"context":383},{"file":183,"line":523,"context":383},{"file":183,"line":527,"context":383},234,{"file":183,"line":529,"context":383},235,{"file":183,"line":529,"context":383},{"file":183,"line":532,"context":383},238,{"file":183,"line":534,"context":383},239,{"file":183,"line":534,"context":383},{"file":183,"line":534,"context":383},{"file":183,"line":538,"context":383},242,{"file":183,"line":540,"context":383},243,{"file":183,"line":540,"context":383},{"file":183,"line":540,"context":383},{"file":183,"line":544,"context":383},246,{"file":183,"line":546,"context":383},247,{"file":183,"line":546,"context":383},{"file":549,"line":550,"context":383},"settings.php",74,{"file":549,"line":454,"context":383},{"file":549,"line":454,"context":383},{"file":549,"line":554,"context":383},133,{"file":549,"line":556,"context":383},134,{"file":549,"line":558,"context":383},135,{"file":549,"line":560,"context":383},136,{"file":549,"line":562,"context":383},137,{"file":549,"line":564,"context":383},138,{"file":549,"line":566,"context":383},139,{"file":549,"line":568,"context":383},140,{"file":549,"line":570,"context":383},141,{"file":549,"line":299,"context":383},{"file":549,"line":302,"context":383},{"file":549,"line":574,"context":383},144,{"file":549,"line":376,"context":383},{"file":549,"line":577,"context":383},146,{"file":549,"line":579,"context":383},164,{"file":549,"line":581,"context":383},221,{"file":549,"line":581,"context":383},{"file":549,"line":584,"context":383},222,{"file":549,"line":584,"context":383},{"file":549,"line":587,"context":383},223,{"file":549,"line":587,"context":383},{"file":549,"line":590,"context":383},225,{"file":549,"line":592,"context":383},260,{"file":549,"line":594,"context":383},263,{"file":549,"line":596,"context":383},267,{"file":549,"line":598,"context":383},287,{"file":549,"line":600,"context":383},288,{"file":549,"line":602,"context":383},298,{"file":549,"line":604,"context":383},315,{"file":549,"line":606,"context":383},316,{"file":549,"line":608,"context":383},326,{"file":549,"line":610,"context":383},327,{"file":549,"line":610,"context":383},{"file":549,"line":613,"context":383},328,{"file":549,"line":615,"context":383},356,{"file":549,"line":615,"context":383},{"file":549,"line":618,"context":383},357,{"file":549,"line":618,"context":383},{"file":549,"line":621,"context":383},358,{"file":549,"line":621,"context":383},{"file":549,"line":624,"context":383},359,{"file":549,"line":624,"context":383},{"file":549,"line":627,"context":383},360,{"file":549,"line":627,"context":383},{"file":549,"line":630,"context":383},371,{"file":549,"line":632,"context":383},380,{"file":549,"line":634,"context":383},383,{"file":549,"line":636,"context":383},410,{"file":549,"line":638,"context":383},491,{"file":549,"line":640,"context":383},492,{"file":336,"line":310,"context":383},{"file":336,"line":643,"context":383},29,{"file":336,"line":645,"context":383},46,{"file":336,"line":370,"context":383},{"file":336,"line":370,"context":383},{"file":336,"line":370,"context":383},{"file":186,"line":650,"context":383},75,{"file":186,"line":313,"context":383},{"file":186,"line":431,"context":383},{"file":186,"line":71,"context":383},{"file":186,"line":71,"context":383},{"file":186,"line":71,"context":383},{"file":186,"line":143,"context":383},{"file":186,"line":46,"context":383},{"file":186,"line":46,"context":383},{"file":186,"line":46,"context":383},{"file":186,"line":661,"context":383},103,{"file":186,"line":422,"context":383},{"file":186,"line":422,"context":383},{"file":186,"line":422,"context":383},{"file":242,"line":133,"context":383},{"file":667,"line":354,"context":383},"system\\sass\\phpsass\\compile-apache.php",{"file":667,"line":205,"context":383},{"file":667,"line":219,"context":383},{"file":667,"line":319,"context":383},{"file":350,"line":189,"context":383},{"file":350,"line":673,"context":383},44,{"file":350,"line":224,"context":383},{"file":676,"line":677,"context":383},"system\\sass\\phpsass\\tree\\SassDebugNode.php",81,{"file":679,"line":680,"context":383},"system\\sass\\sass.php",195,{"file":679,"line":682,"context":383},197,[],[685,702,711,720,729,738,747,756,767,955],{"entryPoint":686,"graph":687,"unsanitizedCount":14,"severity":701},"\u003Cindex> (functions\\index.php:0)",{"nodes":688,"edges":699},[689,694],{"id":690,"type":691,"label":692,"file":693,"line":14},"n0","source","$_SERVER['SERVER_NAME']","functions\\index.php",{"id":695,"type":696,"label":697,"file":693,"line":14,"wp_function":698},"n1","sink","header() [Header Injection]","header",[700],{"from":690,"to":695,"sanitized":298},"medium",{"entryPoint":703,"graph":704,"unsanitizedCount":14,"severity":701},"\u003Cindex> (images\\index.php:0)",{"nodes":705,"edges":709},[706,708],{"id":690,"type":691,"label":692,"file":707,"line":14},"images\\index.php",{"id":695,"type":696,"label":697,"file":707,"line":14,"wp_function":698},[710],{"from":690,"to":695,"sanitized":298},{"entryPoint":712,"graph":713,"unsanitizedCount":14,"severity":701},"\u003Cindex> (plugins\\index.php:0)",{"nodes":714,"edges":718},[715,717],{"id":690,"type":691,"label":692,"file":716,"line":14},"plugins\\index.php",{"id":695,"type":696,"label":697,"file":716,"line":14,"wp_function":698},[719],{"from":690,"to":695,"sanitized":298},{"entryPoint":721,"graph":722,"unsanitizedCount":14,"severity":701},"\u003Cindex> (scripts\\index.php:0)",{"nodes":723,"edges":727},[724,726],{"id":690,"type":691,"label":692,"file":725,"line":14},"scripts\\index.php",{"id":695,"type":696,"label":697,"file":725,"line":14,"wp_function":698},[728],{"from":690,"to":695,"sanitized":298},{"entryPoint":730,"graph":731,"unsanitizedCount":14,"severity":701},"\u003Cindex> (shortcodes\\index.php:0)",{"nodes":732,"edges":736},[733,735],{"id":690,"type":691,"label":692,"file":734,"line":14},"shortcodes\\index.php",{"id":695,"type":696,"label":697,"file":734,"line":14,"wp_function":698},[737],{"from":690,"to":695,"sanitized":298},{"entryPoint":739,"graph":740,"unsanitizedCount":14,"severity":701},"\u003Cindex> (styles\\index.php:0)",{"nodes":741,"edges":745},[742,744],{"id":690,"type":691,"label":692,"file":743,"line":14},"styles\\index.php",{"id":695,"type":696,"label":697,"file":743,"line":14,"wp_function":698},[746],{"from":690,"to":695,"sanitized":298},{"entryPoint":748,"graph":749,"unsanitizedCount":14,"severity":701},"\u003Cindex> (system\\index.php:0)",{"nodes":750,"edges":754},[751,753],{"id":690,"type":691,"label":692,"file":752,"line":14},"system\\index.php",{"id":695,"type":696,"label":697,"file":752,"line":14,"wp_function":698},[755],{"from":690,"to":695,"sanitized":298},{"entryPoint":757,"graph":758,"unsanitizedCount":27,"severity":766},"\u003Cindex> (backups\\index.php:0)",{"nodes":759,"edges":764},[760,763],{"id":690,"type":691,"label":692,"file":761,"line":762},"backups\\index.php",86,{"id":695,"type":696,"label":697,"file":761,"line":762,"wp_function":698},[765],{"from":690,"to":695,"sanitized":301},"low",{"entryPoint":768,"graph":769,"unsanitizedCount":643,"severity":766},"\u003Csettings> (settings.php:0)",{"nodes":770,"edges":925},[771,773,776,779,781,784,786,789,791,794,796,800,802,805,807,811,813,816,818,821,823,826,828,831,833,836,838,841,843,846,848,851,853,856,858,862,864,867,869,872,874,877,879,883,885,889,891,895,897,900,902,906,908,911,913,917,919,923],{"id":690,"type":691,"label":772,"file":549,"line":357},"$_POST['cleanup']",{"id":695,"type":696,"label":774,"file":549,"line":357,"wp_function":775},"update_option() [Settings Manipulation]","update_option",{"id":777,"type":691,"label":778,"file":549,"line":205},"n2","$_POST['lowercase_filenames']",{"id":780,"type":696,"label":774,"file":549,"line":205,"wp_function":775},"n3",{"id":782,"type":691,"label":783,"file":549,"line":219},"n4","$_POST['wpe_total_user_roles']",{"id":785,"type":696,"label":774,"file":549,"line":219,"wp_function":775},"n5",{"id":787,"type":691,"label":788,"file":549,"line":319},"n6","$_POST['error_reports_google_analytics']",{"id":790,"type":696,"label":774,"file":549,"line":319,"wp_function":775},"n7",{"id":792,"type":691,"label":793,"file":549,"line":208},"n8","$_POST['error_reports_search_engines']",{"id":795,"type":696,"label":774,"file":549,"line":208,"wp_function":775},"n9",{"id":797,"type":691,"label":798,"file":549,"line":799},"n10","$_POST['wpe_error_reports_check_username']",35,{"id":801,"type":696,"label":774,"file":549,"line":799,"wp_function":775},"n11",{"id":803,"type":691,"label":804,"file":549,"line":243},"n12","$_POST['wpe_error_reports_check_holding']",{"id":806,"type":696,"label":774,"file":549,"line":243,"wp_function":775},"n13",{"id":808,"type":691,"label":809,"file":549,"line":810},"n14","$_POST['wpe_error_reports_check_licence']",37,{"id":812,"type":696,"label":774,"file":549,"line":810,"wp_function":775},"n15",{"id":814,"type":691,"label":815,"file":549,"line":153},"n16","$_POST['google_analytics']",{"id":817,"type":696,"label":774,"file":549,"line":153,"wp_function":775},"n17",{"id":819,"type":691,"label":820,"file":549,"line":322},"n18","$_POST['google_link_tracking']",{"id":822,"type":696,"label":774,"file":549,"line":322,"wp_function":775},"n19",{"id":824,"type":691,"label":825,"file":549,"line":378},"n20","$_POST['footer_link']",{"id":827,"type":696,"label":774,"file":549,"line":378,"wp_function":775},"n21",{"id":829,"type":691,"label":830,"file":549,"line":189},"n22","$_POST['php_date']",{"id":832,"type":696,"label":774,"file":549,"line":189,"wp_function":775},"n23",{"id":834,"type":691,"label":835,"file":549,"line":192},"n24","$_POST['debug_mode']",{"id":837,"type":696,"label":774,"file":549,"line":192,"wp_function":775},"n25",{"id":839,"type":691,"label":840,"file":549,"line":393},"n26","$_POST['wpe_total_image_sizes']",{"id":842,"type":696,"label":774,"file":549,"line":393,"wp_function":775},"n27",{"id":844,"type":691,"label":845,"file":549,"line":395},"n28","$_POST['image_quality']",{"id":847,"type":696,"label":774,"file":549,"line":395,"wp_function":775},"n29",{"id":849,"type":691,"label":850,"file":549,"line":397},"n30","$_POST['facebook']",{"id":852,"type":696,"label":774,"file":549,"line":397,"wp_function":775},"n31",{"id":854,"type":691,"label":855,"file":549,"line":340},"n32","$_POST['flickr_username']",{"id":857,"type":696,"label":774,"file":549,"line":340,"wp_function":775},"n33",{"id":859,"type":691,"label":860,"file":549,"line":861},"n34","$_POST['flickr_api']",59,{"id":863,"type":696,"label":774,"file":549,"line":861,"wp_function":775},"n35",{"id":865,"type":691,"label":866,"file":549,"line":132},"n36","$_POST['google_maps']",{"id":868,"type":696,"label":774,"file":549,"line":132,"wp_function":775},"n37",{"id":870,"type":691,"label":871,"file":549,"line":464},"n38","$_POST['wpe_twitter_accounts']",{"id":873,"type":696,"label":774,"file":549,"line":464,"wp_function":775},"n39",{"id":875,"type":691,"label":876,"file":549,"line":365},"n40","$_POST['style']",{"id":878,"type":696,"label":774,"file":549,"line":365,"wp_function":775},"n41",{"id":880,"type":691,"label":881,"file":549,"line":882},"n42","$_POST['responsive']",65,{"id":884,"type":696,"label":774,"file":549,"line":882,"wp_function":775},"n43",{"id":886,"type":691,"label":887,"file":549,"line":888},"n44","$_POST['email']",66,{"id":890,"type":696,"label":774,"file":549,"line":888,"wp_function":775},"n45",{"id":892,"type":691,"label":893,"file":549,"line":894},"n46","$_POST['video']",67,{"id":896,"type":696,"label":774,"file":549,"line":894,"wp_function":775},"n47",{"id":898,"type":691,"label":899,"file":549,"line":351},"n48","$_POST['get']",{"id":901,"type":696,"label":774,"file":549,"line":351,"wp_function":775},"n49",{"id":903,"type":691,"label":904,"file":549,"line":905},"n50","$_POST['excerpt']",69,{"id":907,"type":696,"label":774,"file":549,"line":905,"wp_function":775},"n51",{"id":909,"type":691,"label":910,"file":549,"line":47},"n52","$_POST['get_image_source']",{"id":912,"type":696,"label":774,"file":549,"line":47,"wp_function":775},"n53",{"id":914,"type":691,"label":915,"file":549,"line":916},"n54","$_POST['link_it']",71,{"id":918,"type":696,"label":774,"file":549,"line":916,"wp_function":775},"n55",{"id":920,"type":691,"label":921,"file":549,"line":922},"n56","$_POST['relative_time']",72,{"id":924,"type":696,"label":774,"file":549,"line":922,"wp_function":775},"n57",[926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954],{"from":690,"to":695,"sanitized":298},{"from":777,"to":780,"sanitized":298},{"from":782,"to":785,"sanitized":298},{"from":787,"to":790,"sanitized":298},{"from":792,"to":795,"sanitized":298},{"from":797,"to":801,"sanitized":298},{"from":803,"to":806,"sanitized":298},{"from":808,"to":812,"sanitized":298},{"from":814,"to":817,"sanitized":298},{"from":819,"to":822,"sanitized":298},{"from":824,"to":827,"sanitized":298},{"from":829,"to":832,"sanitized":298},{"from":834,"to":837,"sanitized":298},{"from":839,"to":842,"sanitized":298},{"from":844,"to":847,"sanitized":298},{"from":849,"to":852,"sanitized":298},{"from":854,"to":857,"sanitized":298},{"from":859,"to":863,"sanitized":298},{"from":865,"to":868,"sanitized":298},{"from":870,"to":873,"sanitized":298},{"from":875,"to":878,"sanitized":298},{"from":880,"to":884,"sanitized":298},{"from":886,"to":890,"sanitized":298},{"from":892,"to":896,"sanitized":298},{"from":898,"to":901,"sanitized":298},{"from":903,"to":907,"sanitized":298},{"from":909,"to":912,"sanitized":298},{"from":914,"to":918,"sanitized":298},{"from":920,"to":924,"sanitized":298},{"entryPoint":956,"graph":957,"unsanitizedCount":14,"severity":766},"\u003Ccompile-apache> (system\\sass\\phpsass\\compile-apache.php:0)",{"nodes":958,"edges":965},[959,962],{"id":690,"type":691,"label":960,"file":667,"line":961},"$_SERVER",16,{"id":695,"type":696,"label":963,"file":667,"line":219,"wp_function":964},"echo() [XSS]","echo",[966],{"from":690,"to":695,"sanitized":298},{"summary":968,"deductions":969},"The \"wp-essentials\" v3.0 plugin exhibits a mixed security posture. While its vulnerability history is clean, indicating a potentially stable past, the static analysis reveals several significant concerns. A notable area of risk is the presence of four unprotected AJAX handlers, providing direct entry points for attackers without proper authentication. The high number of file operations (21) coupled with a low percentage of properly escaped output (17%) raises alarms about potential path traversal or arbitrary file read\u002Fwrite vulnerabilities.\n\nTaint analysis indicates a concerning number of flows with unsanitized paths (9 out of 10), although no critical or high severity issues were identified at this stage. This suggests a strong possibility of latent vulnerabilities that could be exploited if specific conditions are met. The use of dangerous functions like `create_function` and `exec` also increases the attack surface and potential for remote code execution.  The plugin's reliance on capability checks (9) is positive, but their absence in critical areas like AJAX handlers undermines this strength.\n\nOverall, while the plugin has no documented CVEs, the static analysis points to several areas requiring immediate attention. The unprotected AJAX handlers, potential for unsanitized path manipulation, and lack of output escaping are critical weaknesses. The absence of nonce checks on AJAX handlers is a fundamental security flaw that needs to be addressed urgently.  The plugin has strengths in its lack of bundled libraries and a decent number of capability checks, but these are overshadowed by the identified code-level risks.",[970,972,974,976,979,981],{"reason":971,"points":201},"Unprotected AJAX handlers",{"reason":973,"points":201},"Unsanitized paths in taint flows",{"reason":975,"points":59},"Low output escaping percentage",{"reason":977,"points":978},"Dangerous functions used",5,{"reason":980,"points":197},"SQL queries not fully prepared",{"reason":982,"points":179},"Missing nonce checks on AJAX","2026-03-16T22:38:57.891Z",{"wat":985,"direct":1000},{"assetPaths":986,"generatorPatterns":992,"scriptPaths":993,"versionParams":994},[987,988,989,990,991],"\u002Fwp-content\u002Fplugins\u002Fwp-essentials\u002Fstyles\u002Fwpe-font.css","\u002Fwp-content\u002Fplugins\u002Fwp-essentials\u002Fscripts\u002Fwpe-slider.js","\u002Fwp-content\u002Fplugins\u002Fwp-essentials\u002Fscripts\u002Fwpe-settings.js","\u002Fwp-content\u002Fplugins\u002Fwp-essentials\u002Fstyles\u002Fwpe-style.css","\u002Fwp-content\u002Fplugins\u002Fwp-essentials\u002Fstyles\u002Fwpe-public-styles.css",[],[988,989],[995,996,997,998,999],"wp-essentials\u002Fstyles\u002Fwpe-font.css?ver=","wp-essentials\u002Fscripts\u002Fwpe-slider.js?ver=","wp-essentials\u002Fscripts\u002Fwpe-settings.js?ver=","wp-essentials\u002Fstyles\u002Fwpe-style.css?ver=","wp-essentials\u002Fstyles\u002Fwpe-public-styles.css?ver=",{"cssClasses":1001,"htmlComments":1003,"htmlAttributes":1006,"restEndpoints":1008,"jsGlobals":1009,"shortcodeOutput":1011},[1002],"wpe-admin-wrapper",[1004,1005],"\u003C!-- DO NOT EDIT - AUTOMATICALLY GENERATED FROM: .* -->","\u003C!--\n WPSASS ERROR - .*\n  .*\n-->",[1007],"data-wpe-id",[],[1010,1010],"window.wpe_slider_options",[]]