[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fX3UjUlVwuKsxYxc073db6ZAi5S_338FArNIfac_53eg":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":14,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":37,"analysis":136,"fingerprints":667},"wp-hyves","WP-Hyves","1.4.0.2","Dave Ligthart","https:\u002F\u002Fprofiles.wordpress.org\u002Fdaveligthart-1\u002F","\u003Cp>Import friends and Post to Hyves: a social networking website.\u003C\u002Fp>\n\u003Cp>Notable Features\u003C\u002Fp>\n\u003Col>\n\u003Cli>Post to Hyves blog.\u003C\u002Fli>\n\u003Cli>Post What Where’s to Hyves.\u003C\u002Fli>\n\u003Cli>Import Friends from Hyves.\u003C\u002Fli>\n\u003Cli>Import What Where’s of Friends.\u003C\u002Fli>\n\u003Cli>Import Tips from Friends.\u003C\u002Fli>\n\u003Cli>Import Scraps.\u003C\u002Fli>\n\u003Cli>My Friends Cloud Sidebar Widget.\u003C\u002Fli>\n\u003Cli>Tips from Friends Sidebar Widget.\u003C\u002Fli>\n\u003Cli>WWWs from Friends Sidebar Widget\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cul>\n\u003Cli>Compatible with WordPress MU.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Feature requests are welcome!\u003C\u002Fp>\n\u003Cp>Hyves on your blog.\u003C\u002Fp>\n\u003Cp>Join the WP-Hyves Hyve at: http:\u002F\u002Fwp-hyves.hyves.net\u002F.\u003C\u002Fp>\n","Import friends and Post to Hyves: a social networking website.",10,4786,0,"","3.0.5","2.3",[18,19,20,21,22],"contacts","friends","hyves","import","social","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fwp-hyves\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-hyves.zip",100,null,"2026-03-15T10:48:56.248Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":33,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"daveligthart-1",4,6050,91,30,88,"2026-04-05T12:31:58.118Z",[38,62,81,103,119],{"slug":19,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":25,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":14,"requires_php":50,"tags":51,"homepage":56,"download_link":57,"security_score":58,"vuln_count":59,"unpatched_count":13,"last_vuln_date":60,"fetched_at":61},"Friends","3.6.0","Alex Kirk","https:\u002F\u002Fprofiles.wordpress.org\u002Fakirk\u002F","\u003Cp>The Friends plugin allows you to follow content from other WordPress sites, and interact with them on your own site. You can follow friends and others via RSS. If you also have the ActivityPub plugin installed, you can follow people on Mastodon and other ActivityPub-compatible social networks.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Since version 2.6.0, no users will be created for subscriptions.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Combine this plugin with the ActivityPub plugin to make your own WordPress your own Mastodon instance. Use the Enable Mastodon Apps to use mobile and desktop Mastodon apps with your own site.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The Friends Plugin also has a “friend request” function which allows blogs to become friends with each other. This then allows private publishing on your blog while each of their friends has their own blog but will be able to see your privately published posts.\u003C\u002Fp>\n\u003Cp>There are many small aspects that make it powerful self-hosted social reader:\u003C\u002Fp>\n\u003Cp>You can…\u003Cbr \u002F>\n– Have multiple feeds per person, so you can subscribe to their blog(s) and social media account(s).\u003Cbr \u002F>\n– Categorize incoming content with Post Formats and view all posts of a certain format across your friends.\u003Cbr \u002F>\n– Define rules to filter incoming content (sometimes you’re not interested in everything your friends do).\u003Cbr \u002F>\n– Turn your favorite blog into your personal newsletter by receiving full-post notification e-mails\u003Cbr \u002F>\n– Use feed rules to filter out content you are not interested in.\u003Cbr \u002F>\n– Receive ePubs of your friends’ posts to your eReader (via another plugin).\u003Cbr \u002F>\n– Collect posts (from your feeds or around the web) in a collection for later reference (via another plugin).\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=4bz6GluXnsk\" rel=\"nofollow ugc\">\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Philosophy\u003C\u002Fh3>\n\u003Cp>The Friends Plugin was built to make use of what WordPress provides:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>You use the WordPress infrastructure (Gutenberg or Classic Editor, what you prefer) to create your posts.\u003C\u002Fli>\n\u003Cli>If a post is private, only logged-in friends can see it. They can only log in through their own Friends plugin on their blog.\u003C\u002Fli>\n\u003Cli>Therefore, your friend is just a user on your WordPress blog, their posts are theirs, you can delete them to unfriend them.\u003C\u002Fli>\n\u003Cli>No extra tables: The Friends plugin just uses a post type, options and some taxonomies to store its data. When you delete the plugin, your WordPress will be slim like before.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>In future, I could see mobile apps instead of talking to a third party, to talk to your own blog. It will have your friends’ posts already fetched. Maybe the apps will be specialized, like Twitter or Instagram, where you’d only interact with and create posts in the specific post format.\u003C\u002Fp>\n\u003Cp>The logo was created by Ramon Dodd, @ramonopoly. Thank you!\u003C\u002Fp>\n\u003Cp>Documentation for the plugin can be found on the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fakirk\u002Ffriends\u002Fwiki\" rel=\"nofollow ugc\">GitHub project Wiki\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Development of this plugin is done \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fakirk\u002Ffriends\" rel=\"nofollow ugc\">on GitHub\u003C\u002Fa>. Pull requests welcome. Please see \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fakirk\u002Ffriends\u002Fissues\" rel=\"nofollow ugc\">issues\u003C\u002Fa> reported there before going to the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Ffriends\" rel=\"ugc\">plugin forum\u003C\u002Fa>.\u003C\u002Fstrong>\u003C\u002Fp>\n","Follow others via RSS and ActivityPub and read their posts on your own WordPress.",1000,77936,6,"2025-06-15T15:04:00.000Z","6.8.5","7.2",[52,19,53,54,55],"decentralized","own-your-data","rss","social-network","https:\u002F\u002Fgithub.com\u002Fakirk\u002Ffriends","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffriends.3.6.0.zip",96,3,"2025-07-11 00:00:00","2026-03-15T15:16:48.613Z",{"slug":63,"name":64,"version":65,"author":66,"author_profile":67,"description":68,"short_description":69,"active_installs":70,"downloaded":71,"rating":58,"num_ratings":11,"last_updated":72,"tested_up_to":49,"requires_at_least":73,"requires_php":14,"tags":74,"homepage":77,"download_link":78,"security_score":25,"vuln_count":79,"unpatched_count":13,"last_vuln_date":80,"fetched_at":61},"buddypress-extended-friendship-request","BuddyPress Extended Friendship Request","1.2.2","Brajesh Singh","https:\u002F\u002Fprofiles.wordpress.org\u002Fsbrajesh\u002F","\u003Cp>BuddyPress Extended Friendship Request plugin allows users to send a personalized message with the friendship request on BuddyPress based Social Networks.\u003C\u002Fp>\n\u003Ch4>How it works:-\u003C\u002Fh4>\n\u003Cp>When a users clicks on Add friend, It shows him\u002Fher a small popup to enter some personalized message.\u003Cbr \u002F>\nThe user can enter a personalized message and click on the Send request to send the request.\u003C\u002Fp>\n\u003Ch4>Credit\u003C\u002Fh4>\n\u003Cp>Version 1.2+ uses \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fsandywalker\u002Fwebui-popover\" rel=\"nofollow ugc\">WebUI-Popover\u003C\u002Fa> by Sandy Duan.\u003C\u002Fp>\n\u003Ch4>More Plugins\u003C\u002Fh4>\n\u003Cp>We love BuddyPress and we have created 100+ BuddyPress plugins.\u003Cbr \u002F>\nPlease take a look at our\u003Cbr \u002F>\n 1. \u003Ca href=\"https:\u002F\u002Fbuddydev.com\u002Fplugins\u002F\" title=\"Best BuddyPress Plugins\" rel=\"nofollow ugc\">Free BuddyPress Plugins\u003C\u002Fa>\u003Cbr \u002F>\n 1. \u003Ca href=\"https:\u002F\u002Fbuddydev.com\u002Fplugins\u002Fcategory\u002Fbuddypress-premium-plugins\u002F\" title=\"Best BuddyPress Premium Plugins\" rel=\"nofollow ugc\">Premium BuddyPress plugins\u003C\u002Fa>\u003Cbr \u002F>\n We hope that it will help you take your BuddyPress network to the next level.\u003C\u002Fp>\n\u003Ch4>BuddyPress Custom development & Maintenance Service\u003C\u002Fh4>\n\u003Cp>If you need any assistance with setting up or adding new features to BuddyPress or this plugin, Our team is available for hire.\u003Cbr \u002F>\nPlease use our \u003Ca href=\"https:\u002F\u002Fbuddydev.com\u002Fbuddypress-custom-plugin-development-service\u002F\" rel=\"nofollow ugc\">BuddyPress Development Services\u003C\u002Fa> for any custom development needs.\u003Cbr \u002F>\nWe appreciate your thoughts and suggestions. Please leave a comment on \u003Ca href=\"https:\u002F\u002Fbuddydev.com\u002Fbuddypress\u002Fintroducing-buddypress-extended-friendship-request-plugin\u002F\" rel=\"nofollow ugc\">BuddyDev\u003C\u002Fa>\u003C\u002Fp>\n","BuddyPress Extended Friendship Request plugin allows users to send a personalized message with the friendship requests.",300,37385,"2025-08-16T11:24:00.000Z","5.0",[75,19,76,22],"buddypress","friendship","https:\u002F\u002Fbuddydev.com\u002Fplugins\u002Fbp-extended-friendship-request\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbuddypress-extended-friendship-request.1.2.2.zip",1,"2013-07-03 00:00:00",{"slug":82,"name":83,"version":84,"author":85,"author_profile":86,"description":87,"short_description":88,"active_installs":25,"downloaded":89,"rating":90,"num_ratings":31,"last_updated":91,"tested_up_to":92,"requires_at_least":93,"requires_php":14,"tags":94,"homepage":100,"download_link":101,"security_score":102,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":61},"youtube-thumbnail-to-featured-image","Youtube Thumbnail as Featured Image","1.1","soychuy","https:\u002F\u002Fprofiles.wordpress.org\u002Fjesusbet\u002F","\u003Cp>YouTube Thumbnail to Featured Image, as its name says, is a plugin that helps you to set a YouTube video thumbnail as a featured image of a post. The user just have to set a YouTube video URL and the plugin will do the rest.\u003C\u002Fp>\n\u003Cp>The video thumbnail will be imported to your media library, so you can use it anywhere else.\u003C\u002Fp>\n","Use a YouTube Thumbnail as a Featured Image for a WordPress Post. You only have to set a YouTue Video URL and the plugin does the rest.",7134,80,"2019-10-30T17:44:00.000Z","5.3.21","4.0",[95,96,97,98,99],"automatic-import","featured-image","media-library","social-networks","youtube","https:\u002F\u002Festudioweb.pro\u002Ffeatured-youtube-thumbnail","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fyoutube-thumbnail-to-featured-image.zip",85,{"slug":104,"name":105,"version":106,"author":107,"author_profile":108,"description":109,"short_description":110,"active_installs":90,"downloaded":111,"rating":25,"num_ratings":59,"last_updated":112,"tested_up_to":113,"requires_at_least":93,"requires_php":14,"tags":114,"homepage":14,"download_link":118,"security_score":102,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":61},"keyring-social-importers","Keyring Social Importers","2.0","Beau Lebens","https:\u002F\u002Fprofiles.wordpress.org\u002Fbeaulebens\u002F","\u003Cp>\u003Cstrong>Please \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fkeyring-social-importers\u002Fother_notes\u002F\" rel=\"ugc\">read about each importer\u003C\u002Fa> before running this plugin.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This package of social importers provide you with the ability to pull in your content that gets created on other sites, and re-publish it on your own WordPress site. Rather than leaving others in control of everything you’ve put time and effort into, why not host it yourself on your one true, home-on-the-web, WordPress? \u003Ca href=\"http:\u002F\u002Fdentedreality.com.au\u002F2012\u002F10\u002F07\u002Fwhere-is-your-digital-hub-home\u002F\" rel=\"nofollow ugc\">Read more about this technique\u002Fapproach to data ownership\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>After an initial import, all of these importers can also optionally check each hour and automatically download new content as well, keeping things in sync over time. They all currently import as Posts, with specific \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FPost_Formats\" rel=\"nofollow ugc\">Post Formats\u003C\u002Fa>, depending on the content type.\u003C\u002Fp>\n\u003Cp>Importers included currently:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdelicious.com\u002F\" rel=\"nofollow ugc\">Delicious\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ffitbit.com\u002F\" rel=\"nofollow ugc\">Fitbit\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fflickr.com\u002F\" rel=\"nofollow ugc\">Flickr\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ffoursquare.com\u002F\" rel=\"nofollow ugc\">Foursquare\u002FSwarm\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Finstagram.com\u002F\" rel=\"nofollow ugc\">Instagram\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Finstapaper.com\u002F\" rel=\"nofollow ugc\">Instapaper\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fjetpack.com\u002F\" rel=\"nofollow ugc\">Jetpack\u003C\u002Fa>\u002F\u003Ca href=\"https:\u002F\u002Fwordpress.com\u002F\" rel=\"nofollow ugc\">WordPress.com\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fmoves-app.com\u002F\" rel=\"nofollow ugc\">Moves\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fnest.com\u002Fcamera\u002Fmeet-nest-cam\u002F\" rel=\"nofollow ugc\">Nest Cameras\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fpinterest.com\u002F\" rel=\"nofollow ugc\">Pinterest\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgetpocket.com\u002F\" rel=\"nofollow ugc\">Pocket\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fstrava.com\u002F\" rel=\"nofollow ugc\">Strava\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftripit.com\u002F\" rel=\"nofollow ugc\">TripIt\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftwitter.com\u002F\" rel=\"nofollow ugc\">Twitter\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can potentially \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fcfinke\u002FKeyring-Facebook-Importer\" rel=\"nofollow ugc\">write your own importers\u003C\u002Fa> as well, using the base class included.\u003C\u002Fp>\n\u003Ch3>Importers\u003C\u002Fh3>\n\u003Ch4>Common Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>If you select to ‘auto-import new content’, all importers will check once per hour for new content.\u003C\u002Fli>\n\u003Cli>All posts created by the importers are associated with a taxonomy called \u003Ccode>keyring_service\u003C\u002Fcode>, which allows you to filter\u002Fselect them. Appears in wp-admin as “Imported From” under the Posts menu.\u003C\u002Fli>\n\u003Cli>Every attempt is made to download\u002Fstore as much data as possible, and use it intelligently (e.g. tags).\u003C\u002Fli>\n\u003Cli>Raw import data is stored in a custom field (\u003Ccode>raw_import_data\u003C\u002Fcode>) as a json_encode()ed string.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Delicious\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Every bookmark from your \u003Ca href=\"https:\u002F\u002Fdelicious.com\u002F\" rel=\"nofollow ugc\">Delicious\u003C\u002Fa> account is imported as a post.\u003C\u002Fli>\n\u003Cli>All imported posts are marked with the ‘link’ Post Format.\u003C\u002Fli>\n\u003Cli>delicious_id and the href\u002Flink itself are saved as custom fields.\u003C\u002Fli>\n\u003Cli>Tags used on Delicious are used in WordPress.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Fitbit\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Very basic for now, just imports your data and creates a simple summary post.\u003C\u002Fli>\n\u003Cli>Summary post only contains a statement about how many steps you took that day.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Flickr\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Every photo in your \u003Ca href=\"https:\u002F\u002Fflickr.com\u002F\" rel=\"nofollow ugc\">Flickr\u003C\u002Fa> account is downloaded (the actual, original image) and imported into your Media Library.\u003C\u002Fli>\n\u003Cli>For every photo, a Post is created and published, containing that one image (and it is attached within WordPress).\u003C\u002Fli>\n\u003Cli>Posts are marked with the ‘image’ Post Format.\u003C\u002Fli>\n\u003Cli>Posts are created with the publish date matching the ‘Taken’ date of the photo. The modified date (of the Post) is set to the ‘Upload’ date from Flickr.\u003C\u002Fli>\n\u003Cli>There is no support\u002Fhandling of Galleries, Sets or anything else in Flickr, just one Post per photo.\u003C\u002Fli>\n\u003Cli>Tags used on Flickr are used on WordPress.\u003C\u002Fli>\n\u003Cli>If available, geo data is downloaded and stored per the \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FGeodata\" rel=\"nofollow ugc\">WordPress Geodata guidelines\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>flickr_id and the full URL to the photo page are stored as custom fields.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Foursquare\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Imports each check-in on \u003Ca href=\"https:\u002F\u002Ffoursquare.com\u002F\" rel=\"nofollow ugc\">Foursquare\u003C\u002Fa> as a separate Post.\u003C\u002Fli>\n\u003Cli>Marks those Posts with the ‘status’ Post Format.\u003C\u002Fli>\n\u003Cli>foursquare_id plus geo lat\u002Flong are stored as separate custom fields, per the \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FGeodata\" rel=\"nofollow ugc\">WordPress Geodata guidelines\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Instagram\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Each photo on your \u003Ca href=\"https:\u002F\u002Finstagram.com\u002F\" rel=\"nofollow ugc\">Instagram\u003C\u002Fa> account is downloaded and imported into your Media Library.\u003C\u002Fli>\n\u003Cli>For every photo, a Post is created and published, containing that one image (and it is attached within WordPress).\u003C\u002Fli>\n\u003Cli>Posts are marked with the ‘image’ Post Format.\u003C\u002Fli>\n\u003Cli>The name of the filter used is stored as instagram_filter, the URL to the photo page is stored as instagram_url.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Instapaper\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Imports your \u003Cem>Archived\u003C\u002Fem> links and creates a post for each of them (with post format of Link).\u003C\u002Fli>\n\u003Cli>Uses the title from the document in Instapaper, if there is a description associated then it uses that as well.\u003C\u002Fli>\n\u003Cli>NEW: Downloads the full content of the article using Instapaper’s API, and stores that \u003Cem>in the post content\u003C\u002Fem>, so that you can search it later. Disable it by creating a stub plugin, or dropping this in your theme’s functions.php; add_filter( ‘keyring_instapaper_download_article_texts’, ‘__return_false’ );\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Jetpack\u002FWordPress.com\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Import posts from either self-hosted, or hosted copies of WordPress, via the Jetpack\u002FWordPress.com API.\u003C\u002Fli>\n\u003Cli>Post author is always overridden.\u003C\u002Fli>\n\u003Cli>Tags, content, title, excerpt are all carried over.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Moves\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Imports your data daily.\u003C\u002Fli>\n\u003Cli>Creates a summary post, which is a bulleted list detailing each category of activity for the day.\u003C\u002Fli>\n\u003Cli>Stores raw and summary data for further processing.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Nest (Camera)\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Allows you to pick hours of the day to take snapshots from your cameras.\u003C\u002Fli>\n\u003Cli>You can pick anything between no snapshots, or one every hour, per camera.\u003C\u002Fli>\n\u003Cli>Each snapshot will be downloaded directly into your Media Library.\u003C\u002Fli>\n\u003Cli>Each snapshot will also be published as a Post (with post type of “image”) using the Author\u002FCategory\u002FTag options you select.\u003C\u002Fli>\n\u003Cli>If you click the “Check For New Content Now” button, when configured for auto-import, then all cameras with at least one scheduled snapshot will take one right now, regardless of what time they’re scheduled (good for verifying that things work, or taking a specific snapshot for whatever reason).\u003C\u002Fli>\n\u003Cli>Does not require a Nest Aware subscription, since the relatively infrequent snapshots are under request limits.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Pinterest\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>NEW: This is a new addition, and is pretty rough still. Not recommended for production sites.\u003C\u002Fli>\n\u003Cli>Imports every individual pin as a post (can be a LOT), with a Post Format of “image”.\u003C\u002Fli>\n\u003Cli>Stores the image for each pin in your Media Library.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Pocket\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Imports links and creates a post for each of them, with the Link post format.\u003C\u002Fli>\n\u003Cli>Uses as many details (e.g. title) as possible from Pocket.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Strava\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Activities are imported as new Posts.\u003Cbr \u002F>\n* Activity type is stored as post meta for easier querying.\u003C\u002Fli>\n\u003Cli>GPS data is stored as an encoded polyline if available. [https:\u002F\u002Fgithub.com\u002Femcconville\u002Fgoogle-map-polyline-encoding-tool](Google Maps Polyline Encoding Tool) has been tested to work well with the data.\u003C\u002Fli>\n\u003Cli>Stores raw and summary data for further processing.\u003C\u002Fli>\n\u003Cli>Currently does NOT download any media or support People & Places.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>TripIt\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Trips are imported, with flights mapped and posted as Status-format posts.\u003C\u002Fli>\n\u003Cli>Geo data is stored using something resembling the \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FGeodata\" rel=\"nofollow ugc\">WordPress Geodata guidelines\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Posts are tagged using airport codes and city names.\u003C\u002Fli>\n\u003Cli>Now supports paging through the API to avoid timeouts on accounts with lots of trip data.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Twitter\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Every \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002F\" rel=\"nofollow ugc\">tweet\u003C\u002Fa> will be downloaded as an individual Post.\u003C\u002Fli>\n\u003Cli>Posts are marked with the ‘aside’ Post Format.\u003C\u002Fli>\n\u003Cli>If available, geo data is downloaded and stored per the \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FGeodata\" rel=\"nofollow ugc\">WordPress Geodata guidelines\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Twitter_id and twitter_permalink are stored.\u003C\u002Fli>\n\u003Cli>If your tweet contains #hashtags, they are applied as tags within WordPress.\u003C\u002Fli>\n\u003Cli>“Entities” are expanded (URLs are not t.co, they are the real\u002Ffinal URLs).\u003C\u002Fli>\n\u003C\u002Ful>\n","Import your posts\u002Fimages\u002Fetc from Twitter, Instagram, Strava, and more, into your WordPress install. Own your content.",11791,"2023-05-03T21:04:00.000Z","6.2.9",[21,115,116,22,117],"indieweb","keyring","sync","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkeyring-social-importers.2.0.zip",{"slug":120,"name":121,"version":122,"author":123,"author_profile":124,"description":125,"short_description":126,"active_installs":127,"downloaded":128,"rating":25,"num_ratings":129,"last_updated":130,"tested_up_to":131,"requires_at_least":93,"requires_php":14,"tags":132,"homepage":14,"download_link":135,"security_score":102,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":61},"mutual-buddies","Mutual Buddies","2.1.1","Paresh Radadiya","https:\u002F\u002Fprofiles.wordpress.org\u002Fpareshradadiya-1\u002F","\u003Cp>Are you looking for BuddyPress mutual friends? Mutual Buddies display a list of mutual friends on a BuddyPress member’s profile and members list\u003C\u002Fp>\n\u003Cp>You can see which friends you have in common in your friends network. Like when you go to a friends profile you can see which persons your both friends with (common friends). Just like on Facebook. This plugin add a new component inside members’s profile page and list all mutual friends.\u003C\u002Fp>\n\u003Cp>Mutual friends are the people who are friends with both you and the person whose profile you’re viewing. For instance, if you’re friends with Mike, and James is friends with Mike, then Mike will be shown as a mutual friend when you’re viewing James’s profile.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Languages\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Mutual Buddies has been translated into the following languages:\u003C\u002Fp>\n\u003Col>\n\u003Cli>English\u003C\u002Fli>\n\u003Cli>French by \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Ffxbenard\u002F\" rel=\"nofollow ugc\">fxbenard\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Deutsch by \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fper4mance\" rel=\"nofollow ugc\">per4mance\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Russian by \u003Ca href=\"https:\u002F\u002Fprofiles.wordpress.org\u002Fairathalitov\" rel=\"nofollow ugc\">Airat Halitov\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Italian by Sebastiano Pistore\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>More Information\u003C\u002Fh4>\n\u003Cp>Visit the \u003Ca href=\"http:\u002F\u002Fpareshradadiya.github.io\u002FMutual-Buddies\u002F\" rel=\"nofollow ugc\">Mutual Buddies website\u003C\u002Fa> for documentation, and information on project.\u003C\u002Fp>\n","Mutual buddies displays BuddyPress mutual friends of the logged in user & the user whose profile the user is looking at on the Profile page.",70,15281,7,"2017-07-22T05:41:00.000Z","4.8.28",[75,133,19,134,22],"facebook","mutual-friends","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmutual-buddies.2.1.1.zip",{"attackSurface":137,"codeSignals":206,"taintFlows":488,"riskAssessment":652,"analyzedAt":666},{"hooks":138,"ajaxHandlers":202,"restRoutes":203,"shortcodes":204,"cronEvents":205,"entryPointCount":13,"unprotectedCount":13},[139,145,148,151,154,158,163,168,170,172,173,175,177,178,180,181,183,184,187,189,191,192,196,198,199],{"type":140,"name":141,"callback":142,"file":143,"line":144},"action","admin_head","anonymous","classes\\action\\WPHyvesAdminAction.php",40,{"type":140,"name":146,"callback":142,"file":143,"line":147},"publish_post",41,{"type":140,"name":149,"callback":142,"file":143,"line":150},"admin_menu",42,{"type":140,"name":152,"callback":142,"file":143,"line":153},"init",43,{"type":140,"name":155,"callback":156,"file":143,"line":157},"admin_notices","display_import_friends_message",47,{"type":140,"name":159,"callback":160,"file":161,"line":162},"wp_dashboard_setup","register_widget","classes\\util\\com.daveligthart.php",21,{"type":164,"name":165,"callback":166,"file":161,"line":167},"filter","wp_dashboard_widgets","add_widget",22,{"type":140,"name":169,"callback":142,"file":161,"line":90},"plugins_loaded",{"type":140,"name":159,"callback":160,"file":171,"line":162},"classes\\util\\WPHyvesDashboardWidget.php",{"type":164,"name":165,"callback":166,"file":171,"line":167},{"type":140,"name":169,"callback":142,"file":171,"line":174},84,{"type":140,"name":159,"callback":160,"file":176,"line":162},"classes\\widget\\WPHyvesDashboardWidget.php",{"type":164,"name":165,"callback":166,"file":176,"line":167},{"type":140,"name":159,"callback":160,"file":179,"line":162},"classes\\widget\\WPHyvesFriendTipsDashboardWidget.php",{"type":164,"name":165,"callback":166,"file":179,"line":167},{"type":140,"name":159,"callback":160,"file":182,"line":162},"classes\\widget\\WPHyvesFriendWWWsDashboardWidget.php",{"type":164,"name":165,"callback":166,"file":182,"line":167},{"type":140,"name":159,"callback":160,"file":185,"line":186},"classes\\widget\\WPHyvesProfileDashboardWidget.php",15,{"type":164,"name":165,"callback":166,"file":185,"line":188},16,{"type":140,"name":159,"callback":160,"file":190,"line":186},"classes\\widget\\WPHyvesScrapsDashboardWidget.php",{"type":164,"name":165,"callback":166,"file":190,"line":188},{"type":140,"name":152,"callback":193,"file":194,"line":195},"register","classes\\widget\\WPHyvesWidget.php",52,{"type":140,"name":159,"callback":160,"file":197,"line":162},"classes\\widget\\WPHyvesWWWsDashboardWidget.php",{"type":164,"name":165,"callback":166,"file":197,"line":167},{"type":140,"name":169,"callback":142,"file":200,"line":201},"wp-hyves.php",60,[],[],[],[],{"dangerousFunctions":207,"sqlUsage":238,"outputEscaping":240,"fileOperations":486,"externalRequests":13,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":487},[208,211,216,219,221,223,225,228,230,233,236],{"fn":209,"file":161,"line":90,"context":210},"create_function","add_action( 'plugins_loaded', create_function( '', 'global $dlPosts; $dlPosts = new DLPosts();' ) );",{"fn":212,"file":213,"line":214,"context":215},"unserialize","classes\\util\\GenusApis-PHP5-1.0.0\\index.php",106,"return unserialize($_SESSION['requesttoken_'.$oauth_token]);",{"fn":212,"file":213,"line":217,"context":218},114,"return unserialize($_SESSION['localtoken_'.$local_token]);",{"fn":212,"file":220,"line":217,"context":215},"classes\\util\\GenusApis-PHP5-1.0.1\\index.php",{"fn":212,"file":220,"line":222,"context":218},122,{"fn":209,"file":171,"line":174,"context":224},"add_action( 'plugins_loaded', create_function( '', 'global $wpHyvesDashWidget; $wpHyvesDashWidget = ",{"fn":212,"file":226,"line":227,"context":215},"classes\\util\\WPHyvesUtils.php",20,{"fn":212,"file":226,"line":229,"context":218},34,{"fn":212,"file":190,"line":231,"context":232},57,"$scraps = unserialize(stripslashes(get_option('wphyves_scraps')));",{"fn":212,"file":234,"line":235,"context":232},"classes\\widget\\WPHyvesScrapsWidget.php",50,{"fn":209,"file":200,"line":201,"context":237},"add_action( 'plugins_loaded', create_function( '', 'global $wpHyvesFriendTipsDashWidget; $wpHyvesTip",{"prepared":13,"raw":13,"locations":239},[],{"escaped":13,"rawEcho":241,"locations":242},154,[243,246,247,248,249,250,252,254,256,257,259,261,263,265,266,268,269,271,273,274,276,279,281,283,285,287,289,291,293,295,297,299,301,303,305,307,309,311,313,315,317,319,321,323,325,326,327,329,331,333,335,337,339,341,344,346,348,350,352,354,355,357,359,361,362,364,367,368,369,370,372,373,374,375,376,377,379,380,381,382,384,385,386,388,390,391,392,394,395,396,397,398,401,402,403,404,406,407,408,410,412,413,415,416,417,418,419,421,422,423,424,426,427,428,430,431,432,433,434,435,436,437,439,440,441,442,443,444,445,446,449,451,452,453,454,455,458,461,462,463,465,468,470,471,472,473,474,476,478,479,481,482,484,485],{"file":143,"line":244,"context":245},190,"raw output",{"file":161,"line":231,"context":245},{"file":161,"line":127,"context":245},{"file":161,"line":127,"context":245},{"file":161,"line":127,"context":245},{"file":161,"line":251,"context":245},71,{"file":161,"line":253,"context":245},72,{"file":161,"line":255,"context":245},74,{"file":213,"line":153,"context":245},{"file":213,"line":258,"context":245},44,{"file":213,"line":260,"context":245},45,{"file":213,"line":262,"context":245},46,{"file":213,"line":264,"context":245},92,{"file":213,"line":58,"context":245},{"file":220,"line":267,"context":245},51,{"file":220,"line":195,"context":245},{"file":220,"line":270,"context":245},53,{"file":220,"line":272,"context":245},54,{"file":220,"line":25,"context":245},{"file":220,"line":275,"context":245},104,{"file":277,"line":278,"context":245},"classes\\util\\WPHyvesAPI.php",382,{"file":277,"line":280,"context":245},383,{"file":277,"line":282,"context":245},388,{"file":277,"line":284,"context":245},437,{"file":277,"line":286,"context":245},483,{"file":277,"line":288,"context":245},485,{"file":277,"line":290,"context":245},551,{"file":277,"line":292,"context":245},553,{"file":277,"line":294,"context":245},562,{"file":277,"line":296,"context":245},564,{"file":277,"line":298,"context":245},582,{"file":277,"line":300,"context":245},585,{"file":277,"line":302,"context":245},595,{"file":277,"line":304,"context":245},597,{"file":277,"line":306,"context":245},619,{"file":277,"line":308,"context":245},622,{"file":277,"line":310,"context":245},648,{"file":277,"line":312,"context":245},649,{"file":277,"line":314,"context":245},764,{"file":277,"line":316,"context":245},767,{"file":277,"line":318,"context":245},770,{"file":277,"line":320,"context":245},780,{"file":277,"line":322,"context":245},800,{"file":277,"line":324,"context":245},807,{"file":277,"line":324,"context":245},{"file":277,"line":324,"context":245},{"file":277,"line":328,"context":245},808,{"file":171,"line":330,"context":245},55,{"file":171,"line":332,"context":245},66,{"file":171,"line":334,"context":245},67,{"file":171,"line":336,"context":245},76,{"file":171,"line":338,"context":245},77,{"file":171,"line":340,"context":245},79,{"file":342,"line":343,"context":245},"classes\\util\\WPHyvesWPPlugin.php",98,{"file":342,"line":345,"context":245},121,{"file":342,"line":347,"context":245},217,{"file":342,"line":349,"context":245},229,{"file":342,"line":351,"context":245},246,{"file":342,"line":353,"context":245},253,{"file":176,"line":330,"context":245},{"file":176,"line":356,"context":245},68,{"file":176,"line":358,"context":245},69,{"file":176,"line":360,"context":245},78,{"file":176,"line":340,"context":245},{"file":176,"line":363,"context":245},81,{"file":365,"line":366,"context":245},"classes\\widget\\WPHyvesFriendsWidget.php",38,{"file":365,"line":150,"context":245},{"file":365,"line":258,"context":245},{"file":365,"line":262,"context":245},{"file":365,"line":371,"context":245},59,{"file":365,"line":201,"context":245},{"file":365,"line":358,"context":245},{"file":179,"line":330,"context":245},{"file":179,"line":201,"context":245},{"file":179,"line":35,"context":245},{"file":179,"line":378,"context":245},89,{"file":179,"line":33,"context":245},{"file":179,"line":343,"context":245},{"file":179,"line":25,"context":245},{"file":179,"line":383,"context":245},107,{"file":182,"line":330,"context":245},{"file":182,"line":201,"context":245},{"file":182,"line":387,"context":245},82,{"file":182,"line":389,"context":245},83,{"file":182,"line":102,"context":245},{"file":182,"line":264,"context":245},{"file":182,"line":393,"context":245},94,{"file":182,"line":25,"context":245},{"file":185,"line":144,"context":245},{"file":185,"line":157,"context":245},{"file":185,"line":330,"context":245},{"file":399,"line":400,"context":245},"classes\\widget\\WPHyvesProfileWidget.php",37,{"file":399,"line":147,"context":245},{"file":399,"line":153,"context":245},{"file":399,"line":260,"context":245},{"file":399,"line":405,"context":245},49,{"file":190,"line":144,"context":245},{"file":190,"line":157,"context":245},{"file":190,"line":409,"context":245},62,{"file":190,"line":411,"context":245},65,{"file":190,"line":356,"context":245},{"file":190,"line":414,"context":245},73,{"file":234,"line":400,"context":245},{"file":234,"line":147,"context":245},{"file":234,"line":153,"context":245},{"file":234,"line":260,"context":245},{"file":234,"line":420,"context":245},56,{"file":234,"line":201,"context":245},{"file":234,"line":253,"context":245},{"file":234,"line":174,"context":245},{"file":425,"line":150,"context":245},"classes\\widget\\WPHyvesTipsWidget.php",{"file":425,"line":262,"context":245},{"file":425,"line":157,"context":245},{"file":425,"line":429,"context":245},48,{"file":425,"line":356,"context":245},{"file":425,"line":358,"context":245},{"file":425,"line":251,"context":245},{"file":425,"line":363,"context":245},{"file":197,"line":330,"context":245},{"file":197,"line":371,"context":245},{"file":197,"line":255,"context":245},{"file":438,"line":260,"context":245},"classes\\widget\\WPHyvesWWWsWidget.php",{"file":438,"line":405,"context":245},{"file":438,"line":267,"context":245},{"file":438,"line":270,"context":245},{"file":438,"line":360,"context":245},{"file":438,"line":340,"context":245},{"file":438,"line":387,"context":245},{"file":438,"line":58,"context":245},{"file":447,"line":448,"context":245},"view\\admin\\admin_config.php",27,{"file":447,"line":450,"context":245},28,{"file":447,"line":260,"context":245},{"file":447,"line":262,"context":245},{"file":447,"line":360,"context":245},{"file":447,"line":387,"context":245},{"file":456,"line":457,"context":245},"view\\admin\\admin_import_users.php",19,{"file":459,"line":460,"context":245},"view\\admin\\blocks\\form-table-row.php",12,{"file":459,"line":460,"context":245},{"file":459,"line":186,"context":245},{"file":459,"line":464,"context":245},17,{"file":466,"line":467,"context":245},"view\\admin\\blocks\\list-users.php",13,{"file":466,"line":469,"context":245},25,{"file":466,"line":420,"context":245},{"file":466,"line":371,"context":245},{"file":466,"line":371,"context":245},{"file":466,"line":371,"context":245},{"file":466,"line":475,"context":245},61,{"file":466,"line":477,"context":245},64,{"file":466,"line":334,"context":245},{"file":480,"line":227,"context":245},"view\\admin\\blocks\\submenu.php",{"file":480,"line":227,"context":245},{"file":483,"line":34,"context":245},"view\\admin\\blocks\\table-headers.php",{"file":483,"line":34,"context":245},{"file":483,"line":34,"context":245},5,[],[489,506,523,534,545,554,563,614,623,631,644],{"entryPoint":490,"graph":491,"unsanitizedCount":79,"severity":505},"addpost_metabox (classes\\action\\WPHyvesAdminAction.php:183)",{"nodes":492,"edges":502},[493,497],{"id":494,"type":495,"label":496,"file":143,"line":244},"n0","source","$_REQUEST['post']",{"id":498,"type":499,"label":500,"file":143,"line":244,"wp_function":501},"n1","sink","echo() [XSS]","echo",[503],{"from":494,"to":498,"sanitized":504},false,"medium",{"entryPoint":507,"graph":508,"unsanitizedCount":79,"severity":505},"authorizedAndPost (classes\\util\\WPHyvesAPI.php:188)",{"nodes":509,"edges":520},[510,512,515],{"id":494,"type":495,"label":511,"file":277,"line":244},"$_REQUEST",{"id":498,"type":513,"label":514,"file":277,"line":244},"transform","→ authorized()",{"id":516,"type":499,"label":517,"file":277,"line":518,"wp_function":519},"n2","header() [Header Injection]",290,"header",[521,522],{"from":494,"to":498,"sanitized":504},{"from":498,"to":516,"sanitized":504},{"entryPoint":524,"graph":525,"unsanitizedCount":79,"severity":505},"authorizedAndPostWWW (classes\\util\\WPHyvesAPI.php:205)",{"nodes":526,"edges":531},[527,529,530],{"id":494,"type":495,"label":511,"file":277,"line":528},208,{"id":498,"type":513,"label":514,"file":277,"line":528},{"id":516,"type":499,"label":517,"file":277,"line":518,"wp_function":519},[532,533],{"from":494,"to":498,"sanitized":504},{"from":498,"to":516,"sanitized":504},{"entryPoint":535,"graph":536,"unsanitizedCount":544,"severity":505},"addBlogPost (classes\\util\\WPHyvesAPI.php:357)",{"nodes":537,"edges":542},[538,541],{"id":494,"type":495,"label":539,"file":277,"line":540},"$_REQUEST (x2)",358,{"id":498,"type":499,"label":500,"file":277,"line":278,"wp_function":501},[543],{"from":494,"to":498,"sanitized":504},2,{"entryPoint":546,"graph":547,"unsanitizedCount":79,"severity":505},"addWWW (classes\\util\\WPHyvesAPI.php:420)",{"nodes":548,"edges":552},[549,551],{"id":494,"type":495,"label":511,"file":277,"line":550},422,{"id":498,"type":499,"label":500,"file":277,"line":284,"wp_function":501},[553],{"from":494,"to":498,"sanitized":504},{"entryPoint":555,"graph":556,"unsanitizedCount":79,"severity":505},"showPosts (classes\\util\\WPHyvesAPI.php:795)",{"nodes":557,"edges":561},[558,560],{"id":494,"type":495,"label":511,"file":277,"line":559},796,{"id":498,"type":499,"label":500,"file":277,"line":324,"wp_function":501},[562],{"from":494,"to":498,"sanitized":504},{"entryPoint":564,"graph":565,"unsanitizedCount":613,"severity":505},"\u003CWPHyvesAPI> (classes\\util\\WPHyvesAPI.php:0)",{"nodes":566,"edges":603},[567,569,570,571,573,575,578,581,585,588,591,595,597,599],{"id":494,"type":495,"label":568,"file":277,"line":540},"$_REQUEST (x4)",{"id":498,"type":499,"label":500,"file":277,"line":278,"wp_function":501},{"id":516,"type":495,"label":539,"file":277,"line":244},{"id":572,"type":513,"label":514,"file":277,"line":244},"n3",{"id":574,"type":499,"label":517,"file":277,"line":518,"wp_function":519},"n4",{"id":576,"type":495,"label":511,"file":277,"line":577},"n5",277,{"id":579,"type":513,"label":580,"file":277,"line":577},"n6","→ redirectToAuthorizeUrl()",{"id":582,"type":499,"label":517,"file":583,"line":584,"wp_function":519},"n7","classes\\util\\GenusApis-PHP5-1.0.1\\GenusApis.php",97,{"id":586,"type":495,"label":511,"file":277,"line":587},"n8",669,{"id":589,"type":513,"label":590,"file":277,"line":587},"n9","→ wpHyvesCacheImage()",{"id":592,"type":499,"label":593,"file":226,"line":231,"wp_function":594},"n10","file_get_contents() [SSRF\u002FLFI]","file_get_contents",{"id":596,"type":495,"label":511,"file":277,"line":587},"n11",{"id":598,"type":513,"label":590,"file":277,"line":587},"n12",{"id":600,"type":499,"label":601,"file":226,"line":420,"wp_function":602},"n13","fopen() [File Access]","fopen",[604,605,606,607,608,609,610,611,612],{"from":494,"to":498,"sanitized":504},{"from":516,"to":572,"sanitized":504},{"from":572,"to":574,"sanitized":504},{"from":576,"to":579,"sanitized":504},{"from":579,"to":582,"sanitized":504},{"from":586,"to":589,"sanitized":504},{"from":589,"to":592,"sanitized":504},{"from":596,"to":598,"sanitized":504},{"from":598,"to":600,"sanitized":504},9,{"entryPoint":615,"graph":616,"unsanitizedCount":79,"severity":622},"\u003CWPHyvesAdminAction> (classes\\action\\WPHyvesAdminAction.php:0)",{"nodes":617,"edges":620},[618,619],{"id":494,"type":495,"label":496,"file":143,"line":244},{"id":498,"type":499,"label":500,"file":143,"line":244,"wp_function":501},[621],{"from":494,"to":498,"sanitized":504},"low",{"entryPoint":624,"graph":625,"unsanitizedCount":31,"severity":622},"\u003Cindex> (classes\\util\\GenusApis-PHP5-1.0.1\\index.php:0)",{"nodes":626,"edges":629},[627,628],{"id":494,"type":495,"label":568,"file":220,"line":235},{"id":498,"type":499,"label":500,"file":220,"line":267,"wp_function":501},[630],{"from":494,"to":498,"sanitized":504},{"entryPoint":632,"graph":633,"unsanitizedCount":544,"severity":622},"\u003Cadmin_config> (view\\admin\\admin_config.php:0)",{"nodes":634,"edges":641},[635,637,638,640],{"id":494,"type":495,"label":636,"file":447,"line":260},"$_SERVER['REQUEST_URI']",{"id":498,"type":499,"label":500,"file":447,"line":260,"wp_function":501},{"id":516,"type":495,"label":639,"file":447,"line":387},"$_SERVER['SERVER_ADDR']",{"id":572,"type":499,"label":500,"file":447,"line":387,"wp_function":501},[642,643],{"from":494,"to":498,"sanitized":504},{"from":516,"to":572,"sanitized":504},{"entryPoint":645,"graph":646,"unsanitizedCount":79,"severity":622},"\u003Clist-users> (view\\admin\\blocks\\list-users.php:0)",{"nodes":647,"edges":650},[648,649],{"id":494,"type":495,"label":636,"file":466,"line":469},{"id":498,"type":499,"label":500,"file":466,"line":469,"wp_function":501},[651],{"from":494,"to":498,"sanitized":504},{"summary":653,"deductions":654},"The \"wp-hyves\" v1.4.0.2 plugin exhibits a concerning security posture, despite having no recorded CVEs. The static analysis reveals significant weaknesses, particularly in output escaping, where 100% of outputs are not properly escaped. This poses a high risk for cross-site scripting (XSS) vulnerabilities, allowing attackers to inject malicious scripts into the site. Additionally, the presence of dangerous functions like `create_function` and `unserialize` are red flags, as they can lead to remote code execution (RCE) if not handled with extreme care and proper sanitization, which appears to be lacking given the unescaped output. The taint analysis indicates all analyzed flows have unsanitized paths, though thankfully no critical or high severity issues were flagged in this specific analysis. The complete absence of nonce checks and capability checks on entry points, coupled with a lack of documented security practices, further amplifies the risk. While the plugin's lack of external HTTP requests and its use of prepared statements for SQL queries are positive aspects, they do not outweigh the severe risks associated with unescaped output and potentially dangerous function usage.",[655,658,660,662,664],{"reason":656,"points":657},"Unescaped output detected",8,{"reason":659,"points":657},"Dangerous functions detected (create_function, unserialize)",{"reason":661,"points":486},"No nonce checks detected",{"reason":663,"points":486},"No capability checks detected",{"reason":665,"points":657},"All taint flows have unsanitized paths","2026-03-16T23:26:57.980Z",{"wat":668,"direct":681},{"assetPaths":669,"generatorPatterns":674,"scriptPaths":675,"versionParams":676},[670,671,672,673],"\u002Fwp-content\u002Fplugins\u002Fwp-hyves\u002Fcss\u002Fadmin-header.css","\u002Fwp-content\u002Fplugins\u002Fwp-hyves\u002Fcss\u002Fadmin-styles.css","\u002Fwp-content\u002Fplugins\u002Fwp-hyves\u002Fjs\u002Fadmin-header.js","\u002Fwp-content\u002Fplugins\u002Fwp-hyves\u002Fjs\u002Fadmin-script.js",[],[672,673],[677,678,679,680],"wp-hyves\u002Fcss\u002Fadmin-header.css?ver=","wp-hyves\u002Fcss\u002Fadmin-styles.css?ver=","wp-hyves\u002Fjs\u002Fadmin-header.js?ver=","wp-hyves\u002Fjs\u002Fadmin-script.js?ver=",{"cssClasses":682,"htmlComments":684,"htmlAttributes":685,"restEndpoints":686,"jsGlobals":687,"shortcodeOutput":689},[4,683],"wphyves",[],[],[],[688],"wp_hyves",[]]